Solved: Retrieving Application/Developer/Company Info from... - Page 2

williamking · 03-15-2016 02:31 PM

When an OAUTH token is part of the flow, one can retrieve information associated with the token. For example the application name or the developer id.

How can you retrieve the same values as part of a policy where client credentials have been provided (e.g. "Authorization: Base64-encoded{key:secret}")?

ceber

You can use the Access Entity policy to look up this and other types of information:

http://docs.apigee.com/api-services/reference/access-entity-policy

You could also just use a ValidateApiKey policy on the decoded client id. Would be worth trying both to see if there's a benefit to one over the other.

View solution in original post

Retrieving Application/Developer/Company Info from Client Credentials