How can I enable Implicit Grant in WSO2 3.2.0 APIM?

user_6080831 0
Viewed 121

Implicit Grant type was there in WSO2 API manager 3.0.0 like this (in create application flow), enter image description here but now it's not available in the 3.2.0 version. enter image description here is there a simple way to re-enable it?

I'm aware of Implicit Grant is Deprecated and has been removed from many applications. but what I want to do is test old sample application. Nothing mentioned about this change in their changelog v 3.1.0, v 3.2.0

wso2-api-manager wso2
2 Answers

By default, the implicit grant type is not displayed in WSO2 APIM-3.2.0 devportal for the applications. You can enable it via the admin portal. Please follow the below steps.

  1. Navigate to admin portal via https://{hostname}:{port}/admin
  2. On the left menu panel click on "Key Managers"
  3. Click on "Resident Key Manager"
  4. Under "Grand Types" add implicit and press enter enter image description here
  5. Click on "Update"
  6. Navigate to devportal via https://{hostname}:{port}/devportal
  7. Open an application and navigate to "Production Keys"
  8. Now you can see the implicit grant type checkbox enter image description here The above steps will allow you to have the implicit grant type for all the applications and you don't have to enable the implicit grant type for each and every application you create.

This has been done on purpose as the OAuth 2.1.0 has removed/discouraged the use of the implicit grant type due to security concerns. Please refer link for more details.

user_80326050

Edit : I posted this before accepting the correct answer & keep it here as a workaround.

I found a solution workaround, You can still add that grant type by using Management Console (https://localhost:9443/carbon/).

In Management Console, Service Providers > list > Edit "created application" > Inbound Authentication Configuration > OAuth/OpenID Connect Configuration > Edit

user_60808310
Related