connected system with oauth2 client credentials grant , Is explicit mention of authorisation header & token generation with a custom PM required?

We have an oauth2 authorisation with client Id , client Secret  & scope to connect to an api. We already have a connected system configured for this . This is working fine & we are getting expected response from api.

Traditionally in our organisation we have a process model per application  which runs every 60 mins which generates the token  & writes to the token table. This token from db is accessed and set in the the header of the request as Authorization: Bearer ******. But it seems our code is working even if that Authorization header is deleted from the integration. It seems the connected system is adding the Authorization header to the integration request and the process model to token generation is not required at all.

Does this a ring a bell ?

  Discussion posts and replies are publicly visible

Parents Reply Children
No Data