KB Article #176790

Why are there differences between the OAuth implementation in 7.1.x and later versions of API Gateway?

Problem


-- Why are there differences between the OAuth implementation in 7.1.x and later versions of API Gateway?

Resolution


* When API Gateway added OAuth functionality in 7.1.0, the OAuth specification itself was incomplete, so we conformed to an earlier draft specification.  The OAuth specification itself was finalized some time after 7.1.1 was released, so we updated our implementation in 7.2+ to conform to the final specification.