Default HTTP (8080) 07854a0de3db8f5849ecb6be3985c0f2 SSG_CONNECTOR Default HTTP (8080) true HTTP 8080 Policy download service SNMP Query service Ping service WS-Trust security token service WSDL download service Published service message input Default HTTPS (8443) 07854a0de3db8f5849ecb6be3985c0f3 SSG_CONNECTOR Default HTTPS (8443) true HTTPS 8443 Browser-based administration Built-in services Administrative access Published service message input Optional TLSv1 TLSv1.2 TLSv1.1 TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_RSA_WITH_AES_256_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDH_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384 true Root Node 0000000000000000ffffffffffffec76 FOLDER Root Node OTK/ 07854a0de3db8f5849ecb6be3985c0c4 FOLDER OTK OTK/Persistence-JDBC/ 07854a0de3db8f5849ecb6be3985c0c5 FOLDER Persistence-JDBC OTK/Persistence-JDBC/session/ 07854a0de3db8f5849ecb6be3985c0c6 FOLDER session OTK/Persistence-JDBC/maintenance/ 07854a0de3db8f5849ecb6be3985c0c7 FOLDER maintenance OTK/Persistence-JDBC/manager/ 07854a0de3db8f5849ecb6be3985c0c8 FOLDER manager OTK/Persistence-JDBC/manager/token/ 07854a0de3db8f5849ecb6be3985c0c9 FOLDER token OTK/Persistence-JDBC/manager/client/ 07854a0de3db8f5849ecb6be3985c0ca FOLDER client OTK/Persistence-JDBC/token/ 07854a0de3db8f5849ecb6be3985c0cb FOLDER token OTK/Persistence-JDBC/client/ 07854a0de3db8f5849ecb6be3985c0cc FOLDER client OTK/Persistence-JDBC/id_token/ 07854a0de3db8f5849ecb6be3985c0cd FOLDER id_token OTK/Persistence-JDBC/maintenance/OTK Database Maintenance - token 07854a0de3db8f5849ecb6be3985c0b8 POLICY OTK Database Maintenance - token Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Deletes all expired tokens from oauth_token and oauth_initiate"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete expired temporary tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_initiate WHERE expiration < ${now.seconds}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete all entries with expired refresh tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE rtoken IS NOT NULL AND rexpiration < ${now.seconds}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete expired access tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE expiration < ${now.seconds} AND rtoken is null]]></L7p:SqlQuery> </L7p:JdbcQuery> </wsp:All> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Could not delete expired tokens from the token store"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/client/OTK Client DB Persist 07854a0de3db8f5849ecb6be3985c0be POLICY OTK Client DB Persist Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy persists an oauth client"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="client|client_key|client_and_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unknown persist_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="operation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for a valid persistence type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client_and_key"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_and_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${type}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b418ebf0-da69-401d-a6c6-249758b4734c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientOptionalValues"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_client (client_ident, name, description, organization, registered_by, type, created, custom) VALUES (${client_ident},${client_name},${description},${org},${registered_by},${type},${now.seconds},${client_custom})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4afe741a-3628-42a3-9d45-73a1d38d7020"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientKeyOptionalValues"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="persist"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_client_key (client_key, secret, scope, callback, environment, expiration, status, client_ident, created, created_by, client_name, custom, serviceIds, accountPlanMappingIds) VALUES (${client_key},${client_secret},${scope},${callback},${environment},${expiration},${client_status},${client_ident},${now.seconds},${registered_by},${client_name},${key_custom},${service_ids},${account_plan_mapping_ids})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_and_client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client including a client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client_key"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4afe741a-3628-42a3-9d45-73a1d38d7020"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientKeyOptionalValues"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_name"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the client_name"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:NamingMap mapValue="included"> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue="client_name"/> </L7p:entry> </L7p:NamingMap> <L7p:SqlQuery stringValue="SELECT name FROM oauth_client WHERE client_ident = ${client_ident}"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkuY2xpZW50X25hbWV9"/> <L7p:VariableToSet stringValue="jdbcQuery.client_name"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jdbcQuery.client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="verify"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="was the name found?"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="persist"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_client_key (client_key, secret, scope, callback, environment, expiration, status, client_ident, created, created_by, client_name, custom, serviceIds, accountPlanMappingIds) VALUES (${client_key},${client_secret},${scope},${callback},${environment},${expiration},${client_status},${client_ident},${now.seconds},${registered_by},${jdbcQuery.client_name},${key_custom},${service_ids},${account_plan_mapping_ids})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${type}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b418ebf0-da69-401d-a6c6-249758b4734c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientOptionalValues"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_client (client_ident, name, description, organization, registered_by, type, created, custom) VALUES (${client_ident},${client_name},${description},${org},${registered_by},${type},${now.seconds},${client_custom})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="cGVyc2lzdGVk"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/client/OTK Client DB GET Extension 07854a0de3db8f5849ecb6be3985c0bc POLICY OTK Client DB GET Extension Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target policy: OTK Client DB GET"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy will be executed instead of OTK Client DB GET"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The main purpose is to support OTK with the Classic Portal"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Please insert the policy that is available via OTK documentation"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${useOTKDB}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/client/OTK Manager Client DB GET 07854a0de3db8f5849ecb6be3985c0b5 POLICY OTK Manager Client DB GET Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === suffixed with 'Extension'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// to execute the optional branch below this variable has to be set to 'false' within that branch"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="useOTKDB"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Include> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:PolicyGuid stringValue="1aa96a3c-8d5c-4f97-b9b6-1b05f3c9f275"/> </L7p:Include> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${useOTKDB}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbHVlcyB4bWxucz0iaHR0cDovL25zLmw3dGVjaC5jb20vMjAxMi8xMS9vdGstY2xpZW50c3RvcmUiPgo8L3ZhbHVlcz4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeU9mZnNldH0="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Offset"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the offset for the database query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYXN0ZXJ9"/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="master"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="In most cases this endpoints called if a client requests a token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The endpoint will return values for one specific client_id."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="These values will hardly change. Therefore they can be hold in a local cache assertion."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The parameter combination 'getAll|client_key' is the indicator that allows us to assume"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="that this a request to gather client values for validation purposes."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="We will handle this combination as privileged request."/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="getAll"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAcceptableAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Exists"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check if an entry with values has been found. This will not be the case if the client has just been updated"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:client_ident/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="from cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client, client_key values"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key AS CLIENT_KEY, ock.secret AS CLIENT_SECRET, ock.scope AS SCOPE, ock.callback AS CALLBACK, ock.environment AS ENVIRONMENT, ock.expiration AS EXPIRATION, ock.status AS STATUS, ock.created AS KEY_CREATED, ock.created_by AS CREATED_BY, ock.custom AS KEY_CUSTOM, ock.serviceIds AS SERVICE_IDS, ock.accountPlanMappingIds AS ACCOUNT_PLAN_MAPPING_IDS, oc.client_ident AS CLIENT_IDENT, oc.name AS CLIENT_NAME, oc.type AS CLIENT_TYPE, oc.description AS DESCRIPTION, oc.organization AS ORGANIZATION, oc.registered_by AS REGISTERED_BY, oc.created AS CLIENT_CREATED, oc.custom as CLIENT_CUSTOM FROM oauth_client_key ock, oauth_client oc WHERE ock.client_key = ${client_key} AND ock.client_ident = oc.client_ident]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="client_and_key"/> </L7p:JdbcQuery> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_and_key.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_and_key.CLIENT_CUSTOM}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="client_and_key.CLIENT_CUSTOM"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_custom"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set an empty value to '{}'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_and_key.KEY_CUSTOM}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="client_and_key.KEY_CUSTOM"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="key_custom"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set an empty value to '{}'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="use an empty result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Either find data or not. In the latter case do not overwrite 'values'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="values"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="locate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OAuth request"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Preferred handling of getAll|client_key in the context of an oauth token request, not a managent request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="getKey"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${filterStatus}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.created_by like ${registered_by} AND ock.status = ${filterStatus} AND ock.environment like ${environment} AND ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE created_by like ${registered_by} AND status = ${filterStatus} AND environment like ${environment} AND client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for the database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by, environment, status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - search client_key of given user"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.created_by like ${registered_by} AND ock.status = ${filterStatus} AND ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE created_by like ${registered_by} AND status = ${filterStatus} AND client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by, status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.status = ${filterStatus} AND ock.environment like ${environment} AND ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE status = ${filterStatus} AND environment like ${environment} AND client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given environment, status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.status = ${filterStatus} AND ock.client_ident = ${client_ident} AND ock.client_key = ${client_key} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE status = ${filterStatus} AND client_ident = ${client_ident} AND client_key = ${client_key} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.status = ${filterStatus} AND ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE status = ${filterStatus} AND client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="status, client_ident and other filters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Filter with 'status' and 'client_ident'. The case when OAuth Manager is used to query client_keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE client_key = ${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE client_key = ${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE client_key = ${client_key} AND client_key = secret]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE client_key = ${client_key} AND client_key = dbms_lob.substr(secret,4000)]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock, oauth_client oc WHERE ock.client_ident = oc.client_ident AND oc.name like ${name} AND oc.organization like ${org} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name from, custom, serviceIds, accountPlanMappingIds ( select oauth_client_key.*, ROWNUM rnum from ( select ock.client_key, ock.secret,ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, ock.created,ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds from oauth_client_key ock LEFT OUTER JOIN oauth_client oc ON ock.client_ident = oc.client_ident WHERE oc.organization like ${org} AND oc.name like ${name} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC ) oauth_client_key where ROWNUM <= (100+${offset})) where rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given name, organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock, oauth_client oc WHERE ock.client_ident = oc.client_ident AND oc.name like ${name} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( select oauth_client_key.*, ROWNUM rnum FROM ( select ock.client_key, ock.secret,ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, ock.created,ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock LEFT OUTER JOIN oauth_client oc ON ock.client_ident = oc.client_ident WHERE oc.name LIKE ${name} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC ) oauth_client_key where ROWNUM <= (100+${offset})) where rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given name"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, oc.organization, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock, oauth_client oc WHERE ock.client_ident = oc.client_ident AND oc.organization like ${org} ORDER BY oc.organization, ock.client_name, ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds from ( select oauth_client_key.*, ROWNUM rnum from ( select ock.client_key, ock.secret,ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, ock.created,ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds from oauth_client_key ock LEFT OUTER JOIN oauth_client oc ON ock.client_ident = oc.client_ident WHERE oc.organization like ${org} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC ) oauth_client_key where ROWNUM <= (100+${offset})) where rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - search client_key of given user"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE created_by = ${registered_by} AND client_ident=${client_ident} ORDER BY created_by, created, expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE created_by = ${registered_by} AND client_ident=${client_ident} AND client_key=secret ORDER BY created_by, created, expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE created_by = ${registered_by} AND client_ident=${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE created_by = ${registered_by} AND client_ident=${client_ident} AND client_key=dbms_lob.substr(secret,4000) ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by, client_ident"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - list keys for client"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret,ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created,ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.client_ident = ${client_ident} AND ock.client_key=ock.secret ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE client_ident = ${client_ident} AND client_key=dbms_lob.substr(secret,4000) ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_ident"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Clientstore API - getKey with no parameters"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key ORDER BY client_name, created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Non-valid parameter list for this operation"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the jdbc query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS54bWxSZXN1bHR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate xml with one root and one field for each token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:L7j="http://ns.l7tech.com/2012/08/jdbc-query-result" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output cdata-section-elements="client_ident client_key secret scope callback environment status created_by created expiration client_key_custom serviceids accountplanmappingids" encoding="UTF-8" indent="yes" method="xml"/> <xsl:param name="offset"/> <xsl:template match="L7j:jdbcQueryResult"> <xsl:element name="values"> <xsl:attribute name="offset"> <xsl:value-of select="string(count(//L7j:row) +string($offset))"/> </xsl:attribute> <xsl:for-each select="L7j:row"> <xsl:element name="value"> <xsl:attribute name="index"> <xsl:value-of select="position()"/> </xsl:attribute> <xsl:element name="client_ident"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='client_ident'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='client_ident']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="client_name"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='client_name'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='client_name']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="client_key"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='client_key'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='client_key']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="secret"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='secret'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='secret']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="scope"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='scope'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='scope']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="callback"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='callback'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='callback']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="environment"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='environment'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='environment']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="expiration"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='expiration'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='expiration']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="status"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='status'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='status']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="created"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='created'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='created']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="created_by"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='created_by'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='created_by']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="client_key_custom"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='custom'], 'NULL', 'null')='null'"> <xsl:text>{}</xsl:text> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='custom']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="serviceids"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='serviceids'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='serviceids']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="accountplanmappingids"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='accountplanmappingids'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='accountplanmappingids']"/> </xsl:otherwise> </xsl:choose> </xsl:element> </xsl:element> </xsl:for-each> </xsl:element> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Managing"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'getKey'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="get"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE name like ${name} AND organization like ${org} ORDER BY name, organization, registered_by, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE name like ${name} AND organization like ${org} ORDER BY name, organization, registered_by, created ASC ) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given name, organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE registered_by like ${registered_by} AND organization like ${org} ORDER BY organization, registered_by, name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE registered_by like ${registered_by} AND organization like ${org} ORDER BY organization, registered_by, name, created ASC ) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by, organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE name like ${name} ORDER BY name, organization, registered_by, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE name like ${name} ORDER BY name, organization, registered_by, created ASC) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given name"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE organization like ${org} ORDER BY organization, registered_by, name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE organization like ${org} ORDER BY organization, registered_by, name, created ASC) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE registered_by like ${registered_by} ORDER BY registered_by, organization, name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE registered_by like ${registered_by} ORDER BY registered_by, organization, name, created ASC) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select oc.client_ident, oc.name, oc.type, oc.description, oc.organization, oc.registered_by, FROM_UNIXTIME(oc.created, "%Y-%m-%d %k:%i:%s") as created, oc.custom from oauth_client oc, oauth_client_key ock where ock.client_key = ${client_key} and ock.client_ident = oc.client_ident]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select oc.client_ident, oc.name, oc.type, oc.description, oc.organization, oc.registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(oc.created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, oc.custom from oauth_client oc, oauth_client_key ock where ock.client_key = ${client_key} and ock.client_ident = oc.client_ident]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom from oauth_client where client_ident = ${client_ident}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_ident, name, type, description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom from oauth_client where client_ident = ${client_ident}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_ident"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - initial client view"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client ORDER BY name, organization, registered_by, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client ORDER BY name, organization, registered_by, created ASC) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Non-valid parameter list for this operation"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the jdbc query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS54bWxSZXN1bHR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate xml with one root and one field for each token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:L7j="http://ns.l7tech.com/2012/08/jdbc-query-result" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output cdata-section-elements="client_ident name type description organization registered_by created client_custom" encoding="UTF-8" indent="yes" method="xml"/> <xsl:param name="offset"/> <xsl:template match="L7j:jdbcQueryResult"> <xsl:element name="values"> <xsl:attribute name="offset"> <xsl:value-of select="string(count(//L7j:row) +string($offset))"/> </xsl:attribute> <xsl:for-each select="L7j:row"> <xsl:element name="value"> <xsl:attribute name="index"> <xsl:value-of select="position()"/> </xsl:attribute> <xsl:element name="client_ident"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='client_ident'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='client_ident']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="name"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='name'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='name']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="type"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='type'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='type']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="description"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='description'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='description']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="organization"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='organization'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='organization']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="registered_by"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='registered_by'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='registered_by']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="created"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='created'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='created']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="client_custom"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='custom'], 'NULL', 'null')='null'"> <xsl:text>{}</xsl:text> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='custom']"/> </xsl:otherwise> </xsl:choose> </xsl:element> </xsl:element> </xsl:for-each> </xsl:element> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Managing"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'get'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="getAll"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="This operation: '${operation}' is only valid with parameter client_key"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client data"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Get client data for one specific or many clients"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${format}"/> <L7p:Expression2 stringValue="json"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="json"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JsonTransformation> <L7p:DestinationMessageTarget MessageTarget="included"> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:Target target="OTHER"/> <L7p:TargetModifiedByGateway booleanValue="true"/> </L7p:DestinationMessageTarget> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:PrettyPrint booleanValue="true"/> <L7p:RootTagString stringValue=""/> <L7p:Target target="OTHER"/> </L7p:JsonTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:VariableToSet stringValue="values.mainpart"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="values.mainpart"/> <L7p:Regex stringValue="&quot;xmlns&quot;:[\s]?&quot;http://ns.l7tech.com/2012/11/otk-clientstore&quot;,\n"/> <L7p:RegexName stringValue="Remove Namespace"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// to JSON"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// XML"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// transform to json if requested"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default: OTK"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Choose a branch. Default: OTK"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/id_token/OTK id_token DB Remove 07854a0de3db8f5849ecb6be3985c0ab POLICY OTK id_token DB Remove Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy removed an id_token"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="No required parameter was provided for removing an id_token!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${separate_schemas}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5fa28ea1-844e-4fe4-b8b1-5bba1dd1589d"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Access Token DB Remove - azp"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${separate_schemas}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="07a6c0ce-3266-49ad-bf20-b87b96a89fba"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Access Token DB Remove - azp (separate schemas)"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DELETE JWT"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_id_token WHERE azp = ${azp}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="azp"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue="."/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="."/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Use the jwt-signature as jwt_id"/> </L7p:CommentAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="jwt-signature"/> <L7p:OtherTargetMessageVariable stringValue="jwt"/> <L7p:Regex stringValue="[.]([a-zA-Z0-9-_]{1,512})$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3Qtc2lnbmF0dXJlWzFdfQ=="/> <L7p:VariableToSet stringValue="jwt-signature"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${separate_schemas}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="30025f35-b02f-4d86-86d7-7b19c456a808"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Access Token DB Remove - jwt_signature"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${separate_schemas}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b8a02d7d-673c-46ec-ae4e-4320f79ce396"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Access Token DB Remove - jwt_signature (separate schemas)"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DELETE JWT"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_id_token WHERE jwt_id = ${jwt-signature}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwt_signature"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Extract the signature and use it for lookup via 'jwt_id'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue="."/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="."/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${separate_schemas}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="63a14035-7d4f-4df5-ab05-ff19335b2640"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Access Token DB Remove - jwt_id"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${separate_schemas}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="61635996-f9ca-4724-9aa0-2fc97ce1e161"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Access Token DB Remove - jwt_id (separate schema)"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DELETE JWT"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_id_token WHERE jwt_id = ${jwt}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwt_id"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Given 'jwt' == jwt-signature"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${separate_schemas}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="dbd834b4-2d7a-4db7-88bc-23813919cb70"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Access Token DB Remove - jwt"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${separate_schemas}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ff2d4666-7650-48c1-a9e2-116476960e5f"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Access Token DB Remove - jwt (separate schema)"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DELETE JWT"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_id_token WHERE jwt = ${jwt}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The id_token could not be removed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="No valid parameters were passed in. Or the JDBC connection failed"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="cmVtb3ZlZA=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/token/OTK Token DB GET 07854a0de3db8f5849ecb6be3985c0a7 POLICY OTK Token DB GET Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbHVlcz4KPC92YWx1ZXM+"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="returnOffset"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${tokentype}"/> <L7p:Expression2 stringValue="token"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue="0"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue="0"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeU9mZnNldH0="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Offset"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the offset for the database query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Below: SQL-Queries that will always return a single row"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token,secret,expiration,rtoken,rexpiration,scope,resource_owner,client_name,client_ident,client_key,status,created,custom FROM oauth_token WHERE token = ${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE rtoken = ${rtoken}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given rtoken"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Below: SQL-Queries that will return up to a few rows"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE client_key = ${client_key} AND resource_owner = ${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given client - resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== As of here pagination is required ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Below: SQL-Queries that may return a few thousand rows"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE resource_owner like ${resource_owner} AND status = ${token_status} ORDER BY resource_owner, client_name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token WHERE resource_owner like ${resource_owner} AND status = ${token_status} ORDER BY resource_owner, client_name, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given resource_owner and status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE resource_owner like ${resource_owner} ORDER BY resource_owner, client_name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token WHERE resource_owner like ${resource_owner} ORDER BY resource_owner, client_name, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token of a given resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE client_key = ${client_key} ORDER BY client_name, resource_owner, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token WHERE client_key = ${client_key} ORDER BY client_name, resource_owner, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE status = ${token_status} ORDER BY client_name, resource_owner, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token WHERE status = ${token_status} ORDER BY client_name, resource_owner, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Below: SQL-Query that will return all rows"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token ORDER BY client_name, resource_owner, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token ORDER BY client_name, resource_owner, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values "/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the jdbc query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS54bWxSZXN1bHR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="input"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathRowCount"/> <L7p:XmlMsgSrc stringValue="input"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="string(count(//L7j:row) +string($offset))"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="L7j"/> <L7p:value stringValue="http://ns.l7tech.com/2012/08/jdbc-query-result"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFJvd0NvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="returnOffset"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${query.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbHVlcz4KICAgIDx0b2tlbnM+PHRva2VuPjwhW0NEQVRBWyR7cXVlcnkudG9rZW58XV0+PC90b2tlbj48dG9rZW4+PCFbQ0RBVEFbfV1dPjwvdG9rZW4+PC90b2tlbnM+CiAgICA8c2VjcmV0cz48c2VjcmV0PjwhW0NEQVRBWyR7cXVlcnkuc2VjcmV0fF1dPjwvc2VjcmV0PjxzZWNyZXQ+PCFbQ0RBVEFbfV1dPjwvc2VjcmV0Pjwvc2VjcmV0cz4KICAgIDxleHBpcmF0aW9ucz48ZXhwaXJhdGlvbj48IVtDREFUQVske3F1ZXJ5LmV4cGlyYXRpb258XV0+PC9leHBpcmF0aW9uPjxleHBpcmF0aW9uPjwhW0NEQVRBW31dXT48L2V4cGlyYXRpb24+PC9leHBpcmF0aW9ucz4KICAgIDxydG9rZW5zPjxydG9rZW4+PCFbQ0RBVEFbJHtxdWVyeS5ydG9rZW58XV0+PC9ydG9rZW4+PHJ0b2tlbj48IVtDREFUQVt9XV0+PC9ydG9rZW4+PC9ydG9rZW5zPgogICAgPHJleHBpcmF0aW9ucz48cmV4cGlyYXRpb24+PCFbQ0RBVEFbJHtxdWVyeS5yZXhwaXJhdGlvbnxdXT48L3JleHBpcmF0aW9uPjxyZXhwaXJhdGlvbj48IVtDREFUQVt9XV0+PC9yZXhwaXJhdGlvbj48L3JleHBpcmF0aW9ucz4KICAgIDxzY29wZXM+PHNjb3BlPjwhW0NEQVRBWyR7cXVlcnkuc2NvcGV8XV0+PC9zY29wZT48c2NvcGU+PCFbQ0RBVEFbfV1dPjwvc2NvcGU+PC9zY29wZXM+CiAgICA8cmVzb3VyY2Vfb3duZXJzPjxyZXNvdXJjZV9vd25lcj48IVtDREFUQVske3F1ZXJ5LnJlc291cmNlX293bmVyfF1dPjwvcmVzb3VyY2Vfb3duZXI+PHJlc291cmNlX293bmVyPjwhW0NEQVRBW31dXT48L3Jlc291cmNlX293bmVyPjwvcmVzb3VyY2Vfb3duZXJzPgogICAgPGNsaWVudHM+PGNsaWVudF9rZXk+PCFbQ0RBVEFbJHtxdWVyeS5jbGllbnRfa2V5fF1dPjwvY2xpZW50X2tleT48Y2xpZW50X2tleT48IVtDREFUQVt9XV0+PC9jbGllbnRfa2V5PjwvY2xpZW50cz4KICAgIDxjbGllbnROYW1lcz48Y2xpZW50X25hbWU+PCFbQ0RBVEFbJHtxdWVyeS5jbGllbnRfbmFtZXxdXT48L2NsaWVudF9uYW1lPjxjbGllbnRfbmFtZT48IVtDREFUQVt9XV0+PC9jbGllbnRfbmFtZT48L2NsaWVudE5hbWVzPgogICAgPHN0YXR1dXM+PHN0YXR1cz48IVtDREFUQVske3F1ZXJ5LnN0YXR1c3xdXT48L3N0YXR1cz48c3RhdHVzPjwhW0NEQVRBW31dXT48L3N0YXR1cz48L3N0YXR1dXM+CiAgICA8Y3JlYXRlZHM+PGNyZWF0ZWQ+PCFbQ0RBVEFbJHtxdWVyeS5jcmVhdGVkfF1dPjwvY3JlYXRlZD48Y3JlYXRlZD48IVtDREFUQVt9XV0+PC9jcmVhdGVkPjwvY3JlYXRlZHM+CiAgICA8Y3VzdG9tcz48Y3VzdG9tPjwhW0NEQVRBWyR7cXVlcnkuY3VzdG9tfF1dPjwvY3VzdG9tPjxjdXN0b20+PCFbQ0RBVEFbfV1dPjwvY3VzdG9tPjwvY3VzdG9tcz4KPC92YWx1ZXM+"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="transform jdbc result to xml"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'get'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${tokentype}"/> <L7p:Expression2 stringValue="temporary"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="temporary"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE token = ${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE token = ${token} AND verifier = ${verifier}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given token and verifier"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE client_key = ${client_key} AND resource_owner = ${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given client, resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE resource_owner = ${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE client_key = ${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the jdbc query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${query.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="transform jdbc result to xml"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'getTemp'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate xml with one root and one field for each token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:xls="http://www.w3.org/1999/XSL/Transform" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output encoding="UTF-8" indent="yes" method="xml"/> <xsl:param name="returnOffset"/> <xsl:template match="/values"> <xsl:element name="{name()}" xmlns="http://ns.l7tech.com/2012/11/otk-tokenstore"> <xsl:attribute name="offset"><xsl:value-of select="$returnOffset"/></xsl:attribute> <xsl:for-each select="descendant::node()[node()][1]/child::node()[node()]"> <xsl:variable name="index"> <xsl:value-of select="position()"/> </xsl:variable> <value index="{$index}" xmlns="http://ns.l7tech.com/2012/11/otk-tokenstore"> <xsl:element name="{name()}" xmlns="http://ns.l7tech.com/2012/11/otk-tokenstore"> <xsl:value-of select="text()"/> </xsl:element> <xsl:for-each select="parent::node()/following-sibling::node()[node()]"> <xsl:for-each select="*[position()=$index]"> <xsl:copy-of select="self::node()"/> </xsl:for-each> </xsl:for-each> </value> </xsl:for-each> </xsl:element> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${format}"/> <L7p:Expression2 stringValue="json"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="json"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JsonTransformation> <L7p:DestinationMessageTarget MessageTarget="included"> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:Target target="OTHER"/> <L7p:TargetModifiedByGateway booleanValue="true"/> </L7p:DestinationMessageTarget> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:PrettyPrint booleanValue="true"/> <L7p:RootTagString stringValue=""/> <L7p:Target target="OTHER"/> </L7p:JsonTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="resp.mainpart"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="resp.mainpart"/> <L7p:Regex stringValue="&quot;xmlns&quot;:[\s]?