...
In either of the two approaches, if an API Gateway receives an invalid token, it returns an error to the requesting client saying that the token is invalid. The <APIGateway> element of the <PRODUCT_HOME>/repository/conf/api-manager.xml file contains details of how to configure the API Publisher to publish APIs to different Gateways. For details, see Configuring <APIGateway> in api-manager.xml file.