Istio + Apigee : API authorization using OAuth?
I am new to istio but exploring this for one of my upcoming project where the plan is to use Apigee to publish APIs that are running on istio.
After reading documentation on https://docs.apigee.com/api-platform/istio-adapter, I assume that if we use Apigee Adaptor for istio then only api key validation can be used for authorization and no Oauth is supported yet.
Please let me know my understating is correct? If OAuth is supported then how would be the flow?
Hey @aagrawal, OAuth in indeed supported. The OAuth Auth Server is Edge. Edge issues JWT based token. Istio can validate the JWT token (for signature). The Apigee mixer adapter then looks at the claims in the token for access to entitlements.
