Get hands-on experience with 20+ free Google Cloud products and $300 in free credit for new customers.

Apikey plugin product verification

Hello,

I have a question regarding the apikey plugin (it's the same behavior with the oauth). If I look the documentation and the code with the parameter productOnly=false a request is authorized only if one of the product to which it has subscribed contains a path matching the one requested.

My problem is that whatewer I try the list of apiRessources linked to a product is always empty when I call the /edgemicro-auth/products endpoint from the edgemicro-auth proxy provided with the microgateway.

Does someone has an idea of to fix this. I really need to check the path because I do some rooting in m plugin flow and actually if some has access to any product deploy on my microgateway it will have access to all the proxy deployed on it.

I have took a look at this repository : https://github.com/apigee/microgateway-edgeauth but the part which deal with product in an internal apigee API

Thanks for your help

0 1 117
1 REPLY 1
Top Solution Authors