&quot;http://ns.l7tech.com/2012/11/otk-tokenstore&quot;,\n"/> <L7p:RegexName stringValue="Remove Namespace"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="transform to json if applicable"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/token/OTK Token DB Count 07854a0de3db8f5849ecb6be3985c0a3 POLICY OTK Token DB Count Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Parameter 'other' is available but currently not used"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// missing parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// count activeUsers"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:MaxRecords intValue="1"/> <L7p:NamingMap mapValue="included"> <L7p:entry> <L7p:key stringValue="count"/> <L7p:value stringValue="count"/> </L7p:entry> </L7p:NamingMap> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT COUNT(*) as count FROM oauth_token WHERE client_ident=${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkuY291bnR9"/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="count"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// count Access Tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Selecting data failed. Given client_ident: '${client_ident}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Retrieve data for analysis"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/maintenance/OTK Database Maintenance - Client 07854a0de3db8f5849ecb6be3985c0ba POLICY OTK Database Maintenance - Client Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Deletes all expired clients with an expiration &gt; 0"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="delete expired client keys"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_client_key WHERE expiration > 0 AND expiration < ${now.seconds}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="An error occured when searching for expired client_keys"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="clients"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/client/OTK Manager Client Key DB Count 07854a0de3db8f5849ecb6be3985c0b6 POLICY OTK Manager Client Key DB Count Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Parameter 'other' is available but currently not used"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// missing parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:MaxRecords intValue="1"/> <L7p:NamingMap mapValue="included"> <L7p:entry> <L7p:key stringValue="count"/> <L7p:value stringValue="count"/> </L7p:entry> </L7p:NamingMap> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT COUNT(*) AS count FROM oauth_client_key WHERE client_ident=${client_ident} AND client_key != secret]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkuY291bnR9"/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="count"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// count non-master client_keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Selecting data failed. Given client_ident: '${client_ident}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/token/OTK Manager Token DB Update 07854a0de3db8f5849ecb6be3985c0af POLICY OTK Manager Token DB Update Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="result_count"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Token must exist"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_token SET status=${token_status} WHERE token=${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0="/> <L7p:VariableToSet stringValue="result_count"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update 'status' of access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_initiate SET resource_owner = ${resource_owner} WHERE token = ${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0="/> <L7p:VariableToSet stringValue="result_count"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="assign a user to the request_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_initiate SET expiration=${expiration},verifier=${verifier} WHERE token=${token} AND verifier is null]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0="/> <L7p:VariableToSet stringValue="result_count"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="VGhlIHZlcmlmaWVyIGlzIGludmFsaWQ="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="update the request token, oauth 1.0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Update"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXN1bHRfY291bnR9IHRva2VuKHMpIHVwZGF0ZWQ="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/token/OTK Manager Token DB Revocation 07854a0de3db8f5849ecb6be3985c0b0 POLICY OTK Manager Token DB Revocation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy revokes an oauth token"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE client_key=${client_key} AND resource_owner=${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client_key, resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete access tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE client_key=${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete temp tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_initiate WHERE client_key=${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE resource_owner=${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE token=${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE rtoken=${rtoken}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0gdG9rZW4ocykgcmV2b2tlZA=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/session/OTK Session DB 07854a0de3db8f5849ecb6be3985c0c3 POLICY OTK Session DB Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify required values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="store"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="store"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="RXJyb3IgYWNjZXNzaW5nIHRoZSBzZXNzaW9uIHN0b3JlLg=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${value}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify required values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheId}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZGVmYXVsdENhY2hl"/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheId"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheAge}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzYwMDAw"/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheAge"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheMaxEntries}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTA="/> <L7p:VariableToSet stringValue="cacheMaxEntries"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheMaxEntries"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheMaxSize}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAwMDAw"/> <L7p:VariableToSet stringValue="cacheMaxSize"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheMaxSize"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${dbAge}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjYWNoZUFnZX0="/> <L7p:VariableToSet stringValue="dbAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine dbAge"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${dbAge}"/> <L7p:VariableToSet stringValue="session_expiration"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1"/> <L7p:QueryName stringValue="Update existing session in DB"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_session SET expiration = ${session_expiration.seconds}, value = ${value} WHERE session_key = ${cacheKey} AND session_group = ${cacheId}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="sessionStore"/> </L7p:JdbcQuery> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:QueryName stringValue="Insert or update session"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_session (session_key,session_group,expiration,value) VALUES (${cacheKey},${cacheId},${session_expiration.seconds},${value})]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="sessionStore"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Insert or Update"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZX0="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="valueMessage"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="${cacheMaxEntries}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="${cacheMaxSize}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="valueMessage"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="S2V5ICR7Y2FjaGVLZXl9IGFkZGVkIHRvIHNlc3Npb24u"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="STORE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="get"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="get"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheId}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZGVmYXVsdENhY2hl"/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheId"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheAge}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzYwMDAw"/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheAge"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAcceptableAge"/> <L7p:value stringValue="${cacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cacheAge}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resp.mainpart"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvdW5kIHhtbG5zPSJodHRwOi8vbnMubDd0ZWNoLmNvbS8yMDEyLzExL290ay1zZXNzaW9uIj4KICA8dmFsdWU+JHtlbmNvZGVkfTwvdmFsdWU+CiAgPGxvY2F0aW9uPmNhY2hlPC9sb2NhdGlvbj4KPC9mb3VuZD4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:NamingMap mapValue="included"> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="session_value"/> </L7p:entry> </L7p:NamingMap> <L7p:QueryName stringValue="Retrieve from session"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT value FROM oauth_session WHERE session_key=${cacheKey} AND session_group=${cacheId} AND ${now.seconds} < expiration]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="sessionQuery"/> </L7p:JdbcQuery> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${sessionQuery.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionQuery.session_value"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvdW5kIHhtbG5zPSJodHRwOi8vbnMubDd0ZWNoLmNvbS8yMDEyLzExL290ay1zZXNzaW9uIj4KICA8dmFsdWU+JHtlbmNvZGVkfTwvdmFsdWU+CiAgPGxvY2F0aW9uPmRhdGFiYXNlPC9sb2NhdGlvbj4KPC9mb3VuZD4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// yes"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// no"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="PGZvdW5kIHhtbG5zPSJodHRwOi8vbnMubDd0ZWNoLmNvbS8yMDEyLzExL290ay1zZXNzaW9uIiAvPg=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// anything available?"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Find session value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="GET"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="delete"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="delete"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheId}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZGVmYXVsdENhY2hl"/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheId"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheAge}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzYwMDAw"/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheAge"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheMaxEntries}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTA="/> <L7p:VariableToSet stringValue="cacheMaxEntries"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheMaxEntries"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheMaxSize}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAwMDAw"/> <L7p:VariableToSet stringValue="cacheMaxSize"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Determine cacheMaxSize"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5d92c1c2-f458-4dc4-a6a3-5959420eec62"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Remove"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="${cacheMaxEntries}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="${cacheMaxSize}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:QueryName stringValue="Delete session"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_session WHERE session_key = ${cacheKey} AND session_group = ${cacheId}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="deleteQuery"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="U2Vzc2lvbiBkZWxldGVkLg=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DELETE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="deleteExpired"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="deleteExpired"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:QueryName stringValue="Delete expired sessions"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_session WHERE expiration <= ${now.seconds}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="deleteExpired"/> </L7p:JdbcQuery> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="${deleteExpired.queryresult.count} expired sessions deleted."/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DELETE_EXPIRED"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/token/OTK Token DB Count Check 07854a0de3db8f5849ecb6be3985c0a9 POLICY OTK Token DB Count Check Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Parameter 'other' is available but currently not used"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// missing parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:NamingMap mapValue="included"> <L7p:entry> <L7p:key stringValue="created"/> <L7p:value stringValue="created"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="access_tokens"/> </L7p:entry> </L7p:NamingMap> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, created FROM oauth_token WHERE client_ident=${client} AND resource_owner=${resource_owner} ORDER BY created]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="tokenQuery"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="count"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// count Access Tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Selecting data failed. Given client_ident: '${client}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/maintenance/OTK Database Maintenance - id_token 07854a0de3db8f5849ecb6be3985c0b9 POLICY OTK Database Maintenance - id_token Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Deletes all expired id_token"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DELETE"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_id_token WHERE expiration > 0 AND expiration < ${now.seconds}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="An error occured when searching for expired id_token"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/token/OTK Token DB Delete 07854a0de3db8f5849ecb6be3985c0a4 POLICY OTK Token DB Delete Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy removes token from the database"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="fCR7dGVtcF90b2tlbn18JHthY2Nlc3NfdG9rZW59fCR7cmVmcmVzaF90b2tlbn18JHtjbGllbnRfa2V5fQ=="/> <L7p:VariableToSet stringValue="all"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${all}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="([|].+[|][|][|])|([|][|].+[|][|])|([|][|][|].+[|])|([|][|][|][|].+)"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="No valid parameters have been provided"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check that at only one parameter was given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${temp_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${refresh_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_initiate WHERE token=${temp_token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="temporary"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${temp_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${refresh_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE token=${access_token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${refresh_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${temp_token}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE rtoken=${refresh_token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="empty"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="empty"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete from temporary token table"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_initiate WHERE client_key=${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete from long living token table"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE client_key=${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="many"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="delete all tokens that were issued to the given client_key (client_id)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="An error occured and the token most likely could not be deleted"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="delete"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0gdG9rZW4ocykgZGVsZXRlZA=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/token/OTK Token DB Disable 07854a0de3db8f5849ecb6be3985c0aa POLICY OTK Token DB Disable Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="verify required fields"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_token SET status='DISABLED' WHERE client_key=${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${result}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0gdG9rZW4ocykgZGlzYWJsZWQ="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/maintenance/OTK Database Maintenance - sessions 07854a0de3db8f5849ecb6be3985c0bb POLICY OTK Database Maintenance - sessions Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Deletes all expired sessions from oauth_session"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:QueryName stringValue="Delete expired sessions"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_session WHERE expiration <= ${now.seconds}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="deleteExpired"/> </L7p:JdbcQuery> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="An error occured when searching for expired sessions"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sessions"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/token/OTK Token DB Update 07854a0de3db8f5849ecb6be3985c0a8 POLICY OTK Token DB Update Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="result_count"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Token must exist"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_token SET status=${token_status} WHERE token=${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0="/> <L7p:VariableToSet stringValue="result_count"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update 'status' of access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_initiate SET resource_owner = ${resource_owner} WHERE token = ${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0="/> <L7p:VariableToSet stringValue="result_count"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="assign a user to the request_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_initiate SET expiration=${expiration},verifier=${verifier} WHERE token=${token} AND verifier is null]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0="/> <L7p:VariableToSet stringValue="result_count"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="VGhlIHZlcmlmaWVyIGlzIGludmFsaWQ="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="update the request token, oauth 1.0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Update"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXN1bHRfY291bnR9IHRva2VuKHMpIHVwZGF0ZWQ="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/client/OTK Client DB Update 07854a0de3db8f5849ecb6be3985c0c2 POLICY OTK Client DB Update Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy updates an oauth client and all client_id's"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="client|client_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unknown persist_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="operation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for a valid persistence type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client_key"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${created_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_client_key SET created_by=${created_by} WHERE client_key = ${client_key}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="'created_by' gets handled exclusively. Used with MAG for updating client registrations"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${created_by}"/> <L7p:Expression2 stringValue="client_key"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="client_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4afe741a-3628-42a3-9d45-73a1d38d7020"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientKeyOptionalValues"/> </L7p:Encapsulated> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_client_key SET status=${client_status},scope=${scope},callback=${callback},environment=${environment},secret=${client_secret},custom=${key_custom},serviceIds=${service_ids},accountPlanMappingIds=${account_plan_mapping_ids} WHERE client_key = ${client_key}]]></L7p:SqlQuery> </L7p:JdbcQuery> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="update"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHZhbHVlcyB4bWxucz0iaHR0cDovL25zLmw3dGVjaC5jb20vMjAxMi8xMS9vdGstY2xpZW50c3RvcmUiLz4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="values"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CommentAssertion> <L7p:Comment stringValue="Empty the validation cache for this client_id. It is used at 'OTK Client Validation'"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5d92c1c2-f458-4dc4-a6a3-5959420eec62"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Remove"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValidationValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="update the cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updates a client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${type}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="b29i"/> <L7p:VariableToSet stringValue="type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set to 'oob'. Valid for OAuth 1.0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b418ebf0-da69-401d-a6c6-249758b4734c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientOptionalValues"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="oauth_client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update referenced client keys (if any)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_client_key SET client_name=${client_name} WHERE client_ident = ${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="oauth_client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update client with new params"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_client SET name=${client_name},description=${description},type=${type},organization=${org},custom=${client_custom} WHERE client_ident = ${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updates a client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkucXVlcnlyZXN1bHQuY291bnR9ICR7cGVyc2lzdF90eXBlfShzKSB1cGRhdGVk"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/client/OTK Manager Client DB Revoke Key 07854a0de3db8f5849ecb6be3985c0b7 POLICY OTK Manager Client DB Revoke Key Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy revokes an oauth client_id"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete client keys"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_client_key WHERE client_ident = ${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_ident"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="use 'client_ident'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - revoke client key"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete client key"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_client_key WHERE client_key = ${client_key}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHZhbHVlcyB4bWxucz0iaHR0cDovL25zLmw3dGVjaC5jb20vMjAxMi8xMS9vdGstY2xpZW50c3RvcmUiLz4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="values"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CommentAssertion> <L7p:Comment stringValue="Empty the validation cache for this client_id. It is used at 'OTK Client Validation'"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5d92c1c2-f458-4dc4-a6a3-5959420eec62"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Remove"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValidationValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="use 'client_key'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The client could not be revoked. client_ident: '${client_ident}', client_key='${client_key}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="revoke"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkucXVlcnlyZXN1bHQuY291bnR9IGNsaWVudF9rZXkocykgcmV2b2tlZA=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/client/OTK Client DB Delete 07854a0de3db8f5849ecb6be3985c0bd POLICY OTK Client DB Delete Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes an oauth client and all client_id's"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_client WHERE client_ident = ${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The client could not be deleted. client_ident: '${client_ident}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="delete"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkucXVlcnlyZXN1bHQuY291bnR9IGNsaWVudChzKSBkZWxldGVk"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/token/OTK Token DB Revocation 07854a0de3db8f5849ecb6be3985c0a6 POLICY OTK Token DB Revocation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy revokes an oauth token"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE client_key=${client_key} AND resource_owner=${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client_key, resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete access tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE client_key=${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete temp tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_initiate WHERE client_key=${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE resource_owner=${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE token=${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_token WHERE rtoken=${rtoken}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0gdG9rZW4ocykgcmV2b2tlZA=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/client/OTK Client Key DB Count 07854a0de3db8f5849ecb6be3985c0c1 POLICY OTK Client Key DB Count Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Parameter 'other' is available but currently not used"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// missing parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:MaxRecords intValue="1"/> <L7p:NamingMap mapValue="included"> <L7p:entry> <L7p:key stringValue="count"/> <L7p:value stringValue="count"/> </L7p:entry> </L7p:NamingMap> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT COUNT(*) AS count FROM oauth_client_key WHERE client_ident=${client_ident} AND client_key != secret]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:MaxRecords intValue="1"/> <L7p:NamingMap mapValue="included"> <L7p:entry> <L7p:key stringValue="count"/> <L7p:value stringValue="count"/> </L7p:entry> </L7p:NamingMap> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT COUNT(*) AS count FROM oauth_client_key WHERE client_ident=${client_ident} AND client_key != dbms_lob.substr(secret,4000)]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Database Query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkuY291bnR9"/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="count"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// count non-master client_keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Selecting data failed. Given client_ident: '${client_ident}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/client/OTK Client DB GET 07854a0de3db8f5849ecb6be3985c0bf POLICY OTK Client DB GET Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === suffixed with 'Extension'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// to execute the optional branch below this variable has to be set to 'false' within that branch"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="useOTKDB"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Include> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:PolicyGuid stringValue="1aa96a3c-8d5c-4f97-b9b6-1b05f3c9f275"/> </L7p:Include> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${useOTKDB}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbHVlcyB4bWxucz0iaHR0cDovL25zLmw3dGVjaC5jb20vMjAxMi8xMS9vdGstY2xpZW50c3RvcmUiPgo8L3ZhbHVlcz4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeU9mZnNldH0="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Offset"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the offset for the database query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYXN0ZXJ9"/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="master"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="In most cases this endpoints called if a client requests a token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The endpoint will return values for one specific client_id."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="These values will hardly change. Therefore they can be hold in a local cache assertion."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The parameter combination 'getAll|client_key' is the indicator that allows us to assume"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="that this a request to gather client values for validation purposes."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="We will handle this combination as privileged request."/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="getAll"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAcceptableAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Exists"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check if an entry with values has been found. This will not be the case if the client has just been updated"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:client_ident/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="from cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client, client_key values"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key AS CLIENT_KEY, ock.secret AS CLIENT_SECRET, ock.scope AS SCOPE, ock.callback AS CALLBACK, ock.environment AS ENVIRONMENT, ock.expiration AS EXPIRATION, ock.status AS STATUS, ock.created AS KEY_CREATED, ock.created_by AS CREATED_BY, ock.custom AS KEY_CUSTOM, ock.serviceIds AS SERVICE_IDS, ock.accountPlanMappingIds AS ACCOUNT_PLAN_MAPPING_IDS, oc.client_ident AS CLIENT_IDENT, oc.name AS CLIENT_NAME, oc.type AS CLIENT_TYPE, oc.description AS DESCRIPTION, oc.organization AS ORGANIZATION, oc.registered_by AS REGISTERED_BY, oc.created AS CLIENT_CREATED, oc.custom as CLIENT_CUSTOM FROM oauth_client_key ock, oauth_client oc WHERE ock.client_key = ${client_key} AND ock.client_ident = oc.client_ident]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="client_and_key"/> </L7p:JdbcQuery> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_and_key.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_and_key.CLIENT_CUSTOM}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="client_and_key.CLIENT_CUSTOM"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_custom"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set an empty value to '{}'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_and_key.KEY_CUSTOM}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="client_and_key.KEY_CUSTOM"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="key_custom"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set an empty value to '{}'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="use an empty result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Either find data or not. In the latter case do not overwrite 'values'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="values"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="locate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OAuth request"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Preferred handling of getAll|client_key in the context of an oauth token request, not a managent request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="getKey"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${filterStatus}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.created_by like ${registered_by} AND ock.status = ${filterStatus} AND ock.environment like ${environment} AND ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE created_by like ${registered_by} AND status = ${filterStatus} AND environment like ${environment} AND client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for the database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by, environment, status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - search client_key of given user"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.created_by like ${registered_by} AND ock.status = ${filterStatus} AND ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE created_by like ${registered_by} AND status = ${filterStatus} AND client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by, status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.status = ${filterStatus} AND ock.environment like ${environment} AND ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE status = ${filterStatus} AND environment like ${environment} AND client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given environment, status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.status = ${filterStatus} AND ock.client_ident = ${client_ident} AND ock.client_key = ${client_key} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE status = ${filterStatus} AND client_ident = ${client_ident} AND client_key = ${client_key} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.status = ${filterStatus} AND ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE status = ${filterStatus} AND client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="status, client_ident and other filters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Filter with 'status' and 'client_ident'. The case when OAuth Manager is used to query client_keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE client_key = ${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE client_key = ${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE client_key = ${client_key} AND client_key = secret]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE client_key = ${client_key} AND client_key = dbms_lob.substr(secret,4000)]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock, oauth_client oc WHERE ock.client_ident = oc.client_ident AND oc.name like ${name} AND oc.organization like ${org} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name from, custom, serviceIds, accountPlanMappingIds ( select oauth_client_key.*, ROWNUM rnum from ( select ock.client_key, ock.secret,ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, ock.created,ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds from oauth_client_key ock LEFT OUTER JOIN oauth_client oc ON ock.client_ident = oc.client_ident WHERE oc.organization like ${org} AND oc.name like ${name} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC ) oauth_client_key where ROWNUM <= (100+${offset})) where rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given name, organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock, oauth_client oc WHERE ock.client_ident = oc.client_ident AND oc.name like ${name} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( select oauth_client_key.*, ROWNUM rnum FROM ( select ock.client_key, ock.secret,ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, ock.created,ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock LEFT OUTER JOIN oauth_client oc ON ock.client_ident = oc.client_ident WHERE oc.name LIKE ${name} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC ) oauth_client_key where ROWNUM <= (100+${offset})) where rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given name"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, oc.organization, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock, oauth_client oc WHERE ock.client_ident = oc.client_ident AND oc.organization like ${org} ORDER BY oc.organization, ock.client_name, ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds from ( select oauth_client_key.*, ROWNUM rnum from ( select ock.client_key, ock.secret,ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, ock.created,ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds from oauth_client_key ock LEFT OUTER JOIN oauth_client oc ON ock.client_ident = oc.client_ident WHERE oc.organization like ${org} ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC ) oauth_client_key where ROWNUM <= (100+${offset})) where rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - search client_key of given user"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret,scope, callback, environment, expiration, status, client_ident, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created,created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE created_by = ${registered_by} AND client_ident=${client_ident} ORDER BY created_by, created, expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM oauth_client_key WHERE created_by = ${registered_by} AND client_ident=${client_ident} AND client_key=secret ORDER BY created_by, created, expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE created_by = ${registered_by} AND client_ident=${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE created_by = ${registered_by} AND client_ident=${client_ident} AND client_key=dbms_lob.substr(secret,4000) ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by, client_ident"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - list keys for client"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.client_ident = ${client_ident} ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret,ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created,ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock WHERE ock.client_ident = ${client_ident} AND ock.client_key=ock.secret ORDER BY ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE client_ident = ${client_ident} ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// all"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key WHERE client_ident = ${client_ident} AND client_key=dbms_lob.substr(secret,4000) ORDER BY created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only master keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decide to select master-keys only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_ident"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Clientstore API - getKey with no parameters"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT ock.client_key, ock.secret, ock.scope, ock.callback, ock.environment, ock.expiration, ock.status, ock.client_ident, FROM_UNIXTIME(ock.created, "%Y-%m-%d %k:%i:%s") as created, ock.created_by, ock.client_name, ock.custom, ock.serviceIds, ock.accountPlanMappingIds FROM oauth_client_key ock ORDER BY ock.client_name, ock.created_by, ock.created, ock.expiration ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_key, secret, scope, callback, environment, expiration, status, client_ident, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, created_by, client_name, custom, serviceIds, accountPlanMappingIds FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client_key.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client_key ORDER BY client_name, created_by, created, expiration ASC ) oauth_client_key WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Non-valid parameter list for this operation"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the jdbc query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS54bWxSZXN1bHR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate xml with one root and one field for each token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:L7j="http://ns.l7tech.com/2012/08/jdbc-query-result" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output cdata-section-elements="client_ident client_key secret scope callback environment status created_by created expiration client_key_custom serviceids accountplanmappingids" encoding="UTF-8" indent="yes" method="xml"/> <xsl:param name="offset"/> <xsl:template match="L7j:jdbcQueryResult"> <xsl:element name="values"> <xsl:attribute name="offset"> <xsl:value-of select="string(count(//L7j:row) +string($offset))"/> </xsl:attribute> <xsl:for-each select="L7j:row"> <xsl:element name="value"> <xsl:attribute name="index"> <xsl:value-of select="position()"/> </xsl:attribute> <xsl:element name="client_ident"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='client_ident'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='client_ident']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="client_name"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='client_name'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='client_name']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="client_key"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='client_key'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='client_key']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="secret"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='secret'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='secret']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="scope"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='scope'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='scope']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="callback"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='callback'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='callback']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="environment"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='environment'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='environment']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="expiration"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='expiration'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='expiration']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="status"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='status'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='status']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="created"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='created'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='created']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="created_by"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='created_by'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='created_by']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="client_key_custom"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='custom'], 'NULL', 'null')='null'"> <xsl:text>{}</xsl:text> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='custom']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="serviceids"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='serviceids'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='serviceids']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="accountplanmappingids"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='accountplanmappingids'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='accountplanmappingids']"/> </xsl:otherwise> </xsl:choose> </xsl:element> </xsl:element> </xsl:for-each> </xsl:element> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Managing"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'getKey'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="get"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE name like ${name} AND organization like ${org} ORDER BY name, organization, registered_by, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE name like ${name} AND organization like ${org} ORDER BY name, organization, registered_by, created ASC ) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given name, organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE registered_by like ${registered_by} AND organization like ${org} ORDER BY organization, registered_by, name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE registered_by like ${registered_by} AND organization like ${org} ORDER BY organization, registered_by, name, created ASC ) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by, organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE name like ${name} ORDER BY name, organization, registered_by, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE name like ${name} ORDER BY name, organization, registered_by, created ASC) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given name"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE organization like ${org} ORDER BY organization, registered_by, name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE organization like ${org} ORDER BY organization, registered_by, name, created ASC) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client WHERE registered_by like ${registered_by} ORDER BY registered_by, organization, name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type,description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client WHERE registered_by like ${registered_by} ORDER BY registered_by, organization, name, created ASC) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given registered_by"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select oc.client_ident, oc.name, oc.type, oc.description, oc.organization, oc.registered_by, FROM_UNIXTIME(oc.created, "%Y-%m-%d %k:%i:%s") as created, oc.custom from oauth_client oc, oauth_client_key ock where ock.client_key = ${client_key} and ock.client_ident = oc.client_ident]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select oc.client_ident, oc.name, oc.type, oc.description, oc.organization, oc.registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(oc.created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, oc.custom from oauth_client oc, oauth_client_key ock where ock.client_key = ${client_key} and ock.client_ident = oc.client_ident]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom from oauth_client where client_ident = ${client_ident}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[select client_ident, name, type, description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom from oauth_client where client_ident = ${client_ident}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values of given client_ident"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - initial client view"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="mysql"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, FROM_UNIXTIME(created, "%Y-%m-%d %k:%i:%s") as created, custom FROM oauth_client ORDER BY name, organization, registered_by, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="oracle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT client_ident, name, type, description, organization, registered_by, TO_CHAR(TO_DATE('19700101000000', 'YYYYMMDDHH24MISS')+(created/(60*60*24)),'YYYY-MM-DD HH24:MI:SS') as created, custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_client.*, ROWNUM rnum FROM ( SELECT * FROM oauth_client ORDER BY name, organization, registered_by, created ASC) oauth_client WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Non-valid parameter list for this operation"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the jdbc query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS54bWxSZXN1bHR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate xml with one root and one field for each token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:L7j="http://ns.l7tech.com/2012/08/jdbc-query-result" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output cdata-section-elements="client_ident name type description organization registered_by created client_custom" encoding="UTF-8" indent="yes" method="xml"/> <xsl:param name="offset"/> <xsl:template match="L7j:jdbcQueryResult"> <xsl:element name="values"> <xsl:attribute name="offset"> <xsl:value-of select="string(count(//L7j:row) +string($offset))"/> </xsl:attribute> <xsl:for-each select="L7j:row"> <xsl:element name="value"> <xsl:attribute name="index"> <xsl:value-of select="position()"/> </xsl:attribute> <xsl:element name="client_ident"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='client_ident'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='client_ident']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="name"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='name'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='name']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="type"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='type'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='type']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="description"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='description'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='description']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="organization"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='organization'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='organization']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="registered_by"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='registered_by'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='registered_by']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="created"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='created'], 'NULL', 'null')='null'"> <xsl:text/> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='created']"/> </xsl:otherwise> </xsl:choose> </xsl:element> <xsl:element name="client_custom"> <xsl:choose> <xsl:when test="translate(L7j:col[@name='custom'], 'NULL', 'null')='null'"> <xsl:text>{}</xsl:text> </xsl:when> <xsl:otherwise> <xsl:value-of select="L7j:col[@name='custom']"/> </xsl:otherwise> </xsl:choose> </xsl:element> </xsl:element> </xsl:for-each> </xsl:element> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Managing"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'get'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="getAll"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="This operation: '${operation}' is only valid with parameter client_key"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client data"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Get client data for one specific or many clients"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${format}"/> <L7p:Expression2 stringValue="json"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="json"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JsonTransformation> <L7p:DestinationMessageTarget MessageTarget="included"> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:Target target="OTHER"/> <L7p:TargetModifiedByGateway booleanValue="true"/> </L7p:DestinationMessageTarget> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:PrettyPrint booleanValue="true"/> <L7p:RootTagString stringValue=""/> <L7p:Target target="OTHER"/> </L7p:JsonTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:VariableToSet stringValue="values.mainpart"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="values.mainpart"/> <L7p:Regex stringValue="&quot;xmlns&quot;:[\s]?