Pass Granular permissions to Backend Services from API proxy

[loniho8339]

Hi All,

I need to know if there is some way via which the permissions for a client (based on the api key) can be passed to the backend services via a token (like JWT) by Apigee Platform.

Use Case:

There is a client which has on boarded themselves and obtained a key. They are allowed to do the operations for a specific Client Id that belongs to them.

Client can send this information (pertaining to the ClientId) in the payload.

Now, as we don't want to parse the payload in Apigee layer, but want to leave this to backend service.

Is there a way that Api proxy can send this permissions to the backend layer out of the box? Or there should be a custom logic that needs to be written which injects this token (containing permissions) towards the backend service?

Regards,

Vivek

[#2]

You can add the permissions in the attributes of developer app. And do an api key verification to get the permissions related to that clientid in the flow. The same permission you can send to the backend as header.