LI81639: NATIVE OAUTH PROVIDER GIVES EI-STOP-ON-ERROR IN THE UI

APAR status

• Closed as program error.

Error description

• If you try the following steps to re-create :
  1.Add Native
  oAuth Provider
  2.For grant types, select Implicit, Application,
  Access code, Resource owner - password
  3.leave everything else
  default and save
  4.After the new oauth provider is created, go
  to Configuration. Update grant types to ?application? only.
  Save.
  5.Go to User Security. You should see a message saying
  user security is not applicable.
  6.Go to Configuration. Update
  grant types to Implicit, Application, Access code, Resource
  owner - password. Save.
  7. Go to User Security. Leave identity
  extraction = disabled. Fill out the other 3 options on the
  screen.
  8. Go to Configuration. Update grant types to Implicit.
  Save.
  You should see the following error
  :{?status?:400,?message?:[?The OAuth provider contains an
  OpenAPI definition with validation errors.?],?errors?:[?Missing
  required field: ei-stop-on-error (context: (root), line: 0,
  col: 0)?]}
  

Local fix

• Please try to add ?error-stop-on-error: true? for user security
  , using the source of the native OAuth Provider
  

Problem summary

• In Datapower API gateway native OAuth provider, if you do any of
  the following action:
  - Set Extract Identification in User Security page to `disabled`
  - Set grant type to not include `access code` and `implicit`
  first, then enable any of these two grant types.
  
  After any of these actions, UI will remove `ei-stop-on-error`
  property from the User Security policy in assembly, which will
  cause backend throw validation error.
  

Problem conclusion

• Fix has been delivered to APIC v2018 FP13. UI will no longer
  remove `ei-stop-on-error` from User security policy in assembly.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  API CONNECT ENT

• Fixed component ID

  5725Z2201

Applicable component levels