About sk123

sk123

I’m trying to use a CORS policy in a post-proxy flow hook so that CORS headers get set even if there is a fault raised in the proxy. In the debug trace, I see the post-proxy flow hook being called but the CORS headers don’t get set. If I attach the s...

sk123 · 03-26-2024

We would like to secure a group of API proxies (bundled into an API product) with access tokens generated by Apigee. The access tokens will be retrieved by a custom service on behalf of end users from a token generation proxy in Apigee. The token gen...

sk123 · 03-18-2024

We're thinking of using Apigee as a reverse proxy for a web app. Would we run into any scalability issues with this approach? All requests to access various pages of the web app would be routed through Apigee. Requests that require authentication wil...

sk123 · 03-18-2024

Is it possible to set up an Apigee proxy that can act as a SAML IdP using the GenerateSAML assertion policy? We're currently using Firebase to manage users . However, Firebase cannot act as a SAML IdP and we'd like users to be able to log into the in...

Apigee with Firebase user authentication · 03-14-2024

We'd like to use Apigee to authenticate API calls from a 3P web app. At a high-level, the user authentication flow will look like: 1) Web app calls API on behalf of a user2) Apigee receives request and forwards to authentication service3) Authenticat...

sk123

Attaching the debug trace as well.  

sk123

So what I’m suggesting is that the login button in the “sign up with popup” points to an Apigee proxied login rather than to Firebase directly.

sk123

> Hmmm, I think I've lost the plot here. I don't know what is calling what in your scenario. So I can't contribute anything here.So originally we were thinking our backend authentication service would call the Apigee generate token endpoint after ver...

sk123

Ah thanks, this is a good thing to keep in mind. I was more concerned about potential effects on Firebase session management and whether it is recommended for Apigee to generate refresh tokens on its own.

sk123

One more follow up question: would it be more efficient to proxy Firebase login requests through Apigee instead of calling the token generation endpoint from the authentication service? After Firebase confirms the user's credentials are valid, the Ap...

My Stats

prabug56's Bio

Badges sk123 Earned

Recent Activity

Shared flow working as flow callout but not in flow hook

Best practices for retrieving Apigee access tokens from a backend service

Can Apigee act as a reverse proxy for a web app?

Can Apigee act as a SAML identity provider?

Apigee with Firebase user authentication

Re: Shared flow working as flow callout but not in flow hook

Re: Apigee with Firebase user authentication

Re: Apigee with Firebase user authentication

Re: Apigee with Firebase user authentication

Re: Apigee with Firebase user authentication