Layer7 API Management

  • Private Community

  • 1.  Assertion to check Access Token

    Posted Jan 11, 2018 09:43 AM

    Hi, 

    I want to know if there's an assertion (Gateway 9.2) which can check the access token generated by an authorization server (OTK or not OTK). The check includes the presence and encyption of access token.

    Kind Regards



  • 2.  Re: Assertion to check Access Token
    Best Answer

    Broadcom Employee
    Posted Jan 12, 2018 11:12 AM

    Hi XiaoningSUN82376054,

     

    The assertion 'OTK Require OAuth 2.0 Token'  can be used lookup and validate a token generated by the OTK. The tokens are not encrypted. For tokens issued by an external authorization server it is likely best to utilize their introspection endpoint (if implemented).

     

    Secure an API Endpoint with OAuth 2.0 - CA API Management OAuth Toolkit - 4.2 - CA Technologies Documentation 

     

    Regards,

    Joe