OAUTH_AUTHORIZATION_POLICY PolicyType missing in latest spec about okta-sdk-java HOT 9 CLOSED

Hey @arvindkrishnakumar-okta , this is great news. I trust that this works, and will follow up when we attempt to implement this. Thank you very much for your help on this manner.

from okta-sdk-java.

@B-Iglesia Thanks for posting!

On double checking the Okta official API documentation for Policy at https://developer.okta.com/docs/reference/api/policy/#policy-object, I see that OAUTH_AUTHORIZATION_POLICY is not listed anymore. This is the reason why the latest SDK does not contain this.

The present spec correctly lists all the policy types documented in the Okta offical API doc.

Let me know if you have followup questions.

from okta-sdk-java.

Hey @arvindkrishnakumar-okta , thanks for your response.

My main question is now surrounding authorization server policies (https://developer.okta.com/docs/reference/api/authorization-servers/#policy-operations), and the policy API that you sent me.

What is the distinct difference between them?

My follow up would be: what is SDK equivalent for creating a policy with an OAUTH_AUTHROIZATION_POLICY policy type in the latest SDK? As I mentioned, we would like to be on the latest SDK.

// Code snippet of how we're currently putting policies together in v10.3.0 AuthorizationServerPolicy authorizationServerPolicy = new AuthorizationServerPolicy(); authorizationServerPolicy.setName(applicationName); authorizationServerPolicy.setDescription(POLICY_DESCRIPTION); authorizationServerPolicy.setType(**PolicyType.OAUTH_AUTHORIZATION_POLICY**); authorizationServerPolicy.setStatus(LifecycleStatus.ACTIVE); authorizationServerPolicy.setPriority(1); authorizationServerPolicy.setSystem(true);

from okta-sdk-java.

OAUTH_AUTHORIZATION_POLICY is a string data type that should be used to set the type attribute of AuthorizationServerPolicy object like your code snippet shows. However, this is NOT part of the PolicyType that is publicly documented at https://developer.okta.com/docs/reference/api/policy/#policy-object. They both should not be correlated/confused with each other.

Please use the String type OAUTH_AUTHORIZATION_POLICY when you work with AuthorizationServerPolicy object.

Hope this clarifies.

from okta-sdk-java.

This clarifies a lot actually. Thank you. I was confused as in v10.3.0 OAUTH_AUTHORIZATION_POLICY type it is in a PolicyType enum.

Lastly, as a clarification, is this OAUTH_AUTHORIZATION_POLICY part of an enum somewhere or would it suffice to just have a local private variable. Asking as v10.3.0 of .setType() specifically requires a PolicyType Enum

from okta-sdk-java.

@B-Iglesia I hear you and sorry for the confusion this has caused.

When 10.3.0 was released, the backend API team possibly had this PolicyType documented in the public facing API doc and that was why it was included as part of the spec that went into 10.3.0

The latest release 13.0.2, took into the fact that the value OAUTH_AUTHORIZATION_POLICY was not publicly documented in API doc and hence was removed from the spec.

I'll double check with internal team that owns this API if this value needs to be added to the PolicyType in the list of allowed policy types in public facing API docs.

from okta-sdk-java.

@B-Iglesia I'll get this value added back to PolicyType enums in the spec and this change will get released as part of upcoming 14.0.0 release.

from okta-sdk-java.

Released 14.0.0 with the fix.

from okta-sdk-java.

This still not working since that in the version 14.0.0 we have the not the right PolicyType

from okta-sdk-java.