&quot;http://ns.l7tech.com/2012/11/otk-clientstore&quot;,\n"/> <L7p:RegexName stringValue="Remove Namespace"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// to JSON"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// XML"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// transform to json if requested"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default: OTK"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Choose a branch. Default: OTK"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/id_token/OTK id_token DB Lookup 07854a0de3db8f5849ecb6be3985c0ad POLICY OTK id_token DB Lookup Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy is looking up id_token from the database."/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${sub}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT resource_owner, azp, sub, jwt_id, jwt, salt, shared_secret, shared_secret_type, iss FROM oauth_id_token WHERE resource_owner = ${resource_owner} AND azp = ${azp}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="resource_owner, azp"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${sub}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT resource_owner, azp, sub, jwt_id, jwt, salt, shared_secret, shared_secret_type, iss FROM oauth_id_token WHERE sub = ${sub} AND azp = ${azp}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sub, azp"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue="."/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="."/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Use the jwt-signature as jwt_id"/> </L7p:CommentAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="jwt-signature"/> <L7p:OtherTargetMessageVariable stringValue="jwt"/> <L7p:Regex stringValue="[.]([a-zA-Z0-9-_]{1,512})$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3Qtc2lnbmF0dXJlWzFdfQ=="/> <L7p:VariableToSet stringValue="jwt-signature"/> </L7p:SetVariable> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT resource_owner, azp, sub, jwt_id, jwt, salt, shared_secret, shared_secret_type, iss FROM oauth_id_token WHERE jwt_id = ${jwt-signature}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwt_signature"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Extract the signature and use it for lookup via 'jwt_id'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue="."/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="."/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT resource_owner, azp, sub, jwt_id, jwt, salt, shared_secret, shared_secret_type, iss FROM oauth_id_token WHERE jwt_id = ${jwt}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwt_id"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Given 'jwt' == jwt-signature"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT resource_owner, azp, sub, jwt_id, jwt, salt, shared_secret, shared_secret_type, iss FROM oauth_id_token WHERE jwt = ${jwt}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Will be removed in the future. Causes problems with DB systems other than MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="No id_token lookup could be executed"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkueG1sUmVzdWx0fQ=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:L7j="http://ns.l7tech.com/2012/08/jdbc-query-result" xmlns:ns="http://ns.l7tech.com/2012/11/otk-tokenstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output cdata-section-elements="ns:jwt ns:resource_owner ns:azp ns:salt ns:iss ns:shared_secret ns:shared_secret_type" encoding="UTF-8" indent="yes" method="xml"/> <xsl:template match="L7j:jdbcQueryResult"> <xsl:element name="ns:values"> <xsl:for-each select="L7j:row"> <xsl:element name="ns:value"> <xsl:attribute name="index"> <xsl:value-of select="position()"/> </xsl:attribute> <xsl:for-each select="L7j:col"> <xsl:element name="ns:{@name}"> <xsl:value-of select="text()"/> </xsl:element> </xsl:for-each> </xsl:element> </xsl:for-each> </xsl:element> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${format}"/> <L7p:Expression2 stringValue="json"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="json"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JsonTransformation> <L7p:DestinationMessageTarget MessageTarget="included"> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:Target target="OTHER"/> <L7p:TargetModifiedByGateway booleanValue="true"/> </L7p:DestinationMessageTarget> <L7p:OtherTargetMessageVariable stringValue="values"/> <L7p:PrettyPrint booleanValue="true"/> <L7p:RootTagString stringValue=""/> <L7p:Target target="OTHER"/> </L7p:JsonTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:VariableToSet stringValue="values.mainpart"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="values.mainpart"/> <L7p:Regex stringValue="&quot;xmlns&quot;:[\s]?&quot;http://ns.l7tech.com/2012/11/otk-tokenstore&quot;,\n"/> <L7p:RegexName stringValue="Remove Namespace"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWx1ZXMubWFpbnBhcnR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="transform to json if requested"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/client/OTK Manager Client DB Persist 07854a0de3db8f5849ecb6be3985c0b3 POLICY OTK Manager Client DB Persist Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy persists an oauth client"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="client|client_key|client_and_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unknown persist_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="operation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for a valid persistence type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client_and_key"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_and_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${type}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b418ebf0-da69-401d-a6c6-249758b4734c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientOptionalValues"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_client (client_ident, name, description, organization, registered_by, type, created, custom) VALUES (${client_ident},${client_name},${description},${org},${registered_by},${type},${now.seconds},${client_custom})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4afe741a-3628-42a3-9d45-73a1d38d7020"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientKeyOptionalValues"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="persist"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_client_key (client_key, secret, scope, callback, environment, expiration, status, client_ident, created, created_by, client_name, custom, serviceIds, accountPlanMappingIds) VALUES (${client_key},${client_secret},${scope},${callback},${environment},${expiration},${client_status},${client_ident},${now.seconds},${registered_by},${client_name},${key_custom},${service_ids},${account_plan_mapping_ids})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_and_client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client including a client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client_key"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4afe741a-3628-42a3-9d45-73a1d38d7020"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientKeyOptionalValues"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_name"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the client_name"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:NamingMap mapValue="included"> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue="client_name"/> </L7p:entry> </L7p:NamingMap> <L7p:SqlQuery stringValue="SELECT name FROM oauth_client WHERE client_ident = ${client_ident}"/> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkuY2xpZW50X25hbWV9"/> <L7p:VariableToSet stringValue="jdbcQuery.client_name"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jdbcQuery.client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="verify"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="was the name found?"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="persist"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_client_key (client_key, secret, scope, callback, environment, expiration, status, client_ident, created, created_by, client_name, custom, serviceIds, accountPlanMappingIds) VALUES (${client_key},${client_secret},${scope},${callback},${environment},${expiration},${client_status},${client_ident},${now.seconds},${registered_by},${jdbcQuery.client_name},${key_custom},${service_ids},${account_plan_mapping_ids})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${type}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b418ebf0-da69-401d-a6c6-249758b4734c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientOptionalValues"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_client (client_ident, name, description, organization, registered_by, type, created, custom) VALUES (${client_ident},${client_name},${description},${org},${registered_by},${type},${now.seconds},${client_custom})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store a new client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="cGVyc2lzdGVk"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/client/OTK Manager Client DB Update 07854a0de3db8f5849ecb6be3985c0b2 POLICY OTK Manager Client DB Update Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy updates an oauth client and all client_id's"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="client|client_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unknown persist_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="operation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for a valid persistence type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client_key"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${created_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_client_key SET created_by=${created_by} WHERE client_key = ${client_key}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="'created_by' gets handled exclusively. Used with MAG for updating client registrations"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${created_by}"/> <L7p:Expression2 stringValue="client_key"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="client_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4afe741a-3628-42a3-9d45-73a1d38d7020"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientKeyOptionalValues"/> </L7p:Encapsulated> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_client_key SET status=${client_status},scope=${scope},callback=${callback},environment=${environment},secret=${client_secret},custom=${key_custom},serviceIds=${service_ids},accountPlanMappingIds=${account_plan_mapping_ids} WHERE client_key = ${client_key}]]></L7p:SqlQuery> </L7p:JdbcQuery> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="update"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHZhbHVlcyB4bWxucz0iaHR0cDovL25zLmw3dGVjaC5jb20vMjAxMi8xMS9vdGstY2xpZW50c3RvcmUiLz4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="values"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CommentAssertion> <L7p:Comment stringValue="Empty the validation cache for this client_id. It is used at 'OTK Client Validation'"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5d92c1c2-f458-4dc4-a6a3-5959420eec62"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Remove"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValidationValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="update the cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updates a client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_type}"/> <L7p:Expression2 stringValue="client"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${type}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="b29i"/> <L7p:VariableToSet stringValue="type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set to 'oob'. Valid for OAuth 1.0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b418ebf0-da69-401d-a6c6-249758b4734c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK setClientOptionalValues"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="oauth_client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update referenced client keys (if any)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_client_key SET client_name=${client_name} WHERE client_ident = ${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="oauth_client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update client with new params"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_client SET name=${client_name},description=${description},type=${type},organization=${org},custom=${client_custom} WHERE client_ident = ${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updates a client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkucXVlcnlyZXN1bHQuY291bnR9ICR7cGVyc2lzdF90eXBlfShzKSB1cGRhdGVk"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/token/OTK Manager Token DB GET 07854a0de3db8f5849ecb6be3985c0b1 POLICY OTK Manager Token DB GET Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbHVlcz4KPC92YWx1ZXM+"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="returnOffset"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${tokentype}"/> <L7p:Expression2 stringValue="token"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue="0"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue="0"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeU9mZnNldH0="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Offset"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the offset for the database query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Below: SQL-Queries that will always return a single row"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token,secret,expiration,rtoken,rexpiration,scope,resource_owner,client_name,client_ident,client_key,status,created,custom FROM oauth_token WHERE token = ${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE rtoken = ${rtoken}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given rtoken"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Below: SQL-Queries that will return up to a few rows"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE client_key = ${client_key} AND resource_owner = ${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given client - resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== As of here pagination is required ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Below: SQL-Queries that may return a few thousand rows"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE resource_owner like ${resource_owner} AND status = ${token_status} ORDER BY resource_owner, client_name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token WHERE resource_owner like ${resource_owner} AND status = ${token_status} ORDER BY resource_owner, client_name, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given resource_owner and status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE resource_owner like ${resource_owner} ORDER BY resource_owner, client_name, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token WHERE resource_owner like ${resource_owner} ORDER BY resource_owner, client_name, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token of a given resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE client_key = ${client_key} ORDER BY client_name, resource_owner, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token WHERE client_key = ${client_key} ORDER BY client_name, resource_owner, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values of given client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token WHERE status = ${token_status} ORDER BY client_name, resource_owner, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token WHERE status = ${token_status} ORDER BY client_name, resource_owner, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Below: SQL-Query that will return all rows"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="mysql"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM oauth_token ORDER BY client_name, resource_owner, created ASC LIMIT 100 OFFSET ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="oracle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:ConvertVariablesToStrings booleanValue="false"/> <L7p:GenerateXmlResult booleanValue="true"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, rtoken, rexpiration, scope, resource_owner, client_name, client_ident, client_key, status, created,custom FROM ( SELECT /*+ FIRST_ROWS(100) */ oauth_token.*, ROWNUM rnum FROM ( SELECT * FROM oauth_token ORDER BY client_name, resource_owner, created ASC ) oauth_token WHERE ROWNUM <= (100+${offset}) ) WHERE rnum > ${offset}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for database system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all access_token values "/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the jdbc query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtxdWVyeS54bWxSZXN1bHR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="input"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathRowCount"/> <L7p:XmlMsgSrc stringValue="input"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="string(count(//L7j:row) +string($offset))"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="L7j"/> <L7p:value stringValue="http://ns.l7tech.com/2012/08/jdbc-query-result"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFJvd0NvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="returnOffset"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${query.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="transform jdbc result to xml"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'get'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${tokentype}"/> <L7p:Expression2 stringValue="temporary"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="temporary"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE token = ${token}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${verifier}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE token = ${token} AND verifier = ${verifier}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given token and verifier"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE client_key = ${client_key} AND resource_owner = ${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given client, resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration, scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE resource_owner = ${resource_owner}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="10000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[SELECT token, secret, expiration,scope, resource_owner, client_name, client_key, created, verifier, callback,custom FROM oauth_initiate WHERE client_key = ${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="all temporary token values of given client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the jdbc query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${query.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="transform jdbc result to xml"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'getTemp'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate xml with one root and one field for each token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:xls="http://www.w3.org/1999/XSL/Transform" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output encoding="UTF-8" indent="yes" method="xml"/> <xsl:param name="returnOffset"/> <xsl:template match="/values"> <xsl:element name="{name()}" xmlns="http://ns.l7tech.com/2012/11/otk-tokenstore"> <xsl:attribute name="offset"><xsl:value-of select="$returnOffset"/></xsl:attribute> <xsl:for-each select="descendant::node()[node()][1]/child::node()[node()]"> <xsl:variable name="index"> <xsl:value-of select="position()"/> </xsl:variable> <value index="{$index}" xmlns="http://ns.l7tech.com/2012/11/otk-tokenstore"> <xsl:element name="{name()}" xmlns="http://ns.l7tech.com/2012/11/otk-tokenstore"> <xsl:value-of select="text()"/> </xsl:element> <xsl:for-each select="parent::node()/following-sibling::node()[node()]"> <xsl:for-each select="*[position()=$index]"> <xsl:copy-of select="self::node()"/> </xsl:for-each> </xsl:for-each> </value> </xsl:for-each> </xsl:element> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${format}"/> <L7p:Expression2 stringValue="json"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="json"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JsonTransformation> <L7p:DestinationMessageTarget MessageTarget="included"> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:Target target="OTHER"/> <L7p:TargetModifiedByGateway booleanValue="true"/> </L7p:DestinationMessageTarget> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:PrettyPrint booleanValue="true"/> <L7p:RootTagString stringValue=""/> <L7p:Target target="OTHER"/> </L7p:JsonTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="resp.mainpart"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="resp.mainpart"/> <L7p:Regex stringValue="&quot;xmlns&quot;:[\s]?&quot;http://ns.l7tech.com/2012/11/otk-tokenstore&quot;,\n"/> <L7p:RegexName stringValue="Remove Namespace"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="transform to json if applicable"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/client/OTK Manager Client DB Delete 07854a0de3db8f5849ecb6be3985c0b4 POLICY OTK Manager Client DB Delete Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes an oauth client and all client_id's"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_client WHERE client_ident = ${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The client could not be deleted. client_ident: '${client_ident}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="delete"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkucXVlcnlyZXN1bHQuY291bnR9IGNsaWVudChzKSBkZWxldGVk"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/manager/token/OTK Manager Token DB Disable 07854a0de3db8f5849ecb6be3985c0ae POLICY OTK Manager Token DB Disable Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="verify required fields"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_token SET status='DISABLED' WHERE client_key=${client_key}]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${result}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtxdWVyeS5xdWVyeXJlc3VsdC5jb3VudH0gdG9rZW4ocykgZGlzYWJsZWQ="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/id_token/OTK id_token DB Persist 07854a0de3db8f5849ecb6be3985c0ac POLICY OTK id_token DB Persist Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb420fe0-7400-448a-ac1f-984794796f45"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Lifetime Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${iss}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Extract the expiration date, put it in to the db"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="payload"/> <L7p:OtherTargetMessageVariable stringValue="jwt"/> <L7p:Regex stringValue="[.](.{1,1024})[.]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtwYXlsb2FkWzFdfQ=="/> <L7p:VariableToSet stringValue="payload"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="payload"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="payload"/> <L7p:TransformType transformType="BASE64_DECODE"/> </L7p:EncodeDecode> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="expiration"/> <L7p:OtherTargetMessageVariable stringValue="payload"/> <L7p:Regex stringValue="exp[&quot;]:\s([0-9]{10}),"/> <L7p:Replacement stringValue="$1"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtleHBpcmF0aW9uWzFdfQ=="/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="EXTRACT_EXPIRATION"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The JWT expiration date could not be extracted. A default value will be used."/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateFormat stringValue="&lt;Second Timestamp&gt;"/> <L7p:DateOffsetExpression stringValue="${id_token_lifetime_s}"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtleHBpcmF0aW9uLnNlY29uZHN9"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="USE_DEFAULT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="expiration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Use the jwt-signature as jwt_id"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="jwt-signature"/> <L7p:OtherTargetMessageVariable stringValue="jwt"/> <L7p:Regex stringValue="[.]([a-zA-Z0-9-_]{1,512})$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid format"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="regex"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="jwt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3Qtc2lnbmF0dXJlWzFdfQ=="/> <L7p:VariableToSet stringValue="jwt-signature"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JdbcQuery> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[UPDATE oauth_id_token SET sub=${sub}, jwt_id=${jwt-signature}, jwt=${jwt}, salt=${salt}, shared_secret=${shared_secret}, shared_secret_type=${shared_secret_type}, iss=${iss}, expiration=${expiration} WHERE resource_owner=${resource_owner} AND azp = ${azp}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jdbcQuery.queryresult.count}"/> <L7p:Expression2 stringValue="1"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="1"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="update"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="insert"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_id_token (resource_owner, azp, sub, jwt_id, jwt, salt, shared_secret, shared_secret_type, iss, expiration) VALUES (${resource_owner}, ${azp}, ${sub},${jwt-signature},${jwt},${salt},${shared_secret},${shared_secret_type}, ${iss}, ${expiration})]]></L7p:SqlQuery> </L7p:JdbcQuery> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="id_token value could not be persisted"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jdbc"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="cGVyc2lzdGVk"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/client/OTK Client DB Revoke Key 07854a0de3db8f5849ecb6be3985c0c0 POLICY OTK Client DB Revoke Key Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy revokes an oauth client_id"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete client keys"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_client_key WHERE client_ident = ${client_ident}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_ident"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="use 'client_ident'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth Manager - revoke client key"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete client key"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AssertionFailureEnabled booleanValue="false"/> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[DELETE FROM oauth_client_key WHERE client_key = ${client_key}]]></L7p:SqlQuery> </L7p:JdbcQuery> <L7p:SetVariable> <L7p:Base64Expression stringValue="PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHZhbHVlcyB4bWxucz0iaHR0cDovL25zLmw3dGVjaC5jb20vMjAxMi8xMS9vdGstY2xpZW50c3RvcmUiLz4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="values"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="values"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CommentAssertion> <L7p:Comment stringValue="Empty the validation cache for this client_id. It is used at 'OTK Client Validation'"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5d92c1c2-f458-4dc4-a6a3-5959420eec62"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Remove"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValidationValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="use 'client_key'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The client could not be revoked. client_ident: '${client_ident}', client_key='${client_key}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="revoke"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqZGJjUXVlcnkucXVlcnlyZXN1bHQuY291bnR9IGNsaWVudF9rZXkocykgcmV2b2tlZA=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Persistence-JDBC/token/OTK Token DB Storage 07854a0de3db8f5849ecb6be3985c0a5 POLICY OTK Token DB Storage Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Primary key for oauth_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:MaximumQuantity intValue="1"/> <L7p:TargetVariable stringValue="tokenid"/> </L7p:UUIDGenerator> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlbmlkWzBdfQ=="/> <L7p:VariableToSet stringValue="tokenid"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="custom"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="custom"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set it to a default value if it is empty"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue="ENABLED"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="ENABLED"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="RElTQUJMRUQ="/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="status"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if the token status is ENABLED. Set it to DISABLED otherwise"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${tokentype}"/> <L7p:Expression2 stringValue="oauth2rtoken"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oauth2rtoken"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rexpiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e184d4f3-6eb2-4730-9172-3620bf6278d4"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Count"/> </L7p:Encapsulated> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="INSERT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Store the access_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_token (otk_token_id, token, secret, expiration, client_key, resource_owner, status, rtoken, rexpiration, created, client_name, scope, custom, client_ident) VALUES (${tokenid}, ${token}, ${token_secret}, ${expiration}, ${client_key}, ${resource_owner}, ${token_status}, ${rtoken}, ${rexpiration}, ${now.seconds}, ${client_name}, ${scope}, ${custom}, ${client})]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="access_token, refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${tokentype}"/> <L7p:Expression2 stringValue="temporary"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="temporary"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="b29i"/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="b29i"/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Store the request token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_initiate (token, secret, expiration, callback, client_key, client_name, created, scope, resource_owner, custom) VALUES( ${token}, ${token_secret}, ${expiration}, ${callback}, ${client_key}, ${client_name}, ${now.seconds}, ${scope}, ${resource_owner}, ${custom})]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="request_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${tokentype}"/> <L7p:Expression2 stringValue="oauth2token"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oauth2token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_credentials"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue="${resource_owner}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${resource_owner}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e184d4f3-6eb2-4730-9172-3620bf6278d4"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Count"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token limit"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JdbcQuery> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="INSERT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Store the access_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ConnectionName stringValue="OAuth"/> <L7p:MaxRecords intValue="1000"/> <L7p:SqlQuery stringValueReference="inline"><![CDATA[INSERT INTO oauth_token (otk_token_id, token, secret, expiration, client_key, client_ident, resource_owner, status, created, client_name, scope, custom) VALUES (${tokenid}, ${token}, ${token_secret}, ${expiration}, ${client_key}, ${client}, ${resource_owner}, ${token_status}, ${now.seconds}, ${client_name}, ${scope}, ${custom})]]></L7p:SqlQuery> <L7p:VariablePrefix stringValue="query"/> </L7p:JdbcQuery> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Set code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="store"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Store the token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="cGVyc2lzdGVk"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK Token DB Count Check 07854a0de3db8f5849ecb6be3985c0ce ENCAPSULATED_ASSERTION OTK Token DB Count Check 1e31b7cc-3bc0-4eb1-b722-be0623b852f6 1 resource_owner string false 2 client string false 3 custom string false error.code string custom_data string tokenQuery.access_tokens string tokenQuery.created string tokenQuery.queryresult.count integer customAssertions Save16.gif true Returns a count of Access Tokens associated with a given Client (App) and resource owner. true OTK id_token DB Remove 07854a0de3db8f5849ecb6be3985c0cf ENCAPSULATED_ASSERTION OTK id_token DB Remove 8b48d23c-1a9f-416d-bdd7-153098f31a9a 1 custom string false 2 jwt string false 3 azp string false 4 logout_apps string false 5 separate_schemas string false result string content-type string custom_data string error.code string internalAssertions Save16.gif true Internal Storage_Access Removes the given id_token. This is equal to a user logout since client apps are not able to use that id_token anymore to request access_token. id_token will be selected by either (jwt) or (azp). (logout_apps) will either also delete associated acces_token or not. OTK Manager Client DB Persist 07854a0de3db8f5849ecb6be3985c0d0 ENCAPSULATED_ASSERTION OTK Manager Client DB Persist 102a76f5-ae47-4930-8d93-bd02d738a3ee 1 key_custom string false 2 client_name string false 3 persist_type string false 4 service_ids string false 5 client_secret string false 6 client_custom string false 7 description string false 8 callback string false 9 scope string false 10 client_ident string false 11 account_plan_mapping_ids string false 12 custom string false 13 expiration string false 14 client_key string false 15 type string false 16 registered_by string false 17 environment string false 18 client_status string false 19 org string false result string content-type string custom_data string error.code string internalAssertions Save16.gif true Internal Storage_Access Persists values into the client store database. For use by OAuth Manager. false OTK Token DB Count 07854a0de3db8f5849ecb6be3985c0d1 ENCAPSULATED_ASSERTION OTK Token DB Count e6c28878-44b1-4761-8aa2-be5d961794ce 1 client_ident string false 2 other string false 3 custom string false count string custom_data string error.code string customAssertions Save16.gif true Returns a count of Access Tokens associated with a given Client (App). true OTK Client DB Revoke Key 07854a0de3db8f5849ecb6be3985c0d2 ENCAPSULATED_ASSERTION OTK Client DB Revoke Key 338a6974-8d3a-4ee9-9c40-a7069681799a 1 client_key string false 2 client_ident string false 3 custom string false result string content-type string custom_data string error.code string internalAssertions Save16.gif true Internal Storage_Access Deletes a client_key (client_id/ oauth_consumer_key). OTK Manager Client DB Revoke Key 07854a0de3db8f5849ecb6be3985c0d3 ENCAPSULATED_ASSERTION OTK Manager Client DB Revoke Key 9aa8efc0-671c-403d-9dbe-a3c09a3a3d97 1 client_ident string false 2 client_key string false 3 custom string false custom_data string content-type string result string error.code string internalAssertions Save16.gif true Internal Storage_Access Deletes a client_key (client_id/ oauth_consumer_key). For use by OAuth Manager. false OTK Token DB GET 07854a0de3db8f5849ecb6be3985c0d4 ENCAPSULATED_ASSERTION OTK Token DB GET 1c2e888c-7f82-45f5-9bdf-9ef42fd65bd3 1 rtoken string false 2 token string false 3 resource_owner string false 4 dbsystem string false 5 tokentype string false 6 verifier string false 7 queryOffset string false 8 token_status string false 9 client_key string false 10 custom string false 11 format string false resp message custom_data string content-type string error.code string internalAssertions Save16.gif true Internal Storage_Access Returns values from the token database. 'tokentype' can either be 'token' or 'temporary'. OTK Manager Client Key DB Count 07854a0de3db8f5849ecb6be3985c0d5 ENCAPSULATED_ASSERTION OTK Manager Client Key DB Count 0f9f9e7e-9d79-43f2-872a-60bf736985d0 1 client_ident string false 2 custom string false 3 other string false custom_data string error.code string count string customAssertions Save16.gif true Returns a count of non-master Client Keys associated to a given App (client_ident). For use by OAuth Manager. false OTK Manager Client DB Update 07854a0de3db8f5849ecb6be3985c0d6 ENCAPSULATED_ASSERTION OTK Manager Client DB Update 39cca824-a1b6-4e2a-a493-fd72f441dc9e 1 created_by string false 2 persist_type string false 3 org string false 4 client_status string false 5 custom string false 6 description string false 7 key_custom string false 8 client_custom string false 9 client_name string false 10 client_key string false 11 callback string false 12 service_ids string false 13 type string false 14 account_plan_mapping_ids string false 15 scope string false 16 client_secret string false 17 client_ident string false 18 environment string false custom_data string error.code string result string content-type string internalAssertions Save16.gif true Internal Storage_Access Updates a client or a client_key. For use by OAuth Manager. false OTK Manager Client DB Delete 07854a0de3db8f5849ecb6be3985c0d7 ENCAPSULATED_ASSERTION OTK Manager Client DB Delete a4a14e8c-8828-40a2-8276-661aa65e05e6 1 client_ident string false 2 custom string false custom_data string result string content-type string error.code string internalAssertions Save16.gif true Deletes a client configuration including all its depending client_keys (client_id/ oauth_consumer_key). Used by OAuth Manager. false OTK Manager Token DB Revocation 07854a0de3db8f5849ecb6be3985c0d8 ENCAPSULATED_ASSERTION OTK Manager Token DB Revocation b9e87b0b-95de-4cdb-bcf7-4f85d30fe67e 1 token string false 2 custom string false 3 resource_owner string false 4 client_key string false 5 rtoken string false content-type string error.code string result string custom_data string internalAssertions Save16.gif true Internal Storage_Access Revokes a token. false OTK id_token DB Persist 07854a0de3db8f5849ecb6be3985c0d9 ENCAPSULATED_ASSERTION OTK id_token DB Persist be6e4478-8216-4c75-b2f2-f0f80a7a0117 1 custom string false 2 jwt string false 3 salt string false 4 shared_secret_type string false 5 shared_secret string false 6 azp string false 7 sub string false 8 resource_owner string false 9 iss string false error.code string content-type string custom_data string result string internalAssertions Save16.gif true Internal Storage_Access Persists an id_token. An existing id_token of the given user will be replaced. OTK Token DB Disable 07854a0de3db8f5849ecb6be3985c0da ENCAPSULATED_ASSERTION OTK Token DB Disable c62bf4a9-cb28-4cb8-820e-af45be202425 1 custom string false 2 client_key string false custom_data string error.code string content-type string result string internalAssertions Save16.gif true Internal Storage_Access Disables tokens issued for the given client_key (client_id/ oauth_consumer_key). OTK Manager Token DB Disable 07854a0de3db8f5849ecb6be3985c0db ENCAPSULATED_ASSERTION OTK Manager Token DB Disable 242ddfd2-cf9e-448d-aadb-f7b6b67cc868 1 custom string false 2 client_key string false content-type string result string error.code string custom_data string internalAssertions Save16.gif true Internal Storage_Access Disables tokens issued for the given client_key (client_id/ oauth_consumer_key). For use by OAuth Manager. false OTK Client DB Persist 07854a0de3db8f5849ecb6be3985c0dc ENCAPSULATED_ASSERTION OTK Client DB Persist 3d07e7a4-b419-4664-9360-0782ea930372 1 custom string false 2 scope string false 3 service_ids string false 4 description string false 5 account_plan_mapping_ids string false 6 client_name string false 7 expiration string false 8 org string false 9 environment string false 10 callback string false 11 client_custom string false 12 client_status string false 13 client_secret string false 14 key_custom string false 15 registered_by string false 16 client_key string false 17 persist_type string false 18 client_ident string false 19 type string false custom_data string content-type string result string error.code string internalAssertions Save16.gif true Internal Storage_Access Persists values into the client store database. OTK Token DB Update 07854a0de3db8f5849ecb6be3985c0dd ENCAPSULATED_ASSERTION OTK Token DB Update 42b930fc-438f-4aaa-a702-7c45efe216fb 1 expiration string false 2 custom string false 3 token_status string false 4 resource_owner string false 5 token string false 6 verifier string false content-type string custom_data string result string error.code string internalAssertions Save16.gif true Internal Storage_Access Updates the given token. OTK id_token DB Lookup 07854a0de3db8f5849ecb6be3985c0de ENCAPSULATED_ASSERTION OTK id_token DB Lookup 7a23761d-8dde-4295-b30e-6241cbdb14e5 1 azp string false 2 format string false 3 custom string false 4 jwt string false 5 resource_owner string false 6 sub string false custom_data string content-type string error.code string resp message internalAssertions Save16.gif true Internal Storage_Access Retrieves all id_token values from the persistence layer. The following parameters are valid in combination: (resource_owner, azp), (sub, azp), (jwt) OTK Session DB 07854a0de3db8f5849ecb6be3985c0df ENCAPSULATED_ASSERTION OTK Session DB a2364b62-7ea8-4a77-a610-3ece64aec8ba 1 operation string false 2 cacheMaxSize string false 3 custom string false 4 cacheAge string false 5 cacheKey string false 6 value string false 7 dbAge string false 8 cacheId string false 9 cacheMaxEntries string false result string resp message error.code string content-type string custom_data string internalAssertions Save16.gif true Internal Storage_Access Modifies the session database table depending on the input parameters. This encas should not be used directly. Use the corresponding encas found at the 'manage/session' folder. false OTK Token DB Storage 07854a0de3db8f5849ecb6be3985c0e0 ENCAPSULATED_ASSERTION OTK Token DB Storage 517aebd3-6ce1-4e8e-bce1-fb7d065c34e1 1 rtoken string false 2 expiration string false 3 callback string false 4 temp_token string false 5 client_key string false 6 custom string false 7 token_secret string false 8 tokentype string false 9 max_oauth_token_behaviour string false 10 client string false 11 client_name string false 12 dbsystem string false 13 rexpiration string false 14 token string false 15 max_oauth_token_count string false 16 scope string false 17 resource_owner string false 18 token_status string false custom_data string result string error.code string content-type string internalAssertions Save16.gif true Internal Storage_Access Persists the given token. false OTK Manager Token DB GET 07854a0de3db8f5849ecb6be3985c0e1 ENCAPSULATED_ASSERTION OTK Manager Token DB GET 8ff483eb-ee66-4d70-a719-9e21d1bc5176 1 queryOffset string false 2 tokentype string false 3 resource_owner string false 4 verifier string false 5 dbsystem string false 6 token_status string false 7 token string false 8 client_key string false 9 custom string false 10 format string false 11 rtoken string false resp message error.code string content-type string custom_data string internalAssertions Save16.gif true Internal Storage_Access Returns values from the token database. 