product-apim
product-apim copied to clipboard
Client-secrete is getting removed automatically when updating an application with External Key Manager
Description:
When someone clicks the update button stored client secrete is getting removed. As per the investigation, this is because the Key Manager does not respond back with the client-secret due to the security policies in place. Hence the stored client-secret is getting replaced with the null or empty value in the current flow. This issue is there with all the external key-manger connectors and can be resolving by including the client secret to the OauthAppRequest object. At the moment it is sending a null value
Steps to reproduce:
Affected Product Version:
APIM 3.2.0