CODEWITHSUNDEEP
wso2wso2-api-manager
Amith_K
Amith_K

Reputation: 1

Can we use Application Client ID + Client Secret instead of Tokens

I want to use the combination of Application's Client ID + Client Secret for API Authentication instead of an OAuth Token.

Is it possible to do this with API Manager 4.x?

Upvotes: 0

Views: 734

Answers (2)

Joy Rathnayake
Joy Rathnayake

Reputation: 505

Alternatively, you can write a custom handler to achieve this use case.

Upvotes: 1

Pubci
Pubci

Reputation: 4001

Yes, that is the recommended way of getting an access token. You have to use the client id and secret, then generate and access token using those.

This is a general practice and all the API Manager versions do support this capability.

Update: You cannot just use client id and secret for authentication. The API Gateway is unable to authenticate the request with those credentials. Instead of client id and secret you can use an API key which has an infinite expiry time.

Upvotes: 0

Related Questions