WSO2 API Manager (WSO2 APIM) allows you to encrypt any sensitive OAuth2.0 keys that are created. The API Manager APIM encrypts access tokens, client secrets and authorization codes (this can be extended to any other OAuth2.0 keys if needed) using the primary keystore. The result is encoded in Base64 and stored in the database. The RSA algorithm is used by default and the key strength (1024, 2048, etc) is based on the private key strength of the primary keystore. If SymmetricEncryption is enabled, the API Manager uses the AES algorithm by default, or the algorithm specified for the SymmetricEncryption.Algorithm in the carbon.xml file.
...
| Tip | ||
|---|---|---|
| ||
|