-
Notifications
You must be signed in to change notification settings - Fork 1
Discovery Routes
dreed12 edited this page Aug 7, 2023
·
6 revisions
Discovery routes include the following:
- 01 - Open Banking RS Metadata
- 02 - Open Banking AS Metadata
- 04 - Open Banking Authorize Endpoint
- 99 - OBIE AS General
- Protected system: Resource Server
- Resources protected by the route:
/discovery
- Filters chain:
Filter name | Type | Applies on | Description |
---|---|---|---|
UriPathRewriteFilter | OOTB | Response | Adjusts the inbound URL to the resource server base URL |
HeaderFilter | OOTB | Request | Adds host header to downstream request |
- Protected system: Identity Cloud or AM
- Resources protected by the route:
/.well-known/openid-configuration
- Filters chain:
Filter name | Type | Applies on | Description |
---|---|---|---|
ASWellKnownFilter | Scriptable | Response | Updates the AS well-known configuration returned by Identity Cloud or AM |
HeaderFilter | OOTB | Request | Sets host header for downstream request |
- Protected system: Identity Cloud or AM
- Resources protected by the route:
/am/oauth2/realms/root/realms/&{am.realm}/authorize
- Filters chain:
Filter name | Type | Applies on | Description |
---|---|---|---|
HeaderFilter | OOTB | Request | Sets host header for downstream request |
FapiAuthorizeRequestFilter | Scriptable | Request | Ensures authorize request object is FAPI compliant |
- Protected system: Identity Cloud or AM
- Resources protected by the route:
/am
- Filters chain:
Filter name | Type | Applies on | Description |
---|---|---|---|
HeaderFilter | OOTB | Request | Adds host header to downstream request |
-
The Secure API Gateway (SAPI-G) Documentation
- SAPI-G Implementation Status
- Understanding SAPI-G
- Deployment
- Protect Custom APIs using SAPI-G
- Testing
- Troubleshooting