Validate Client id and Secret without using Oauth

[chaudharyvaisha]

Hi All,

Is there any way that I can validate both client id and secret without using oauth or fetching access token first.

My requirement is using client id and secret to hit the api proxy directly not hitting oauth endpoint tand hitting api proxy endpoint with access token.

If there is any way please guide the policy or process to be used.

Same way belvo.co and plaid.com apis are implemented. But not able to identify how to achieve this is APIGEE.

[#2]

Yes, you can do api key validation and then validate the secret in the next policy which will be available in the flow and you can match against the secret you sent in the request.

You can use a raise-fault with the condition if doesn't match.

[chaudharyvaisha]

Yeah, thanks I was able to achieve it in the same way.