'tokentype' can either be 'token' or 'temporary'. false OTK Client DB GET 07854a0de3db8f5849ecb6be3985c0e2 ENCAPSULATED_ASSERTION OTK Client DB GET 2e7c73ef-afbf-47f8-89e0-8ba80095c2b3 1 environment string false 2 operation string false 3 org string false 4 custom string false 5 filterStatus string false 6 client_key string false 7 registered_by string false 8 client_ident string false 9 dbsystem string false 10 master string false 11 queryOffset string false 12 name string false 13 format string false error.code string custom_data string resp message content-type string internalAssertions Save16.gif true Internal Storage_Access Retrieves client values from the persistence layer. To find out how the parameters can by used refer to the OTK API documentation. OTK Client DB Update 07854a0de3db8f5849ecb6be3985c0e3 ENCAPSULATED_ASSERTION OTK Client DB Update 8982a1ae-c908-44d9-9c62-e4ef5a9f2148 1 description string false 2 client_name string false 3 client_custom string false 4 key_custom string false 5 environment string false 6 scope string false 7 org string false 8 client_secret string false 9 account_plan_mapping_ids string false 10 client_status string false 11 created_by string false 12 type string false 13 custom string false 14 client_ident string false 15 client_key string false 16 persist_type string false 17 service_ids string false 18 callback string false error.code string result string custom_data string content-type string internalAssertions Save16.gif true Internal Storage_Access Updates a client or a client_key. OTK Manager Client DB GET 07854a0de3db8f5849ecb6be3985c0e4 ENCAPSULATED_ASSERTION OTK Manager Client DB GET 7a1b5256-aaf9-4d2b-9171-6d65d92397cd 1 format string false 2 custom string false 3 filterStatus string false 4 dbsystem string false 5 org string false 6 operation string false 7 queryOffset string false 8 registered_by string false 9 client_ident string false 10 master string false 11 environment string false 12 client_key string false 13 name string false content-type string resp message custom_data string error.code string internalAssertions Save16.gif true Retrieves client values from the persistence layer for use by the OAuth Manager. To find out how the parameters can by used refer to the OTK API documentation. false OTK Client DB Delete 07854a0de3db8f5849ecb6be3985c0e5 ENCAPSULATED_ASSERTION OTK Client DB Delete cbe9a7d5-8e32-418a-b366-26494a1e765c 1 client_ident string false 2 custom string false result string error.code string custom_data string content-type string internalAssertions Save16.gif true Internal Storage_Access Deletes a client configuration including all its depending client_keys (client_id/ oauth_consumer_key). OTK Token DB Delete 07854a0de3db8f5849ecb6be3985c0e6 ENCAPSULATED_ASSERTION OTK Token DB Delete 8e75b13e-317f-407a-b80a-2dbb21d099d7 1 access_token string false 2 custom string false 3 client_key string false 4 refresh_token string false 5 temp_token string false content-type string custom_data string error.code string result string internalAssertions Save16.gif true Internal Storage_Access Deletes token from the persistence layer. OTK Client Key DB Count 07854a0de3db8f5849ecb6be3985c0e7 ENCAPSULATED_ASSERTION OTK Client Key DB Count df10cf53-7b6f-4194-831e-d15685d8ef6f 1 custom string false 2 dbsystem string false 3 other string false 4 client_ident string false count string custom_data string error.code string customAssertions Save16.gif true Returns a count of non-master Client Keys associated to a given App (client_ident). false OTK Token DB Revocation 07854a0de3db8f5849ecb6be3985c0e8 ENCAPSULATED_ASSERTION OTK Token DB Revocation eb0f2fdc-9337-4201-af2b-dc3e5c11be0f 1 custom string false 2 token string false 3 rtoken string false 4 resource_owner string false 5 client_key string false content-type string result string error.code string custom_data string internalAssertions Save16.gif true Internal Storage_Access Revokes a token. OTK Manager Token DB Update 07854a0de3db8f5849ecb6be3985c0e9 ENCAPSULATED_ASSERTION OTK Manager Token DB Update 0dfff5df-a150-4117-bde2-1c1afe088e3c 1 resource_owner string false 2 expiration string false 3 custom string false 4 token string false 5 verifier string false 6 token_status string false result string content-type string custom_data string error.code string internalAssertions Save16.gif true Internal Storage_Access Updates the given token. false OTK Database Maintenance - sessions 07854a0de3db8f5849ecb6be3985c0ea SCHEDULED_TASK OTK Database Maintenance - sessions true Recurring Scheduled 0 */7 * * * ? false OTK Database Maintenance - token 07854a0de3db8f5849ecb6be3985c0eb SCHEDULED_TASK OTK Database Maintenance - token true Recurring Scheduled 0 */13 * * * ? false OTK Database Maintenance - Client 07854a0de3db8f5849ecb6be3985c0ec SCHEDULED_TASK OTK Database Maintenance - Client true Recurring Scheduled 0 */31 * * * ? false OTK Database Maintenance - id_token 07854a0de3db8f5849ecb6be3985c0ed SCHEDULED_TASK OTK Database Maintenance - id_token true Recurring Scheduled 0 */29 * * * ? false OTK/ 07854a0de3db8f5849ecb6be3985c009 FOLDER OTK OTK/DMZ-OAuth2/ 07854a0de3db8f5849ecb6be3985c00a FOLDER DMZ-OAuth2 OTK/DMZ-OAuth2/documentation/ 07854a0de3db8f5849ecb6be3985c00b FOLDER documentation OTK/DMZ-OAuth2/Health/ 07854a0de3db8f5849ecb6be3985c00c FOLDER Health OTK/DMZ-OAuth2/TokenServer/ 07854a0de3db8f5849ecb6be3985c00d FOLDER TokenServer OTK/DMZ-OAuth2/AuthorizationServer/ 07854a0de3db8f5849ecb6be3985c00e FOLDER AuthorizationServer OTK/DMZ-OAuth2/ResourceServer/ 07854a0de3db8f5849ecb6be3985c00f FOLDER ResourceServer OTK/DMZ-OAuth2/ResourceServer/demo/ 07854a0de3db8f5849ecb6be3985c010 FOLDER demo OTK/DMZ-OAuth2/Health/auth-oauth-health 07854a0de3db8f5849ecb6be3985c011 SERVICE auth-oauth-health true /auth/oauth/health DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This API implements a health check for OTK"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This API may be consumed every 1s"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Test 1: request a token using grant_type=client_credentials"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Test 2: create access_token, resfresh_token, id_token and consume /userinfo"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Test 3: use refresh_token"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="error"/> <L7p:ContentType stringValue="text/plain"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="503"/> </L7p:CustomizeErrorResponse> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Invalid server configureation, see 'OTK Fail with error message'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTMy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Prepare error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${gateway.otk.health.apikey}"/> <L7p:Expression2 stringValue="${gateway.otk.health.apikey}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="${gateway.otk.health.apikey}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="API key has not been set"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if API key was set on Gateway"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="apikey"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="API key was empty OR API key was not provided OR more than one API key was provided"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check exactly one occurence of apikey"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.apikey}"/> <L7p:Expression2 stringValue="${gateway.otk.health.apikey}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${gateway.otk.health.apikey}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="API key provided was invalid, given: '${request.http.parameter.apikey}'"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check API key validity"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:RateLimit> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// 10s"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:BlackoutPeriodInSeconds stringValue="1"/> <L7p:CounterName stringValue="PRESET(ccdb6eb3f29108a9)${request.clientid}"/> <L7p:HardLimit booleanValue="true"/> <L7p:MaxConcurrency stringValue="5"/> <L7p:MaxRequestsPerSecond stringValue="1"/> <L7p:SplitConcurrencyLimitAcrossNodes booleanValue="false"/> <L7p:SplitRateLimitAcrossNodes booleanValue="false"/> <L7p:WindowSizeInSeconds stringValue="10"/> </L7p:RateLimit> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGVzdCR7Z2VuVG9rZW59"/> <L7p:VariableToSet stringValue="client_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5TZWNyZXR9"/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// 60s"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="60"/> <L7p:VariableToSet stringValue="exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="T1RLLUhlYWx0aGNoZWNrLSR7Y2xpZW50X2lkfQ=="/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// must be url encoded (i.e.: 'scopea scopeb' == 'scopea+scopeb'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aGVhbHRoY2hlY2s="/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// must be url encoded (i.e.: 'scopea scopeb' == 'scopea+scopeb'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="SGVhbHRoY2hlY2tBUEk="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create oauth client, lifetime 60s"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="96e27167-a194-49c1-966e-fd11842804d8"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="account_plan_mapping_ids"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="https://localhost"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_custom"/> <L7p:value stringValue="{}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="description"/> <L7p:value stringValue="Test client for automated healthcheck"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="ALL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${exp.seconds}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="key_custom"/> <L7p:value stringValue="{}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue="CA Technologies"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client_and_key"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client_key"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="service_ids"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="type"/> <L7p:value stringValue="confidential"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// retrieve error message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValueReference="inline"><![CDATA[Persisting client failed: ${error.msg}]]></L7p:Detail> <L7p:LoggingOnly booleanValue="true"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// persist client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${gateway.otk.port.health}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX06JHtnYXRld2F5Lm90ay5wb3J0LmhlYWx0aH0="/> <L7p:VariableToSet stringValue="url"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX0="/> <L7p:VariableToSet stringValue="url"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if port number set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_server_url_prefix}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1cmx9LyR7b2F1dGgyX3NlcnZlcl91cmxfcHJlZml4fQ=="/> <L7p:VariableToSet stringValue="url"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for a prefix"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// find server location (with prefix)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="Test 1: use grant_type=client_credentials"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2lkPSR7Y2xpZW50X2lkfSZjbGllbnRfc2VjcmV0PSR7Y2xpZW50X3NlY3JldH0mZ3JhbnRfdHlwZT1jbGllbnRfY3JlZGVudGlhbHMmc2NvcGU9JHtzY29wZX0="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="msg"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:ProtectedServiceUrl stringValue="${url}/auth/oauth/v2/token"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Cookie"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="SOAPAction"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="msg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${resp.mainpart}"/> <L7p:Expression2 stringValue="access_token"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="access_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// call token endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValueReference="inline"><![CDATA[Test 1 failed: Token request to '${url}/auth/oauth/v2/token' using 'grant_type=client_credentials' failed!]]></L7p:Detail> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// request token using grant_type=client_credentials"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="Test 2: create token and consume /userinfo"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5TZWNyZXR9"/> <L7p:VariableToSet stringValue="refresh_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// 60s"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="60"/> <L7p:VariableToSet stringValue="at_exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// 90s"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="90"/> <L7p:VariableToSet stringValue="rt_exp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create an access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// overwrite scope=openid+profile+email"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="b3BlbmlkIHByb2ZpbGUgZW1haWw="/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3913b558-43c2-4bea-94be-8f11d47a00b9"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token, refresh_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${at_exp.seconds}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rexpiration"/> <L7p:value stringValue="${rt_exp.seconds}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${refresh_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// persist"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// retriever error message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValueReference="inline"><![CDATA[Test 2 failed: ${error.msg}]]></L7p:Detail> <L7p:LoggingOnly booleanValue="true"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// persist access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnYXRld2F5LnRpbWUuc2Vjb25kc30="/> <L7p:VariableToSet stringValue="nonce"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ea0db7be-ce05-4daa-a5fb-ac1ea3e74d49"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Generation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${client_Secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="db7a90bf-e85d-42bd-93db-a2950dbc2a51"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="iss"/> <L7p:value stringValue="${iss}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_type"/> <L7p:value stringValue="HS256"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue="${sub}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// persist"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// retriever error message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValueReference="inline"><![CDATA[Test 2 failed: ${error.msg}]]></L7p:Detail> <L7p:LoggingOnly booleanValue="true"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// persist id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMsg"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AuthOauthTokenVar stringValue="access_token"/> <L7p:AuthOauthVersion stringValue="2.0"/> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:ProtectedServiceUrl stringValue="${url}/openid/connect/v1/userinfo"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Cookie"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="SOAPAction"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="msg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${resp.mainpart}"/> <L7p:Expression2 stringValue="${resource_owner}"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="${resource_owner}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// call userinfo endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValueReference="inline"><![CDATA[Test 2 failed: Accessing '${url}/openid/connect/v1/userinfo' failed]]></L7p:Detail> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// consume /userinfo endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="Test 3: use refresh_token"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2lkPSR7Y2xpZW50X2lkfSZjbGllbnRfc2VjcmV0PSR7Y2xpZW50X3NlY3JldH0mZ3JhbnRfdHlwZT1yZWZyZXNoX3Rva2VuJnJlZnJlc2hfdG9rZW49JHtyZWZyZXNoX3Rva2VufQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="msg"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:ProtectedServiceUrl stringValue="${url}/auth/oauth/v2/token"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Cookie"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="SOAPAction"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="msg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${resp.mainpart}"/> <L7p:Expression2 stringValue="access_token"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="access_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// call token endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValueReference="inline"><![CDATA[Test 3 failed: Token request to '${url}/auth/oauth/v2/token' using 'grant_type=refresh_token' failed!]]></L7p:Detail> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// request token using grant_type=refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="clean up, remove all credentials"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="43a97ca8-1826-44e3-ae58-2ad218ff2a82"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Delete"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cf1c08ae-8f8e-48db-b01b-89eb891615a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Delete"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// access_token, refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="refresh_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="temp_token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2280526a-84d5-45e0-8148-9b645e0fe1a0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Remove"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// id_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="logout_apps"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValueReference="inline"><![CDATA[Clean up task failed: ${error.msg}]]></L7p:Detail> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete all credentials"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// empty response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/ResourceServer/demo/protected-resource 07854a0de3db8f5849ecb6be3985c012 SERVICE protected-resource true /oauth/v2/protectedapi* OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This is a protected resource server used by the test clients"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This endpoint can safely be disabled or deleted."/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OPTIONS|GET|POST"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enable CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="OPTIONS|GET|POST"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5c88f677-8517-4ec1-97ef-be8db907ec9b"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require OAuth 2 Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cache_lifetime"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="onetime"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope_fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope_required"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="ewogICJjbGllbnRfaWQiOiIke3Nlc3Npb24uY2xpZW50X2lkfSIsCiAgInN1YnNjcmliZXJfaWQiOiIke3Nlc3Npb24uc3Vic2NyaWJlcl9pZH0iLAogICJzY29wZSI6IiR7c2Vzc2lvbi5zY29wZX0iLAogICJleHBpcmVzX2F0Ijoke3Nlc3Npb24uZXhwaXJlc19hdH0sCiAgImFjY2Vzc2VkX2F0Ijoke2dhdGV3YXkudGltZS5taWxsaXN9LAogICJjdXN0b20iOiR7c2Vzc2lvbi5jdXN0b219Cn0="/> <L7p:ResponseContentType stringValue="application/json;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="ewoibWVzc2FnZSIgOiAiaXNfcHJlRmxpZ2h0Igp9"/> <L7p:ResponseContentType stringValue="application/json"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/AuthorizationServer/auth-oauth-v2-authorize 07854a0de3db8f5849ecb6be3985c013 SERVICE auth-oauth-v2-authorize true /auth/oauth/v2/authorize OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy issues an authorization grant or an token for 'token' response_type"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="74d99b1a-29c5-4017-90c5-397c00f43de0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Configuration"/> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 3000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SSL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Require SSL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="POST GET"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Method"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Checking the HTTP method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="acr_values"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_id"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="code_challenge"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="code_challenge_method"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="display"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="id_token_hint"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="login_hint"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="number"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="max_age"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="nonce"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="prompt"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="redirect_uri"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="response_type"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="scope"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="state"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnByb21wdH0="/> <L7p:VariableToSet stringValue="prompt"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${prompt}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:Regex stringValue="^(none|login|consent|login consent|consent login)$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="handle prompt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Fail with error if prompt = none with any other value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVydmFsdWVzLm1hZy1pZGVudGlmaWVyfEBAfSMj"/> <L7p:VariableToSet stringValue="requestHeaders"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Presence of '@@' indicates duplicate parameters"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="requestHeaders"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[@]{2}|[,]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="=== Mobile SSO"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the mag-identifier. either to '...mag-identifier' or '...device-identifier' to support older SDK versions"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVyLm1hZy1pZGVudGlmaWVyfQ=="/> <L7p:VariableToSet stringValue="mag-identifier"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZH0="/> <L7p:VariableToSet stringValue="client_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXRlfQ=="/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm5vbmNlfQ=="/> <L7p:VariableToSet stringValue="nonce"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmRpc3BsYXl9"/> <L7p:VariableToSet stringValue="display"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlkX3Rva2VuX2hpbnR9"/> <L7p:VariableToSet stringValue="id_token_hint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmxvZ2luX2hpbnR9"/> <L7p:VariableToSet stringValue="login_hint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjcl92YWx1ZXN9"/> <L7p:VariableToSet stringValue="acr_values"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNjb3BlfQ=="/> <L7p:VariableToSet stringValue="scopeOriginal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNvZGVfY2hhbGxlbmdlfQ=="/> <L7p:VariableToSet stringValue="codeChallenge"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNvZGVfY2hhbGxlbmdlX21ldGhvZH0="/> <L7p:VariableToSet stringValue="codeChallengeMethod"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm1heF9hZ2V9"/> <L7p:VariableToSet stringValue="maxAge"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc3BvbnNlX3R5cGV9"/> <L7p:VariableToSet stringValue="response_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc3BvbnNlX21vZGV9"/> <L7p:VariableToSet stringValue="response_mode"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item regex="included"> <L7p:Pattern stringValue="query|fragment|form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZnJhZ21lbnQ="/> <L7p:VariableToSet stringValue="response_mode"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fragment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="cXVlcnk="/> <L7p:VariableToSet stringValue="response_mode"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if code response_mode=query, otherwise fragment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set default response_mode if it is not query|fragment|form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${codeChallenge}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${codeChallengeMethod}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="cGxhaW4="/> <L7p:VariableToSet stringValue="codeChallengeMethod"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PKCE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:Regex stringValue="none|login|consent"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="bG9naW4gY29uc2VudA=="/> <L7p:VariableToSet stringValue="prompt"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="prompt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Can only contain 'none', 'consent', 'login'. 'select_account' is not yet supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="display"/> <L7p:Regex stringValue="page|social_login|local|template"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="cGFnZQ=="/> <L7p:VariableToSet stringValue="display"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="display"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Can only contain 'page', 'social_login'. 'popup', 'touch', 'wap' are not yet supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OIDC"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set default values for optional OpenID Connect parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="state"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="stateEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="nonce"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonceEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="display"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="displayEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="prompt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="promptEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="acr_values"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="acr_valuesEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="id_token_hint"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="id_token_hintEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="login_hint"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="login_hintEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scopeOriginal"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scopeOriginalEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="codeChallenge"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="codeChallengeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7206dd53-1b16-4c5a-83bd-d4702bc24c9a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Request Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="codeChallenge"/> <L7p:value stringValue="${codeChallenge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="codeChallengeMethod"/> <L7p:value stringValue="${codeChallengeMethod}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${request.http.parameter.redirect_uri}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_mode"/> <L7p:value stringValue="${response_mode}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_type"/> <L7p:value stringValue="${response_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scopeOriginal}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResult"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:result/text()='valid'"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientIdent"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_ident/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathName"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:clientName/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathRedirectURI"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:redirect_uri/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResponseType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:response_type"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResponseMode"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:response_mode"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_type"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKeyCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_key_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathScope.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="xpathScopeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathName.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="xpathNameEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathRedirectURI.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="xpathRedirectURIEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathResponseType.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="xpathResponseTypeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathResponseMode.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="xpathResponseModeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_idEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathClientIdent.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="clientIdentEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudFR5cGUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="xpathClientTypeEncoded"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudEN1c3RvbS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="xpathClientCustomEncoded"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudEtleUN1c3RvbS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="xpathClientKeyCustomEncoded"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlZGlyZWN0X3VyaX0="/> <L7p:VariableToSet stringValue="redirect_uri"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="redirect_uri"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="redirectURIEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// get default response_mode if not provided"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHt4cGF0aFJlc3BvbnNlTW9kZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="response_mode"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code is provide by validation assertion, API-ID 3000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="jsonMsg"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error_description"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error_description"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5yZXN1bHR9"/> <L7p:VariableToSet stringValue="error"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9kZXNjcmlwdGlvbi5yZXN1bHR9"/> <L7p:VariableToSet stringValue="error_description"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9yZWRpcmVjdF91cml9"/> <L7p:VariableToSet stringValue="redirect_uri"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error_redirect_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="error"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="error_type_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="error_description"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="error_description_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcn0="/> <L7p:VariableToSet stringValue="error_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZXJyb3I9JHtlcnJvcl90eXBlX2VuY29kZWR9JmVycm9yX2Rlc2NyaXB0aW9uPSR7ZXJyb3JfZGVzY3JpcHRpb25fZW5jb2RlZH0meC1jYS1lcnI9JHtlcnJvci5jb2RlfQ=="/> <L7p:VariableToSet stringValue="error"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="?"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="?"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcn0mc3RhdGU9JHtzdGF0ZUVuY29kZWR9"/> <L7p:VariableToSet stringValue="error"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="state"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add state if available"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="fragment"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="fragment"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error_redirect_uri}"/> <L7p:Expression2 stringValue="#"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="#"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9yZWRpcmVjdF91cml9JiR7ZXJyb3J9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send error as new fragment or attach to existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9yZWRpcmVjdF91cml9IyR7ZXJyb3J9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=fragment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="query"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="query"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error_redirect_uri}"/> <L7p:Expression2 stringValue="?"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="?"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9yZWRpcmVjdF91cml9JiR7ZXJyb3J9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send error as new query or attach to existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9yZWRpcmVjdF91cml9PyR7ZXJyb3J9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="response"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="400"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no redirect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwb25zZX0="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="400"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=form_post"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no redirect"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the location header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no message body should be created"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no body but set the content-type header to a value"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dGV4dC9wbGFpbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set to 302 for the redirect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzAy"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="redirect"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="114$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="request.http.parameter.redirect_uri"/> <L7p:Regex stringValue="(%3c|[&lt;])(\w|%(?!20))"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Don't put the redirection url in the response body because it may lead to a XSS security leak. Just return the error description."/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtlcnJvcl9kZXNjcmlwdGlvbn0u"/> <L7p:VariableToSet stringValue="error_description"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Display the redirection URL if there is no XSS risk."/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtlcnJvcl9kZXNjcmlwdGlvbn0uIEdpdmVuOiAnJHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlZGlyZWN0X3VyaX0n"/> <L7p:VariableToSet stringValue="error_description"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="invalid redirect_uri"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="in this case add it to the error description"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogImVycm9yIjoiJHtlcnJvcn0iLAogImVycm9yX2Rlc2NyaXB0aW9uIjoiJHtlcnJvcl9kZXNjcmlwdGlvbn0iCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="html"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Either HTML or a redirect"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error and description"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Get the client values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:UUIDGenerator> <L7p:MaximumQuantity intValue="2"/> <L7p:Quantity stringValue="2"/> <L7p:TargetVariable stringValue="sessionID"/> </L7p:UUIDGenerator> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[mag]"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="May be overwritten if 'MSSO Device User Lookup' is enabled"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="YWxs"/> <L7p:VariableToSet stringValue="device-user-domain"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[mag]"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="May be overwritten if 'MSSO Device User Lookup' is enabled"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="device-user"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9bdebba2-bcf6-4945-b1c4-a4fde7cf335d"/> <L7p:EncapsulatedAssertionConfigName stringValue="MSSO Device User Lookup"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${sessionIdCacheAge}"/> <L7p:VariableToSet stringValue="exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="session"/> </L7p:SetVariable> <L7p:EncodeJsonWebToken> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="HS256"/> <L7p:SignatureSecretKey stringValue="${otk_session_secret}"/> <L7p:SourceVariable stringValue="${session}"/> <L7p:TargetVariable stringValue="jwt_session"/> </L7p:EncodeJsonWebToken> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Mobile SSO extension included"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:Regex stringValue="\bnone\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="\blogin\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="6f17a195-ef14-47b0-aefd-e3cd6c301d08"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cookie Management"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cookie"/> <L7p:value stringValue="${request.http.cookies}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookieName"/> <L7p:value stringValue="sessionCookie"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookieValue"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="lifetime"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_hint}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// either valid cookie or id_token_hint provided"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="bG9naW4="/> <L7p:VariableToSet stringValue="goToLoginWithAction"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="login"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="display"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZGlzcGxheQ=="/> <L7p:VariableToSet stringValue="goToLoginWithAction"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="prompt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="redirect to /login with action=login (prompt=none, id_token_hint not empty) or with action=display"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="Pw=="/> <L7p:VariableToSet stringValue="connector"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${location_login_server}"/> <L7p:Expression2 stringValue="?"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="?"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Jg=="/> <L7p:VariableToSet stringValue="connector"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for existing query component"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location_login_server}${connector}action=${goToLoginWithAction}&amp;sessionID=${sessionID[0]}&amp;sessionData=${jwt_session.compact}"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initial request"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Initial call of the client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Something went totally wrong!"/> </L7p:AuditDetailAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="unknown"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="something unknown happened"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Unknown action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Tasks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/AuthorizationServer/openid-client-register 07854a0de3db8f5849ecb6be3985c014 SERVICE openid-client-register true /openid/connect/register OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This API accepts dynamic oauth client registrations as defined in the context of OpenID Connect Dynamic Registration"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3009${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Require SSL, no client certificate"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:RateLimit> <L7p:CounterName stringValue="PRESET(5a4be1cc1bdc7ef5)${request.clientid}"/> <L7p:MaxRequestsPerSecond stringValue="5"/> <L7p:SplitRateLimitAcrossNodes booleanValue="false"/> </L7p:RateLimit> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="111"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="111"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== OVERRIDE"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// This is here in case the gateway has both MAG and OTK installed, because MAG also has error code 111 and that results in different error.msg"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHNlcnZpY2UgaXMgdGVtcG9yYXJpbHkgbm90IGF2YWlsYWJsZSIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="rate limit"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// POST|OPTIONS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${host_oauth2_auth_server}, ${oidc_register_path}"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="client_request"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Generate a client_ident (and client_id)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JSONSchema> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check if the session_output is JSON"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[{ "$schema": "http://json-schema.org/draft-04/schema#", "title": "Client Registration Message Validation", "description": "Verify that input is a JSON message", "type": "object" }]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> </L7p:JSONSchema> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[&lt;&gt;&amp;]|\\&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Incoming message contains characters that we do not accept: &lt;,&gt;,&amp; and \&quot; are not allowed."/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="133"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="133"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate that incoming message is JSON"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Y29uZmlkZW50aWFs"/> <L7p:VariableToSet stringValue="client_type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="application_type"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="application_type"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthcHBsaWNhdGlvbl90eXBlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="application_type"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="application_type"/> <L7p:Regex stringValue="web|native"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Using default application_type 'web' since none or an invalid one was provided"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="d2Vi"/> <L7p:VariableToSet stringValue="application_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type=authorization_code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// application_type MAY be provided, default: web"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${application_type}"/> <L7p:Expression2 stringValue="web"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="web"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="cHVibGlj"/> <L7p:VariableToSet stringValue="client_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// figure out the client_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// application_type, mapping to client_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="redirect_uris"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// redirect_uri(s) MUST exist"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="redirect_uris"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="redirect_uris"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// surround the comma separated list with double quotes"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="IiR7cmVkaXJlY3RfdXJpcy5yZXN1bHRzfSI="/> <L7p:VariableToSet stringValue="redirect_uris"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// surround each comma with double quotes (&quot;)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="redirect_uris"/> <L7p:Regex stringValue=",\s{0,10}"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&quot;,&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ForEachLoop L7p:Usage="Required" loopVariable="redirect_uris.results" variablePrefix="uri"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${uri.current}"/> <L7p:Expression2 stringValue="#"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="#"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_type}"/> <L7p:Expression2 stringValue="confidential"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="confidential"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only https scheme accepted"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="uri.current"/> <L7p:Regex stringValue="^https://.*"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// localhost NOT accepted"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="uri.current"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="^.*://localhost.*"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// web (confidential)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_type}"/> <L7p:Expression2 stringValue="public"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="public"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// http scheme only allowed with hostname localhost"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="uri.current"/> <L7p:Regex stringValue="^http:\/\/localhost.