How to add authentication on reverse proxy where target system don't require.

Not applicable

Try to accomplish one use case via Apigee. Let say Our target system doesn't require any username/password or any token to access their API. But I want to create a reverse proxy on their API with a basic credential or token based auth. I want to generate username/password or token on Edge and save it somewhere. Once a client calls my reverse proxy with username/password, Edge will validate it with generated credential and process to target system accordingly.

0 1 836
1 REPLY 1

@Supratim Das , Absolutely you can do same in Apigee Edge,

See how to secure APIs using,

Connection between Apigee & Target secured using last mile security like 2-ssl. More details here.

Here is how flow works,

  • Backend APIs are exposed to Apigee & Proxies Created.
  • Connection between Apigee & Target secured using 2-ssl.
  • APIs in Apigee Edge Secured Using OAuth2.0 / JWT / Simple Basic Auth.
  • In runtime Apigee Verifies Keys / Tokens. Once verified, Apigee removes the Authorization headers & talks to backend to get response.

It's simple. Hope it helps. Keep us posted moving forward if any questions.

-------------------------------

Anil Sagar

5997-screen-shot-2017-11-23-at-75916-pm.png Learn Apigee Concepts in 4 Minutes HandsOn