{ Community }
  • Academy
  • Docs
  • Developers
  • Resources
    • Community Articles
    • Apigee on GitHub
    • Code Samples
    • Videos & eBooks
    • Accelerator Methodology
  • Support
  • Ask a Question
  • Spaces
    • Product Announcements
    • General
    • Edge/API Management
    • Developer Portal (Drupal-based)
    • Developer Portal (Integrated)
    • API Design
    • APIM on Istio
    • Extensions
    • Business of APIs
    • Academy/Certification
    • Adapter for Envoy
    • Analytics
    • Events
    • Hybrid
    • Integration (AWS, PCF, Etc.)
    • Microgateway
    • Monetization
    • Private Cloud Deployment
    • 日本語コミュニティ
    • Insights
    • IoT Apigee Link
    • BaaS/Usergrid
    • BaaS Transition/Migration
    • Apigee-127
    • New Customers
    • Topics
    • Questions
    • Articles
    • Ideas
    • Leaderboard
    • Badges
  • Log in
  • Sign up

Get answers, ideas, and support from the Apigee Community

  • Home /
  • APIM on Istio /
avatar image
0
Question by aagrawal · Nov 12, 2018 at 11:56 PM · 553 Views istio

Istio + Apigee : API authorization using OAuth?

I am new to istio but exploring this for one of my upcoming project where the plan is to use Apigee to publish APIs that are running on istio.

After reading documentation on https://docs.apigee.com/api-platform/istio-adapter, I assume that if we use Apigee Adaptor for istio then only api key validation can be used for authorization and no Oauth is supported yet.

Please let me know my understating is correct? If OAuth is supported then how would be the flow?

Comment
Add comment
10 |5000 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by Apigeeks only
  • Viewable by the original poster
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users

Close

1 Answer

  • Sort: 
avatar image
0

Answer by srinandans@google · Nov 15, 2018 at 05:11 AM

Hey @aagrawal, OAuth in indeed supported. The OAuth Auth Server is Edge. Edge issues JWT based token. Istio can validate the JWT token (for signature). The Apigee mixer adapter then looks at the claims in the token for access to entitlements.

Comment
Add comment Show 1 · Link
10 |5000 characters needed characters left characters exceeded
▼
  • Viewable by all users
  • Viewable by Apigeeks only
  • Viewable by the original poster
  • Viewable by moderators
  • Viewable by moderators and the original poster
  • Advanced visibility
Viewable by all users
avatar image Timothy Murray (tcs) · Jun 25, 2019 at 07:08 PM 0
Link

We are trying to run the apigee istio adaptor and use an external token provider. In some ways the istio adaptor looks like the microgateway but lacks the ability to use an external oauth provider. But the bigger problem we face is that with an external token the api products are not present int he token. And it looks like there is no syncronization of the istio bindings from Apigee Edge into Istio. The istio services all need to be created manually.

We need a solution where there is no dependency on edge at runtime (hence the external token provider)

But we need a solution that synchronizes product and service definitions from edge into istio.

Follow this Question

Answers Answers and Comments

38 People are following this question.

avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image avatar image

Related Questions

Apigee with Istio 3 Answers

Istio Deployment Failure 2 Answers

Apigee Istio Queries 1 Answer

Error al configurar samples/apigee/handler.yaml 3 Answers

Issue implementing API Key/Quota validation with the Apigee Istio adapter 1 Answer

  • Products
    • Edge - APIs
    • Insights - Big Data
    • Plans
  • Developers
    • Overview
    • Documentation
  • Resources
    • Overview
    • Blog
    • Apigee Institute
    • Academy
    • Documentation
  • Company
    • Overview
    • Press
    • Customers
    • Partners
    • Team
    • Events
    • Careers
    • Contact Us
  • Support
    • Support Overview
    • Documentation
    • Status
    • Edge Support Portal
    • Privacy Policy
    • Terms & Conditions
© 2021 Apigee Corp. All rights reserved. - Apigee Community Terms of Use - Powered by AnswerHub
  • Anonymous
  • Sign in
  • Create
  • Ask a question
  • Create an article
  • Post an idea
  • Spaces
  • Product Announcements
  • General
  • Edge/API Management
  • Developer Portal (Drupal-based)
  • Developer Portal (Integrated)
  • API Design
  • APIM on Istio
  • Extensions
  • Business of APIs
  • Academy/Certification
  • Adapter for Envoy
  • Analytics
  • Events
  • Hybrid
  • Integration (AWS, PCF, Etc.)
  • Microgateway
  • Monetization
  • Private Cloud Deployment
  • 日本語コミュニティ
  • Insights
  • IoT Apigee Link
  • BaaS/Usergrid
  • BaaS Transition/Migration
  • Apigee-127
  • New Customers
  • Explore
  • Topics
  • Questions
  • Articles
  • Ideas
  • Badges