Identifying all services that use the Evaluate JSON Path Expression (V1) Assertion".

Products

• CA API Gateway

Issue/Introduction

In order to update gateway to 11.2 all  Evaluate JSON Path Expression (V1) Assertion". need to be updated to Evaluate JSON Path Expression (V2) Assertion"  as the V1 version is depreciated and removed from the product .

To attached service can be used to identify all policy's and service which still use the Evaluate JSON Path Expression (V1) Assertion" .

 

Environment

Gateway 11.1.x

Resolution

The attached files can be used to create a service when end point is accessed it queries the SSG DB and  report all service names that include the JSON v1 assertions .

Import the policy using Graphman file OR  import the XML export of the service in policy manager.

Graphman: When imported creates a new folder JSON-V1 for the new service JSON-v1 

graphman import --gateway <defined_gateway> --using install-bundle --input JSON-V1.json

or use 

Policy Manager:  Create a new service, then import the XML file in this new service 

After creating the service, create a JDBC connection to the master SSG DB, connecting as a gateway user.  Then modify the new service to use the JDBC connection 

https://techdocs.broadcom.com/us/en/ca-enterprise-software/layer7-api-management/api-gateway/11-2/security-configuration-in-policy-manager/tasks-menu-security-options/manage-jdbc-connections.html

Then access the new-endpoint to view report  (NOTE: required to provide admin user and password) 

https://<gateway_host>::8443/json1

Example summary report:

Current results are being filtered against:

Service Name Containing JSON V1 assertion

OTK Fail Message to HTML

::l7.apim.system::Rate & Quota Policy Enforcement Fragment::2.0

::l7.apim.system::Rate & Quota Enforcement Policy Template::2.0

openid-client-register

openid-client-register-configuration

auth/oauth/v2/device-verification

auth/oauth/v2/authorize

.

.