*"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// only custom scheme accepted"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="uri.current"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="^(http|https)://.*"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// native (public)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// web (confidential) or native (public)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </L7p:ForEachLoop> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// accept only https, do not accept localhost or fragments, generally for all application types"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="No or invalid redirect_uri(s) were provided: '${redirect_uris}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="114"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// invalid or missing redirect_uri(s)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="114"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// redirect_uri(s) MUST be provided"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="sector_identifier_uri"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="sector_identifier_uri"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="sector_identifier_uri"/> </L7p:EvaluateJsonPathExpression> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sector_identifier_uri.found}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMsg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZWN0b3JfaWRlbnRpZmllcl91cmkucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="sector_identifier_uri"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="verify https"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sector_identifier_uri"/> <L7p:Regex stringValue="^https"/> <L7p:RegexName stringValue="sector_identifier_uri"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:ProtectedServiceUrl stringValue="${sector_identifier_uri}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Cookie"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="SOAPAction"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMsg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// needs to point to a URL and must be customizable"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="sector_identifier_uri_response"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cmlzLnJlc3VsdHN9"/> <L7p:VariableToSet stringValue="redirect_uris_check"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="verify JSON array"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sector_identifier_uri_response"/> <L7p:Regex stringValue="\[.*\]"/> <L7p:RegexName stringValue="sector_identifier_uri_response"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remove square brace and quotes"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sector_identifier_uri_response"/> <L7p:Regex stringValue="\[|&quot;|\]"/> <L7p:RegexName stringValue="sector_identifier_uri_response"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remove double quotes and any whitespace characters"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sector_identifier_uri_response"/> <L7p:Regex stringValue="[&quot;\s]*"/> <L7p:RegexName stringValue="sector_identifier_uri_response"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="replace , with space"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sector_identifier_uri_response"/> <L7p:Regex stringValue=","/> <L7p:RegexName stringValue="sector_identifier_uri_response"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=" "/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remove double quotes and any whitespace characters"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="redirect_uris_check"/> <L7p:Regex stringValue="[&quot;\s]*"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="replace , with space"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="redirect_uris_check"/> <L7p:Regex stringValue=","/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=" "/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Misuse this assertion to compare space separated lists of values"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${sector_identifier_uri_response}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="${redirect_uris_check}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// valid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// not given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sector_identifier_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Invalid sector_identifier_uri(s) or invalid redirect_uri(s): '${sector_identifier_uri}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="114"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Invalid"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="114"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check if sector_identifier_uri contains all redirect_uris"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="organization_default"/> <L7p:OtherTargetMessageVariable stringValue="redirect_uris"/> <L7p:Regex stringValue="^&quot;([^&quot;]+)&quot;"/> <L7p:Replacement stringValue="found: $1"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// use the first _redirect_uri. Its the best we have to make the registration unique"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtvcmdhbml6YXRpb25fZGVmYXVsdFsxXX0="/> <L7p:VariableToSet stringValue="defaultNameOrganization"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract the first redirect_uri used as default values for 'client_name', 'organization'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="response_types"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="response_types"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZV90eXBlcy5yZXN1bHRzfQ=="/> <L7p:VariableToSet stringValue="response_types"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7cmVzcG9uc2VfdHlwZXN9Ig=="/> <L7p:VariableToSet stringValue="response_types"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_types"/> <L7p:Regex stringValue=",[ ]*"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&quot;,&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:CustomAssertion> <L7p:base64SerializedValue>rO0ABXNyADFjb20ubDd0ZWNoLnBvbGljeS5hc3NlcnRpb24uQ3VzdG9tQXNzZXJ0aW9uSG9sZGVyZtcreFwddTICAAlaAAxpc1VpQXV0b09wZW5MAApjYXRlZ29yaWVzdAAPTGphdmEvdXRpbC9TZXQ7TAAIY2F0ZWdvcnl0ACpMY29tL2w3dGVjaC9wb2xpY3kvYXNzZXJ0aW9uL2V4dC9DYXRlZ29yeTtMAA9jdXN0b21Bc3NlcnRpb250ADFMY29tL2w3dGVjaC9wb2xpY3kvYXNzZXJ0aW9uL2V4dC9DdXN0b21Bc3NlcnRpb247TAAUY3VzdG9tTW9kdWxlRmlsZU5hbWV0ABJMamF2YS9sYW5nL1N0cmluZztMAA9kZXNjcmlwdGlvblRleHRxAH4ABEwAD3BhbGV0dGVOb2RlTmFtZXEAfgAETAAOcG9saWN5Tm9kZU5hbWVxAH4ABEwAHnJlZ2lzdGVyZWRDdXN0b21GZWF0dXJlU2V0TmFtZXEAfgAEeHIAJWNvbS5sN3RlY2gucG9saWN5LmFzc2VydGlvbi5Bc3NlcnRpb27bX2OZPL2isQIAAloAB2VuYWJsZWRMABBhc3NlcnRpb25Db21tZW50dAAvTGNvbS9sN3RlY2gvcG9saWN5L2Fzc2VydGlvbi9Bc3NlcnRpb24kQ29tbWVudDt4cAFwAXNyABFqYXZhLnV0aWwuSGFzaFNldLpEhZWWuLc0AwAAeHB3DAAAABA/QAAAAAAAAXNyAChjb20ubDd0ZWNoLnBvbGljeS5hc3NlcnRpb24uZXh0LkNhdGVnb3J5WrCcZaFE/jUCAAJJAAVteUtleUwABm15TmFtZXEAfgAEeHAAAAAHdAAfTWVzc2FnZVZhbGlkYXRpb25UcmFuc2Zvcm1hdGlvbnhwc3IAUGNvbS5sN3RlY2guY3VzdG9tLmNoZWNrcmVzcG9uc2V0eXBlc3VwcG9ydGVkLkNoZWNrUmVzcG9uc2VUeXBlU3VwcG9ydGVkQXNzZXJ0aW9uKyTM/B4g200CAAJMAA1yZXNwb25zZV90eXBlcQB+AARMABhyZXNwb25zZV90eXBlc19zdXBwb3J0ZWRxAH4ABHhwdAARJHtyZXNwb25zZV90eXBlc310ABske3Jlc3BvbnNlX3R5cGVzX3N1cHBvcnRlZH10ADQxYzMzM2RiMTdiMDI1Njg3YjNhYTFiZTQxNGY1MjY1NDI4OWQxZjdkOTZlYjg5NTUuamFydAAlQ2hlY2sgaWYgYSByZXNwb25zZV90eXBlIGlzIHN1cHBvcnRlZHBwcA==</L7p:base64SerializedValue> </L7p:CustomAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Using default response_type 'code' since none were provided"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ImNvZGUi"/> <L7p:VariableToSet stringValue="response_types"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="response_type=code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// response_type(s) MAY be provided, default: code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="grant_types"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="grant_types"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtncmFudF90eXBlcy5yZXN1bHRzfQ=="/> <L7p:VariableToSet stringValue="grant_types"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="grant_types"/> <L7p:Regex stringValue=","/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="61081bea-be25-437e-bc4f-e5c7a7df98b0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid grant_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="grant_types_supported"/> <L7p:Regex stringValue="[&quot;,\s]+"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=" "/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// no valid values were given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope.granted}"/> <L7p:Expression2 stringValue="oob"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7c2NvcGUuZ3JhbnRlZH0i"/> <L7p:VariableToSet stringValue="grant_types"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="grant_types"/> <L7p:Regex stringValue="\s"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&quot;,&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Using default grant_type 'authorization_code' since none or invalid ones were provided"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ImF1dGhvcml6YXRpb25fY29kZSI="/> <L7p:VariableToSet stringValue="grant_types"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type=authorization_code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// grant_type(s) MAY be provided, default: authorization_code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="contacts"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="contacts"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb250YWN0cy5yZXN1bHRzfQ=="/> <L7p:VariableToSet stringValue="contacts"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${contacts}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7Y29udGFjdHN9Ig=="/> <L7p:VariableToSet stringValue="contacts"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// prepare 'contacts' to include quotes"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="contacts"/> <L7p:Regex stringValue=",\s{0,10}"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&quot;,&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="InVua25vd24i"/> <L7p:VariableToSet stringValue="contacts"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// contact(s) MAY be provided"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// used further down when persisting data"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtjb250YWN0c30="/> <L7p:VariableToSet stringValue="registered_by"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// remove quotes for this variable"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="registered_by"/> <L7p:Regex stringValue="&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// contact, and setting a 'registered_by' value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="client_name"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="client_name"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfbmFtZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given name"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// needs to be configurable"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtkZWZhdWx0TmFtZU9yZ2FuaXphdGlvbn0="/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// a client_name MAY be given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="logo_uri"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="client_uri"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="policy_uri"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="tos_uri"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initlialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="jwks - client side"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="jwks"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwks"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given jwks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if client does not provide jwks"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client provides jwks in registration request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if jwks is not given, no need to validate"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:JSONSchema> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check if the jwks is JSON object"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:JsonSchemaVersion jsonSchemaVersion="DRAFT_V4"/> <L7p:OtherTargetMessageVariable stringValue="jwks"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[{ "$schema": "http://json-schema.org/draft-04/schema#", "title": "Client Registration Message Validation", "description": "Verify that input is a JSON message", "type": "object" }]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> </L7p:JSONSchema> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="jwks"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[&lt;&gt;&amp;]|\\&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if jwks is given, check if it is a json object"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Incoming message contains characters that we do not accept: &lt;,&gt;,&amp; and \&quot; are not allowed."/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="133"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="133"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate that incoming jwks is JSON"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="jwks_uri - client side"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="jwks_uri"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwks_uri"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzX3VyaS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="jwks_uri"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if client does not provide jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwks_uri"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client provides jwks_uri in registration request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// not given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// not given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// neither jwks nor jwks will be used to replace the secret"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiI="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// both jwks and jwks_uri are empty"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// not given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzfQ=="/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// jwks is given, but no jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// not given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzX3VyaX0="/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiI="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// jwks_uri is given, but no jwks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="if both jwks and jwks_uri are given, return an error"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// jwks given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// jwks_uri given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Error: Both jwks and jwksuri were provided."/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="305"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// The jwks_uri and jwks parameters MUST NOT be used together"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="305"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// determine if jwks or jwks_uri will be used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="sector_identifier_uri"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="subject_type"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="subject_type"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzdWJqZWN0X3R5cGUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="subject_type"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e330e8ce-ca46-47f1-87d5-a2f0b54fd4ea"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid subject_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="subject_types_supported"/> <L7p:Regex stringValue="^&quot;|&quot;$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="subject_types_supported"/> <L7p:Regex stringValue="&quot;,\s+&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=","/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="subject_types_supported"/> <L7p:OutputVariable stringValue="subject_types_supported"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${subject_types_supported}"/> <L7p:Expression2 stringValue="${subject_type}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${subject_type}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given subject_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// needs to be configurable"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="cGFpcndpc2U="/> <L7p:VariableToSet stringValue="subject_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// a subject_type MAY be given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="id_token_signed_response_alg"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="id_token_signed_response_alg"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpZF90b2tlbl9zaWduZWRfcmVzcG9uc2VfYWxnLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="id_token_signed_response_alg"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0274785d-e085-4ae4-afd6-1e5b6e076117"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid id_token_signing_alg_values_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="id_token_signing_alg_values_supported"/> <L7p:Regex stringValue="^&quot;|&quot;$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="id_token_signing_alg_values_supported"/> <L7p:Regex stringValue="&quot;,\s+&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=","/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="id_token_signing_alg_values_supported"/> <L7p:OutputVariable stringValue="id_token_signing_alg_values_supported"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_signing_alg_values_supported}"/> <L7p:Expression2 stringValue="${id_token_signed_response_alg}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${id_token_signed_response_alg}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given id_token_signed_response_alg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// needs to be configurable"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="UlMyNTY="/> <L7p:VariableToSet stringValue="id_token_signed_response_alg"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// a id_token_signed_response_alg MAY be given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="id_token_encrypted_response_alg"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="id_token_encrypted_response_enc"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="userinfo_signed_response_alg"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="userinfo_signed_response_alg"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="userinfo_signed_response_alg"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="userinfo_signed_response_alg"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1c2VyaW5mb19zaWduZWRfcmVzcG9uc2VfYWxnLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="userinfo_signed_response_alg"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b1c63f23-ce1a-472f-acc4-4871688f3462"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid userinfo_signing_alg_values_supported"/> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${userinfo_signing_alg_values_supported}"/> <L7p:Expression2 stringValue="&quot;${userinfo_signed_response_alg}&quot;"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="&quot;${userinfo_signed_response_alg}&quot;"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHt1c2VyaW5mb19zaWduZWRfcmVzcG9uc2VfYWxnfQ=="/> <L7p:VariableToSet stringValue="userinfo_signed_response_alg"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given id_token_signed_response_alg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// not given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${userinfo_signed_response_alg}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Invalid algorithm for 'userinfo_signed_response_alg': '${userinfo_signed_response_alg}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Missing or invalid parameter"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// a userinfo_signed_response_alg MAY be given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="userinfo_encrypted_response_alg"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="userinfo_encrypted_response_enc"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="request_object_signing_alg"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="request_object_encryption_alg"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="request_object_encryption_enc"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="token_endpoint_auth_method"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="token_endpoint_auth_method"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlbl9lbmRwb2ludF9hdXRoX21ldGhvZC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="200ba76e-b322-4c68-8d09-c1775db3a125"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid token_endpoint_auth_methods_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:Regex stringValue="^&quot;|&quot;$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:Regex stringValue="&quot;,\s+&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=","/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:OutputVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_methods_supported}"/> <L7p:Expression2 stringValue="${token_endpoint_auth_method}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${token_endpoint_auth_method}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given token_endpoint_auth_method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Y2xpZW50X3NlY3JldF9iYXNpYw=="/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set token_endpoint_auth_method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Expression2 stringValue="private_key_jwt"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwksOrJwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="jwks/jwk_uri should not be empty when using &quot;private_key_jwt&quot; auth method."/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check jwks/jwks_uri is not empty if method is &quot;private_key_jwt&quot;"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// a token_endpoint_auth_method MAY be given. No support: none"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="token_endpoint_auth_signing_alg"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="token_endpoint_auth_signing_alg"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlbl9lbmRwb2ludF9hdXRoX3NpZ25pbmdfYWxnLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="token_endpoint_auth_signing_alg"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a7b09e54-d2fb-4ba1-84eb-fd7c993d2303"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid token_endpoint_auth_signing_alg_values_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="token_endpoint_auth_signing_alg_values_supported"/> <L7p:Regex stringValue="^&quot;|&quot;$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="token_endpoint_auth_signing_alg_values_supported"/> <L7p:Regex stringValue="&quot;,\s+&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=","/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="token_endpoint_auth_signing_alg_values_supported"/> <L7p:OutputVariable stringValue="token_endpoint_auth_signing_alg_values_supported"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_signing_alg_values_supported}"/> <L7p:Expression2 stringValue="${token_endpoint_auth_signing_alg}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${token_endpoint_auth_signing_alg}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// any of the supported alg can be used"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_endpoint_auth_signing_alg"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// a token_endpoint_auth_signing_alg MAY be given."/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="default_max_age"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="require_auth_time - will always be included"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="default_acr_values"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="initiate_login_uri"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="request_uris"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a4d10367-78f8-4736-9701-a569f754b479"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid scopes_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY29wZXNfc3VwcG9ydGVkfQ=="/> <L7p:VariableToSet stringValue="scope4database"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope4database"/> <L7p:Regex stringValue="^&quot;|&quot;$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope4database"/> <L7p:Regex stringValue="&quot;,\s*&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=" "/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configured SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="scope"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="scope"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY29wZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// scope requested"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY29wZTRkYXRhYmFzZX0="/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="organization"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="organization"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvcmdhbml6YXRpb24ucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="organization"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="organization"/> <L7p:Regex stringValue=".{0,128}"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// use the first _redirect_uri. Its the best we have to make the registration unique"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtkZWZhdWx0TmFtZU9yZ2FuaXphdGlvbn0="/> <L7p:VariableToSet stringValue="organization"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// organization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="description"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="description"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZXNjcmlwdGlvbi5yZXN1bHR9"/> <L7p:VariableToSet stringValue="description"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="description"/> <L7p:Regex stringValue=".{0,255}"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given description"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// needs to be configurable"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="UmVnaXN0ZXJlZCB2aWEgT3BlbklEIENvbm5lY3QgRHluYW1pYyBSZWdpc3RyYXRpb24="/> <L7p:VariableToSet stringValue="description"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// description"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="environment"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="environment"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlbnZpcm9ubWVudC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="environment"/> <L7p:Regex stringValue=".{0,128}"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given environment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// needs to be configurable"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="QUxM"/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// environment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="master"/> <L7p:OtherTargetMessageVariable stringValue="client_request"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="master"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYXN0ZXIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="master"/> <L7p:Regex stringValue="true|false"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given master-key (boolean)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// needs to be configurable"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// master-key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OTK specific values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke29pZGNfcmVnaXN0ZXJfcGF0aH0vJHtjbGllbnRfaWRlbnR9"/> <L7p:VariableToSet stringValue="client_config_endpoint"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// generate access_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5FeHBpcmF0aW9ufQ=="/> <L7p:VariableToSet stringValue="access_token_expiration"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// generate client_secret"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Expression2 stringValue="private_key_jwt"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwksOrJwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzT3JKd2tzX3VyaX0="/> <L7p:VariableToSet stringValue="secret_or_jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="genSecret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// use jws or jwks_uri as client's secret if either jwks or jws_uri is given during OIDC registration."/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// by default, registration will generate a secret"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtnZW5TZWNyZXR9"/> <L7p:VariableToSet stringValue="secret_or_jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiI="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwks_uri"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// use secret, ignore jwks/jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// use secret or jwks/jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfaWRlbnR9"/> <L7p:VariableToSet stringValue="genSecret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// is it a master-key?"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfcmVxdWVzdC5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="openid_registration_request"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="openid_registration_response"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJvcGVuaWRfcmVnaXN0cmF0aW9uIjogewogICAgInJlcXVlc3QiOiR7b3BlbmlkX3JlZ2lzdHJhdGlvbl9yZXF1ZXN0fSwKICAgICJyZXNwb25zZSI6JHtvcGVuaWRfcmVnaXN0cmF0aW9uX3Jlc3BvbnNlfQogIH0KfQ=="/> <L7p:VariableToSet stringValue="openid_registration"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="96e27167-a194-49c1-966e-fd11842804d8"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Persist"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// persist new client"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="account_plan_mapping_ids"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="${redirect_uris.results}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_custom"/> <L7p:value stringValue="{}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${secret_or_jwks}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="description"/> <L7p:value stringValue="${description}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${environment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${genExpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="key_custom"/> <L7p:value stringValue="${openid_registration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue="${organization}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client_and_key"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client_key"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${registered_by}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="service_ids"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="type"/> <L7p:value stringValue="${client_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The client could not be registered! Client name: '${client_name}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Could not be persisted"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Persist the client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="47b375d9-e1bd-48a7-821a-2d78ba2615d6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token)"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create initial access_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${access_token_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${registered_by}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${dynamic_registration_scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="201"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// registration response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtvcGVuaWRfcmVnaXN0cmF0aW9uX3Jlc3BvbnNlfQ=="/> <L7p:ResponseContentType stringValue="application/json; charset=UTF-8"/> <L7p:ResponseStatus stringValue="201"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain;charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="POST"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/AuthorizationServer/jwks_uri 07854a0de3db8f5849ecb6be3985c015 SERVICE jwks_uri true /openid/connect/jwks.json OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="OpenID Connect Dynamic Registration"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This API accepts client registrations in the context of OpenID Connect Dynamic Registration"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Dynamic Custom Error Defined Later in Policy"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3010${error.code}"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// SSL, no client certificate"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// GET|OPTIONS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4b61f2fa-8e0b-45ab-99d7-17267b7c2cc2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid jwks_endpoint Configuration"/> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHtqd2tzfQ=="/> <L7p:ResponseContentType stringValue="application/json; charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain;charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/AuthorizationServer/auth-oauth-v2-authorize-login 07854a0de3db8f5849ecb6be3985c016 SERVICE auth-oauth-v2-authorize-login true /auth/oauth/v2/authorize/login OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy issues an authorization grant or an token for 'token' response_type"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="74d99b1a-29c5-4017-90c5-397c00f43de0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Configuration"/> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlc3Npb25JRH0="/> <L7p:VariableToSet stringValue="sessionID"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlc3Npb25EYXRhfQ=="/> <L7p:VariableToSet stringValue="sessionDataJWT"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjdGlvbn0="/> <L7p:VariableToSet stringValue="action"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="json response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return json error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:FalseAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="return false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="stop processing the whole policy"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:FalseAssertion> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SSL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Require SSL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="POST GET"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Method"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Checking the HTTP method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="action"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="display"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="display"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="sessionData"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="sessionID"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQ=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="grantedContent"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="authorizeDeviceUserDomain"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/expected_device_user_domain"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="authorizeDeviceUser"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/expected_device_user"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHthdXRob3JpemVEZXZpY2VVc2VyRG9tYWluLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="expected-device-user-domain"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHthdXRob3JpemVEZXZpY2VVc2VyLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="expected-device-user"/> </L7p:SetVariable> <L7p:DecodeJsonWebToken> <L7p:SignatureSecret stringValue="${otk_session_secret}"/> <L7p:SourcePayload stringValue="${sessionDataJWT}"/> <L7p:TargetVariablePrefix stringValue="sessionData"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Verify the signature validation result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionData.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uRGF0YS5wYXlsb2FkfQ=="/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="sessionData"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.sessionID"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="sessionIDJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue="${sessionIDJWT.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${sessionIDJWT.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access the values stored in the cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="110, API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="110"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="isLogin"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other_for_consent"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session data"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Get granted values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.display"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="displayJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.login_hint"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="loginHintJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkaXNwbGF5SldULnJlc3VsdH0="/> <L7p:VariableToSet stringValue="display"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2dpbkhpbnRKV1QucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="login_hint"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${login_hint}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="login_hint"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="login_hint"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// login_hint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${newContent}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue="login_hint=${login_hint};"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue="login"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="186b5c70-293e-4d60-82e3-afa431de3e7c"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Social Login Providers HTML"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="agent"/> <L7p:value stringValue="${request.http.parameter.display}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="currentHost"/> <L7p:value stringValue="${request.url.host}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="device-user"/> <L7p:value stringValue="${expected-device-user}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="device-user-domain"/> <L7p:value stringValue="${expected-device-user-domain}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="display"/> <L7p:value stringValue="${display}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="enabled"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="hostname"/> <L7p:value stringValue="${request.url.host}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="htmlContent"/> <L7p:value stringValue="${content}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag-identifier"/> <L7p:value stringValue="${mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="myhost"/> <L7p:value stringValue="${request.url.host}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sessionData"/> <L7p:value stringValue="${sessionDataJWT}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sessionID"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="socialLoginEnabled"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtjb250ZW50fQ=="/> <L7p:ResponseContentType stringValue="${content-type}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="display"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Display the login screen"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="login"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="login"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// the resource_owner authenticated against the local IDP"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="sessionData"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="sessionID"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Social Login"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="code"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="oauth_token"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="oauth_verifier"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="provider"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="state"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnByb3ZpZGVyfQ=="/> <L7p:VariableToSet stringValue="provider"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXRlfQ=="/> <L7p:VariableToSet stringValue="sessionID"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="retrieve associated session JWT"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="socialLoginAuthorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="sessionDataJWT"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="110"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="110"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// look up the social login session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="social login"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// the resource_owner authenticated via social login provider (third party)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="prompt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="acr_values"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sessionID"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Make sure the session is still available"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="hasSession"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQ=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="grantedContent"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeRedirectURI"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/redirect_uri/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResponseMode"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/response_mode/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResponseType"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/response_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeState"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/state"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeRedirectURI.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeRedirectURIDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathResponseMode.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="response_mode"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathResponseType.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="response_type"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeState.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeStateDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> </wsp:All> <L7p:DecodeJsonWebToken> <L7p:SignatureSecret stringValue="${otk_session_secret}"/> <L7p:SourcePayload stringValue="${sessionDataJWT}"/> <L7p:TargetVariablePrefix stringValue="sessionData"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Verify the signature validation result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionData.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uRGF0YS5wYXlsb2FkfQ=="/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="sessionData"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.sessionID"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="sessionIDJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.exp"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="expJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.prompt"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="promptJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.id_token_hint"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="id_token_hintJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.acr_values"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="acr_valuesJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.client_id"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="clientIdJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.max_age"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="maxAge"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_consent.scope_verified"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="scopeVerifiedJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue="${sessionIDJWT.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${sessionIDJWT.