How to configure XSUAA in CAP + MDK?

[emorales]

Good morning community, thanks for the help. I have a CAP OData V4 service running which uses authentication with XSUAA. I want this OData service to be consumed by my mobile application created with MDK. Until now I have been testing everything without authentication and it worked fine, but now I want to add this layer of security and I am finding problems that cannot be solved. I want to share some screenshots of what I have been doing and if you can guide me in being able to configure everything, it would be of great help.

My CAP service is called "InfraestructuraService" and at the moment it only requires authentication.

In my "packages.json" file I have the required authorization with "xsuaa"

In my "xs-security.json" file I configure oauth2:

In my app router xs-app.json I have the authentication mode set to "route".

In my CloudFoundry space, on my instances I have an "audit-auth" call:

I copied my Services Key information so I could use it in my connectivity settings in BTP:

By clicking on "Check Connection" I receive:

By going into "SAP Mobile Services" and then going to my application, within "Mobile Connectivity" I defined the following:

In the "APIs" section I can see my created destination which is the one I used previously in my BTP connectivity:

When I access my mobile application from the "Mobile Svcs" application I am not having any problems. But when I access from the web application I am receiving an error:

And then I get:

Can someone help me? I feel like everything related to XSUAA is getting more complicated than I would like.

[thomas_zang]

Hi Emorales, I would suggest you to port your CAP OData V4 service into a LCAP project in BAS, and also create a MDK UI app in it, and then deploy the project to BTP, LCAP deployment module will take care all the security configuration automatically for you, you can compare the configuration of the LCAP project with the one of your current project to see any differences.