← Back to plugin index

HTTP Instance Digest Verification
Description
Verifies the HTTP Instance Digest according to RFC 3230.
Type name
HttpInstanceDigestVerification
Class
com.airlock.iam.authentication.application.configuration.oneshot.HttpInstanceDigestVerificationConfig
May be used by
HTTP Signature Verification Credential Extractor
Properties
Allowed Algorithms (allowedAlgorithms)
Description
Allowed algorithms that the digest must use.
Attributes
Plugin-List
Mandatory
Assignable plugins
SHA-256 HTTP Instance Digest Algorithm SHA-512 HTTP Instance Digest Algorithm
Audit Logger (auditLogger)
Description
Enables logging of digest verification information. Successfully verified digests and request body contents will be logged. This allows to verify digests at a later point in time.

Security Warning: Request bodies often contain sensitive information and should therefore not be logged. If this feature is enabled, it is highly recommended that these logs are redirected to a special destination using the Logger Name.

Attributes
Plugin-Link
Optional
Assignable plugins
HTTP Signature Audit Logger
YAML Template (with default values) 

type: HttpInstanceDigestVerification
id: HttpInstanceDigestVerification-xxxxxx
displayName: 
comment: 
properties:
  allowedAlgorithms:
  auditLogger: