IBM Support

API Connect HTTP GET ?WSDL retrieval returns "401 - Unauthorized Invalid client id or secret"

Troubleshooting


Problem

API Connect v5 allowed GET ?WSDL requests by defining the WSDL in your service.  Newer versions of API Connect, such as v10 or later require modification to the assembly in the preflow.

Cause

API Connect had a change in behavior between API Connect v5 and API Connect v10+

Resolving The Problem

To resolve the authentication requirement of GET ?WSDL retrieval
  • Requires at least DataPower and API Connect on 10.0.1.6+ or 10.0.4.0+ with the APAR https://www.ibm.com/support/pages/apar/IT38550
  • The preflow assembly must be modified such that the WSDL action exists before client-identification:
assembly:
  execute:
    - cors:
        version: 2.0.0
        title: cors-in-preflow
    - wsdl:
        title: default-wsdl
    - client-identification:
        version: 2.0.0
        title: client-security-in-preflow

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSMNED","label":"IBM API Connect"},"ARM Category":[{"code":"a8m50000000CeEVAA0","label":"API Connect-\u003EDeveloper (DV)-\u003EWSDL"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.0.0;10.0.1;2018.4.1.0;and future releases"}]

Document Information

Modified date:
14 June 2022

UID

ibm16588129