upgrade to OTK Toolkit 4.6 break oauth manager, default/auth/oauth/v2/token service, token call is failing

Products

• CA API Gateway

Issue/Introduction

Hi,

we are upgrading the OTK Toolkit from 4.4 to 4.6 and we are facing issues.

1. However, the first no regression test, alredy cannot conclude succesfully.
Request is a CURL to the service /auth/oauth/v2/token with a clientId/Secret already reguistered in the system. The response no longer contains the access_token but the error {
  "error": "invalid_client",
  "error_description": "The given client credentials were not valid"
}

analyzing, or trying, the code we found out that the fapi CWP were not set by default and we registered it to false, but now the service response is an http code 200 with a blank body.

2. because of that we tried to access the /oauth/manager service but in login we receive an error caused by the absence of the CWP ${gateway.otk.manager.session.lifetime_s} that should be setted by default and it's not.

After the setting the login step go succesfully but still other error raise, for example to go to the clients list we receive the error { "error":"invalid_request", "error_description":"Missing or duplicate parameters" } .

In a separated case: 

User see  401 error when doing the OTK token call. 

 

Environment

Release : 10.1

Cause

The option OTK Configuration must be installed during the upgrade or install process.  It was optional but required in 4.6 or higher version. 

Resolution

Install option OTK Configuration in the oauth solution kit.