APIImportApp ERROR: Invalid Oauth token info policy

[gfonteneau]

APIM-CLI version

1.14.4

API-Management version

7.7.0.20240228

Bug description

we try to deploy an api with an "OAuth Token Information Policy". The deploy work fine in apim-cli 1.13.6 to an apim 7.7.0.20240228 but we got an error with apim-cli 1.14.4

Steps to reproduce

in our api json we have a security Profiles :

 "securityProfiles": [
    {
      "name": "_default",
      "isDefault": true,
      "devices": [
        {
          "type": "oauthExternal",
          "name": "OAuth (External)",
          "order": 1,
          "properties": {
            "tokenStore": "<key type='CircuitContainer'><id field='name' value='XXXXXXX'/><key type='CircuitContainer'><id field='name' value='XXXXXXXXX'/><key type='FilterCircuit'><id field='name' value='Token Validation Policy'/></key></key></key>",
            "accessTokenLocation": "HEADER",
            "authorizationHeaderPrefix": "Bearer",
            "accessTokenLocationQueryString": "",
            "scopesMustMatch": "Any",
            "scopes": "empty-allow",
            "removeCredentialsOnSuccess": true,
            "implicitGrantEnabled": true,
            "useClientRegistry": true,
            "implicitGrantLoginEndpointUrl": "https://localhost:8089/api/oauth/authorize",
            "implicitGrantLoginTokenName": "access_token",
            "authCodeGrantTypeEnabled": true,
            "authCodeGrantTypeRequestEndpointUrl": "https://localhost:8089/api/oauth/authorize",
            "authCodeGrantTypeRequestClientIdName": "client_id",
            "authCodeGrantTypeRequestSecretName": "client_secret",
            "authCodeGrantTypeTokenEndpointUrl": "https://localhost:8089/api/oauth/token",
            "authCodeGrantTypeTokenEndpointTokenName": "access_code",
            "subjectSelector": "${oauth.token.client_id}",
            "oauth.token.client_id": "${oauth.token.client_id}",
            "oauth.token.scopes": "${oauth.token.scopes}",
            "oauth.token.valid": "${oauth.token.valid}",
            "oauth.token.uid": "${oauth.token.uid}"
          }
        }
      ]
    }
  ]

Relevant log output

we got this error :

2024-04-05 12:07:57,638 [RestAPICall] DEBUG: Http verb:GET and URI: https://ourserver:443/api/portal/v1.4/policies?type=oauthtokeninfo
2024-04-05 12:07:57,672 [APIImportApp] ERROR: Invalid Oauth token info policy : <key type='CircuitContainer'><id field='name' value='XXXXXXX'/><key type='CircuitContainer'><id field='name' value='XXXXXXXXX'/><key type='FilterCircuit'><id field='name' value='Token Validation Policy'/></key></key></key>
com.axway.apim.lib.error.AppException: Invalid Oauth token info policy : <key type='CircuitContainer'><id field='name' value='XXXXXXX'/><key type='CircuitContainer'><id field='name' value='XXXXXXXXX'/><key type='FilterCircuit'><id field='name' value='Token Validation Policy'/></key></key></key>
    at com.axway.apim.adapter.apis.APIManagerPoliciesAdapter.handleExternalOauth(APIManagerPoliciesAdapter.java:210)
    at com.axway.apim.adapter.apis.APIManagerPoliciesAdapter.updateSecurityProfiles(APIManagerPoliciesAdapter.java:182)
    at com.axway.apim.apiimport.APIChangeState.getChanges(APIChangeState.java:66)
    at com.axway.apim.apiimport.APIChangeState.<init>(APIChangeState.java:54)
    at com.axway.apim.APIImportApp.importAPI(APIImportApp.java:93)
    at com.axway.apim.APIImportApp.importAPI(APIImportApp.java:52)
    at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
    at java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:78)
    at java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
    at java.base/java.lang.reflect.Method.invoke(Method.java:566)
    at com.axway.apim.cli.APIManagerCLI.run(APIManagerCLI.java:129)
    at com.axway.apim.cli.APIManagerCLI.main(APIManagerCLI.java:72)
2024-04-05 12:07:57,675 [APIManagerAdapter] DEBUG: Closing cache ...

[rathnapandi]

Hi @gfonteneau,

Can you change the element tokenStore from

           "tokenStore": "<key type='CircuitContainer'><id field='name' value='XXXXXXX'/><key type='CircuitContainer'><id field='name' value='XXXXXXXXX'/><key type='FilterCircuit'><id field='name' value='Token Validation Policy'/></key></key></key>",

to

 "tokenStore": "Token Validation Policy"

[rathnapandi]

@gfonteneau, Please reopen the issue if above suggestion does not work.