wso2 / product-microgateway

Choreo Connect is a cloud-native, open-source, and developer-centric API gateway.
https://wso2.com/choreo/choreo-connect/
Apache License 2.0
287 stars 246 forks source link

add scope validation for InternalAPIKeyAuthenticator #3486

Closed rajithacharith closed 4 months ago

rajithacharith commented 5 months ago

Purpose

Validate scopes for internal api keys. As mentioned in [Architecture] [Choreo] Admin configuration for configuring developer portal IdP, scope validation will be added to the API keys. To maintain the current behavior for console users (internal developers) following PR should be merged before this

Issues

VirajSalaka commented 5 months ago

There are few checkstyle failures in the PR check.

rajithacharith commented 4 months ago

Scopes needs to be added to the backend jwt token. Keeping this PR closed as the issue is hold till the other blockers fixed.