{"type":"doc","content":[{"type":"extension","attrs":{"layout":"default","extensionType":"com.atlassian.confluence.macro.core","extensionKey":"toc","parameters":{"macroParams":{"style":{"value":"none"}},"macroMetadata":{"macroId":{"value":"31804dfe-1b57-463b-b373-4111dea28266"},"schemaVersion":{"value":"1"},"title":"Table of Contents"}},"localId":"fb327c68-2481-46c8-902f-c79987faef64"}},{"type":"heading","attrs":{"level":2},"content":[{"text":"Overview","type":"text"}]},{"type":"paragraph","content":[{"text":"The connection routing component allows CDCM to connect to external systems using different authentication mechanisms. The supported authentication mechanisms are:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"OAuth 2.0 ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"OAuth 1.0a","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Fixed headers (e.g. Basic Auth)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Forwarded headers","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Description","type":"text"}]},{"type":"paragraph","content":[{"text":"CDCM often interacts with various external systems in an infrastructure. For example, a server-side guard JavaScript may call an external system while verifying that a concept may be saved, or CDCMs creates a UI for the selection of a work product reference by accessing the REST API of Storage Location. These calls to external systems may require different forms of authentication. It is not safe to assume that all external systems may be authenticated using the authenticated users bear token obtained from the customer’s identity provider (IDP hereafter); some system may not be directly integrated with the customers IDP or may not support REST calls using the IDP’s bearer token (e.g. IBM ELM). Also for some external systems it may be desirable to authenticate with a Service Principal (aka technical user).","type":"text"}]},{"type":"paragraph","content":[{"text":"The Connection Routing feature configures the authentication calls to all external systems. For each outbound call to an external system CDCM consults the ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":" ","type":"text","marks":[{"type":"em"}]},{"text":"file to determine how this call should be authenticated.","type":"text"}]},{"type":"paragraph","content":[{"text":"Connection routing enables the user to connect to external systems like IBM ELM or CodeBeamer using various authentication mechanisms. Authentication depends on the external system. IBM ELM uses OAuth 1.0a, while Codebeamer supports OAuth 2.0. Connection routing allows communication to CodeBeamer using OAuth 2.0, while communicating with IBM ELM using OAuth 1.0a in parallel. Connection routing maintains multiple authentications to different external systems and chooses the right authentication mechanisms for external server calls based on their URIs.","type":"text"}]},{"type":"blockquote","content":[{"type":"paragraph","content":[{"text":"By default all outgoing calls to external systems are authenticated using the logged in user’s bear token obtained from the IDP.","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Usage","type":"text"}]},{"type":"paragraph","content":[{"text":"Connection routing let’s you define the type of authentication mechanism, based on a set of URIs with ant paths. An ant path supports optional wildcards. Connection routing will choose the authentication mechanism based on matching ant paths. The connection routing configuration file ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":" let’s you define a list of external server connections","type":"text"}]},{"type":"codeBlock","attrs":{"language":"yaml"},"content":[{"text":"connection-routing:\n -\n cdcm-connection-id: elm\n methods: ALL\n root-uris:\n - https://my.elm.host1/**\n - https://my.elm.host2/** ","type":"text"}]},{"type":"paragraph","content":[{"text":"and a list of connections, that define the authentication mechanism used, based on the common key (in this example ","type":"text"},{"text":"elm","type":"text","marks":[{"type":"code"}]},{"text":"):","type":"text"}]},{"type":"codeBlock","attrs":{"language":"yaml"},"content":[{"text":" elm:\n connection-type: OAUTH10A\n consumer-key: my-consumer-key\n consumer-secret: my-consumer-secret\n root-services: https://example.com/oauth10a/rootservices\n service-principal-enabled: false","type":"text"}]},{"type":"paragraph","content":[{"text":"If an outgoing Http request matches ","type":"text"},{"text":"https://my.elm.host1/**","type":"text","marks":[{"type":"code"}]},{"text":" connection routing will use OAuth 1.0a for authentication with the external server.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Supported Authentication Mechanisms","type":"text"}]},{"type":"paragraph","content":[{"text":"The supported authentication mechanism are OAuth 2.0, OAuth1.0a, Fixed Headers and Bearer Token Forward. They operate in different ways and require different ","type":"text"},{"text":"connections","type":"text","marks":[{"type":"code"}]},{"text":" settings","type":"text","marks":[{"type":"link","attrs":{"href":"https://smartfacts.atlassian.net/wiki/spaces/SPD/pages/546996228/Connection+Routing#Connections-Table"}}]},{"text":" in the ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":" file.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"OAuth 2.0 using a Authorization Code","type":"text"}]},{"type":"paragraph","content":[{"text":"This uses the standard OAuth 2.0 Flow using the Authorization Grant ","type":"text"},{"text":"Authorization Code","type":"text","marks":[{"type":"code"}]},{"text":" as described in ","type":"text"},{"text":"RFC6749","type":"text","marks":[{"type":"link","attrs":{"href":"https://datatracker.ietf.org/doc/html/rfc6749#section-1.3.1"}}]},{"text":". The user authenticates using the configured IDP and connection routing will use the resulting token for outgoing connections to the external servers.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"OAuth 2.0 using Client Credentials","type":"text"}]},{"type":"paragraph","content":[{"text":"This uses the the standard OAuth 2.0 Flow using the Authorization Grant ","type":"text"},{"text":"Client Credentials","type":"text","marks":[{"type":"code"}]},{"text":" as described in ","type":"text"},{"text":"RFC6749","type":"text","marks":[{"type":"link","attrs":{"href":"https://datatracker.ietf.org/doc/html/rfc6749#section-1.3.4"}}]},{"text":". This is a “technical-user” authentication flow as connection routing only requires the ","type":"text"},{"text":"client-id","type":"text","marks":[{"type":"code"}]},{"text":" and the ","type":"text"},{"text":"client-secret","type":"text","marks":[{"type":"code"}]},{"text":" to authenticate with the external servers. No additional user authentication is required.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"OAuth 1.0a Standard Flow","type":"text"}]},{"type":"paragraph","content":[{"text":"This uses the standard OAuth 1.0a Flow as described in the ","type":"text"},{"text":"OAuth 1.0a specification","type":"text","marks":[{"type":"link","attrs":{"href":"https://oauth.net/core/1.0a/"}}]},{"text":". The user authenticates using the configured OAuth 1.0a server and connection routing will use the resulting token for outgoing connections to the external servers.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"OAuth 1.0a Technical User Flow","type":"text"}]},{"type":"paragraph","content":[{"text":"OAuth 1.0a has no notion of a technical user authentication flow. To implement a technical user flow on top of OAuth 1.0a IBM ELM among other systems allow authentication using the ","type":"text"},{"text":"consumer-secret","type":"text","marks":[{"type":"code"}]},{"text":" and the ","type":"text"},{"text":"consumer-key","type":"text","marks":[{"type":"code"}]},{"text":". This is comparable to OAuth 2.0 using the Authorization Grant ","type":"text"},{"text":"Authorization Code","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Fixed Header","type":"text"}]},{"type":"paragraph","content":[{"text":"Fixed header authentication flow takes a set of headers and values and adds them to outgoing requests. This can be used to authenticate via ","type":"text"},{"text":"Http Basic Auth","type":"text","marks":[{"type":"link","attrs":{"href":"https://datatracker.ietf.org/doc/html/rfc7617"}}]},{"text":" by sending an ","type":"text"},{"text":"Authorization","type":"text","marks":[{"type":"code"}]},{"text":" header with Base64 encoded credentials. This is not limited to the ","type":"text"},{"text":"Authorization","type":"text","marks":[{"type":"code"}]},{"text":" header. Arbitrary headers and values and therefore even cookies can be set using this authentication flow.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Bearer Token Forward","type":"text"}]},{"type":"paragraph","content":[{"text":"This authentication flow uses the bearer token in the ","type":"text"},{"text":"Authorization","type":"text","marks":[{"type":"code"}]},{"text":" header in the incoming request for the request to the external server. This could e.g. be a JWT or an OAuth2.0 token.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Connections via the Gateway Proxy","type":"text"}]},{"type":"paragraph","content":[{"text":"Connections to external servers can be established via the ","type":"text"},{"text":"Gateway Proxy","type":"text","marks":[{"type":"link","attrs":{"href":"https://smartfacts.atlassian.net/wiki/spaces/SPD/pages/555679750"}}]},{"text":". Simply provide the Gateway URI and the external URIs, that should be proxied in ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"If the Proxy itself requires authentication, it can be referenced in the Connections Configuration and the Connection Routing Configuration in the same way that authentication to external servers is configured. ","type":"text"}]},{"type":"paragraph","content":[{"text":"See ","type":"text"},{"text":"Example Configuration","type":"text","marks":[{"type":"link","attrs":{"href":"https://smartfacts.atlassian.net/wiki/spaces/SPD/pages/546996228/Connection+Routing#Example-connection-routing.yml"}}]}]},{"type":"paragraph","content":[{"text":"See ","type":"text"},{"text":"Reference","type":"text","marks":[{"type":"link","attrs":{"href":"https://smartfacts.atlassian.net/wiki/spaces/SPD/pages/546996228/Connection+Routing#Gateway-Proxy"}}]},{"text":" ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Configuration","type":"text"}]},{"type":"paragraph","content":[{"text":"Connection routing is configured using the file ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":". This file has to be put in the application’s working directory.","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Kubernetes","type":"text"}]},{"type":"paragraph","content":[{"text":"The ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":" can be placed into a kubernetes secret, and mounted into the CDCM container. The name of this secret is \"","type":"text"},{"text":"cdcm-connection-routing","type":"text","marks":[{"type":"strong"}]},{"text":"\", the value of is the ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":" file.","type":"text"}]},{"type":"paragraph","content":[{"text":"To integrate the connection-routing.yml file into your CDCM deployment, you need to create a secret called “cdcm-connection-routing” in the namespace of your cdcm deployment.","type":"text"}]},{"type":"paragraph","content":[{"text":"There are two ways to do this:","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Use ","type":"text"},{"text":"kubectl","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"codeBlock","content":[{"text":"kubectl create secret generic cdcm-connection-routing --from-file=connection-routing.yml=./connection-routing.yml -n cdcm","type":"text"}]},{"type":"orderedList","attrs":{"order":2},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"f the secret has to be created manually or from a vault, use this template:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"apiVersion: v1\ndata:\n connection-routing.yml: \nkind: Secret\nmetadata:\n name: cdcm-connection-routing\n namespace: cdcm\ntype: Opaque","type":"text"}]},{"type":"paragraph","content":[{"text":"Save the file as ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":" and apply it with:","type":"text"}]},{"type":"codeBlock","content":[{"text":"kubectl apply -f connection-routing.yml -n ","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Example ","type":"text"},{"text":"connection-routing.yml","type":"text","marks":[{"type":"code"}]},{"text":" ","type":"text"}]},{"type":"paragraph","content":[{"text":"This examples defines various external servers and their required authentication mechanisms and a Gateway Proxy configuration. Connections to the Gateway Proxy in this example are authenticated using OAuth 2.0.","type":"text"}]},{"type":"codeBlock","content":[{"text":"gateway-proxy:\n uri: http://gateway-proxy.host/proxy/stream\n root-uris:\n - https://elmdemo.smartfacts.com:9443/**\n\nconnection-routing:\n - cdcm-connection-id: proxy-oauth2\n methods: ALL\n root-uris:\n - http://gateway-proxy.host/proxy/**\n -\n cdcm-connection-id: forward-bearer\n methods: ALL\n root-uris:\n - https://host1/**\n - https://host2/data/**\n -\n cdcm-connection-id: oauth20\n methods: GET,POST\n root-uris:\n - https://host3:4552/v1.0/**\n\n -\n cdcm-connection-id: oauth10a\n methods: ALL\n root-uris:\n - https://host4/oauth10a/**\n\n -\n cdcm-connection-id: fixed-headers\n methods: ALL\n root-uris:\n - https://host5:8080/**\n\nconnections:\n forward-bearer:\n connection-type: BEARER_TOKEN_FORWARD\n proxy-oauth20:\n connection-type: OAUTH20\n client-id: \n client-secret: \n user-info-uri: \n scopes: openid, profile, email, Sites.Read.All\n authorization-uri: \n token-uri: \n oauth20:\n connection-type: OAUTH20\n client-id: \n client-secret: \n user-info-uri: \n scopes: openid, profile, email, Sites.Read.All\n authorization-uri: \n token-uri: \n oauth10a:\n connection-type: OAUTH10A\n consumer-key: \n consumer-secret: \n root-services: \n service-principal-enabled: false\n fixed-headers:\n connection-type: FIXED_HEADERS\n headers:\n Authorization: \n X-Custom-Auth-Header: \n","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Reference","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Gateway Proxy","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"4ee0efa0-ac8b-458f-968b-21ff008812ef"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Key","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"uri","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The URI of the gateway proxy stream endpoint.","type":"text"}]},{"type":"paragraph","content":[{"text":"E.g. ","type":"text"},{"text":"http://gateway-proxy.host/proxy/stream","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"root-uris","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"A list of URIs that can use ant path notation as described in the ","type":"text"},{"text":"Spring Framework documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.spring.io/spring-framework/docs/current/javadoc-api/org/springframework/util/AntPathMatcher.html"}}]},{"text":".","type":"text"},{"type":"hardBreak"},{"text":"Connections to URIs matching one of the ","type":"text"},{"text":"root-uris","type":"text","marks":[{"type":"code"}]},{"text":"will be established via the ","type":"text"},{"text":"Gateway Proxy","type":"text","marks":[{"type":"link","attrs":{"href":"https://smartfacts.atlassian.net/wiki/spaces/SPD/pages/555679750"}}]}]}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Configuration Routing Table","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"478eb9f5-72fe-42d1-9014-2a77864f2557"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Key","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"cdcm-connection-id","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The shared key that links an entry in the ","type":"text"},{"text":"connection-routing","type":"text","marks":[{"type":"code"}]},{"text":" table to an entry in the ","type":"text"},{"text":"connections","type":"text","marks":[{"type":"code"}]},{"text":" table","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"methods","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"A comma-separated set of Http method names for which connection routing should match the ","type":"text"},{"text":"root-uris","type":"text","marks":[{"type":"code"}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"Possible values are ","type":"text"},{"text":"GET","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"POST","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"PUT","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"DELETE","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"OPTIONS","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"PATCH","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"ALL","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"root-uris","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"A list of URIs that can use ant path notation as described in the ","type":"text"},{"text":"Spring Framework documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://docs.spring.io/spring-framework/docs/current/javadoc-api/org/springframework/util/AntPathMatcher.html"}}]},{"text":".","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Connections Table","type":"text"}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Common entries","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"5992ec51-6d8b-4b58-92e1-b9c77c7e4048"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Key","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Descripton","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"connection-type","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The type of the authentication mechanism to use for this connection.","type":"text"}]},{"type":"paragraph","content":[{"text":"Possible values are ","type":"text"},{"text":"OAUTH20","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"OAUTH10A","type":"text","marks":[{"type":"code"}]},{"text":", ","type":"text"},{"text":"FIXED_HEADERS","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"BEARER_TOKEN_FORWARD","type":"text","marks":[{"type":"code"}]}]}]}]}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"OAuth 2.0","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"f4f6a3e0-e5cf-43d7-b565-640ff1627c26"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Key","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"client-id","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The client id as given in the OAuth 2.0 IDP.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"client-secret","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The client secret as given by the OAuth 2.0 IDP.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"user-info-uri","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The user info uri of the OAuth 2.0 IDP","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"authorization-uri","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The authorization uri of the OAuth 2.0 IDP","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"token-uri","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The token uri of the OAuth 2.0 IDP","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"scopes","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The scopes for this client as configured in the OAuth2.0 IDP","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"OAuth 1.0a","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"a575c932-4a58-4170-9c15-549ae8648fba"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Key","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Value","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"consumer-key","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The consumer key as given by the OAuth 1.0a Server","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"consumer-secret","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The consumer secret as given by the OAuth 1.0a Server","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"root-services","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"The root-services uri of the OAuth 1.0a Server","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service-principal-enabled","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Controls if connection routing uses a technical user or initiates a normal authentication flow.","type":"text"},{"type":"hardBreak"},{"text":"Possible values are: ","type":"text"},{"text":"true","type":"text","marks":[{"type":"code"}]},{"text":" and ","type":"text"},{"text":"false","type":"text","marks":[{"type":"code"}]},{"type":"hardBreak"},{"text":"If set to ","type":"text"},{"text":"true","type":"text","marks":[{"type":"code"}]},{"text":" a technical user will be used, if set to ","type":"text"},{"text":"false","type":"text","marks":[{"type":"code"}]},{"text":" the normal flow is initiated.","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Fixed Headers","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"be4ac462-51ba-4613-8a7c-cf4864195728"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Key","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Value","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"headers","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"A map of header names to header values. Connection routing will add all headers in the outgoing requests to the corresponding external servers.","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":5},"content":[{"text":"Bearer Token Forward","type":"text"}]},{"type":"paragraph","content":[{"text":"This authentication mechanism has no additional configuration","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Links","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"RFC 6749: The OAuth 2.0 Authorization Framework","type":"text","marks":[{"type":"link","attrs":{"href":"https://datatracker.ietf.org/doc/html/rfc6749"}}]},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"OAuth 1.0a Specifications","type":"text","marks":[{"type":"link","attrs":{"href":"https://oauth.net/core/1.0a/"}}]},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"RFC 7617: The 'Basic' HTTP Authentication Scheme","type":"text","marks":[{"type":"link","attrs":{"href":"https://datatracker.ietf.org/doc/html/rfc7617"}}]},{"text":" ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Gateway Proxy","type":"text","marks":[{"type":"link","attrs":{"href":"https://smartfacts.atlassian.net/wiki/spaces/SPD/pages/555679750"}}]}]}]}]},{"type":"paragraph"}],"version":1}

Browser not supported