Re: [Architecture] [APIM] Decoupling Authorization Serever - Changes Happening on API Store

2015-02-23 Thread Amila De Silva
Yes, there are some SP 1 fixes, on which some KM features depend on. On Mon, Feb 23, 2015 at 4:15 PM, Samisa Abeysinghe wrote: > > > On Mon, Feb 23, 2015 at 4:07 PM, Amila De Silva wrote: > >> Hi Samisa, >> >> Should be compatible with IS 5.0. >> > > ​With the SP I suppose? > ​ > >> >> On Mon,

Re: [Architecture] [APIM] Decoupling Authorization Serever - Changes Happening on API Store

2015-02-23 Thread Samisa Abeysinghe
On Mon, Feb 23, 2015 at 4:07 PM, Amila De Silva wrote: > Hi Samisa, > > Should be compatible with IS 5.0. > ​With the SP I suppose? ​ > > On Mon, Feb 23, 2015 at 3:38 PM, Samisa Abeysinghe > wrote: > >> Which WSO2 IS server version will API-M 1.9 support? >> >> Thanks, >> Samisa... >> >> >> Sa

Re: [Architecture] [APIM] Decoupling Authorization Serever - Changes Happening on API Store

2015-02-23 Thread Amila De Silva
Hi Samisa, Should be compatible with IS 5.0. On Mon, Feb 23, 2015 at 3:38 PM, Samisa Abeysinghe wrote: > Which WSO2 IS server version will API-M 1.9 support? > > Thanks, > Samisa... > > > Samisa Abeysinghe > > Vice President Delivery > > WSO2 Inc. > http://wso2.com > > > On Mon, Feb 16, 2015 at

Re: [Architecture] [APIM] Decoupling Authorization Serever - Changes Happening on API Store

2015-02-23 Thread Samisa Abeysinghe
Which WSO2 IS server version will API-M 1.9 support? Thanks, Samisa... Samisa Abeysinghe Vice President Delivery WSO2 Inc. http://wso2.com On Mon, Feb 16, 2015 at 4:23 PM, Amila De Silva wrote: > Hi All, > > With API Manager 1.9.0, capability will be provided to plug in an External > Autho

Re: [Architecture] [APIM] Decoupling Authorization Serever - Changes Happening on API Store

2015-02-18 Thread Isabelle Mauny
Amila, ​Very good points.​ +1 for adding TTL to token generation calls.. This is what most other API Management solutions do. Isabelle. - *Isabelle Mauny* VP, Product Management - WSO2, Inc. - http://wso2.com/ O

Re: [Architecture] [APIM] Decoupling Authorization Serever - Changes Happening on API Store

2015-02-17 Thread Amila De Silva
Hi Colin, Thanks for bringing this up. Yes, we could do with an existing Grant Type. When generating an Application Access Token we allow specifying validity period through Store UI. It's because none of the existing Grant Types accept validity period as a parameter, we are thinking of doing it t

Re: [Architecture] [APIM] Decoupling Authorization Serever - Changes Happening on API Store

2015-02-17 Thread Colin Roy-Ehri
+1 for these enhancements. I wonder if #1 the Extended Grant Type could cause unnecessary complexity for the External Authorization server? I think #1 is a necessary feature, but we could make simple grant types an option. For initial configuration of an External Authorization server, it may be

[Architecture] [APIM] Decoupling Authorization Serever - Changes Happening on API Store

2015-02-16 Thread Amila De Silva
Hi All, With API Manager 1.9.0, capability will be provided to plug in an External Authorization server. With this change, Authorization Server will be the only entity creating OAuth clients, and issuing access tokens. In order to seamlessly support some of the existing APIM features, certain cha