Azure APIM - Support to OpenAPI Security Requirement Object

Question

Azure APIM - Support to OpenAPI Security Requirement Object

Venkatachalam Muthusamy 1

As of today, the security requirement object from OpenAPI spec is currently ignored while importing into APIM. Are there any future plans to support ?

MikeUrnun 9,777 Reputation points Moderator

2021-10-26T22:41:00.107+00:00

Hello @Venkatachalam Muthusamy That's correct, security requirement object is listed under Unsupported here: https://learn.microsoft.com/en-us/azure/api-management/api-management-api-import-restrictions#unsupported

Could you elaborate on your scenario? Were you facing an issue where an auth mechanism isn't covered by the APIM platform or looking for a more streamlined Import where you no longer have to configure auth steps separately?
MikeUrnun 9,777 Reputation points Moderator

2021-10-27T23:13:30.953+00:00

@Venkatachalam Muthusamy I'm just following up here, let me know regarding the questions above and we'd be happy to help get more clarity on the matter.
Venkatachalam Muthusamy 1 Reputation point

2021-10-28T02:59:40.857+00:00

Hello Mike,

I have API’s with scope based access control at operation level and it is being applied manually. We are looking for an option to automate applying security policy through OpenAPI spec.

Regards
Venkat

1 answer

Your answer

MikeUrnun 9,777 Reputation points Moderator

2021-10-26T22:41:00.107+00:00

Hello @Venkatachalam Muthusamy That's correct, security requirement object is listed under Unsupported here: https://learn.microsoft.com/en-us/azure/api-management/api-management-api-import-restrictions#unsupported

Could you elaborate on your scenario? Were you facing an issue where an auth mechanism isn't covered by the APIM platform or looking for a more streamlined Import where you no longer have to configure auth steps separately?
MikeUrnun 9,777 Reputation points Moderator

2021-10-27T23:13:30.953+00:00

@Venkatachalam Muthusamy I'm just following up here, let me know regarding the questions above and we'd be happy to help get more clarity on the matter.
Venkatachalam Muthusamy 1 Reputation point

2021-10-28T02:59:40.857+00:00

Hello Mike,

I have API’s with scope based access control at operation level and it is being applied manually. We are looking for an option to automate applying security policy through OpenAPI spec.

Regards
Venkat

Answer 1

Hi Venkat - Thank you for providing additional info about your use case. I will inquire the APIM team for clarity but please note we typically don't share any specific timeframe for upcoming services and features on social channels.

Presently speaking though, the operations described by the Security Requirements Object are achieved by implementations of authentication policies that can be applied at the scope of your choosing (operation, all operations, Product, etc) in APIM. For automation, I believe that the API Management DevOps Resource Kit can help in that front -- if you have a dire need, this might be the way to achieve automation of any APIM resources.

UPDATE: APIM team confirmed that, as of this writing, there are no plans to support this feature yet. Please consider submitting a new feature request here & upvote an existing one if one already exists: https://feedback.azure.com/

Share via

Azure APIM - Support to OpenAPI Security Requirement Object

1 answer

Your answer