Hi,
I followed post https://www.googlecloudcommunity.com/gc/Apigee/Need-to-Develop-oauth-token-caching-proxy/m-p/498161#... and managed to store the JWT and look it up on a subsequent call. Good.
What I need is that OAuth2 access_token, sent by API caller, is used as cache key and value will be the JWT I've got from an IdP introspection callout originally.
This works (static key name):
<CacheKey>
<KeyFragment>access_token</KeyFragment>
</CacheKey>
And this does not (dynamic access_token):
<CacheKey>
<KeyFragment ref="inbound.access_token"/>
</CacheKey>
(inbound.access_token has been resolved in a previous step and it can be seen on debug console)
Can anyone see why wouldn't that dynamic way work?