About bullenjohnmicha

bullenjohnmicha · 01-13-2022

We're looking to limit requests made by an end user on a per minute basis to protect against malicious attacks. (e.g. 100 requests/min)I've seen the documentation and the SpikeArrest policy is recommended for this use case. We can't use the username ...

bullenjohnmicha · 07-25-2021

We're currently debugging an issue wherein the generated Apigee access token is supposedly being revoked randomly. We have an existing policy wherein if the token endpoint is called, it looks up any existing token the user (using a cache) has and inv...

bullenjohnmicha · 03-24-2021

I'm planning to use the VerifyJWT policy and use the uri for caching of the JWKS. I haven't seen how caching is implemented except for the fact that the cache retains the JWKS for 300 seconds. How does it behave if it encounters an unknown kid in the...

bullenjohnmicha · 01-24-2022

Thanks @dchiesa1! We also consulted with our Apigee point of contact. The SA ultimately proposed the same thing though eventual consistency was never mentioned. We'll take note of it.

bullenjohnmicha · 07-25-2021

Thank you @dchiesa1 !

My Stats

bullenjohnmicha's Bio

Badges bullenjohnmicha Earned

Recent Activity

End customer rate limiting using SpikeArrest or Quota policy

Invalidated access tokens

VerifyJWT JWKS Uri Caching

Re: End customer rate limiting using SpikeArrest or Quota policy

Re: VerifyJWT JWKS Uri Caching