如何在wso2 api管理器中对最终应用程序用户进行身份验证和授权？

Question

I wanted to do some POC for wso2 API manager where API Manager will expose login and registration url which will be called by UI layer but wanted to handle end user authorization and authentication in API manager layer and don't want to handle this in database how can I do this i don't to use Identity server also.

I have gone through password grant_type tutorial and we can use this but how the authorization is going to performed? Do we need to maintain user details in separate database or in identity server? if yes how this is going to happen.

I have gone through below questions but didn't get exact solution, please help me on this.

authorize user in wso2 api manager

wso2 api manager end-user

Thanks

Answer 1

how can I do this i don't to use Identity server also

By default you should be using the provided OAuth2 endpoints to authorize the users. However - the API Manager itselfs doesn't support self-registration and account verification.

I'd suggest to configure a WSO2 Identity Server as an APIM Key manager .

The WSO2IS has capability for self-registration and account verification .

The application or users will authenticate against the WSO2IS and the returned token will be valid for APIM (as the KeyManager shares the database with tokens).