Token Revocation Notification

Token Revocation Notification Flow in WSO2 API Manager v3.2.0

Athiththan Kathirgamasegaran
2 min readApr 24, 2021

Greetings Everyone!!! πŸ‘‹

In this medium, I will be presenting you an info-graphic illustrating the Token Revocation Notification process flow of WSO2 API Manager v3.2.0.

In a brief, API Manager v3.2.0 provides a new feature to revoke the Token caches in the Gateway node using Event-Driven architecture. Once the token is revoked by the Key Manager component, an event is published to all subscribed Gateway nodes through the Traffic Manager component to clear the Token caches and to store the Revoked tokens in a Revoked cache. This is to ensure that a revoked JWT token cannot be used again in the Gateway nodes.

You can find the high-quality SVG of the following infographic at StackCheats

Hope the presented illustration helps you to understand the flow of Token Revocation and retrieval of revoked tokens during the server startup in WSO2 API Manager v3.2.0.

Give a shoutout to learn more …

Happy Stacking!!! 😎 πŸ‘Œ

--

--

Athiththan Kathirgamasegaran

@athiththan11 | GH:athiththan11 | Site Reliability Engineer@WSO2