OAuth Endpoint Type in WSO2 API

0
votes

I have a secured API with OAuth and I have no other authorization mechanism (Basic Auth/ Digest Auth).

Based on article https://apim.docs.wso2.com/en/latest/learn/design-api/endpoints/endpoint-types/: "You cannot call backend services secured with OAuth through APIs created in the API Publisher. At the moment, you can call only services secured with username/password (Basic Auth/ Digest Auth)."

Are there any plans to implement this feature in WSO2?

1
wso2

1 Answers

1
votes

Although this feature is not available OOB, you can get this done via a mediation extension. Please check this article [1] where it explains on how to invoke a backend that is secured by OAuth2.

Currently, this feature is under development and will be adding to the product in the next release.

[1] - https://medium.com/@menakajayawardena/wso2-how-to-using-oauth2-protected-back-ends-with-api-manager-5d7e234c61c