Scope Validation is not functioning when having a wild card resource.

[dilshanfardil]

Description

Description

Hi Team,

We are encountering an issue where scope validation is not functioning correctly when using a wildcard resource alongside a resource with a path parameter in the API.

Steps to Reproduce

1. Create sample Rest API
2. Create two local scopes
3. Create the resources with below details

Resource One

/* Scope A

Resource Two

/resource-with-path-param/{path-param} Scope B

Resource Three

/resource-only Scope B

Results while Invoking the API with correct scope

• Resource One 200 OK
• Resource Two 200 OK
• Resource Three 403 Forbidden

  {
  "code": "900910",
  "message": "The access token does not allow you to access the requested resource",
  "description": "User is NOT authorized to access the Resource: /*. Scope validation failed."
  }

Affected Component

APIM

Version

4.2.0

Environment Details (with versions)

No response

Relevant Log Output

No response

Related Issues

No response

Suggested Labels

No response

[lyalaman]

Thanks for opening this as a Bug