Details
-
Feature Request
-
Resolution: Fixed
-
L3 - Default
-
None
-
None
-
Not defined
Description
Problem Definition
User Story
As a user
I want authenticate API calls with a JWT Token
So that the scope of the token is also used to validate it
Use Cases
PM Notes (Customer requests, context, assumptions)
Solution Definition
Solution Ideas
Implement the audience validation for CCSM and Platform mode analogous to SaaS mode. This involves migrating the settings to the correct place in service-config.yaml as well
Instructions for testing:
- Generate a Jwt Token with an optimize Audience
- Start Optimize in Platform/CCSM Mode and provide that audience name with the environment variable CAMUNDA_OPTIMIZE_AUDIENCE or with the configuration$.api.audience
- Perform a public API request with that token and check that authentication was successful
- Start Optimize in Platform/CCSM mode and provide a fake audience name with the environment variable CAMUNDA_OPTIMIZE_AUDIENCE or with the configuration$.api.audience
- Perform a public API request with that token and check that authentication failed
mgm-controller-panel
This is the controller panel for Smart Panels app
Attachments
Issue Links
- is related to
-
-
- Done
-