Can we retry verifyaccesstoken policy in apigee hybrid?

[kishorecse]

We have a token validation issue in our active/active apigee hybrid environment. we have two clusters in two different environments that load balances. we have tokens generated in one data center and the validation happening in other data centers when there are token sync latency issues between two data centers. 

is there a way to retry verifyaccesstoken  policy after few milliseconds after it fails and continue with the same flow?

[SanketK]

Hi @kishorecse ,

Have you tried specifying the ExpiresIn element as mentioned here: https://docs.apigee.com/api-platform/reference/policies/oauthv2-policy#accesstokenelement 

This would not help with a retry but give enough time for the original request to succeed cross region.

Kind Regards,

SanketK

[kishorecse]

Sorry, this actual oauth token is generated externally which is a call from apigee to idp that gets the token and stores in apigee. basically these are third party generated tokens.  We then use apigee to validate the token in business api call. Does this solution still valid? how does this help with verifyaccesstoken policy if it works.  Does the verify access token waits for expires in seconds to validate the token in case if it couldn't find the token in other DC in first attempt? or does this wait for expiresin time all the time for verify token policy?  The problem we have is with verifyaccesstoken in cross region hybrid environment.