Asking what is the purpose of AllowedIssuers

[ronimhd]

Hi, I am a beginner with Apiman.
During my POC for Apiman, I had a problem with Aoiman Vert.x gateway. After I troubleshoot, I found that there is validation regarding allowedIssuer in this code:

`if (config.getAllowedIssuers().contains(issuerEndpoint)) {
handler.handle(Future.failedFuture("issuer validation failed: received [" + issuerEndpoint + "]"));
return;

}`

But I do not understand why if issuerEndpoint is member of allowedIssuer, the system throws an exception "issuer validation failed: received"
If this code is as the requirement, how to make configuration work, because the config.site is from "auth-server-url" and it become allowIssuer.

[msavy]

Can you please provide the full name of the file

[msavy]

You are welcome to make a PR, btw!

[ronimhd]

PR is created to master
But I want to use 3.0.0.Final, how to do that?

[msavy]

You'll need to do your own build in that case.

3.1.0.Final will be out in shortly once I fix a few build issues.

[ronimhd]

I have created PR to master, can you approve it?

[msavy]

This is now merged and will go into 3.1.0.Final

[msavy]

Thanks. It needs manually testing before I can approve it. I'll respond there when it's done. You can still do your own build locally to use your change On Mon, 20 Feb 2023, 10:56 ronimhd, ***@***.***> wrote: