search

wso2 / api-manager

All issues, tasks, improvements and new features of WSO2 API Manager
Apache License 2.0
34 stars 8 forks source link

[Application-Token : opaque Token]Gateway is sending an expired backend JWT token to the backend #2945

Open cbabey opened 2 weeks ago

cbabey commented 2 weeks ago

Description

The gateway is sending an expired backend JWT token to the backend endpoint, causing the endpoint call to fail. Upon investigation, it was found that this issue arises when the API is called using an opaque token (Application Token).

Steps to Reproduce

  1. Configure the backend endpoint in the APIM to validate the expiry time of the received JWT.
  2. Generate an opaque token and invoke the API with high TPS.
  3. Occasionally, the APIM will send an expired token to the backend.

Affected Component

APIM

Version

4.0.0

Environment Details (with versions)

No response

Relevant Log Output

No response

Related Issues

No response

Suggested Labels

No response