This folder hosts an authentication extension to the Eclipse Dataspace Connector (EDC).
It allows to configure and build composite/stacked authentication services including the validation of JWT tokens versus public keys.
It allows to install authentication filters backed by those authentication services to various web service contexts.
The following is a list of configuration objects and properties that you might set in the corresponding mounted config files
SETTING | Required | Default/Example | Description |
---|---|---|---|
tractusx.auth. |
no | jwt | Introduces a new authentication filter |
tractusx.auth. |
yes, if jwt | https://keycloak.instance/auth/realms/REALM/protocol/openid-connect/certs | download url for public cert of REALM |
tractusx.auth. |
no | true | Whether the filter should be registered in the EDC list |
tractusx.auth. |
no, if jwt | true | Whether tokens should be checked for expiry |
tractusx.auth. |
no, if jwt | default | A list of paths in the token claims which should be checked upon existance |