Difference between revisions of "OAuth for MyProxy GetProxy Endpoint"

From PDP/Grid Wiki
Jump to navigationJump to search
(typos)
(removed AuthZ Basic header part / reformulated GetProxy & MyProxy ca mode warning)
Line 19: Line 19:
 
|-
 
|-
 
| style="width: 25%;" | client_id
 
| style="width: 25%;" | client_id
| style="width: 33%;" |REQUIRED if not provided in <br />HTTP Basic Authorization header
+
| style="width: 33%;" |REQUIRED
 
| The client identifier issued at registration time.
 
| The client identifier issued at registration time.
  
 
|-
 
|-
 
| style="width: 25%;" |client_secret
 
| style="width: 25%;" |client_secret
| style="width: 33%;" |REQUIRED if not provided in <br />HTTP Basic Authorization header
+
| style="width: 33%;" |REQUIRED
 
| The client secret issued at registration time.
 
| The client secret issued at registration time.
  
Line 152: Line 152:
 
==== Server ====
 
==== Server ====
  
The OA4MP Server has both GetCert and GetProxy Endpoints available at the same time, but the MyProxy Server in its backend can only be configured to return '''either''' EEC '''or''' Proxy Certificate. Therefore caution must be taken to only expose the GetProxy Endpoint in case the backend MyProxy is configured to issue Proxy Certificates, otherwise you will end up getting EEC from the GetProxy Endpoint instead of the desired proxy.
+
The OA4MP Server has both GetCert and GetProxy Endpoints available at the same time, but the MyProxy Server in its backend can only be configured to return '''either''' EEC '''or''' Proxy Certificate.  
  
'''Note:''' Do not use the GetProxy Endpoint when the backend MyProxy Server is configured as a CA issuing End Entity Certificates!
+
'''Note:''' Do NOT use the GetProxy Endpoint when the backend MyProxy Server is configured in [http://grid.ncsa.illinois.edu/myproxy/ca/ CA mode] issuing End Entity Certificates! You will end up receiving EEC from the GetProxy Endpoint.
  
 
The implementation of the GetProxy servlet is done in ''OA2ProxyServlet''. A successful GetProxy request will execute the following flow in the servlet:
 
The implementation of the GetProxy servlet is done in ''OA2ProxyServlet''. A successful GetProxy request will execute the following flow in the servlet:

Revision as of 14:45, 9 February 2016