Package org.forgerock.openig.fapi.resource

Class FapiResourceFilterChainHeaplet

java.lang.Object
org.forgerock.openig.heap.GenericHeaplet
org.forgerock.openig.fapi.FapiGenericHeaplet
org.forgerock.openig.fapi.resource.FapiResourceFilterChainHeaplet
All Implemented Interfaces:
Heaplet
public final class FapiResourceFilterChainHeaplet extends FapiGenericHeaplet
Filters chain that validates requests on resources server to make sure they are compliant with the following FAPI specifications: 
 {
    "type": "FapiResourceFilterChain",
    "config": {
      "clientCertificate" : Runtime Expression      [REQUIRED - A runtime expression which will yield the client TLS
                                                                certificate and is evaluated on EVERY request. ]
      "apiClientService"  : ApiClientService        [REQUIRED - Reference to an {@link ApiClientService}.]
      "clientIdClaim"     : String                  [OPTIONAL - The claim used to retrieve the client_id from the
                                                                access_token. Default is 'aud'.]
      "allowedGrantType"  : String                  [OPTIONAL - The {@code grant_type} allowed for the request.
                                                                Default is 'authorization_code'.]
    }
  }
 
 
 
 {
     "name": "fapiResourceFilterChain",
     "type": "FapiResourceFilterChain",
     "config": {
       "clientCertificate": "${pemCertificate(urlDecode(request.headers['ssl-client-cert'][0]))}",
       "apiClientService" : "apiClientService",
       "clientIdClaim" : "aud",
       "allowedGrantType" : "client_credentials"
     }
 }