Difference between revisions of "OAuth for MyProxy GetProxy Endpoint"
From PDP/Grid Wiki
Jump to navigationJump to search (typos) |
(removed AuthZ Basic header part / reformulated GetProxy & MyProxy ca mode warning) |
||
Line 19: | Line 19: | ||
|- | |- | ||
| style="width: 25%;" | client_id | | style="width: 25%;" | client_id | ||
− | | style="width: 33%;" |REQUIRED | + | | style="width: 33%;" |REQUIRED |
| The client identifier issued at registration time. | | The client identifier issued at registration time. | ||
|- | |- | ||
| style="width: 25%;" |client_secret | | style="width: 25%;" |client_secret | ||
− | | style="width: 33%;" |REQUIRED | + | | style="width: 33%;" |REQUIRED |
| The client secret issued at registration time. | | The client secret issued at registration time. | ||
Line 152: | Line 152: | ||
==== Server ==== | ==== Server ==== | ||
− | The OA4MP Server has both GetCert and GetProxy Endpoints available at the same time, but the MyProxy Server in its backend can only be configured to return '''either''' EEC '''or''' Proxy Certificate | + | The OA4MP Server has both GetCert and GetProxy Endpoints available at the same time, but the MyProxy Server in its backend can only be configured to return '''either''' EEC '''or''' Proxy Certificate. |
− | '''Note:''' Do | + | '''Note:''' Do NOT use the GetProxy Endpoint when the backend MyProxy Server is configured in [http://grid.ncsa.illinois.edu/myproxy/ca/ CA mode] issuing End Entity Certificates! You will end up receiving EEC from the GetProxy Endpoint. |
The implementation of the GetProxy servlet is done in ''OA2ProxyServlet''. A successful GetProxy request will execute the following flow in the servlet: | The implementation of the GetProxy servlet is done in ''OA2ProxyServlet''. A successful GetProxy request will execute the following flow in the servlet: |