Issue with Verify API Key

[#1]

Hi Experts

I have 2 Proxies with Verify API Key policy

Proxy1 with 2 paths /ip and /header.

I have created a product.

Product1, added proxy1 with resource /ip (gave restricted access only to 1 resource)

Created an Apps

App1: Added Product1 to the app

When i try to test

proxy1/ip?apikey=app1key it works fine

proxy1/header?apikey=app1key it fails with Invalid key as expected

Now when i try to access the proxy1 with some different apps to which i have not assigned Product1 (Already existing Apps in environment say TestApp)

proxy1/ip?apikey=TestAppKey it works fine

proxy1/header?apikey=TestAppKey it works fine

Question: How can proxy1 works fine TestAppkey when i have not assigned Product1 to TestApp?

Thanks and Regards

Osman

[dchiesa1 · Accepted solution]

Not sure,

but it's possible that you have those additional Apps (TestApp) authorized on an API Product that has NO proxies assigned to it. This would be a "wildcard" API Product, that would work for any API Proxy.

Read "Making Sense of API Product configuration" for very valuable background.

[#3]

Hi Dino

Thanks for your help. Yes, my TestApp was authorized on an API Product that has no proxies assigned to it. This was causing me the trouble.