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expJWT.result}"/> <L7p:Expression2 stringValue="${gateway.time.seconds}"/> <L7p:Operator operator="GE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GE"/> <L7p:RightValue stringValue="${gateway.time.seconds}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtwcm9tcHRKV1QucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="prompt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthY3JfdmFsdWVzSldULnJlc3VsdH0="/> <L7p:VariableToSet stringValue="acr_values"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="prompt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="prompt"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="acr_values"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="acr_values"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access the values stored in the cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="110"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="isLogin"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other_for_consent"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session data"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for valid session, set 'prompt' and 'acr_values'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:Regex stringValue="\bnone\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="\blogin\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpZF90b2tlbl9oaW50SldULnJlc3VsdH0="/> <L7p:VariableToSet stringValue="id_token_hint"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="6f17a195-ef14-47b0-aefd-e3cd6c301d08"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cookie Management"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cookie"/> <L7p:value stringValue="${request.http.cookies}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookieName"/> <L7p:value stringValue="sessionCookie"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookieValue"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="lifetime"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWVWYWx1ZX0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="cookieValue"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="current.username"/> <L7p:OtherTargetMessageVariable stringValue="cookieValue"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="resource_owner"/> </L7p:EvaluateJsonPathExpression> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner.result}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNvdXJjZV9vd25lci5yZXN1bHR9"/> <L7p:VariableToSet stringValue="lookupOwner"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="32d58e80-53a2-49fd-935a-391b1755e9fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Lookup"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${clientIdJWT.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${lookupOwner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="jwtValues"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:jwt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3RWYWx1ZXMucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="id_token_hint"/> </L7p:SetVariable> </wsp:All> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id_token_hint provided"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${id_token_hint}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="prompt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check that prompt includes none and not login"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="id_token_hint"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id_token_hint or cookie"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Only respected if prompt contains 'none' and not 'login'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b560d25b-98a1-47bb-ac4a-84bd9329da21"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acrValuesRequested"/> <L7p:value stringValue="${acr_values}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authHeader"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authIdToken"/> <L7p:value stringValue="${id_token_hint}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authSession"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientId"/> <L7p:value stringValue="${clientIdJWT.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookie"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookiename"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAge"/> <L7p:value stringValue="${maxAge.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="oauth_token"/> <L7p:value stringValue="${request.http.parameter.oauth_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="oauth_verifier"/> <L7p:value stringValue="${request.http.parameter.oauth_verifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="password"/> <L7p:value stringValue="${request.http.parameter.password}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="prompt"/> <L7p:value stringValue="${prompt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="provider"/> <L7p:value stringValue="${request.http.parameter.provider}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="state"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="username"/> <L7p:value stringValue="${request.http.parameter.username}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnVzZXJuYW1lfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnVzZXIucm9sZX0="/> <L7p:VariableToSet stringValue="resource_owner_role"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="authenticate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// login required"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="User authentication"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:Regex stringValue="\bnone\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="\bconsent\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="prompt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check that prompt includes none and not consent"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="id_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="clientIdJWT.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_id"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_id"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the dataset is associated with the correct client"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="ns:values/ns:value/ns:scope[../ns:client_key=$client_id]"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scopeVerifiedJWT.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scopeRequested"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${xpathScope.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="${scopeRequested}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// find current session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Handle session, skip it for response type id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="active"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="consent exists"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Z3JhbnQ="/> <L7p:VariableToSet stringValue="action_next"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="active"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="consent exists"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="YWN0aXZl"/> <L7p:VariableToSet stringValue="consent"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="active"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="consent has been given for the same client with the same requested scope"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="\bnone\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent or grant"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="next step: request consent if it does not exist"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Y29uc2VudA=="/> <L7p:VariableToSet stringValue="action_next"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="consent does not exist"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bm9uZQ=="/> <L7p:VariableToSet stringValue="consent"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzA0"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// prompt=none, consent required"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if consent has been given before"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uRGF0YS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="sessionData"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="current_user_consent&quot;:[\s]?&quot;none&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="current_user_consent&quot;:&quot;${consent}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="current_username&quot;:[\s]?&quot;&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="current_username&quot;:&quot;${resource_owner}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="current_user_role&quot;:[\s]?&quot;&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="current_user_role&quot;:&quot;${resource_owner_role}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="current_user_acr&quot;:[\s]?&quot;0&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="current_user_acr&quot;:&quot;${current.user.acr}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="current_user_authTime&quot;:[\s]?&quot;0&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="current_user_authTime&quot;:&quot;${current.user.authTime}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="salt&quot;:[\s]?&quot;&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="salt&quot;:&quot;${salt}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="third_party_sso_token&quot;:[\s]?&quot;&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="third_party_sso_token&quot;:&quot;${third_party_sso_token}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="third_party_sso_token_type&quot;:[\s]?&quot;&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="third_party_sso_token_type&quot;:&quot;${third_party_sso_token_type}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Update"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Update session data"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:EncodeJsonWebToken> <L7p:ContentEncryptionAlgorithm stringValue="A128CBC-HS256"/> <L7p:EncryptPayload booleanValue="true"/> <L7p:EncryptionSecret stringValue="${otk_session_secret_encryption}"/> <L7p:KeyManagementAlgorithm stringValue="dir"/> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="HS256"/> <L7p:SignatureSecretKey stringValue="${otk_session_secret}"/> <L7p:SourceVariable stringValue="${sessionData}"/> <L7p:TargetVariable stringValue="jwt_session"/> </L7p:EncodeJsonWebToken> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Auto-Form-Post"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="PGh0bWw+CjxIRUFEPgogICAgPE1FVEEgSFRUUC1FUVVJVj0nUFJBR01BJyBDT05URU5UPSdOTy1DQUNIRSc+CiAgICA8TUVUQSBIVFRQLUVRVUlWPSdDQUNIRS1DT05UUk9MJyBDT05URU5UPSdOTy1DQUNIRSc+CiAgICA8VElUTEU+TG9naW4gQXV0by1QT1NUIGZvcm08L1RJVExFPjwvSEVBRD4KPGJvZHkgb25Mb2FkPSJkb2N1bWVudC5mb3Jtc1swXS5zdWJtaXQoKSI+CjxOT1NDUklQVD5Zb3VyIGJyb3dzZXIgZG9lcyBub3Qgc3VwcG9ydCBKYXZhU2NyaXB0LiBQbGVhc2UgY2xpY2sgdGhlICdDb250aW51ZScgYnV0dG9uIGJlbG93IHRvIHByb2NlZWQuPC9OT1NDUklQVD48YnIvPgo8Zm9ybSBhY3Rpb249IiR7bG9jYXRpb25fY29uc2VudF9zZXJ2ZXJ9IiBtZXRob2Q9IlBPU1QiIGVuY3R5cGU9ImFwcGxpY2F0aW9uL3gtd3d3LWZvcm0tdXJsZW5jb2RlZCI+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhY3Rpb24iIHZhbHVlPSIke2FjdGlvbl9uZXh0fSI+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJzZXNzaW9uSUQiIHZhbHVlPSIke3Nlc3Npb25JRH0iPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0ic2Vzc2lvbkRhdGEiIHZhbHVlPSIke2p3dF9zZXNzaW9uLmNvbXBhY3R9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9InJlc3BvbnNlX3R5cGUiIHZhbHVlPSIke3Jlc3BvbnNlX3R5cGV9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9InJlc3BvbnNlX21vZGUiIHZhbHVlPSIke3Jlc3BvbnNlX21vZGV9Ij4KICAgIDxOT1NDUklQVD48SU5QVVQgVFlQRT0iU1VCTUlUIiBWQUxVRT0iQ29udGludWUiPjwvTk9TQ1JJUFQ+CjwvZm9ybT4KPC9ib2R5Pgo8L2h0bWw+"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="cookieValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="6f17a195-ef14-47b0-aefd-e3cd6c301d08"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cookie Management"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cookie"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookieName"/> <L7p:value stringValue="sessionCookie"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookieValue"/> <L7p:value stringValue="${cookieValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="lifetime"/> <L7p:value stringValue="3600"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${setCookie}"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${prompt}"/> <L7p:Expression2 stringValue="none"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="none"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${hasSession}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="jsonMsg"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error_description"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error_description"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9kZXNjcmlwdGlvbi5yZXN1bHR9"/> <L7p:VariableToSet stringValue="error_description"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5yZXN1bHR9"/> <L7p:VariableToSet stringValue="error_type"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="error_description.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="error_description_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="error.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="error_type_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error description"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract error description from error.msg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="used with location header"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZXJyb3I9JHtlcnJvcl90eXBlX2VuY29kZWR9JmVycm9yX2Rlc2NyaXB0aW9uPSR7ZXJyb3JfZGVzY3JpcHRpb25fZW5jb2RlZH0meC1jYS1lcnI9JHtlcnJvci5jb2RlfQ=="/> <L7p:VariableToSet stringValue="path"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="fragment"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeRedirectURIDecoded}"/> <L7p:Expression2 stringValue="#"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="#"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9JiR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send error as new fragment or attach to existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9IyR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=fragment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="query"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeRedirectURIDecoded}"/> <L7p:Expression2 stringValue="?"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="?"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9JiR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send error as new query or attach to existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9PyR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="response"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="400"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no redirect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwb25zZX0="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="400"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="build location"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeStateDecoded}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhdGlvbn0mc3RhdGU9JHthdXRob3JpemVTdGF0ZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="state"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add state parameter if sent in request message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Redirect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location}"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${prompt}"/> <L7p:Expression2 stringValue="none"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="none"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302, HTML"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Authentication"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// authenticate and prepare consent request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="login"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Authenticate the resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="cancel"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cancel"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="sessionID"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="hasSession"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue="10000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQ=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="grantedContent"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeRedirectURI"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/redirect_uri/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeState"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/state"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResponseMode"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/response_mode/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeRedirectURI.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeRedirectURIDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeState.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeStateDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathResponseMode.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="response_mode"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="hasSession"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Lookup session data"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="123"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="123"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="jsonMsg"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error_description"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error_description"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9kZXNjcmlwdGlvbi5yZXN1bHR9"/> <L7p:VariableToSet stringValue="error_description"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5yZXN1bHR9"/> <L7p:VariableToSet stringValue="error_type"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="error_description.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="error_description_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="error.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="error_type_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action denied"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${hasSession}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="used with location header"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZXJyb3I9JHtlcnJvcl90eXBlX2VuY29kZWR9JmVycm9yX2Rlc2NyaXB0aW9uPSR7ZXJyb3JfZGVzY3JpcHRpb25fZW5jb2RlZH0meC1jYS1lcnI9JHtlcnJvci5jb2RlfQ=="/> <L7p:VariableToSet stringValue="path"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="fragment"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeRedirectURIDecoded}"/> <L7p:Expression2 stringValue="#"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="#"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9JiR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send error as new fragment or attach to existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9IyR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=fragment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="query"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeRedirectURIDecoded}"/> <L7p:Expression2 stringValue="?"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="?"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9JiR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send error as new query or attach to existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9PyR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGh0bWw+CiAgICA8aGVhZD4KICAgICAgICA8dGl0bGU+RXJyb3IgUmVzcG9uc2U8L3RpdGxlPgogICAgPC9oZWFkPgogICAgPGJvZHkgb25sb2FkPSJqYXZhc2NyaXB0OmRvY3VtZW50LmZvcm1zWzBdLnN1Ym1pdCgpIj4KICAgICAgICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9Ij4KICAgICAgICAgICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iZXJyb3IiIHZhbHVlPSIke2Vycm9yX3R5cGV9Ii8+CiAgICAgICAgICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImVycm9yX2Rlc2NyaXB0aW9uIiB2YWx1ZT0iJHtlcnJvcl9kZXNjcmlwdGlvbn0iLz4KICAgICAgICAgICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0ieC1jYS1lcnIiIHZhbHVlPSIke2Vycm9yLmNvZGV9Ii8+CiAgICAgICAgPC9mb3JtPgogICAgPC9ib2R5Pgo8L2h0bWw+"/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="response"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="400"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no redirect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwb25zZX0="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="400"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="build location"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeStateDecoded}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhdGlvbn0mc3RhdGU9JHthdXRob3JpemVTdGF0ZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="state"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add state parameter if sent in request message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Redirect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location}"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="html"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="used with html response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302, html"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Respond wih redirect or html page"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cancel"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Login process was cancelled"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="reset"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="reset"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="sessionData"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="sessionID"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="socialLoginAuthorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="d8fde940-b8bd-441c-aa3c-2ed01456d45f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Flush"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remove session from DB and flush cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="delete session if exists"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${newContent}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue="reset"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtjb250ZW50fQ=="/> <L7p:ResponseContentType stringValue="${content-type}"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${cookieName}=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; Path=/; Secure; HttpOnly"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="reset"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Login page displayed wrong name"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="action but no session"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action, no session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid combination of parameters was used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="no action but session"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no action, session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid combination of parameters was used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="wrong parameter combination"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Something went totally wrong!"/> </L7p:AuditDetailAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3001"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="unknown"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="something unknown happened"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Unknown action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Tasks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/TokenServer/auth-oauth-v2-token 07854a0de3db8f5849ecb6be3985c017 SERVICE auth-oauth-v2-token true /auth/oauth/v2/token OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy issues an access token"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="POST|OPTIONS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enabled CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3003${error.code}"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowPost booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="assertion"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="client_id"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="client_secret"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="code"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="code_verifier"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="grant_type"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="password"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="redirect_uri"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="scope"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="username"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="client_assertion"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="client_assertion_type"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVydmFsdWVzLmRldmljZS1pZGVudGlmaWVyfEBAfSMjJHtyZXF1ZXN0Lmh0dHAuaGVhZGVydmFsdWVzLm1hZy1pZGVudGlmaWVyfEBAfSMjJHtyZXF1ZXN0Lmh0dHAuaGVhZGVydmFsdWVzLmF1dGhvcml6YXRpb258QEB9IyM="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="requestHeaders"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Presence of '@@' indicates duplicate parameters"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="requestHeaders"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[@]{2}|[,]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="81118d8f-69ab-430e-87fc-afa32e10b1ae"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Validate Grant Type"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="grant_type"/> <L7p:value stringValue="${request.http.parameter.grant_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code provided by previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Check grant type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVyLkF1dGhvcml6YXRpb259"/> <L7p:VariableToSet stringValue="requestAuthHeader"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requestAuthHeader}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="authScheme"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="requestAuthHeader"/> <L7p:Regex stringValue="(.*)\s.*"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Add WWW-Authenticate response header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Prepare Error Message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5d937743-5828-4630-b317-a8dd9044e315"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allow_basic"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="allow_query"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_header"/> <L7p:value stringValue="${requestAuthHeader}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_client_assertion"/> <L7p:value stringValue="${request.http.parameter.client_assertion}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_client_assertion_type"/> <L7p:value stringValue="${request.http.parameter.client_assertion_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_id"/> <L7p:value stringValue="${request.http.parameter.client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_secret"/> <L7p:value stringValue="${request.http.parameter.client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_client_name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_expiration"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_scope"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_type"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb26257a-4bb5-4154-912b-788affb618a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Tracking"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="clientkey"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${client_custom}, &quot;client_key_custom&quot;: ${client_key_custom}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="current_input"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="customer"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="otk"/> <L7p:value stringValue="{&quot;client_type&quot;: &quot;${client_type}&quot;,&quot;grant_type&quot;: &quot;${grant_type}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="portal"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requestAuthHeader}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="^\b[Bb][Aa][Ss][Ii][Cc]\b\s.+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:HeaderName stringValue="WWW-Authenticate"/> <L7p:HeaderValue stringValue="Basic error=&quot;Invalid or missing credentials&quot;"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="WWW-Authenticate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add header if necessary"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add header or continue"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code provided by previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Authenticate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="mag-identifier"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVyLm1hZy1pZGVudGlmaWVyfQ=="/> <L7p:VariableToSet stringValue="mag-identifier"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${mag-identifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="device-identifier"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVyLmRldmljZS1pZGVudGlmaWVyfQ=="/> <L7p:VariableToSet stringValue="mag-identifier"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="=== Mobile SSO"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the mag-identifier. either to '...mag-identifier' or '...device-identifier' to support older SDK versions"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="115"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify Scope"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ec70e0ed-a4ca-486d-926e-e0158935a5ff"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Verify Mag Identifier"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ACCESS_TOKEN"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="at_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5FeHBpcmF0aW9ufQ=="/> <L7p:VariableToSet stringValue="at_expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5TZWNyZXR9"/> <L7p:VariableToSet stringValue="mac_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsaWZldGltZX0="/> <L7p:VariableToSet stringValue="at_lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Generate access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="REFRESH_TOKEN"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="rtoken"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5FeHBpcmF0aW9ufQ=="/> <L7p:VariableToSet stringValue="rexpiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsaWZldGltZX0="/> <L7p:VariableToSet stringValue="rft_lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Generate refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="57d4baf4-144b-4ab0-829f-4276bd4517b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Configured Grant Types"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_client_credentials}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_client_credentials}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="135ee0e3-3f97-43b1-b6c7-36df4ea47f86"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK grant_type=CLIENT_CREDENTIALS"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="at_lifetime"/> <L7p:value stringValue="${at_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_type"/> <L7p:value stringValue="${client_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mac_secret"/> <L7p:value stringValue="${mac_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="47b375d9-e1bd-48a7-821a-2d78ba2615d6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${at_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${token_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type: client_credentials"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_password}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_password}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ce34e8f1-1b40-4630-bb06-3e20cee012d3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK grant_type=PASSWORD"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="at_lifetime"/> <L7p:value stringValue="${at_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mac_secret"/> <L7p:value stringValue="${mac_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="password"/> <L7p:value stringValue="${request.http.parameter.password}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="username"/> <L7p:value stringValue="${request.http.parameter.username}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${mag-identifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="for database"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="only valid for mobile clients"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope.granted"/> <L7p:Regex stringValue="\bopenid\b[ ]|\bopenid\b|[ ]\bopenid\b"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="for client response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="only valid for mobile clients"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="clientResponse"/> <L7p:Regex stringValue="\bopenid\b[ ]|\bopenid\b|[ ]\bopenid\b"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="non-mobile"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remove 'openid' from the list of graned SCOPE and do not execute Password_Extension"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SCOPE"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="'openid' is not valid for non mobile clients"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1cf60c6c-ecd3-43b5-a034-b5d7c78f3721"/> <L7p:EncapsulatedAssertionConfigName stringValue="MSSO grant_type=PASSWORD_Extension"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="at_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authenticatedUser"/> <L7p:value stringValue="${owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azpActual"/> <L7p:value stringValue="${request.http.header.mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientResponse"/> <L7p:value stringValue="${clientResponse}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${client_custom}, &quot;client_key_custom&quot;: ${client_key_custom}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="magidentifier"/> <L7p:value stringValue="${mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}${mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3913b558-43c2-4bea-94be-8f11d47a00b9"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token, refresh_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${at_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rexpiration"/> <L7p:value stringValue="${rexpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${token_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type: password"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_authorization_code}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_authorization_code}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="6af145d4-24ec-4711-bff9-92f9bcc29a6d"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK grant_type=AUTHORIZATION_CODE"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="at_lifetime"/> <L7p:value stringValue="${at_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue="${request.http.parameter.code}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mac_secret"/> <L7p:value stringValue="${mac_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="magidentifier"/> <L7p:value stringValue="${mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${request.http.parameter.redirect_uri}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="my_salt${client_id}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="d9166769-17ba-4808-8a66-fa9aabec86af"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK PKCE Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="codeVerifier"/> <L7p:value stringValue="${request.http.parameter.code_verifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="session"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5ee11e83-fe96-48ac-a165-d37d523e36ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="MSSO Device App Associate"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3913b558-43c2-4bea-94be-8f11d47a00b9"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token, refresh_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${at_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rexpiration"/> <L7p:value stringValue="${rexpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${token_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type: auth_code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_jwt}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_jwt}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b84af7eb-5b02-4016-a674-e099799b581e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK grant_type=JWT"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="accesst_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="assertion"/> <L7p:value stringValue="${request.http.parameter.assertion}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at_lifetime"/> <L7p:value stringValue="${at_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expected_grant_type"/> <L7p:value stringValue="${grant_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mac_secret"/> <L7p:value stringValue="${mac_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="magidentifier"/> <L7p:value stringValue="${mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3913b558-43c2-4bea-94be-8f11d47a00b9"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token, refresh_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${at_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rexpiration"/> <L7p:value stringValue="${rexpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${token_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type: jwt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_refresh_token}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_refresh_token}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="06305a70-c79a-480b-8764-0e29998e6316"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK grant_type=REFRESH_TOKEN"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="at_lifetime"/> <L7p:value stringValue="${at_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mac_secret"/> <L7p:value stringValue="${mac_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rexpiration_new"/> <L7p:value stringValue="${rexpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${request.http.parameter.refresh_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken_new"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.requested"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5ee11e83-fe96-48ac-a165-d37d523e36ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="MSSO Device App Associate"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3913b558-43c2-4bea-94be-8f11d47a00b9"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token, refresh_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${at_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rexpiration"/> <L7p:value stringValue="${rexpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${token_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type: refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_saml}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_saml}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="086aff1f-e43b-4047-a183-8146cfa79100"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK grant_type=SAML"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="assertion"/> <L7p:value stringValue="${request.http.parameter.assertion}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at_lifetime"/> <L7p:value stringValue="${at_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="conditions"/> <L7p:value stringValue="${request.url.protocol}://${request.url.host}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mac_secret"/> <L7p:value stringValue="${mac_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="receipient"/> <L7p:value stringValue="${request.url.protocol}://${request.url.host}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="47b375d9-e1bd-48a7-821a-2d78ba2615d6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${at_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${token_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type: saml"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="bb4bd3d2-cea6-4883-a20d-b4bfa7ee76c8"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant_type: custom"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE5"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid grant_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="grant type failure"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grant types"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Custom data passed to JWT generation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ewoJInNlc3Npb25fb3V0cHV0IjogJHtzZXNzaW9uX291dHB1dH0sIAoJInVzZXJuYW1lIjogIiR7b3duZXJ9Igp9CgoK"/> <L7p:VariableToSet stringValue="jwt_custom"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0bbc94ef-dd4b-4936-b056-69455b375d7d"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate JWT OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="aud"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${jwt_custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jti"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="lifetime"/> <L7p:value stringValue="${at_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Generate JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${at_jwt}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if at_jwt is not empty, update the access_token in client response with JWT"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="clientResponse"/> <L7p:Regex stringValue="access_token&quot;:[\s]?&quot;[^,\s]*&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token&quot;:&quot;${at_jwt}&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if use JWT, update acces_token in client response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtjbGllbnRSZXNwb25zZX0="/> <L7p:ResponseContentType stringValue="application/json;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Pragma"/> <L7p:HeaderValue stringValue="no-cache"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:HeaderName stringValue="Cache-Control"/> <L7p:HeaderValue stringValue="no-store"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain;charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="POST"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/AuthorizationServer/auth-oauth-v2-authorize-consent 07854a0de3db8f5849ecb6be3985c018 SERVICE auth-oauth-v2-authorize-consent true /auth/oauth/v2/authorize/consent OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy issues an authorization grant or an token for 'token' response_type"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="74d99b1a-29c5-4017-90c5-397c00f43de0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Configuration"/> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjdGlvbn0="/> <L7p:VariableToSet stringValue="action"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlc3Npb25JRH0="/> <L7p:VariableToSet stringValue="sessionID"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlc3Npb25EYXRhfQ=="/> <L7p:VariableToSet stringValue="sessionDataJWT"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="json response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return json error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:FalseAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="return false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="stop processing the whole policy"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:FalseAssertion> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SSL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Require SSL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="POST"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Method"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Checking the HTTP method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="action"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="sessionID"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVydmFsdWVzLm1hZy1pZGVudGlmaWVyfEBAfSMj"/> <L7p:VariableToSet stringValue="requestHeaders"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Presence of '@@' indicates duplicate parameters"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="requestHeaders"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[@]{2}|[,]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="consent"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="consent"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowPost booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="sessionData"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sessionID"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Make sure the session is still available"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="decrypt"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:SignatureSecret stringValue="${otk_session_secret_encryption}"/> <L7p:SourcePayload stringValue="${sessionDataJWT}"/> <L7p:TargetVariablePrefix stringValue="sessionData"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate signature"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:SignatureSecret stringValue="${otk_session_secret}"/> <L7p:SourcePayload stringValue="${sessionData.plaintext}"/> <L7p:TargetVariablePrefix stringValue="sessionData"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Verify the signature validation result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionData.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uRGF0YS5wYXlsb2FkfQ=="/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="sessionData"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.sessionID"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="sessionIDJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.exp"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="expJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.current_username"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="resourceOwnerJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue="${sessionIDJWT.