From fe64b1261d78f4a458931ab77b140dc8be022b09 Mon Sep 17 00:00:00 2001
From: "m.lettere" <marco.lettere@nubisware.com>
Date: Mon, 22 Nov 2021 17:49:32 +0100
Subject: [PATCH] look for a correct token

---
 templates/create_workspace_client.json.j2 | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/templates/create_workspace_client.json.j2 b/templates/create_workspace_client.json.j2
index ceffa01..7563208 100644
--- a/templates/create_workspace_client.json.j2
+++ b/templates/create_workspace_client.json.j2
@@ -188,6 +188,23 @@
 			"caseExpression": "($.status === 406 ? 'create' : 'exists')",
 			"decisionCases": {
 				"create": [
+					{
+						"name" : "pyrest",
+						"taskReferenceName" : "upgrade_orchestrator_token_to_uma",
+						"type" : "SIMPLE",
+						"inputParameters" : {
+							"url" : "{{ keycloak }}/{{ keycloak_realm }}/protocol/openid-connect/token",
+							"method" : "POST",
+							"headers" : {
+								"Accept" : "application/json",
+								"Authorization" : "Bearer ${authorize.output.body.access_token}"
+							},
+							"body" : {
+								"audience" : "${init.input.root_vo}",
+								"grant_type" : "urn:ietf:params:oauth:grant-type:uma-ticket"
+							}
+						}
+					},
 					{
 						"name" : "pyrest",
 						"taskReferenceName" : "create_jcr_account",
@@ -196,7 +213,7 @@
 							"url" : "${init.input.storagehub}/workspace/users",
 							"method" : "POST",
 							"headers" : {
-								"Authorization" : "Bearer ${authorize.output.body.access_token}"
+								"Authorization" : "Bearer ${upgrade_orchestrator_token_to_uma.output.body.access_token}"
 							},
 							"body" : {
 								"user" : "${get_service_account_user.output.body.username}",