IT15659: OAUTH SCOPE INFORMATION BEING TRACKED BY APPLIANCE MUST BE ACCUMULATIVE WITH ITS DISTRIBUTED CACHE SUPPORT

Fix packs for DataPower Gateway version 7.5.1

APAR status

• Closed as program error.

Error description

• Gateway can be configured to use distributed storage to track
  the permission issued with its OAuth protocol support. Gateway
  records information about an *issued* delegated authorization,
  gateway currently tracks the last scope that is approved.
  
  e.g.
  When an application supports 2 scopes, scopeA, and scopeB.  The
  application can request scopeA, initiately. The application,
  subsequently, requests for scopeB, the gateway needs to track
  both scopeA and scopeB as what were given to the application.
  Without this fix, gateway only tracks scopeB, in the above
  scenario.
  

Local fix

Problem summary

• Affected is use of OAuth.
  
  Gateway can be configured to use distributed storage to track
  the permission issued with its OAuth protocol support. Gateway
  records information about an *issued* delegated authorization,
  and incorrectly tracks the last scope that is approved only.
  

Problem conclusion

• Fix is available in 7.5.1.2
  
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R751 PSY

     UP