Aspera ASCLI working details with public and Private key without creating dedicated JWT

[xavierv79]

Hi Team,

We need the Aspera ASCLI working details with public and Private key without creating dedicated JWT. Where we do not use any Client ID and Secret and only configure with public and Private key.

We need to know how the JWT is created on the fly or uses or any node JWT is used here.

Regards,
Xavier

[laurent-martin]

It is possible to use ascli without JWT key, but in that case, the user logs-in using a web browser.

use option --auth=web

[xavierv79]

Hi Laurent Martin

With Below config wizard and copying the Public key to the user profile Upload and downloads are working.
We did not create the API token with JWT enabled.

ascli config wizard finastra aoc  --username=maild --show-secrets=yes

Regards,
Xavier

[laurent-martin]

Yes,
Correct, ascli has a pre-configured client-id and secret that it uses by default, if one does not want to create a specific one.
In addition, the wizard proposes to create a private key (and the uses it), and provides the associated public key to be used by the user (by placing in his profile).

[xavierv79]

Hi Laurent Martin,

Thanks for updating. Could you please share any document for ascli pre-configured client-id and secret usage.

Regards,
Xavier

[laurent-martin]

"Standard" legitimate applications have a pre-approved client_id.

For example, if you go to any IBM Aspera on cloud instance, using the web UI, like:
https://sedemo.ibmaspera.com/

you will be re-directed to the login. URL that includes a pre-provisioned client_id (identifying the application using the API, here the web app):

It's the same for ascli.

Nevertheless, that identifies only the application, but the user still has to authenticate himself.

Typically, other applications would use their own declared client_id, for ascli one can use either the built-in pre-provisioned client_id, or a specific one.

When using the wizard, or command line args, if no client_id is provided, then the default one is used.