1.
2.
3.
4.
5.
1. Authorization server (AS): Used to generate the id_token and
manage the KeyPair.
You must perform this step by yourself. For more information about the method, see Configure an
API in the API gateway as follows.
As shown in the preceding figure, the process is as follows:
The Consumer (caller) sends an id_token authentication request to the API gateway, for
example, in the user name+password (U+P) mode.
The API gateway transparently transmits the request to the AS.
The AS sends the user authentication request to the Provider (service provider).
The Provider returns the authentication results or an error message if the authentication
fails.
If the authentication succeeds, the AS generates an id_token, which includes the User
information (expandable, and can include other necessary information).
The API gateway sends the id_token returned by the AS to the Consumer.
Note: The AS is not required to be independently deployed. It can be integrated in the
API Gateway
User Guide for Providers
16
