You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
it didn't work because WSO2 IS (as key-manager) still produced access tokens without "typ" header however this type header is available in the token which was generated in IS 6.1.0 and the above param and fix is working for IS KM 6.1.0
Description
When using apim 4.1.0.170 and is 5.11.0.370 as a KM. whewn we use the below param which was introduced with https://github.com/wso2-enterprise/wso2-apim-internal/issues/6576 in apim gateway deployment.toml.
[apim.token.validation]
enforce_type_header_validation = true
it didn't work because WSO2 IS (as key-manager) still produced access tokens without "typ" header however this type header is available in the token which was generated in IS 6.1.0 and the above param and fix is working for IS KM 6.1.0
The type heander added with the git issue in wso2/product-apim#11703
Thanks,
Janaka.
Steps to Reproduce
[apim.token.validation]
enforce_type_header_validation = true
Affected Component
APIM
Version
4.1.0
Environment Details (with versions)
No response
Relevant Log Output
No response
Related Issues
No response
Suggested Labels
wso2am-4.1.0
The text was updated successfully, but these errors were encountered: