product-apim icon indicating copy to clipboard operation
product-apim copied to clipboard

Client-secrete is getting removed automatically when updating an application with External Key Manager

Open niranRameshPeiris opened this issue 4 years ago • 0 comments

Description:

When someone clicks the update button stored client secrete is getting removed. As per the investigation, this is because the Key Manager does not respond back with the client-secret due to the security policies in place. Hence the stored client-secret is getting replaced with the null or empty value in the current flow. This issue is there with all the external key-manger connectors and can be resolving by including the client secret to the OauthAppRequest object. At the moment it is sending a null value

Steps to reproduce:

Affected Product Version:

APIM 3.2.0

niranRameshPeiris avatar Jan 26 '21 10:01 niranRameshPeiris