Hi
i am using Custom Oauth Client , i have used below code for generating the access token .
For Issuing the access token
1. Issue-access-token operation <xsl:when test="/input/operation = 'issue-access-token'"> <access_token><xsl:value-of select="dp:generate-uuid()"/></access_token> <expires_in type="json:number">3600</expires_in> </xsl:when>
For Verify access token
2.
Verify-access-token <xsl:when test="/input/operation = 'verify-access-token'"> <client_id><xsl:value-of select="'POC'"/></client_id> <scope><xsl:value-of select="'/accounts'"/></scope> </xsl:when>
Question:When i use custom Oauth Client xslt , it is not verifying the access token properly . It just takes whatever provided in Bearer token and allows that transaction
Do we need to add any additional logic in verify-access-token to make sure it validates the access token which was issued by datapower ?.
------------------------------
santhosh
------------------------------