Viewing OAuth 2.0 Authorization Server List and Server Configuration

You can view the list of OAuth 2.0 authorization servers, delete or test an authorization server, and set a specific authorization server as default in the Authorization servers section. In addition, you can view and modify the OAuth 2.0 authorization server details in the individual OAuth 2.0 authorization server details page.

To view a list of OAuth 2.0 authorization servers and server configuration

1. Select Username > Administration.

2. Select Security > OAuth 2.0.

The Authorization servers section displays a list of all the currently defined third-party OAuth 2.0 authorization servers in API Gateway.

You can also perform the following operations in the Authorization servers section by clicking the appropriate icons in the Action column.

Set as default: Sets an authorization server to use, by default, when there is more than one server defined in API Gateway.

You can change the default setting of an authorization server at any time.

Test: Checks if the configuration of a specific authorization server is valid.

When API Gateway executes functional testing of the authorization server, it internally creates OAuth 2.0 clients and scopes in the server, performs operations such as, update and delete, on the created OAuth 2.0 clients and scopes, and reports if the authorization server is available for OAuth 2.0 token validation.

If the authorization server is not available for OAuth 2.0 token validation, API Gateway issues a specific error message.

Delete: Deletes an authorization server from API Gateway.

3. Click any OAuth 2.0 authorization server to view the configuration details.

The OAuth 2.0 authorization server details page the client information, scope information, and token information of the displayed OAuth 2.0 authorization server.