This is the custom handler that we can put in WSO2 APIM where it will alow you to send the half of access token in the header and other half in the cookie
1.) Build the project using maven
mvn clean install
-
Put the jar to the dropins folder in <APIM_HOME>/repository/components/dropins
-
Add the handler class to the <APIM_HOME>/repository/resources/api_templates/velocity_template.xml
<handler class="org.wso2.custom.authenticator.handler.CustomAPIAuthenticationHandler"/> ...... -
Restart the APIM. You should now try the API with harlf header and half cookie
-
How to test? - You can not try the requests using CURL, you need to use a UI client like POST-MAN to add the Cookie as "access_token"