wso2-extensions / apim-km-azure-ad

Integrate Azure AD as a Third Party Key Manager for WSO2 API Manager
Apache License 2.0
3 stars 10 forks source link

Support for grant type urn:ietf:params:oauth:client-assertion-type:jwt-bearer in Azure KM #14

Open bmonteiro opened 2 months ago

bmonteiro commented 2 months ago

Based on this post from this Microsoft site: https://learn.microsoft.com/en-us/answers/questions/1388776/how-to-get-access-token-using-certificate-based-au We can see that the OAUTH2 token endpoint from Azure supports that grant type. Based on the docs this WSO2 extension just supports client credentials.

bmonteiro commented 2 months ago

PS: https://learn.microsoft.com/en-us/entra/identity-platform/v2-oauth2-client-creds-grant-flow#get-a-token

(Second case: Access token request with a certificate)

bmonteiro commented 2 months ago

PS1: WSO2 IS as KM already supports this JWT grant type