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${sessionIDJWT.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expJWT.result}"/> <L7p:Expression2 stringValue="${gateway.time.seconds}"/> <L7p:Operator operator="GE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GE"/> <L7p:RightValue stringValue="${gateway.time.seconds}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resourceOwnerJWT.result}"/> <L7p:Expression2 stringValue="none"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="none"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.client_id"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="request_param.client_id"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.prompt"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="request_param.prompt"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_consent.client_name"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="clientNameJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_consent.scope_verified"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="scopeJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="clientNameJWT.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scopeJWT.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uRGF0YS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="sessionData"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updating the sessionData to include an active consent"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Regex stringValue="current_user_consent&quot;:[\s]?&quot;none&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="current_user_consent&quot;:&quot;requested&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:EncodeJsonWebToken> <L7p:ContentEncryptionAlgorithm stringValue="A128CBC-HS256"/> <L7p:EncryptPayload booleanValue="true"/> <L7p:EncryptionSecret stringValue="${otk_session_secret_encryption}"/> <L7p:KeyManagementAlgorithm stringValue="dir"/> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="HS256"/> <L7p:SignatureSecretKey stringValue="${otk_session_secret}"/> <L7p:SourceVariable stringValue="${sessionData}"/> <L7p:TargetVariable stringValue="jwt_session"/> </L7p:EncodeJsonWebToken> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3Rfc2Vzc2lvbi5jb21wYWN0fQ=="/> <L7p:VariableToSet stringValue="sessionDataJWT"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNvdXJjZU93bmVySldULnJlc3VsdH0="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access the values stored in the cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="110"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="110"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="isLogin"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other_for_consent"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session data"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for valid session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue="consent"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtjb250ZW50fQ=="/> <L7p:ResponseContentType stringValue="${content-type}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Request consent screen after successful login at '.../authorize/login'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="grant"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="grant"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowPost booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="sessionData"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="decrypt"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:SignatureSecret stringValue="${otk_session_secret_encryption}"/> <L7p:SourcePayload stringValue="${sessionDataJWT}"/> <L7p:TargetVariablePrefix stringValue="sessionData"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate signature"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:SignatureSecret stringValue="${otk_session_secret}"/> <L7p:SourcePayload stringValue="${sessionData.plaintext}"/> <L7p:TargetVariablePrefix stringValue="sessionData"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Verify the signature validation result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionData.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uRGF0YS5wYXlsb2FkfQ=="/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="sessionData"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.sessionID"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="sessionIDJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.exp"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="expJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.current_username"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="resourceOwnerJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.current_user_consent"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="consentJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue="${sessionIDJWT.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${sessionIDJWT.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expJWT.result}"/> <L7p:Expression2 stringValue="${gateway.time.seconds}"/> <L7p:Operator operator="GE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GE"/> <L7p:RightValue stringValue="${gateway.time.seconds}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resourceOwnerJWT.result}"/> <L7p:Expression2 stringValue="none"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="none"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="'active' if the user had an active oauth session, 'requested' if consent was requested"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${consentJWT.result}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="active|requested"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNvdXJjZU93bmVySldULnJlc3VsdH0="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.salt"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="salt"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.current_user_acr"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="current.user.acr"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.current_user_authTime"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="current.user.authTime"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.current_user_consent"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="consentJWT"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.third_party_sso_token"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="third_party_sso_token"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="session.third_party_sso_token_type"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="third_party_sso_token_type"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="request_parameters.max_age"/> <L7p:OtherTargetMessageVariable stringValue="sessionData"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="request_param.max_age"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0X3BhcmFtLm1heF9hZ2UucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="max_age"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQ=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="grantedContent"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeClientName"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/clientName/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeClientIdent"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/client_ident/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeClientID"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/client_id/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeRedirectURI"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/redirect_uri/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeGivenRedirectURI"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/given_redirect_uri"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeResponseType"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/response_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeResponseMode"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/response_mode"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeClientType"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/client_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeClientCustom"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/client_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeClientKeyCustom"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/client_key_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeScope"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeState"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/state"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeOidcNonce"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/oidcNonce"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeCodeChallenge"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/codeChallenge"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeCodeChallengeMethod"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/codeChallengeMethod"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="authorizeMagIdentifier"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/expected_mag_identifier"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="authorizeDeviceUserDomain"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/expected_device_user_domain"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="authorizeDeviceUser"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/expected_device_user"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeClientName.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeClientNameDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeClientIdent.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeClientIdentDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeClientID.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeClientIDDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeRedirectURI.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeRedirectURIDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeResponseType.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeResponseTypeDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeResponseMode.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeResponseModeDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeScope.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeScopeDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVTdGF0ZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="state"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeStateDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVDbGllbnRUeXBlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="authorizeClientTypeDecoded"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVDbGllbnRDdXN0b20ucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="authorizeClientCustomDecoded"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVDbGllbnRLZXlDdXN0b20ucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="authorizeClientKeyCustomDecoded"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVPaWRjTm9uY2UucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="oidcNonce"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVDb2RlQ2hhbGxlbmdlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="authorizeCodeChallenge"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVDb2RlQ2hhbGxlbmdlTWV0aG9kLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="authorizeCodeChallengeMethod"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHthdXRob3JpemVNYWdJZGVudGlmaWVyLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="expected-mag-identifier"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHthdXRob3JpemVEZXZpY2VVc2VyRG9tYWluLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="expected-device-user-domain"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHthdXRob3JpemVEZXZpY2VVc2VyLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="expected-device-user"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue="10000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access the values stored in the cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="110"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="110"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session data"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Get granted values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Verify that the authenticated user is the expected one for the device"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="No device given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expected-mag-identifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="No user expected"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="In a multi user scenario any user can use the device"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expected-device-user}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SocialLogin"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Typical case would be something like: 'facebook-MyFacebookName'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="resource_owner"/> <L7p:PatternContainsVariables booleanValue="true"/> <L7p:Regex stringValue="${expected-device-user-domain}.?${expected-device-user}"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${max_age}"/> <L7p:Expression2 stringValue="0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnVzZXIuYXV0aFRpbWUucmVzdWx0fQ=="/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${max_age}"/> <L7p:VariableToSet stringValue="time_limit"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnYXRld2F5LnRpbWUuc2Vjb25kc30="/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="current_time"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${time_limit}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="dateTime"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="${current_time}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X3RpbWUuc2Vjb25kc30="/> <L7p:VariableToSet stringValue="current.user.authTime.result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="max_age was passed, auth_time set to current time"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set auth_time in accordance to max_age"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${authorizeResponseTypeDecoded}"/> <L7p:Expression2 stringValue="code"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="code"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expected-mag-identifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYWx0fSR7ZXhwZWN0ZWQtZGV2aWNlLWlkZW50aWZpZXJ9"/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYWx0fSR7YXV0aG9yaXplQ2xpZW50SUREZWNvZGVkfQ=="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Salt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Use the mag-identifier to generate 'salt' if it exists, the client_id otherwise!"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb26257a-4bb5-4154-912b-788affb618a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Tracking"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="clientkey"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${authorizeClientCustomDecoded},&quot;client_key_custom&quot;: ${authorizeClientKeyCustomDecoded}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="current_input"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="customer"/> <L7p:value stringValue="${authorizeClientKeyCustomDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="otk"/> <L7p:value stringValue="{&quot;client_type&quot;: &quot;${authorizeClientTypeDecoded}&quot;,&quot;grant_type&quot;: &quot;authorization_code&quot;,&quot;code_challenge&quot;: &quot;${authorizeCodeChallenge}&quot;,&quot;code_challenge_method&quot;: &quot;${authorizeCodeChallengeMethod}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="portal"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1fdc1c56-2ebe-42df-97e4-5346561dc5f2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK response_type=CODE"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${current.user.acr.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${current.user.authTime.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${authorizeClientIdentDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${authorizeClientNameDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expected-mag-identifier"/> <L7p:value stringValue="${expected-mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="max_age"/> <L7p:value stringValue="${max_age}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${oidcNonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${authorizeRedirectURIDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_mode"/> <L7p:value stringValue="${authorizeResponseModeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${authorizeScopeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type.result}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${authorizeResponseTypeDecoded}"/> <L7p:Expression2 stringValue="token"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb26257a-4bb5-4154-912b-788affb618a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Tracking"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="clientkey"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${authorizeClientCustomDecoded},&quot;client_key_custom&quot;: ${authorizeClientKeyCustomDecoded}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="current_input"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="customer"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="otk"/> <L7p:value stringValue="{&quot;client_type&quot;: &quot;${authorizeClientTypeDecoded}&quot;,&quot;grant_type&quot;: &quot;implicit&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="portal"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a2339486-407a-4b14-9549-b3da60b051c0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK response_type=TOKEN"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${authorizeClientIdentDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${authorizeClientNameDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${authorizeRedirectURIDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_mode"/> <L7p:value stringValue="${authorizeResponseModeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${authorizeScopeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeResponseTypeDecoded}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="(token.id_token)|(id_token.token)"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb26257a-4bb5-4154-912b-788affb618a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Tracking"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="clientkey"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${authorizeClientCustomDecoded},&quot;client_key_custom&quot;: ${authorizeClientKeyCustomDecoded}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="current_input"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="customer"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="otk"/> <L7p:value stringValue="{&quot;client_type&quot;: &quot;${authorizeClientTypeDecoded}&quot;,&quot;grant_type&quot;: &quot;implicit&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="portal"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8c64215a-3f9d-4e7c-9209-7b204b9bab47"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK response_type=TOKEN ID_TOKEN"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${current.user.acr.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${current.user.authTime.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${authorizeClientID.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${authorizeClientIdentDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${authorizeClientNameDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${oidcNonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${authorizeRedirectURIDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_mode"/> <L7p:value stringValue="${authorizeResponseModeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${authorizeScopeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=token id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeResponseTypeDecoded}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="(code.id_token)|(id_token.code)"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb26257a-4bb5-4154-912b-788affb618a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Tracking"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="clientkey"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${authorizeClientCustomDecoded},&quot;client_key_custom&quot;: ${authorizeClientKeyCustomDecoded}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="current_input"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="customer"/> <L7p:value stringValue="${authorizeClientKeyCustomDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="otk"/> <L7p:value stringValue="{&quot;client_type&quot;: &quot;${authorizeClientTypeDecoded}&quot;,&quot;grant_type&quot;: &quot;authorization_code, implicit&quot;,&quot;code_challenge&quot;: &quot;${authorizeCodeChallenge}&quot;,&quot;code_challenge_method&quot;: &quot;${authorizeCodeChallengeMethod}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="portal"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="6457af11-b2f4-4484-918b-201cc493d60f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK response_type=CODE ID_TOKEN"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${current.user.acr.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${current.user.authTime.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${authorizeClientID.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${authorizeClientIdentDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${authorizeClientNameDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${oidcNonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${authorizeRedirectURIDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_mode"/> <L7p:value stringValue="${authorizeResponseModeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${authorizeScopeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type.result}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=code id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${authorizeResponseTypeDecoded}"/> <L7p:Expression2 stringValue="id_token"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="id_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb26257a-4bb5-4154-912b-788affb618a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Tracking"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="clientkey"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${authorizeClientCustomDecoded},&quot;client_key_custom&quot;: ${authorizeClientKeyCustomDecoded}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="current_input"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="customer"/> <L7p:value stringValue="${authorizeClientKeyCustomDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="otk"/> <L7p:value stringValue="{&quot;client_type&quot;: &quot;${authorizeClientTypeDecoded}&quot;,&quot;grant_type&quot;: &quot;implicit&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="portal"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5a81f4b7-c42f-4fc6-94f4-ba38279b1e58"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK response_type=ID_TOKEN"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${current.user.acr.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${current.user.authTime.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${authorizeClientID.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${authorizeClientIdentDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${authorizeClientNameDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${oidcNonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${authorizeRedirectURIDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_mode"/> <L7p:value stringValue="${authorizeResponseModeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${authorizeScopeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type.result}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${authorizeResponseTypeDecoded}"/> <L7p:Expression2 stringValue="code token"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="code token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expected-mag-identifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYWx0fSR7ZXhwZWN0ZWQtZGV2aWNlLWlkZW50aWZpZXJ9"/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYWx0fSR7YXV0aG9yaXplQ2xpZW50SUREZWNvZGVkfQ=="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Salt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Use the mag-identifier to generate 'salt' if it exists, the client_id otherwise!"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb26257a-4bb5-4154-912b-788affb618a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Tracking"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="clientkey"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${authorizeClientCustomDecoded},&quot;client_key_custom&quot;: ${authorizeClientKeyCustomDecoded}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="current_input"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="customer"/> <L7p:value stringValue="${authorizeClientKeyCustomDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="otk"/> <L7p:value stringValue="{&quot;client_type&quot;: &quot;${authorizeClientTypeDecoded}&quot;,&quot;grant_type&quot;: &quot;authorization_code&quot;,&quot;code_challenge&quot;: &quot;${authorizeCodeChallenge}&quot;,&quot;code_challenge_method&quot;: &quot;${authorizeCodeChallengeMethod}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="portal"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a714e7a9-3d53-4c4e-9f50-b005d3f481a1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK response_type=CODE TOKEN"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${current.user.acr.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${current.user.authTime.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${authorizeClientIdentDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${authorizeClientNameDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expected-mag-identifier"/> <L7p:value stringValue="${expected-mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="max_age"/> <L7p:value stringValue="${max_age}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${oidcNonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${authorizeRedirectURIDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_mode"/> <L7p:value stringValue="${authorizeResponseModeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${authorizeScopeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=code token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeResponseTypeDecoded}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="(code.id_token.token)|(code.token.id_token)|(id_token.code.token)|(id_token.token.code)|(token.id_token.code)|(token.code.id_token)"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb26257a-4bb5-4154-912b-788affb618a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Tracking"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="clientkey"/> <L7p:value stringValue="{&quot;client_custom&quot;: ${authorizeClientCustomDecoded},&quot;client_key_custom&quot;: ${authorizeClientKeyCustomDecoded}}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="current_input"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="customer"/> <L7p:value stringValue="${authorizeClientKeyCustomDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="mag"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="otk"/> <L7p:value stringValue="{&quot;client_type&quot;: &quot;${authorizeClientTypeDecoded}&quot;,&quot;grant_type&quot;: &quot;authorization_code, implicit&quot;,&quot;code_challenge&quot;: &quot;${authorizeCodeChallenge}&quot;,&quot;code_challenge_method&quot;: &quot;${authorizeCodeChallengeMethod}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="portal"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="89a4dee9-4506-48c9-90b2-b5e26284cbc6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK response_type=CODE ID_TOKEN TOKEN"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${current.user.acr.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${current.user.authTime.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${authorizeClientID.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${authorizeClientIdentDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${authorizeClientNameDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expected-mag-identifier"/> <L7p:value stringValue="${expected-mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="max_age"/> <L7p:value stringValue="${max_age}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${oidcNonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${authorizeRedirectURIDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="response_mode"/> <L7p:value stringValue="${authorizeResponseModeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}${authorizeClientIDDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${authorizeScopeDecoded}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=code id_token token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code is provide by response_type assertion, API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Decide whether to issue an access_token or an authorization_code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${authorizeState.result}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeResponseModeDecoded}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmb3JtUmVzcH0KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9InN0YXRlIgogICAgIHZhbHVlPSIke2F1dGhvcml6ZVN0YXRlLnJlc3VsdH0iLz4="/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhdGlvbn0mc3RhdGU9JHthdXRob3JpemVTdGF0ZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add state parameter if sent in request message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${authorizeResponseTypeDecoded}"/> <L7p:Expression2 stringValue="code"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="code"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${authorizeScopeDecoded}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeResponseModeDecoded}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmb3JtUmVzcH0KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9InNjb3BlIgogICAgIHZhbHVlPSIke2F1dGhvcml6ZVNjb3BlLnJlc3VsdH0iLz4="/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhdGlvbn0mc2NvcGU9JHthdXRob3JpemVTY29wZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add scope parameter if sent in request message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeResponseModeDecoded}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGh0bWw+CiA8aGVhZD48dGl0bGU+U3VibWl0IFRoaXMgRm9ybTwvdGl0bGU+PC9oZWFkPgogPGJvZHkgb25sb2FkPSJqYXZhc2NyaXB0OmRvY3VtZW50LmZvcm1zWzBdLnN1Ym1pdCgpIj4ke2Zvcm1SZXNwfQogIDwvZm9ybT4KIDwvYm9keT4KPC9odG1sPg=="/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Auto post form with parameters"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Redirect back to the client"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location}"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send request message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="3002${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="grant"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="deny"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="deny"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQ=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="grantedContent"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeRedirectURI"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/redirect_uri/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="authorizeState"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/state"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResponseMode"/> <L7p:XmlMsgSrc stringValue="grantedContent"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/authorize/response_mode/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeRedirectURI.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeRedirectURIDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizeState.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorizeStateDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathResponseMode.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="response_mode"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="124"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="124"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="jsonMsg"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error_description"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error_description"/> </L7p:EvaluateJsonPathExpression> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="error.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="error_type_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="error_description.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="error_description_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5yZXN1bHR9"/> <L7p:VariableToSet stringValue="error_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcl9kZXNjcmlwdGlvbi5yZXN1bHR9"/> <L7p:VariableToSet stringValue="error_description"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZXJyb3I9JHtlcnJvcl90eXBlX2VuY29kZWR9JmVycm9yX2Rlc2NyaXB0aW9uPSR7ZXJyb3JfZGVzY3JpcHRpb25fZW5jb2RlZH0meC1jYS1lcnI9JHtlcnJvci5jb2RlfQ=="/> <L7p:VariableToSet stringValue="path"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action denied"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="fragment"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeRedirectURIDecoded}"/> <L7p:Expression2 stringValue="#"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="#"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9JiR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send error as new fragment or attach to existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9IyR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=fragment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="query"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authorizeRedirectURIDecoded}"/> <L7p:Expression2 stringValue="?"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="?"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9JiR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="send error as new query or attach to existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemVSZWRpcmVjdFVSSURlY29kZWR9PyR7cGF0aH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="response"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="400"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no redirect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwb25zZX0="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="400"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="build location"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session lookup"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Get the redirect URI and state value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="110"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code is provide by authentication assertion, API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="110"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message, session has expired"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302 or HTML"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create the redirect location"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${sessionIdCacheAge}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="authorizeCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue="10000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${authorizeStateDecoded}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhdGlvbn0mc3RhdGU9JHthdXRob3JpemVTdGF0ZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="state"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add state parameter if sent in request message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Redirect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location}"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="deny"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was denied"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="action but no session"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action, no session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid combination of parameters was used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="no action but session"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no action, session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid combination of parameters was used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="wrong parameter combination"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Something went totally wrong!"/> </L7p:AuditDetailAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="API-ID 3002"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="3002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="content"/> <L7p:value stringValue="${errorDetail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:AddHeader> <L7p:HeaderName stringValue="x-ca-err"/> <L7p:HeaderValue stringValue="${error.code}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="unknown"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="something unknown happened"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Unknown action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Tasks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/AuthorizationServer/connect-session-logout 07854a0de3db8f5849ecb6be3985c019 SERVICE connect-session-logout true /connect/session/logout OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="It logs out a user and deletes the id_token."/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="POST|OPTIONS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enable CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3006${error.code}"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="id_token"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="id_token_type"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="logout_apps"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="client_id"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="client_secret"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVydmFsdWVzLm1hZy1pZGVudGlmaWVyfEBAfSMjJHtyZXF1ZXN0Lmh0dHAuaGVhZGVydmFsdWVzLmF1dGhvcml6YXRpb258QEB9IyM="/> <L7p:VariableToSet stringValue="requestHeaders"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Presence of '@@' indicates duplicate parameters"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="requestHeaders"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[@]{2}|[,]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for duplicate parameters in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5d937743-5828-4630-b317-a8dd9044e315"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allow_basic"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="allow_query"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_header"/> <L7p:value stringValue="${request.http.header.authorization}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_id"/> <L7p:value stringValue="${request.http.parameter.client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_secret"/> <L7p:value stringValue="${request.http.parameter.client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_client_name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_expiration"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_scope"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_type"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="201"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="201"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:HeaderName stringValue="WWW-Authenticate"/> <L7p:HeaderValue stringValue="Basic error=&quot;Invalid or missing credentials&quot;"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add WWW-Authenticate header if code = 201"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Authenticate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="azp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="use 'mag-identifier' as azp"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVyLm1hZy1pZGVudGlmaWVyfQ=="/> <L7p:VariableToSet stringValue="mag-identifier"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="a mobile client must present mag-identifier used as 'azp'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:EncapsulatedAssertionConfigGuid stringValue="ec70e0ed-a4ca-486d-926e-e0158935a5ff"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Verify Mag Identifier"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="mag"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the parameter 'logout_apps' is used with MAG"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmxvZ291dF9hcHBzfQ=="/> <L7p:VariableToSet stringValue="logout_apps"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${logout_apps}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="logout_apps"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="logout"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="decide to logout apps (remove oauth token)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="mag"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlkX3Rva2VufQ=="/> <L7p:VariableToSet stringValue="id_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="introduced to the interface for potential enhancements"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlkX3Rva2VuX3R5cGV9"/> <L7p:VariableToSet stringValue="id_token_type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${mag-identifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameter"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="use azp (mag-identifier) or id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2280526a-84d5-45e0-8148-9b645e0fe1a0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Remove"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${mag-identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${id_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="logout_apps"/> <L7p:value stringValue="${logout_apps}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id_token"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="delete"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="eyJzZXNzaW9uX3N0YXR1cyI6ImxvZ2dlZCBvdXQifQ=="/> <L7p:ResponseContentType stringValue="application/json;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="POST"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/AuthorizationServer/openid-client-register-configuration 07854a0de3db8f5849ecb6be3985c01a SERVICE openid-client-register-configuration true /openid/connect/register/* OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This API returns details about a client that registered via OpenID Connect Dynamic Registration"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This API requires an access_token SCOPE'd to 'client_configuration'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3009${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Require SSL, no client certificate"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// GET|OPTIONS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5c88f677-8517-4ec1-97ef-be8db907ec9b"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require OAuth 2 Token"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// SCOPE: openid_client_registration"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cache_lifetime"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="onetime"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope_fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope_required"/> <L7p:value stringValue="openid_client_registration"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="client_id"/> <L7p:OtherTargetMessageVariable stringValue="request.url.path"/> <L7p:Regex stringValue="/([0-9a-z-]{36})$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfaWRbMV19"/> <L7p:VariableToSet stringValue="client_id"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${session.client_id}"/> <L7p:Expression2 stringValue="${client_id}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${client_id}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// the given client_id has to match the one of the access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="117"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client not authorized for this request"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="117"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract the client_id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2lkY0NsaWVudENvbmZpZ0NhY2hl"/> <L7p:VariableToSet stringValue="cacheID"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfaWR9"/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="cacheLifetime"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cacheLifetime}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="openid_registration.response.result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Looking up result from cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue="xml"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="client_data"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="client_data"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="client_data"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:expiration"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCallback"/> <L7p:XmlMsgSrc stringValue="client_data"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:callback"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientName"/> <L7p:XmlMsgSrc stringValue="client_data"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_name"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKeyCustom"/> <L7p:XmlMsgSrc stringValue="client_data"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudEtleUN1c3RvbS5yZXN1bHR9"/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="client_key_custom"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="$..openid_registration.response"/> <L7p:OtherTargetMessageVariable stringValue="client_key_custom"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="openid_registration.response"/> </L7p:EvaluateJsonPathExpression> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="An invalid client_id was given: '${client_id}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="201"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// invalid client credentials. In this case an unknown client"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="201"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// unknown"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// look up the client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// remove the access_token, should not be returned again"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="openid_registration.response.result"/> <L7p:Regex stringValue="&quot;registration_access_token&quot;:\s{0,5}&quot;[^\&quot;]+&quot;,"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvcGVuaWRfcmVnaXN0cmF0aW9uLnJlc3BvbnNlLnJlc3VsdH0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="respForClient"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Store response to cache"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cacheLifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="respForClient"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwRm9yQ2xpZW50Lm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="respForClient"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// retrieve response but remove the originally issued access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="No original response was found in the client_key_custom field&quot; '${client_data.mainpart}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// no clue why the original response cannot be located"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// unknown error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// retrieve the original response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// registration response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwRm9yQ2xpZW50fQ=="/> <L7p:ResponseContentType stringValue="application/json; charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain;charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/ResourceServer/connect-session-status 07854a0de3db8f5849ecb6be3985c01b SERVICE connect-session-status true /connect/session/status OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This endpoint returns the session status of a given user."