Our security team has found some API keys to our system on Github, and we would like to contact the key's owners so that they can change their API keys.
In the Edge UI, you can find the app (and thus the developer) responsible for each key using the search function. However, we'd like to automate the lookup, so that we don't end up having to copy and paste the app name, developer's name and email address for each key.
I can't seem to find any Edge API that does this key-lookup function. I thought it was Get App By App ID, but this seems to take a UUID as input, not an API key. Presumably since there's a UI function to do this, there's some way to do it over the API too.
What Edge API (or APIs) can give me a developers name, email address and app name when provided with the API key?
Solved! Go to Solution.
So, inspired by @Mohammed Zuber's response, I went ahead and created an API proxy to do this, using Access Entity + Extract Variables to grab detailed user information. You can find it on my github at
https://github.com/tadhgpearson/check-key-policy
Honestly, it's kind of embarrassingly tricky and fiddly to do this. I have 2 years of Edge experience, and it still took me 2 hours to do this. It should be simple and it's not. You guys at Apigee present conferences on how APIs should be customer friendly, why not apply them to your own APIs and policies?!
User | Count |
---|---|
1 | |
1 | |
1 | |
1 | |
1 |