-
-
-
-
-
Connect & Alibaba cloud App needs to authenticate APPkey, and OpenID Connect does not.
Functions that are not supported by OpenID Connect
Cannot use App authentication
Cannot use App level Throttling
Cannot use AlibabaCloud Account level Throttling
Implementation principle
By performing OpenID Connect authentication, APIs can be classified into authorization APIs and
service APIs.
Authorization APIs: Interfaces used to issue a Token to the client. When configuring such
APIs, you must inform the API gateway about the key corresponding to your Token and the
public key used to resolve the Token.
Service APIs: Interfaces used to obtain user information and perform an operation. When
configuring such APIs, you must inform the API gateway about the parameter that
represents the Token in your request. After the request arrives at the API gateway, the API
gateway automatically checks whether this request is valid.
Certification method
The client calls an authorization API
The client uses authentications to get the “Token”:
API Gateway
User Guide for Providers
14
