Per the Apigee docs, the OAuthV2 policy's VerifyAccessToken operation requires you to "hard code" the Scope(s) you want to validate."If this element appears in a "VerifyAccessToken" policy, then it is used to specify which scopes the policy should en...

On the new Integrated Developer Portal, when a developer creates a new App and adds an API, it shows that the key (i.e. client id/secret) are "Active" and that the status of the enabled API is also "Active" when in fact the product status in Apigee E...

I am trying to retrieve the attributes for a RefreshToken using the GetOAuthV2Info policy below, but Apigee is returning the error "Invalid API call as no apiproduct match found". The refresh token is definitely valid because I am able to refresh it ...

I would like to invalidate a token using the InvalidateToken OAuthV2 operation after x number of hours. Is this possible and if so how?