Re: [Architecture] [APIM-3.0.0] Publisher-creator separation of API update REST API operations

2019-07-30 Thread Malintha Amarasinghe
On Tue, Jul 30, 2019 at 11:56 AM Samitha Chathuranga wrote: > Hi all, > > *Problem:* > > The objective of this task is to allow updating the authorized field of an > API for a particular user through the Publisher REST API, through PUT > /apis/{apiId}. Current behavior is that the > REST API leve

[Architecture] [APIM] Supporting the Additional OAuth2 Service Provider Configurations in API Store

2019-07-30 Thread Johann Nallathamby
APIM Team, We have some additional OAuth2 service provider configurations that are seen in management console, but not in API Store. When do we plan to support these in the API Store? 1. PKCE - This is a de facto standard now for mobile app security. 2. Access/refresh/id token expiry times. 3. Re

Re: [Architecture] [APIM] Supporting the Additional OAuth2 Service Provider Configurations in API Store

2019-07-30 Thread Harsha Kumara
I think we can quickly implement these functionalities as we already have the service provider data. At the moment we don't have a plan for this improvement. However we have to carefully review what to allow and not. Else users will look for more and more support from API store which can complicate