← Back to plugin index

OAuth 2.0 Access Token Ticket Decoder
Description
Decodes an OAuth 2.0 Access Token to a ticket containing the username and roles. This plugin can only be used within the Loginapp.
Type name
OAuth2AccessTokenDecoder
Class
com.airlock.iam.login.app.application.configuration.oauth.OAuth2AccessTokenDecoderConfig
May be used by
Admin SSO Ticket Request Authentication HTTP Header Token Extractor (as SSO Credential) Representation SSO Ticket Identifying Step SSO Ticket Authentication Step SSO Ticket Request Authentication
License-Tags
OAuthServer
Properties
OAuth 2.0 Authorization Server Reference (authorizationServerReference)
Description
The unique identifier of the Authorization Server.
This must reference an Authorization Server in the top-level OAuth 2.0 Settings of the Loginapp.
Attributes
Plugin-Link
Mandatory
Assignable plugins
OAuth 2.0 Authorization Server Identifier
Add Scopes As Roles (addScopesAsRoles)
Description

Controls whether the Access Token's scopes are added as roles to the authenticated user.

Attributes
Boolean
Optional
Default value
true
YAML Template (with default values) 

type: OAuth2AccessTokenDecoder
id: OAuth2AccessTokenDecoder-xxxxxx
displayName: 
comment: 
properties:
  addScopesAsRoles: true
  authorizationServerReference: