Access token not approved error

[#1]

We see an an error from OAuth Policy as "Access Token not approved". We are not using Invalidate Token operation in the OAuth Policy. Does Apigee invalidates access token explicitly for some reason?

[DChiesa]

Nope.

Can you provide a set of steps that reproduces the problem you're seeing?

[#3]

The issue is not occurring now. When it was occurring, there was a lot of traffic, close to 3 million calls a day. And all these calls invoke OAuth - VerifyAccessToken. During this peak load, we saw the Access Token not approved error at many instances. Also, in the apigee documentation there is not much info about why this error occurs in OAuth - VerifyAccessToken. I am attaching the screenshot of the error that occurred last week.accesstokennotapproved.png

https://docs.apigee.com/api-platform/reference/policies/oauth-http-status-code-reference

HTTP/1.1401Unauthorized{"fault":{"faultstring":"Access Token not approved","detail":{"errorcode":"keymanagement.service.access_token_not_approved"}}}