/AWS1/CL_TCECUSTOMJWTAUTHRCONF¶
Configuration for a custom JWT authorizer that validates inbound bearer tokens against an OpenID Connect identity provider.
CONSTRUCTOR¶
IMPORTING¶
Required arguments:¶
iv_discoveryurl TYPE /AWS1/TCEDISCOVERYURL /AWS1/TCEDISCOVERYURL¶
The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
Optional arguments:¶
it_allowedaudience TYPE /AWS1/CL_TCEALLOWEDAUDNCLIST_W=>TT_ALLOWEDAUDIENCELIST TT_ALLOWEDAUDIENCELIST¶
The audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
it_allowedclients TYPE /AWS1/CL_TCEALWDCLIENTSLIST_W=>TT_ALLOWEDCLIENTSLIST TT_ALLOWEDCLIENTSLIST¶
The client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
it_allowedscopes TYPE /AWS1/CL_TCEALWDSCOPESTYPE_W=>TT_ALLOWEDSCOPESTYPE TT_ALLOWEDSCOPESTYPE¶
The scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
it_customclaims TYPE /AWS1/CL_TCECUSTCLAIMVLDTNTYPE=>TT_CUSTOMCLAIMVALIDATIONSTYPE TT_CUSTOMCLAIMVALIDATIONSTYPE¶
Additional custom claim validations applied to the inbound JWT.
io_privateendpoint TYPE REF TO /AWS1/CL_TCEPRIVATEENDPOINT /AWS1/CL_TCEPRIVATEENDPOINT¶
The private endpoint used to reach the identity provider's discovery URL over a private network path.
it_privateendpointoverrides TYPE /AWS1/CL_TCEPRIVATEENDPTOVRD=>TT_PRIVATEENDPOINTOVERRIDES TT_PRIVATEENDPOINTOVERRIDES¶
Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints.
Queryable Attributes¶
discoveryUrl¶
The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_DISCOVERYURL() |
Getter for DISCOVERYURL, with configurable default |
ASK_DISCOVERYURL() |
Getter for DISCOVERYURL w/ exceptions if field has no value |
HAS_DISCOVERYURL() |
Determine if DISCOVERYURL has a value |
allowedAudience¶
The audience values accepted during JWT validation. A token is rejected if none of its audience claims match.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ALLOWEDAUDIENCE() |
Getter for ALLOWEDAUDIENCE, with configurable default |
ASK_ALLOWEDAUDIENCE() |
Getter for ALLOWEDAUDIENCE w/ exceptions if field has no val |
HAS_ALLOWEDAUDIENCE() |
Determine if ALLOWEDAUDIENCE has a value |
allowedClients¶
The client identifiers accepted during JWT validation. A token is rejected if it was not issued to one of these clients.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ALLOWEDCLIENTS() |
Getter for ALLOWEDCLIENTS, with configurable default |
ASK_ALLOWEDCLIENTS() |
Getter for ALLOWEDCLIENTS w/ exceptions if field has no valu |
HAS_ALLOWEDCLIENTS() |
Determine if ALLOWEDCLIENTS has a value |
allowedScopes¶
The scopes accepted during JWT validation. A token is rejected if it does not carry one of these scopes.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_ALLOWEDSCOPES() |
Getter for ALLOWEDSCOPES, with configurable default |
ASK_ALLOWEDSCOPES() |
Getter for ALLOWEDSCOPES w/ exceptions if field has no value |
HAS_ALLOWEDSCOPES() |
Determine if ALLOWEDSCOPES has a value |
customClaims¶
Additional custom claim validations applied to the inbound JWT.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_CUSTOMCLAIMS() |
Getter for CUSTOMCLAIMS, with configurable default |
ASK_CUSTOMCLAIMS() |
Getter for CUSTOMCLAIMS w/ exceptions if field has no value |
HAS_CUSTOMCLAIMS() |
Determine if CUSTOMCLAIMS has a value |
privateEndpoint¶
The private endpoint used to reach the identity provider's discovery URL over a private network path.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_PRIVATEENDPOINT() |
Getter for PRIVATEENDPOINT |
privateEndpointOverrides¶
Per-domain private endpoint overrides that route specific identity provider domains through distinct private endpoints.
Accessible with the following methods¶
| Method | Description |
|---|---|
GET_PRIVATEENDPOINTOVERRIDES() |
Getter for PRIVATEENDPOINTOVERRIDES, with configurable defau |
ASK_PRIVATEENDPOINTOVERRIDES() |
Getter for PRIVATEENDPOINTOVERRIDES w/ exceptions if field h |
HAS_PRIVATEENDPOINTOVERRIDES() |
Determine if PRIVATEENDPOINTOVERRIDES has a value |