API using OAuth 2.0

[DINESH_J (Dinesh Janarthanam)]

@Rohit_Tomar , Its all about the how you want to implement and who is going to own the responsibility of validating the token.

please check the existing article

Securing APIs using OAuth 2 in API Gateway

Author: Naramsetty, Srikar <Srikar.Naramsetty@softwareag.com> Supported Versions: 10.3 and above For securing APIs using OAuth2 in API Gateway for versions 10.2 and below please refer https://tech.forums.softwareag.com/t/securing-apis-using-oauth2-in-api-gateway webMethods API Gateway tutorial Introduction OAuth 2 is an authorization framework that enables applications to obtain limited access to user accounts. It works by delegating user authentication to the service that hosts the user ac…

As a provider keep the things simple . Register a client and provide the below details to the client to generate the tokens. if you do not want them to generate the token by them self then create on behalf of the client and just share the Generated Access token to invoke API)

1. Client_ID - Get it from the application which you created in API Gateway
2. Client_Screts - Get it from the application which you created in API Gateway
3. Authorization URL - /invoke/pub.apigateway.oauth2/authorize
4. getAccess token URL /invoke/pub.apigateway.oauth2/getAccessToken
5. refreshtoken URL - /invoke/pub.oauth/refreshAccessToken