To extract user attributes:

  1. Capture the header value assigned to the upstream_introspection_header parameter in the OIDC plugin configuration.
  2. Assign the header value to the location key in the jwt object of the API JSON file.

    API Security Enforcer (ASE) will extract the user information from the JWT.

  3. If upstream_introspection_header is not configured in the OIDC plugin, then complete the following configuration and assign x_introspection to the location key in the jwt object of the API JSON file: 
    http patch  :8001/plugins/$PLUGIN_ID config:=@patch.json
cat patch.json
{
  "upstream_introspection_header":  "x_introspection"
}

    The following is a snippet of JWT object from a sample API JSON file:

    "jwt": {
"location": "h:x_introspection",						
"username": "username",
"clientid": "client_id"
}

For more information on configuring the API JSON file, see Defining an API using API JSON configuration file in sideband mode.