Re: [Architecture] JWT Authentication for API Gateway

2019-06-28 Thread Johann Nallathamby
Hi Chamod, How about supporting 3rd party Key Manager generated JWT access tokens? Will that work? 'jti' is an optional field as I remember. How would caching be impacted in that case? On Fri, Jun 28, 2019 at 10:47 AM Harsha Kumara wrote: > > > On Fri, Jun 28, 2019 at 10:43 AM Harsha Kumara

Re: [Architecture] JWT Authentication for API Gateway

2019-06-28 Thread Chamod Samarajeewa
Hi Johann, How about supporting 3rd party Key Manager generated JWT access tokens? > Will that work? 'jti' is an optional field as I remember. How would caching > be impacted in that case? > Good that you pointed out that. Then, we will have to use the whole token as the key to the cache entry.

[Architecture] WSO2 Product Installation Resources Released!!!

2019-06-28 Thread Chamindi Abayadeera
WSO2 Installation Experience team is pleased to announce the release of Ansible, Docker, and Puppet resources for WSO2 products. Ansible Related artifacts: - WSO2 API Management v2.6.0 - https://github.com/wso2/ansible-apim/releases/tag/v2.6.0.3 - WSO2 Identity Server v5.8.0 -

Re: [Architecture] WSO2 Installation Resources for Ansible

2019-06-28 Thread Savidu Dias
Hi all, Ansible resources for WSO2 products now use .zip files for product packages. Additionally, the update script has been developed for all WSO2 products as well. Please find the Ansible Resource releases for API Manager[1], Identity Server[2], Enterprise Integrator[3], and Stream

Re: [Architecture] JWT Authentication for API Gateway

2019-06-28 Thread Malintha Amarasinghe
I think we can make it optional. If the particular app (token) doesn't have any subscriptions, the APIM IDP will always send an empty subscribedAPIs array. "subscribedAPIs": [] That means there are no subscriptions for this app (token) hence we can fail the validation. If the subscribedAPIs

Re: [Architecture] JWT Authentication for API Gateway

2019-06-28 Thread Harsha Kumara
On Sat, Jun 29, 2019 at 9:31 AM Rajith Roshan wrote: > > > On Sat, Jun 29, 2019 at 9:17 AM Harsha Kumara wrote: > >> >> >> On Sat, Jun 29, 2019 at 9:12 AM Malintha Amarasinghe >> wrote: >> >>> I think we can make it optional. >>> If the particular app (token) doesn't have any subscriptions,

Re: [Architecture] JWT Authentication for API Gateway

2019-06-28 Thread Harsha Kumara
On Sat, Jun 29, 2019 at 9:12 AM Malintha Amarasinghe wrote: > I think we can make it optional. > If the particular app (token) doesn't have any subscriptions, the APIM IDP > will always send an empty subscribedAPIs array. > "subscribedAPIs": [] > > That means there are no subscriptions for this

Re: [Architecture] JWT Authentication for API Gateway

2019-06-28 Thread Rukshan Premathunga
On Fri, Jun 28, 2019 at 5:16 PM Chamod Samarajeewa wrote: > Hi Johann, > > How about supporting 3rd party Key Manager generated JWT access tokens? >> Will that work? 'jti' is an optional field as I remember. How would caching >> be impacted in that case? >> > > Good that you pointed out that.

Re: [Architecture] JWT Authentication for API Gateway

2019-06-28 Thread Rajith Roshan
On Sat, Jun 29, 2019 at 9:17 AM Harsha Kumara wrote: > > > On Sat, Jun 29, 2019 at 9:12 AM Malintha Amarasinghe > wrote: > >> I think we can make it optional. >> If the particular app (token) doesn't have any subscriptions, the APIM >> IDP will always send an empty subscribedAPIs array. >>

Re: [Architecture] WSO2 Installation Resources for Puppet

2019-06-28 Thread Savidu Dias
Hi all, We have completed the development of Puppet modules, having moved away from a double module (master and agent module) setup. Additionally, we have introduced a *common *module where parameters and resources common to every module are used. These functionalities have been implemented for