Token Removal from OTK Cassandra Database

Products

• CA API Gateway

Issue/Introduction

Does Layer7 use a DELETE command or a TTL value to remove records from the following tables in an OTK Cassandra DB?

• oauth_access_token
• oauth_access_token_by_resource_owner
• oauth_access_token_by_resource_owner_pagination
• oauth_access_token_pagination
• oauth_access_token_view_client_key
• oauth_refresh_token
• oauth_refresh_token_view_client_key
• oauth_refresh_token_view_resource_owner

Environment

OAuth Toolkit 4.6X

Resolution

The auto cleanup after token expiry is based on TTL. In the case where the tokens are revoked manually through the OAuth Manager, the DELETE command will be used.