When you create or edit a managed API, you can enable JSON web token authentication at the API level. You can use the JSON web token to authenticate the API and all its operations. Thus, you can avoid creating individual tokens for each API operation and can invoke the API and all its operations using a single token.

When you enable the API-level JSON web token authentication, the API-level authentication overrides the operational level authentication based on the confirmation that you provide in the confirmation dialog box. You can generate an API-level JSON web token in one of the following ways:

API Console
Managed APIs
Actions menu
Create Managed API
API Policies
Security
Authentication
JWT - JSON Web Token
.
API Console
Managed APIs
Actions menu
Edit Managed API
API Policies
Security
Authentication
JWT - JSON Web Token
.
API Console
Managed APIs
Actions menu
Test Managed API
API Policies
Security
Authentication
Generate New Token
.

To invoke the API, you must enter the API-level JSON web token that you generated for the API.

You can generate the API-level JSON web tokens for managed APIs in the active, shared, and deprecated states. However, if you reactivate a deactivated managed API, you can't use the same token that was generated when the managed API was active. You must generate a new token.