Calling BTP nodejs application endpoint from a client (like Postman) with only client id and secret

[thomasschilling]

Hi,

I have a BTP nodejs application with a xsuaa instance(plan: application, binded apps: app router + nodejs app). Calling GET/POST Request of nodejs application running via browser are working.

Problem: The authorisation from a client(e.g. Postman or a on-premise SAP Backend) is not working. The future nodejs app with some GET/POST endpoints should be calling from a on-premise SAP Backend.

Steps to reproducing the issue(with Postman):

1. Fetching the bearer token with the client id and secret (Base authorisation) from the xsuaa instance is working (via url "https://example-dev.authentication.eu10.hana.ondemand.com/oauth/token/?grant_type=client_credentials..."). Response:

2. Calling endpoint (https://example-approuter.authentication.eu10.hana.ondemand.com/web-pages/index.html) with Bearer token. Response:

Expectation: Calling a nodejs app endpoint with the fetched Bearer token and getting the resource index.html.

Which requests should be trigger from the Postman client for authorisation and getting the resource index.html?

Best regards,

Thomas