Skip to content

Frequently Asked Questions (FAQ)#

General FAQs and troubleshooting#

Where should Gluu-Gateway be used?#

Gluu Gateway should be used in every API gateway where you need advanced security measures using OAuth 2.0 and User-Managed Access (UMA) 2.0 Grant. For Web, there is OpenID Connect Authentication.

Can we install Gluu-Server and Gluu-Gateway on same machine?#

Yes, You can install Gluu Gateway(GG) in the same machine but GG is also using the 443 port. You need to change your Gluu-Server port first then install GG.

The good way is, both should be on a different servers. If you still want to install both on the same machine then you should assign 443 to GG because this is service which you are exposing to your application end-user.

Where to install OXD-server on Gluu-Gateway side or Gluu-Server side?#

OXD-server is the OIDC Client which request to OP server. Gluu Gateway acts as relying party so OXD-Server should be on the Gluu-Gateway side. OXD server will be install during the Gluu-Gateway installation and setup. Check here for more details about oxd-server.

How to get more idea about Services and Routes configuration in Kong?#

Please check the Kong 1.3.x docs about proxy configuration.

How can I investigate Gluu-Gateway problems?#

Gluu Gateway uses Gluu Server and oxd. That means any potential issue on these servers can influence the work of Gluu Gateway.

If you see an error message such as the one in the screenshot, check the logs for possible issues:

/var/log/oxd-server/oxd-server.log

You can also check the oxd FAQ section.

How can I find my Gluu Gateway version?#

Your Gluu Gateway version is always visible in the bottom left corner of the Gluu Gateway Admin Panel.

Technical FAQs#

How can I generate an OAuth token?#

Generate an OAuth token during OAuth-PEP authentication by calling the oxd-server endpoint /get-client-token with customer credentials. Read more OAuth generation here.

How can I generate UMA tokens?#

In order to generate an UMA token, follow these steps:

  1. Send a request to the Kong proxy API without a token and get a ticket.

  2. Send a get-client-token request with Consumer oxd_id, client_id and client_secret

  3. Send an uma-rp-get-rpt request with Consumer oxd_id, the ticket from Step 1 and the access token from Step 2.

How can I change the listening address and port?#

By default, Gluu Gateway listens to localhost only, but you can change it manually by configuring the local.js config file using the Configuration section. You just need to update the explicitHost to your global IP or remove this attribute. Read more about the configuration here.

If you require any further support, please open a ticket on the Gluu support portal.