{
"heap": [
{
"name": "SystemAndEnvSecretStore-1",
"type": "SystemAndEnvSecretStore"
},
{
"name": "AuthenticatedRegistrationHandler-1",
"type": "Chain",
"config": {
"filters": [
{
"name": "ClientSecretBasicAuthenticationFilter-1",
"type": "ClientSecretBasicAuthenticationFilter",
"config": {
"clientId": "oidc_client",
"clientSecretId": "oidc.secret.id",
"secretsProvider": "SystemAndEnvSecretStore-1"
}
}
],
"handler": "ForgeRockClientHandler"
}
},
{
"name": "openam",
"type": "ClientRegistration",
"config": {
"clientId": "oidc_client",
"issuer": {
"name": "am_issuer",
"type": "Issuer",
"config": {
"wellKnownEndpoint": "http://am.example.com:8088/openam/oauth2/.well-known/openid-configuration"
}
},
"scopes": [
"openid",
"profile",
"email"
],
"authenticatedRegistrationHandler": "AuthenticatedRegistrationHandler-1"
}
},
{
"name": "idcloud",
"type": "ClientRegistration",
"config": {
"clientId": "oidc_client",
"issuer": {
"name": "idc_issuer",
"type": "Issuer",
"config": {
"wellKnownEndpoint": "&{amInstanceUrl}/oauth2/realms/alpha/.well-known/openid-configuration"
}
},
"scopes": [
"openid",
"profile",
"email"
],
"authenticatedRegistrationHandler": "AuthenticatedRegistrationHandler-1"
}
},
{
"name": "NascarPage",
"type": "StaticResponseHandler",
"config": {
"status": 200,
"headers": {
"Content-Type": [ "text/html; charset=UTF-8" ]
},
"entity": [
"",
" ",
" Access Management login
",
" Identity Cloud login
",
" ",
""
]
}
}
],
"name": "07-openid-nascar",
"baseURI": "https://app.example.com:8444",
"condition": "${find(request.uri.path, '^/home/id_token')}",
"properties": {
"amInstanceUrl": "https://myTenant.forgeblocks.com/am"
},
"handler": {
"type": "Chain",
"config": {
"filters": [
{
"type": "AuthorizationCodeOAuth2ClientFilter",
"config": {
"clientEndpoint": "/home/id_token",
"failureHandler": {
"type": "StaticResponseHandler",
"config": {
"comment": "Trivial failure handler for debugging only",
"status": 500,
"headers": {
"Content-Type": [ "text/plain; charset=UTF-8" ]
},
"entity": "${contexts.oauth2Failure.error}: ${contexts.oauth2Failure.description}"
}
},
"loginHandler": "NascarPage",
"registrations": [ "openam", "idcloud" ],
"requireHttps": false,
"cacheExpiration": "disabled"
}
}
],
"handler": "ReverseProxyHandler"
}
}
}