Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-16 Thread Ishara Cooray
Hi Tharindu, We have changed the rest API tagging convention in publisher and devportal REST APIs since 3.0.0 to use a common tag without separating as Collection and Individual. Shall we use the same convention here? So that all of these will fall under the Key Manager tag. Regarding the new tabl

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-16 Thread Tharindu Dharmarathna
Hi All, Please find the database diagram on Implementation. [image: db diagram.png] let us know any feedback on this. Thanks & Regards On Thu, Apr 16, 2020 at 10:29 PM Tharindu Dharmarathna wrote: > Hi Farasath, > > The authentication on those endpoints depends on the implementation > impleme

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-16 Thread Tharindu Dharmarathna
Hi Farasath, The authentication on those endpoints depends on the implementation implemented for the specific oauth provider, there will be configuration key value elements will be asked from user to retrieve those details. On Thu, Apr 16, 2020 at 6:34 PM Farasath Ahamed wrote: > > > On Tue, Ap

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-16 Thread Sanjeewa Malalgoda
I checked this API definition and it looks good for me. Please check inline comments. However I believe this configuration won't be that simple when it comes to real implementation. As an example we will think about basic auth secured DCR, OAuth protected scope registration endpoint etc. We will ne

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-16 Thread Farasath Ahamed
On Tue, Apr 14, 2020 at 10:13 PM Tharindu Dharmarathna wrote: > Hi All, > > We are going to implement Multiple Oauth provider support to WSO2 API > Management. From this feature, dev portal users can create their Oauth > Application on Pre-Defined OAuth providers. > > 1. Tenant Admin Create Oauth

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-16 Thread Tharindu Dharmarathna
Hi All, Hi All, Please find the Admin Rest API model for Registering the Key Managers from Admin API. ## # The "Key Manager Collection" resource API ## /key-managers: #-

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-15 Thread Tharindu Dharmarathna
Hi Amila, Please find my comments below. On Wed, Apr 15, 2020 at 4:03 PM Amila De Silva wrote: > Hi Tharindu, > > On Tue, Apr 14, 2020 at 10:12 PM Tharindu Dharmarathna > wrote: > >> Hi All, >> >> We are going to implement Multiple Oauth provider support to WSO2 API >> Management. From this fe

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-15 Thread Sanjeewa Malalgoda
Like Amila asked can there be multiple OAuth providers for the same tenant space? If that is the case then application developer has control over selecting which provider need to use? Some of the default implementations need to go with products I believe. Thanks, sanjeewa. On Wed, Apr 15, 2020 at

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-15 Thread Amila De Silva
Hi Tharindu, On Tue, Apr 14, 2020 at 10:12 PM Tharindu Dharmarathna wrote: > Hi All, > > We are going to implement Multiple Oauth provider support to WSO2 API > Management. From this feature, dev portal users can create their Oauth > Application on Pre-Defined OAuth providers. > > 1. Tenant Admi

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-15 Thread Tharindu Dharmarathna
Hi Bhathiya, The above thing we will do beforehand the key manager implementation gets invoked. Therefore there was no issue with having different oauth providers. Thanks On Wed, Apr 15, 2020 at 3:05 PM Bhathiya Jayasekara wrote: > > > On Tue, Apr 14, 2020 at 10:12 PM Tharindu Dharmarathna >

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-15 Thread Tharindu Dharmarathna
Hi Ishara, Since APIM we only keep a reference to consumer key of oauth app this might be able to do if they can create the oauth app from pre-defined consumer key and secret. Thanks On Wed, Apr 15, 2020 at 12:55 PM Ishara Cooray wrote: > Hi Tharindu, > > With this feature, will it also suppor

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-15 Thread Bhathiya Jayasekara
On Tue, Apr 14, 2020 at 10:12 PM Tharindu Dharmarathna wrote: > Hi All, > > We are going to implement Multiple Oauth provider support to WSO2 API > Management. From this feature, dev portal users can create their Oauth > Application on Pre-Defined OAuth providers. > > 1. Tenant Admin Create Oauth

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-15 Thread Ishara Cooray
Hi Tharindu, With this feature, will it also support changing the OAuth provider for an existing app without changing subscriptions, etc? If one needs to change their OAuth provider in the future this will help. Thanks & Regards, Ishara Cooray Associate Technical Lead Mobile : +9477 262 9512 WSO2

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-14 Thread gayan gunawardana
Hi Tharindu, On Wed, Apr 15, 2020 at 9:32 AM Tharindu Dharmarathna wrote: > Hi Gayan, > For Self containing access tokens it already has the OOTB capability to > validate the token from different token issuers. the Key Management layer > will only use to validate the Reference tokens. > Thanks fo

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-14 Thread Tharindu Dharmarathna
Hi Gayan, For Self containing access tokens it already has the OOTB capability to validate the token from different token issuers. the Key Management layer will only use to validate the Reference tokens. To prefix, the token Generated from Identity providers, they have their own ways of differenti

Re: [Architecture] [APIM] Multiple Key Manager support

2020-04-14 Thread gayan gunawardana
Hi Tharindu, In #6 Validating the Token, regex validation may work for reference access tokens to find corresponding Oauth provider but can we utilize regex validation for self-contained access tokens. Is it possible mediate token generation and append specific prefix to identify Oauth provider or

[Architecture] [APIM] Multiple Key Manager support

2020-04-14 Thread Tharindu Dharmarathna
Hi All, We are going to implement Multiple Oauth provider support to WSO2 API Management. From this feature, dev portal users can create their Oauth Application on Pre-Defined OAuth providers. 1. Tenant Admin Create Oauth Provider from the Admin portal by providing OAuth provider details. - C