Hello,

When you configure an OpenID URL and switch the authentication method to "API Key" or "API Key + User Key," 3scale still attempts to connect to the OpenID URL, even though a different authentication method is selected.

We discovered this issue due to a misconfiguration where an OpenID URL was entered with a leading space, causing the APIcast in production to fail with a CrashLoopBackOff. After changing the authentication method to "API Key," the error persisted. It appears that 3scale does not validate the chosen authentication method but instead checks whether the OpenID URL is configured.

Thank you very much,

David Fonseca