We are trying to provision an APIGEE developer portal and included an open API specification into it where we have defined the security scheme as below:
securitySchemes: oauth2: type: oauth2 flows: implicit: authorizationUrl: >- https://XXXXXXXXXXXXX/connect/authorize? scopes: order.customer
Here, the authorization server is actually an OKTA endpoint. When we are trying to Authorize the from the API Specification visible in Developer portal while providing the appropriate client id in the pop-up.
The developer portal is generating the implicit request to OKTA like below
https://<OKTA_AUTHORIZATION_URL>?client_id=<client_id>&response_type=token&redirect_uri=<redirect_ur...
But as per OKTA documentation for making an implicit call they need two more query parameters i.e. nonce and status. How can we pass these parameters from the APIGEE developer portal? Is there any configuration that will enable me to pass these extra query parameters to my authorization call?
I am using a public cloud (SaaS) APIGEE version.