How to use bearer token to authenticate with Tridion Sites 9.6 WCF Coreservice

Question

Tridion Sites 9.6 - introduced enhancements to support all the clients to use Access Management for authentication.

I was looking to figure out, How to use Access Management Bearer tokens to authenticate with Tridion Sites 9.6 WCF Core-service?

Answer 1

I did spend some time with @Rick to figure it out, just sharing it with the community.

We found out it comes with precompiled Core Service Client (Tridion.ContentManager.CoreService.Client.dll) and has some built-in support.

factory.Endpoint.Behaviors.Add(new BearerTokenEndpointBehavior(() => token.AccessToken));

Example:

static ICoreService GetClientHttpSites(string hostname, string username, string password)
        {
            var basicHttpBinding = new BasicHttpBinding
            {
                MaxBufferSize = 10485760, // 4MB
                MaxBufferPoolSize = 10485760,
                MaxReceivedMessageSize = 10485760,
                ReaderQuotas = new System.Xml.XmlDictionaryReaderQuotas()
                {
                    MaxStringContentLength = 10485760, // 4MB
                    MaxArrayLength = 10485760,
                }              
            };

            hostname = string.Format("{0}{1}{2}", hostname.StartsWith("http") ? "" : "http://", hostname, hostname.EndsWith("/") ? "" : "/");
            var endpoint = new EndpointAddress(hostname + "webservices/CoreService202101.svc/basicHttp");
            var factory = new ChannelFactory<ICoreService>(basicHttpBinding, endpoint);

            var clientId = WebConfigurationManager.AppSettings["clientId"]; 
            var clientSecret = WebConfigurationManager.AppSettings["clientSecret"]; 
            var am = WebConfigurationManager.AppSettings["am"]; //http://access.tridiondemo.com/access-management

            var data = new FormUrlEncodedContent(new Dictionary<string, string>
            {
                {"grant_type", "client_credentials"},
                {"client_id", clientId},
                {"client_secret", clientSecret}
            });
            HttpClient httpClient = new HttpClient();
            var auth = httpClient.PostAsync($"{am}/connect/token", data).Result;
            var token = JsonConvert.DeserializeObject<Token>(auth.Content.ReadAsStringAsync().Result);


            factory.Endpoint.Behaviors.Add(new BearerTokenEndpointBehavior(() => token.AccessToken));
            return factory.CreateChannel();
        }

As per your environment clientId and clientSecret - you can create in the access management for the service user account.

Note: This BearerTokenEndpointBehavior authentication only supported on the latest CoreService202101.svc