Modifying custom parameter in Endpoint Security Configurations override the client_secret

[akila95fernando]

Description

When updating the Endpoint Security Configurations via publisher portal , if you do not explicitly set the client secret field it gets overwritten by ******** .

Which is causing the failure by sending an invalid encoded client_secret in Authorization header when invoking the token endpoint .

Steps to Reproduce

Create an API
Enable oauth2 protection for backend endpoint in publisher
Save and deploy
Again add a custom parameter in Endpoint Security Configurations
Save and deploy
This will override the original client secret as ********

Affected Component

APIM

Version

4.0.0

Environment Details (with versions)

No response

Relevant Log Output

No response

Related Issues

No response

Suggested Labels

No response