← Back to plugin index

Technical Client Database Repository
Description
Persists and loads technical clients and associated data from the configured data source.
Type name
TechClientRepository
Class
com.airlock.iam.techclient.application.configuration.TechClientRepositoryConfig
May be used by
OAuth 2.0 Persisted Clients NextGenPSD2 Certificate Authenticator Technical Clients Settings API Policy Service
License-Tags
TechClients
Properties
SQL Data Source (sqlDataSource)
Description
Defines how connections to the database are obtained.
Attributes
Plugin-Link
Mandatory
Assignable plugins
JDBC Connection Pool
Storage Encryption (storageEncryptionConfig)
Description
Defines how sensitive values are encrypted when stored on the database. This ensures that an adversary obtaining data from the database cannot read or modify sensitive values without knowing the secret for decryption.
Attributes
Plugin-Link
Mandatory
Assignable plugins
Storage Encryption Configuration
Log Queries (logQueries)
Description
Enable to log SQL queries (only effective if the log level is at least INFO). Attention: query values (including potentially sensitive data) will be logged as well.
Attributes
Boolean
Optional
Default value
false
Tenant ID (tenantId)
Description
The value which is used in queries related to technical clients to distinguish between different tenants.

If no value is configured, then 'no_tenant' is used as value on the database.

Attributes
String
Optional
Length <= 50
Validation RegEx: (?!no_tenant$).*
Example
customerA
Example
customerB
Cipher (cipher)
Description

Cipher to encrypt and decrypt sensitive values in the database.

This setting is deprecated and has been replaced by Storage Encryption. If set, this property was configured by an automatic configuration migration and should not be changed manually. The property takes precedence over Storage Encryption, which means that OAuth 2.0 client secrets will be encrypted / decrypted using this cipher for backward compatibility. Other secrets on the DB are not affected by this property.

To migrate from Cipher to Storage Encryption, encrypted data on the DB must be changed manually. Please contact Airlock Support for further guidelines.

Attributes
Plugin-Link
Optional
Assignable plugins
Password-based Encryption RSA Encryption Unsupported Encryption (to be replaced)
YAML Template (with default values) 

type: TechClientRepository
id: TechClientRepository-xxxxxx
displayName: 
comment: 
properties:
  cipher:
  logQueries: false
  sqlDataSource:
  storageEncryptionConfig:
  tenantId: