On Tue, Jul 30, 2019 at 11:56 AM Samitha Chathuranga
wrote:
> Hi all,
>
> *Problem:*
>
> The objective of this task is to allow updating the authorized field of an
> API for a particular user through the Publisher REST API, through PUT
> /apis/{apiId}. Current behavior is that the
> REST API leve
APIM Team,
We have some additional OAuth2 service provider configurations that are
seen in management console, but not in API Store. When do we plan to
support these in the API Store?
1. PKCE - This is a de facto standard now for mobile app security.
2. Access/refresh/id token expiry times.
3. Re
I think we can quickly implement these functionalities as we already have
the service provider data. At the moment we don't have a plan for this
improvement. However we have to carefully review what to allow and not.
Else users will look for more and more support from API store which can
complicate