Access token entropy
Hi
What is the current entropy for apigee cloud based access token. We need to implememt FAPi requirement for OBIe for which required entropy is 128.
Best Answer
Answer by Dino-at-Google
·
Oct 22 at 03:02 PM
By default the access token is 28 hexdecimal characters, I believe.
There are 4 bits of entropy for each char in a hexadecimal string. 28*4 = 114, which is not sufficient for your purposes. You want 128 /4 = 32 characters (minimum) .
You can raise that by setting a property on your org:
POST :mgmtserver/v1/o/:ORG
Authorization: :edge-auth
content-type: application/json
{
"properties" : {
"property" : [ {
"name" : "keymanagement.oauth20.authorization.token.length",
"value" : "32"
} ]
}
}
You may have to append the other existing properties to that payload. First query the org properties, and then POST with the existing properties plus this one.
