https://github.com/cmlccie/webex-token-keeper
Store dynamic Webex OAuth tokens and make them accessible via a static key.
https://github.com/cmlccie/webex-token-keeper
aws-apigateway aws-dynamodb aws-lambda aws-lambda-python aws-sam oauth python webexteams
Last synced: 6 months ago
JSON representation
Store dynamic Webex OAuth tokens and make them accessible via a static key.
- Host: GitHub
- URL: https://github.com/cmlccie/webex-token-keeper
- Owner: cmlccie
- License: mit
- Created: 2020-03-19T02:46:42.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2025-02-06T03:48:35.000Z (8 months ago)
- Last Synced: 2025-04-01T18:53:34.179Z (7 months ago)
- Topics: aws-apigateway, aws-dynamodb, aws-lambda, aws-lambda-python, aws-sam, oauth, python, webexteams
- Language: Python
- Homepage:
- Size: 143 KB
- Stars: 3
- Watchers: 2
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Webex Token Keeper
_Store dynamic Webex OAuth tokens and make them accessible via a static key._
---
Webex Personal Access Token expire in twelve (12) hours. Webex Integration OAuth access tokens expire in about fourteen (14) days and may be refreshed; however, generating OAuth tokens require a web service and human interaction. You need to create a static configuration that can access the Webex APIs (CI/CD tools, backend automation, etc.).
> How can you programmatically obtain a Webex API access token with a fixed identifier?
It takes a small web service.
## Simple Microservice Provides Programmatic Access to OAuth Generated Access Tokens
Webex Token Keeper (WTK) implements the Webex Integration OAuth flow and stores the OAuth generated Access Token for future retrieval. The Access Token is stored using a randomly generated key, which is provided to the user at the end of the OAuth flow. WTK provides a simple REST API that provides programmatic access to the stored token.
WTK automatically refreshes the token when a stored token is requested via the REST API (if the token expires in less than seven days).
## Features
- Python implementation of the Webex Integration/OAuth process
- Store OAuth generated access tokens for programmatic retrieval
- REST API for retrieving and deleting stored access tokens
- OpenAPI (Swagger) interactive REST API docs
- Serverless (AWS Lambda) microservice
- Fully automated deployment via SAM template
## Tech Stack
- [FastAPI](https://fastapi.tiangolo.com/) Web Service
- [Pydantic](https://pydantic-docs.helpmanual.io/) Data Models
- [AWS API Gateway](https://aws.amazon.com/api-gateway/) w/Custom Domain Support
- [AWS Lambda](https://aws.amazon.com/lambda/) Serverless App
- [AWS DynamoDB](https://aws.amazon.com/dynamodb/) Database
- [CloudFormation (SAM) Template](https://aws.amazon.com/cloudformation/) Parameterized and Fully-Automated Deployment
## Setup & Use
The Webex Token Keeper (WTK) app can be fully deployed by running the provided [deployment script](/script/deploy).
The setup script sources installation specific information from the shell environment. You will need an AWS
account and a functional local development environment.
**At a minimum, you will need to:**
1. [Install](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-install.html) and
[configure](https://docs.aws.amazon.com/cli/latest/userguide/cli-chap-configure.html#cli-quick-configuration)
the AWS Command Line Interface (CLI)
2. [Install](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/serverless-sam-cli-install.html)
the AWS SAM CLI
3. Host your custom DNS domain in an AWS [Route53](https://aws.amazon.com/route53/) hosted zone
4. Provision a secure SSL certificate for your custom domain in AWS
[Certificate Manager](https://aws.amazon.com/certificate-manager/)
### Deploy the Token Keeper
The Makefile's `deploy` target will package the SAM application and . If everything is setup correctly, you can provision the full serverless application (including the DynamoDB table, API gateway, and custom domain name) by running `make deploy`.
The SAM template is idempotent; you can push environment variable, template, or code changes by rerunning the deployment script.