需要访问令牌以进行授权，并且访问令牌与具有基本身份验证的另一项服务一起提供。 WSO2有这个功能吗？

Question

I need this feature in WSO2 Publisher or Devportal: I have one api that need dynamic access token and Also I have another api with static Basic Authentication to provide that dynamic Access Token. Unfortunately I could not solve this with mediation. The policy is simple But I don't know whether WSO2 has this simple feature or not?

process: token api with basic Auth ==> provide dynamic access token ==> use access token in main api body and send. Main API is our Endpoint in WSO2 API. I could not solve this with Endpoint Security(Oauth2) and mediation(XML). Version of WSO2-AM is 4.1.0 and this version is latest now.

Answer 1

Have you thought about using a vault, such as Hashicorp Vault, to fetch the the basic auth credentials.

From there use a custom sequence [2] that gets the token (step 1 in your diagram) and then get the token check results you need (step 2).

[1] https://apim.docs.wso2.com/en/latest/install-and-setup/setup/mi-setup/security/using-hashicorp-secrets/

[2] https://apim.docs.wso2.com/en/latest/reference/mediators/sequence-mediator/