WSO2 API manager Outh token validations
NickName:ram Ask DateTime:2017-03-10T18:02:24

WSO2 API manager Outh token validations

I have installed the WS02 API manager and secured my backend REST service with oauth2.

Here is my setup

IP1: WSO2 API manger using the default inbuild key manager. I have published my API here.

IP2: Resource server is running here.

I have simple client application which talks to the key manger to get the Access token and creates a successful call to published API in API manger. Here the API manger validates the token before sending the request to my resource server.

I am looking for the following configuration. Is this possible

  1. Application will talk to API manager only for generating the token
  2. Application will make a direct request to Resource server with the token
  3. Resource server needs to validate the token with Auth server.

I do see explanation in WSo2 Identify server where they suggested to use SOAP based mechanism to validate the token. However I am not able to get how we can achieve this.

Can someone please clarify, what changes needs to be done on Resource server and API manager to get the above flow. As I use API manger only for token generation going only to Identity server makes more sense?

Copyright Notice:Content Author:「ram」,Reproduced under the CC 4.0 BY-SA copyright license with a link to the original source and this disclaimer.
Link to original article:https://stackoverflow.com/questions/42715525/wso2-api-manager-outh-token-validations

More about “WSO2 API manager Outh token validations” related questions

WSO2 API manager Outh token validations

I have installed the WS02 API manager and secured my backend REST service with oauth2. Here is my setup IP1: WSO2 API manger using the default inbuild key manager. I have published my API here. ...

Show Detail

wso2 api manager refresh and access token revocation

I have the setup where clients are accessing APIs defined through WSO2 API Manager secured by OAuth2 refresh and access tokens. The client gets the tokens using authorization code flow and authenti...

Show Detail

How to identify the user from the User Token in WSO2 API Manager

I followed this link and I could get the user token. My use case is: Request get forward to wso2 esb from wso2 api manager with the Authorization header which has the user token. In side ESB I need...

Show Detail

WSO2 API Manager 1.9.1 Key Manager access token translation

I have an OpenIdConnect Identity Provider hooked up to the API Manager. I am able to authenticate and retrieve an access token using authorization_code and implicit grant types. The access token cr...

Show Detail

How to send the post request in wso2 api manager?

How to send the post request in wso2 api manager? What would be the content type, parameters etc. I am publishing Rest APIs in WSO2 API Manager , I would like to intercept my own API input field

Show Detail

wso2 API Manager custom validations for API request input fields

is there any sample code who can help for my below requirement. i am publishing Rest APIs in WSO2 API Manager , i would like to intercept my own API input field validations for each API like input

Show Detail

Requesting Access Token from WSO2 API Manager via Token API

I am trying to understand on how to implement access token request from WSO2 API Manager. Given I have a login page with username and password input, how do I request the access token by using only...

Show Detail

integrating wso2 identity server and api manager

I want to integrate WSO2 Identity server and API manager together so that user authentication can be done by WSO2 Identity server and API level authorization can be done in the API Manager.I am using

Show Detail

WSO2 api manager - refresh token request format

After retrieving an access token from an WSO2 api manager, what request needs to be made using the refresh token to obtain a new access token? Is this documented anywhere? I have had a hunt around...

Show Detail

Validate JSON Schema in WSO2 API Manager

Please suggest the possible techniques to validate(NULL, NOT NULL, TAG presence, length, etc.) incoming request JSON schema elements in API Manager before backend service is invoked. Is it recomme...

Show Detail