usercontext generation by apigeex to backend based on scope for oauth

[raghunathapalle]

we have a requirement to generate oauth token to the client application by apigeex based on client credential & scope. During the resource call validation by apigeex, apigeex needs to validate the token & pass the encrypted user_context generated using the creation timestamp, validity timestamp & scope. Is there out of box policy to achieve this funtionality?

[kurtkanaskie]

Yes, if I understand your request correctly, the OAuth V2 policy can incorporate custom attributes during the "GenerateAccessToken" operation. This can be whatever you want, within limitations.

https://cloud.google.com/apigee/docs/api-platform/reference/policies/oauthv2-policy#attributesattrib...

https://cloud.google.com/apigee/docs/api-platform/reference/limits#keys,-developers,-apps