0
votes

I'm having trouble implementing the following use case. I need to pass the User ID claim to the backend. I've enabled enable_outbound_auth_header so that the token I get from the application arrives to the backend. I've managed to add the User ID to this token. I want to use JWT grant, Code grant, client credentials grant and APIKey. However, User ID is only added to the token on code and JWT grants. The way I did it was using OIDC scopes.I've seen in docs that I can use apim.jwt to pass enduser attributes, however I haven't managed to pass User ID. Is there any way to achieve this? (without custom generators)

In the case I have to implement a custom token generation I'm wondering which one to implement. I've seen that there are many possibilities. Should I implement a token generator? Will this one work for apiKey token? I think there are at least four possible toke generators (gateway token generator, jwt token generator, oauth token generator and oidc token generator. Which one or how many should I implement?

Can you share the API Manager version that you are using? and how you managed to get the User ID in both JWT Grant and Code Grant Tokens? Meantime, You can also write a custom JWT Generator by referring to Docs. This is applicable to the Self-Contained Access Tokens (not for API Key), and this implementation will be executed to generate the Backend JWT Token.Athiththan