1

I have a RAML file with two methods POST and GET. Also I have two applications A and B. A should only be able to call POST and B should only be able to call GET. I am using "OAuth 2.0 Access Token Enforcement Using External Provider policy." and oauthprovider module to generate oauth token for authentication.

<oauth2-provider:config name="OAuth_provider_module"
        accessTokenEndpointPath="oauth/token" providerName="CustomProvider"
        clientStore-ref="my-client-store" authorizationEndpointPath="oauth/authorize"
        listenerConfig-ref="https_listener_config" supportedGrantTypes="CLIENT_CREDENTIALS AUTHORIZATION_CODE"
        doc:name="OAuth provider module">
    </oauth2-provider:config>

Any advice as how can I achieve method level authorization using above policy or any other suggestions.

user3366906
  • 149
  • 2
  • 11

0 Answers0