Hi,
I am trying to make use of GetOAuthV2Info policy to get info about an access_token, I have used this policy in the past for getting info for an authorization code and it worked fine. But when doing this for an access_token, it seems its actually doing full validation of path resource.
This is my policy:
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<GetOAuthV2Info async="false" continueOnError="true" enabled="true" name="OA2-GetTokenInfo">
<DisplayName/>
<AccessToken ref="flow.request.token"/>
<IgnoreAccessTokenStatus>true</IgnoreAccessTokenStatus> <---Only ignores validity
</GetOAuthV2Info>
- I need to continue on error.
- I only need information about the token.
- The policy should not validate if the access token is connected to the path suffix that is being called, I just need the info (properties etc).
I have been reading this documentation:
https://docs.apigee.com/api-platform/reference/policies/get-oauth-v2-info-policy#flowvariables-acces...
LinkedIn
Twitter
