We are upgrading to ORDS 21.4 and have decided to deploy using WebLogic rather than Tomcat as we've done in the past. We also have decided not to install APEX and to develop using SQL Developer instead. When we were testing in standalone mode, we were able to secure a service and set up a client to use the two-step client credentials OAuth flow to access the service. However, since we deployed to WebLogic, we have been unable to successfully request and receive an access token using client credentials. When using cURL (ex. curl -i --user clientId:clientSecret --data "grant_type=client_credentials" https://example.com/ords/ordstest/oauth/token)) we receive the following:
HTTP/1.1 405 Method Not Allowed
.....
Allow: GET
Set-Cookie: TS013b28f6=01eecae55822979f5c331ac193baa980be53b2bf333546df49ea4b8f7e9c67a1c6384822022986313b3fcc7094c3a20af72c0f2875; Path=/; Secure; HTTPOnly
{ "code": "MethodNotAllowed",
"message": "Method Not Allowed",
"type": "tag:oracle.com,2020:error/MethodNotAllowed",
"instance": "tag:oracle.com,2020:ecid/6806e491-6acb-4542-aa83-e4429177c4b4-00000071"
}
I've double-checked privs/roles/ several time with no luck. Did we miss something in our setup?