简体   繁体   中英

WSO2 API Manager - Can we limit supported OAuth2 Grant Type for an API

Refer to WSO2AM documentation , I understand that we can set the authentication type for each API to one of following values.

  1. None
  2. Application
  3. Application User
  4. Application and Application User

However, is it possible to specify that an API will support only a specific OAuth2 grant type?

For example, I want an API to allow only "Authorization Code" and "Implicit" , but not allow "Password" grant types.

Thank you very much in advanced.

Thanks to @harsha89 for the solution. This can be configured in carbon admin console under Service Providers -> Inbound Authentication Configuration -> OAuth/OpenID Configuration, then click "Edit".

在此处输入图片说明

在此处输入图片说明

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM