Package org.forgerock.openig.fapi.authorization.par

Class FapiParFilterChainHeaplet

java.lang.Object
org.forgerock.openig.heap.GenericHeaplet
org.forgerock.openig.fapi.FapiGenericHeaplet
org.forgerock.openig.fapi.authorization.par.FapiParFilterChainHeaplet
All Implemented Interfaces:
Heaplet
public final class FapiParFilterChainHeaplet extends FapiGenericHeaplet
Filters chain that validates PAR requests to make sure that they will produce OAuth2.0 clients that are compliant with the following FAPI specifications:

This filter is intended to front filter(s) rejecting requests that would result in an OAuth2 client being created which did not conform to the FAPI spec. 

 {
    "type": "FapiParFilterChain",
    "config": {
      "forwardedHost"       : String               [REQUIRED - The forwarded host added to the endpoint request. ]
      "clientCertificate"   : Runtime Expression   [REQUIRED - A runtime expression which will yield the client TLS
                                                               certificate and is evaluated on EVERY request. ]
      "auditService"      : AuditService           [OPTIONAL - Reference to a {@link AuditService}]
      "apiClientService"  : ApiClientService       [REQUIRED - Reference to a {@link ApiClientService}.]
    }
  }
 
 
 
 {
    "name": "fapiParFilterChain",
    "type": "FapiParFilterChain",
    "config": {
       "forwardedHost" : "&{as.fqdn}",
       "clientCertificate": "${pemCertificate(urlDecode(request.headers['ssl-client-cert'][0]))}",
       "auditService" : "auditService",
       "apiClientService" : "apiClientService"
    }
 }