Layer7 API Management

  • 1.  How to implement oAuth2.0 in GW as API consumer

    Posted Mar 01, 2017 04:08 AM

    Hi,

     

     We want to consume some of the #google APIs through #apigateway. Prerequisite of it to generate #oauth2.0 tokens to call Google API. Are there assertions available in GW, through which we can authenticate with #googleapi over oAuth2.0 framework?

     

    Thanks,

    Sid.



  • 2.  Re: How to implement oAuth2.0 in GW as API consumer

    Broadcom Employee
    Posted Mar 01, 2017 07:13 AM

    Hello Sid, given your case I do not think you are looking to generate OAUTH tokens locally on the Gateway and use them for Google, but rather acting as a client in an OUATH flow to request and use tokens from Google.

     

    See below documentation that explains the assertions you can use to achieve your required outcome:

     

    https://docops.ca.com/ca-api-management-oauth-toolkit/3-6/en/apis-and-assertions/oauth-client-assertions

     

    /Mikael



  • 3.  Re: How to implement oAuth2.0 in GW as API consumer

    Posted Mar 03, 2017 05:55 AM

    Hi Mikael,

     

     Is there any sample policy available. If yes, that will be very helpful.

     

    Thanks,

    Sid.



  • 4.  Re: How to implement oAuth2.0 in GW as API consumer
    Best Answer

    Broadcom Employee
    Posted Mar 03, 2017 09:23 AM

    Hi SIDDHARTHJAISWAL,

     

    I have created a sample policy here using the Authorization Code grant: Retrieve OAuth 2.0 Token Assertion sample policy 

     

    This is intended only for guidance using the assertion and should not be used in production.

     

    Regards,

    Joe