/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enable CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3007${error.code}"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5c88f677-8517-4ec1-97ef-be8db907ec9b"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require OAuth 2 Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cache_lifetime"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="onetime"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope_fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope_required"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlkX3Rva2VufQ=="/> <L7p:VariableToSet stringValue="id_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlkX3Rva2VuX3R5cGV9"/> <L7p:VariableToSet stringValue="id_token_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="default status=none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="eyJzZXNzaW9uIjoibm9uZSJ9"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id_token"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required id_token parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_type}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="57d4baf4-144b-4ab0-829f-4276bd4517b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Configured Grant Types"/> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${id_token_type}"/> <L7p:Expression2 stringValue="${grant_type_jwt}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${grant_type_jwt}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="{&quot;session&quot;:&quot;none&quot;}"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:ExtraHeaders nameValuePairArray="included"/> <L7p:HttpStatus stringValue="200"/> </L7p:CustomizeErrorResponse> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="hint"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the optional token_type_hint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="fea415cc-63d2-43a2-88e9-512f4e54957c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="check_expiration"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${id_token}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="xpathValidationResult"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:result/text()='none'"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathValidationResult"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:result/text()='valid'"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathValidationExpiration"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:expiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateFormat stringValue="&lt;Second Timestamp&gt;"/> <L7p:DateOffsetExpression stringValue="0"/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${xpathValidationExpiration.result}"/> <L7p:Expression2 stringValue="${now.seconds}"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="${now.seconds}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyJzZXNzaW9uIjoiYWN0aXZlIn0="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="active"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2280526a-84d5-45e0-8148-9b645e0fe1a0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Remove"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="active but expired"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="delete the existing id_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${id_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="logout_apps"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:ResponseContentType stringValue="application/json;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/TokenServer/auth-oauth-v2-token-revoke 07854a0de3db8f5849ecb6be3985c01c SERVICE auth-oauth-v2-token-revoke true /auth/oauth/v2/token/revoke OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Revokes the given access- or refresh_token"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="POST|DELETE|OPTIONS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enable CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|DELETE|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3004${error.code}"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="NTAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyAiZXJyb3IiOiJpbnZhbGlkX3JlcXVlc3QiLCAiZXJyb3JfZGVzY3JpcHRpb24iOiJUaGUgcmVxdWVzdCBmYWlsZWQgZHVlIHRvIGFuIHVua25vd24gcmVhc29uIiB9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Initialize"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5d937743-5828-4630-b317-a8dd9044e315"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allow_basic"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="allow_query"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_header"/> <L7p:value stringValue="${request.http.header.authorization}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_id"/> <L7p:value stringValue="${request.http.parameter.client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_secret"/> <L7p:value stringValue="${request.http.parameter.client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_client_name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_expiration"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_scope"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="local_type"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVyLkF1dGhvcml6YXRpb259"/> <L7p:VariableToSet stringValue="requestAuthHeader"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requestAuthHeader}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="^\b[Bb][Aa][Ss][Ii][Cc]\b\s.+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:HeaderName stringValue="WWW-Authenticate"/> <L7p:HeaderValue stringValue="Basic error=&quot;Invalid or missing credentials&quot;"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="WWW-Authenticate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="add header if necessary"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="add header or continue"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code provided by previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// authenticate the client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VuX3R5cGVfaGludH0="/> <L7p:VariableToSet stringValue="token_type_hint"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="access_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:Expression2 stringValue="refresh_token"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="refresh_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="118"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="118"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token_type_hint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="access_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:Expression2 stringValue="refresh_token"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="refresh_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="refresh_token"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type_hint=refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code set by the revoke assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="lookup"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)=0"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOwnership"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key/text()=$client_id"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="117"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="117"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if the client is granted to revoke the token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="access_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="280c8701-2641-413d-a3f5-107fa84e0ad0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Revocation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${token}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c9c82423-cb3c-4851-90d2-1d8f6fecbc5c"/> <L7p:EncapsulatedAssertionConfigName stringValue="MSSO Device App Removal"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="magidentifier"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:Expression2 stringValue="refresh_token"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="refresh_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="280c8701-2641-413d-a3f5-107fa84e0ad0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Revocation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="refresh_token"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type_hint=refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code set by the revoke assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="revoke"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="eyJyZXN1bHQiOiJyZXZva2VkIn0="/> <L7p:ResponseContentType stringValue="application/json;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="POST, DELETE"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/AuthorizationServer/openid-configuration 07854a0de3db8f5849ecb6be3985c01d SERVICE openid-configuration true /.well-known/openid-configuration OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="OpenID Connect Discovery"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This API returns configurations as specified in the context of OpenID Connect Discovery"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Dynamic Custom Error Defined Later in Policy"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3008${error.code}"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// SSL, no client certificate"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// GET|OPTIONS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2lkY0Rpc2NvdmVyeUNhY2hl"/> <L7p:VariableToSet stringValue="cacheID"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2lkY0Rpc2NvdmVyeUNhY2hl"/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="cacheLifetime"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cacheLifetime}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="respForClient"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Looking up result from cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${host_oauth2_auth_server}, ${oauth2_auth_path} , ${oauth2_token_path}, ${jwks_path}, ${userinfo_path}"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="d00d4a19-e148-4650-bb05-71dd29807dc6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token configuration"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${subject_type}, ${id_token_signing_algorithm}, ${iss}"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="738e44e6-c24b-4f44-9c1a-0fe99f7d7f1d"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid discovery_endpoint DEBUG"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Discovery Endpoint will fail on fragment/encas policy falsified"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Included Fragments/Encas for Auto Configuration of Discovery Endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7aXNzfSI="/> <L7p:VariableToSet stringValue="discovery.issuer"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aXNzdWVyPSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="issuer: ${discovery.issuer} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="issuer: ${discovery.issuer} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Discovery Endpoint will fail if ${discovery.issuer} is not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="issuer"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7aG9zdF9vYXV0aDJfYXV0aF9zZXJ2ZXJ9JHtvYXV0aDJfYXV0aF9wYXRofSI="/> <L7p:VariableToSet stringValue="discovery.authorization_endpoint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXV0aG9yaXphdGlvbl9lbmRwb2ludD0ke2Rpc2NvdmVyeS5lbmRwb2ludC5lbmFibGVkfQ=="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="authorization_endpoint: ${discovery.authorization_endpoint} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="authorization_endpoint: ${discovery.authorization_endpoint} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Discovery Endpoint will fail if ${discovery.authorization_endpoint} is not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="authorization_endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7aG9zdF9vYXV0aDJfYXV0aF9zZXJ2ZXJ9JHtvYXV0aDJfdG9rZW5fcGF0aH0i"/> <L7p:VariableToSet stringValue="discovery.token_endpoint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW5fZW5kcG9pbnQ9JHtkaXNjb3ZlcnkuZW5kcG9pbnQuZW5hYmxlZH0="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="token_endpoint: ${discovery.token_endpoint} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="token_endpoint: ${discovery.token_endpoint} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Discovery Endpoint will fail if ${discovery.token_endpoint} is not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token_endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a0791506-8292-4254-a1d0-4ad968393441"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid jwks_uri"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7andrc191cml9Ig=="/> <L7p:VariableToSet stringValue="discovery.jwks_uri"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="andrc191cmk9JHtkaXNjb3ZlcnkuZW5kcG9pbnQuZW5hYmxlZH0="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="jwks_uri: ${discovery.jwks_uri} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="jwks_uri: ${discovery.jwks_uri} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Discovery Endpoint will fail if ${discovery.jwks_uri} is not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7cmVzcG9uc2VfdHlwZXNfc3VwcG9ydGVkfV0="/> <L7p:VariableToSet stringValue="discovery.response_types_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="cmVzcG9uc2VfdHlwZXNfc3VwcG9ydGVkPSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="response_types_supported: ${discovery.response_types_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="response_types_supported: ${discovery.response_types_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Discovery Endpoint will fail if ${discovery.response_types_supported} is not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_types_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e330e8ce-ca46-47f1-87d5-a2f0b54fd4ea"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid subject_types_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7c3ViamVjdF90eXBlc19zdXBwb3J0ZWR9XQ=="/> <L7p:VariableToSet stringValue="discovery.subject_types_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="c3ViamVjdF90eXBlc19zdXBwb3J0ZWQ9JHtkaXNjb3ZlcnkuZW5kcG9pbnQuZW5hYmxlZH0="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="subject_types_supported: ${discovery.subject_types_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="subject_types_supported: ${discovery.subject_types_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Discovery Endpoint will fail if ${discovery.subject_types_supported} is not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="subject_types_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0274785d-e085-4ae4-afd6-1e5b6e076117"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid id_token_signing_alg_values_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7aWRfdG9rZW5fc2lnbmluZ19hbGdfdmFsdWVzX3N1cHBvcnRlZH1d"/> <L7p:VariableToSet stringValue="discovery.id_token_signing_alg_values_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aWRfdG9rZW5fc2lnbmluZ19hbGdfdmFsdWVzX3N1cHBvcnRlZD0ke2Rpc2NvdmVyeS5lbmRwb2ludC5lbmFibGVkfQ=="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="id_token_signing_alg_values_supported: ${discovery.id_token_signing_alg_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="id_token_signing_alg_values_supported: ${discovery.id_token_signing_alg_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Discovery Endpoint will fail if ${discovery.id_token_signing_alg_values_supported} is not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id_token_signing_alg_values_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f6b31f6f-fdd8-4bbb-8a3a-44c88d0d576d"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid userinfo_endpoint"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7dXNlcmluZm9fZW5kcG9pbnR9Ig=="/> <L7p:VariableToSet stringValue="discovery.userinfo_endpoint"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dXNlcmluZm9fZW5kcG9pbnQ9JHtkaXNjb3ZlcnkuZW5kcG9pbnQuZW5hYmxlZH0="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="userinfo_endpoint: ${discovery.userinfo_endpoint} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="userinfo_endpoint: ${discovery.userinfo_endpoint} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> <L7p:Level stringValue="WARNING"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="userinfo_endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b072a003-0942-4a49-8256-714edd2eef2c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid registration_endpoint"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7cmVnaXN0cmF0aW9uX2VuZHBvaW50fSI="/> <L7p:VariableToSet stringValue="discovery.registration_endpoint"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="cmVnaXN0cmF0aW9uX2VuZHBvaW50PSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="registration_endpoint: ${discovery.registration_endpoint} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="registration_endpoint: ${discovery.registration_endpoint} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="registration_endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a4d10367-78f8-4736-9701-a569f754b479"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid scopes_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7c2NvcGVzX3N1cHBvcnRlZH1d"/> <L7p:VariableToSet stringValue="discovery.scopes_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="c2NvcGVzX3N1cHBvcnRlZD0ke2Rpc2NvdmVyeS5lbmRwb2ludC5lbmFibGVkfQ=="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="scopes_supported: ${discovery.scopes_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="scopes_supported: ${discovery.scopes_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="scopes_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9cdbef02-b0c8-4ead-bb20-ac83263a007f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid claims_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7Y2xhaW1zX3N1cHBvcnRlZH1d"/> <L7p:VariableToSet stringValue="discovery.claims_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xhaW1zX3N1cHBvcnRlZD0ke2Rpc2NvdmVyeS5lbmRwb2ludC5lbmFibGVkfQ=="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="claims_supported: ${discovery.claims_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="claims_supported: ${discovery.claims_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="claims_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// RECOMMENDED"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="61081bea-be25-437e-bc4f-e5c7a7df98b0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid grant_types_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7Z3JhbnRfdHlwZXNfc3VwcG9ydGVkfV0="/> <L7p:VariableToSet stringValue="discovery.grant_types_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRfdHlwZXNfc3VwcG9ydGVkPSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="grant_types_supported: ${discovery.grant_types_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="grant_types_supported: ${discovery.grant_types_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="grant_types_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2474de01-4738-443d-9820-457f183103b5"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid acr_values_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7YWNyX3ZhbHVlc19zdXBwb3J0ZWR9XQ=="/> <L7p:VariableToSet stringValue="discovery.acr_values_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="YWNyX3ZhbHVlc19zdXBwb3J0ZWQ9JHtkaXNjb3ZlcnkuZW5kcG9pbnQuZW5hYmxlZH0="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="acr_values_supported: ${discovery.acr_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="acr_values_supported: ${discovery.acr_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="acr_values_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="200ba76e-b322-4c68-8d09-c1775db3a125"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid token_endpoint_auth_methods_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7dG9rZW5fZW5kcG9pbnRfYXV0aF9tZXRob2RzX3N1cHBvcnRlZH1d"/> <L7p:VariableToSet stringValue="discovery.token_endpoint_auth_methods_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW5fZW5kcG9pbnRfYXV0aF9tZXRob2RzX3N1cHBvcnRlZD0ke2Rpc2NvdmVyeS5lbmRwb2ludC5lbmFibGVkfQ=="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="token_endpoint_auth_methods_supported: ${discovery.token_endpoint_auth_methods_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="token_endpoint_auth_methods_supported: ${discovery.token_endpoint_auth_methods_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token_endpoint_auth_methods_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a7b09e54-d2fb-4ba1-84eb-fd7c993d2303"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid token_endpoint_auth_signing_alg_values_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7dG9rZW5fZW5kcG9pbnRfYXV0aF9zaWduaW5nX2FsZ192YWx1ZXNfc3VwcG9ydGVkfV0="/> <L7p:VariableToSet stringValue="discovery.token_endpoint_auth_signing_alg_values_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW5fZW5kcG9pbnRfYXV0aF9zaWduaW5nX2FsZ192YWx1ZXNfc3VwcG9ydGVkPSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="token_endpoint_auth_signing_alg_values_supported: ${discovery.token_endpoint_auth_signing_alg_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="token_endpoint_auth_signing_alg_values_supported: ${discovery.token_endpoint_auth_signing_alg_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token_endpoint_auth_signing_alg_values_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0f6ee37f-f9cb-456b-8ea5-1901a9b4d289"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid display_values_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7ZGlzcGxheV92YWx1ZXNfc3VwcG9ydGVkfV0="/> <L7p:VariableToSet stringValue="discovery.display_values_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZGlzcGxheV92YWx1ZXNfc3VwcG9ydGVkPSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="display_values_supported: ${discovery.display_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="display_values_supported: ${discovery.display_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="display_values_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="18c6b67a-2905-4145-bdc3-02a2cb375bf6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid claim_types_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7Y2xhaW1fdHlwZXNfc3VwcG9ydGVkfV0="/> <L7p:VariableToSet stringValue="discovery.claim_types_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xhaW1fdHlwZXNfc3VwcG9ydGVkPSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="claim_types_supported: ${discovery.claim_types_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="claim_types_supported: ${discovery.claim_types_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="claim_types_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8cf06600-1db0-4c5c-8f98-7f2e26f2b052"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid service_documentation"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7c2VydmljZV9kb2N1bWVudGF0aW9ufSI="/> <L7p:VariableToSet stringValue="discovery.service_documentation"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="c2VydmljZV9kb2N1bWVudGF0aW9uPSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="service_documentation: ${discovery.service_documentation} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="service_documentation: ${discovery.service_documentation} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="service_documentation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b9dab382-14f0-47b2-a079-72e2138f1b9a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid ui_locales_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7dWlfbG9jYWxlc19zdXBwb3J0ZWR9XQ=="/> <L7p:VariableToSet stringValue="discovery.ui_locales_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dWlfbG9jYWxlc19zdXBwb3J0ZWQ9JHtkaXNjb3ZlcnkuZW5kcG9pbnQuZW5hYmxlZH0="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="ui_locales_supported: ${discovery.ui_locales_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="ui_locales_supported: ${discovery.ui_locales_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ui_locales_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ed1ec222-d3a0-4807-ae3b-5a7e4caceea7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_modes_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7cmVzcG9uc2VfbW9kZXNfc3VwcG9ydGVkfV0="/> <L7p:VariableToSet stringValue="discovery.response_modes_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="cmVzcG9uc2VfbW9kZXNfc3VwcG9ydGVkPSR7ZGlzY292ZXJ5LmVuZHBvaW50LmVuYWJsZWR9"/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="response_modes_supported: ${discovery.response_modes_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="acr_values_supported: ${discovery.acr_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_modes_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All L7p:Enabled="false" wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.response_modes_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.id_token_encryption_alg_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.id_token_encryption_enc_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.userinfo_signing_alg_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.userinfo_encryption_alg_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.userinfo_encryption_enc_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.request_object_signing_alg_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.request_object_encryption_alg_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.request_object_encryption_enc_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.claims_locales_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.claims_parameter_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.request_parameter_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.request_uri_parameter_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.require_request_uri_registration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.op_policy_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.op_tos_uri"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// NO OFFICIAL SUPPORT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b1c63f23-ce1a-472f-acc4-4871688f3462"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid userinfo_signing_alg_values_supported"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="WyR7dXNlcmluZm9fc2lnbmluZ19hbGdfdmFsdWVzX3N1cHBvcnRlZH1d"/> <L7p:VariableToSet stringValue="discovery.userinfo_signing_alg_values_supported"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${discovery.endpoint.enabled}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dXNlcmluZm9fc2lnbmluZ19hbGdfdmFsdWVzX3N1cHBvcnRlZD0ke2Rpc2NvdmVyeS5lbmRwb2ludC5lbmFibGVkfQ=="/> <L7p:VariableToSet stringValue="display_next"/> </L7p:SetVariable> <L7p:ManipulateMultiValuedVariable> <L7p:SourceVariableName stringValue="display_next"/> <L7p:TargetVariableName stringValue="display"/> </L7p:ManipulateMultiValuedVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnSuccess}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="userinfo_signing_alg_values_supported: ${discovery.userinfo_signing_alg_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Audit Success Event Details"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnSuccess} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Auto Configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${debugOnError}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="userinfo_signing_alg_values_supported: ${discovery.userinfo_signing_alg_values_supported} | exposed via discovery endpoint: ${discovery.endpoint.enabled}"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${debugOnError} = true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set empty before processing the next Discovery Endpoint Claim"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR HANDLING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Do not fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="userinfo_signing_alg_values_supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Process OpenID Provider Metadata"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ForEachLoop L7p:Usage="Required" loopVariable="display" variablePrefix="metadata"> <L7p:Split> <L7p:InputVariable stringValue="metadata.current"/> <L7p:OutputVariable stringValue="metadata.multi"/> <L7p:SplitPattern stringValue="="/> </L7p:Split> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${metadata.multi[1]}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttZXRhZGF0YS5tdWx0aVswXX0="/> <L7p:VariableToSet stringValue="claim_name"/> </L7p:SetVariable> <L7p:LookupDynamicContextVariables> <L7p:SourceVariable stringValue="discovery.${claim_name}"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetOutputVariablePrefix stringValue="claim"/> </L7p:LookupDynamicContextVariables> <wsp:OneOrMore wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${claim.output}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item stringLength="included"> <L7p:Max intValue="2"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// If claim value is empty, do not expose"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${metadata.iterations}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7Y2xhaW1fbmFtZX0iOiR7Y2xhaW0ub3V0cHV0fQ=="/> <L7p:VariableToSet stringValue="json"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// First claim"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqc29ufSwiJHtjbGFpbV9uYW1lfSI6JHtjbGFpbS5vdXRwdXR9"/> <L7p:VariableToSet stringValue="json"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Append subsequent claims"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> <L7p:TrueAssertion/> </wsp:OneOrMore> </L7p:ForEachLoop> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Build OpenID Provider Discovery Endpoint Response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyR7anNvbn19"/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="respForClient"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="1"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cacheLifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="respForClient"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwRm9yQ2xpZW50Lm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="respForClient"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Adding response to cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Create response and store in cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Generate response, either from cache or new"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwRm9yQ2xpZW50fQ=="/> <L7p:ResponseContentType stringValue="application/json; charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain;charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/documentation/apidocs-auth-oauth-v2 07854a0de3db8f5849ecb6be3985c01e SERVICE apidocs-auth-oauth-v2 true /apidocs/auth/oauth/v2/* DELETE POST GET OPTIONS PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enable CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyAiZXJyb3IiOiJpbnZhbGlkX3JlcXVlc3QiLCAiZXJyb3JfZGVzY3JpcHRpb24iOiJUaGUgcmVxdWVzdCBmYWlsZWQgZHVlIHRvIGFuIHVua25vd24gcmVhc29uIiB9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Initialize"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0LnVybC5wYXRofQ=="/> <L7p:VariableToSet stringValue="path"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="path"/> <L7p:Regex stringValue="/swagger$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="application/json; charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="swagger"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if this is a request for the swagger document."/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHJlcXVlc3RlZCByZXNvdXJjZSBpcyBub3QgYXZhaWxhYmxlIn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/TokenServer/auth-oauth-v2-client-export 07854a0de3db8f5849ecb6be3985c01f SERVICE auth-oauth-v2-client-export true /auth/oauth/v2/client/export OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== To enable this policy, edit the #OTK Client Export policy"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="POST|GET|OPTIONS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enable CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|GET|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="3005${error.code}"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="NTAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyAiZXJyb3IiOiJpbnZhbGlkX3JlcXVlc3QiLCAiZXJyb3JfZGVzY3JpcHRpb24iOiJUaGUgcmVxdWVzdCBmYWlsZWQgZHVlIHRvIGFuIHVua25vd24gcmVhc29uIiB9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Initialize"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Include> <L7p:PolicyGuid stringValue="a4437d68-b77e-4b0e-8043-565c7da8b37e"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${enableClientExport}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Anonymous"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Allow anonymous access"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${enable_anonymous_client_export}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b560d25b-98a1-47bb-ac4a-84bd9329da21"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Authentication"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Authenticated"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Allow authenticated users access"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acrValuesRequested"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authHeader"/> <L7p:value stringValue="${request.http.header.authorization}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authIdToken"/> <L7p:value stringValue="${request.http.header.sessionData}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authSession"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookie"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookiename"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="oauth_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="oauth_verifier"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="password"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="prompt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="provider"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="state"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="username"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Authenticate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Allow anonymous or authenticated access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:AddHeader> <L7p:HeaderName stringValue="WWW-Authenticate"/> <L7p:HeaderValue stringValue="Basic error=&quot;Invalid or missing credentials&quot;"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="202"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Create the error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Authentication"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZH0="/> <L7p:VariableToSet stringValue="request_client_id"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request_client_id}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request_client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9a414c38-9598-4fd3-98eb-e9bbf1515d19"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Export"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request_client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expose_client_secret"/> <L7p:value stringValue="${expose_client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="incoming_xml"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resp"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ResponseContentType stringValue="${content-type}"/> </L7p:HardcodedResponse> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code set in previous assertions"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Get client, export client, create response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Create"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Create the JSON response message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="POST, GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/DMZ-OAuth2/ResourceServer/openid-connect-v1-userinfo 07854a0de3db8f5849ecb6be3985c020 SERVICE openid-connect-v1-userinfo true /openid/connect/v1/userinfo OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="OpenID Connect's userinfo endpoint returning information about the granting user"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Because there is no LDAP available in this implementation by default"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="the claims returned are dummy values, but according to the granted 'SCOPE'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="and with the real 'sub', 'preferred_username' and 'user_role'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="IMPORTANT: only support SCOPE which values can be provided!"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OPTIONS|POST|GET"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enable CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="OPTIONS|POST|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5c88f677-8517-4ec1-97ef-be8db907ec9b"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require OAuth 2 Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cache_lifetime"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="onetime"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope_fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope_required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CommentAssertion> <L7p:Comment stringValue="Set azp of id_token for lookup. It is 'client_id' for non-mobile, while for mobile it is 'mag-identifier'"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVyLm1hZy1pZGVudGlmaWVyfQ=="/> <L7p:VariableToSet stringValue="mag-identifier"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// MAG device"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${mag-identifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYWctaWRlbnRpZmllcn0="/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// mag-identifier is included in request header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7b74dcef-8f5f-468f-ab8b-19403b5dc557"/> <L7p:EncapsulatedAssertionConfigName stringValue="MSSO Device App Lookup"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="magidentifier"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${uuid_token}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract mag-identifier"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="xpathMagIdentifier"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="ns:values/ns:value/ns:magidentifier/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aE1hZ0lkZW50aWZpZXIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// query db to get mag-identifier"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// non-mobile"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtzZXNzaW9uLmNsaWVudF9pZH0="/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set azp"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="=== 'sub' will contain a PPID. The 'preferred_username' will be found in the response message if SCOPE=profile was requested"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="32d58e80-53a2-49fd-935a-391b1755e9fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Lookup"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="This assertion will lookup the id_token using resource_owner and azp"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue="xml"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${session.subscriber_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:jwt"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code is provided by previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Lookup"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Look up of the id_token associated with the resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:jwt"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="fea415cc-63d2-43a2-88e9-512f4e54957c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="check_expiration"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${xpathJwt.result}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSub"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:sub/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set previously or to 000 for unknown"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ddd9d3b1-ca24-4be7-8ad1-7f073b13ad6e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Attribute Look Up"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// update 'OTK User Attribute Look Up Extension' to your needs"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="path=/userinfo;scope=${session.scope};"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_username"/> <L7p:value stringValue="${session.subscriber_id}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// attributes that were selected"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnVzZXIuYXR0cmlidXRlc30="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="attributes"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogInN1YiI6IiR7eHBhdGhTdWIucmVzdWx0fSI="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${session.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="profile"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathProfile"/> <L7p:XmlMsgSrc stringValue="attributes"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/userinfo/profile/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXN1bHR9LAoke3hwYXRoUHJvZmlsZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Scope"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="profile"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${session.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="email"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathEmail"/> <L7p:XmlMsgSrc stringValue="attributes"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/userinfo/email/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXN1bHR9LAoke3hwYXRoRW1haWwucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Scope"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="email"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${session.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="phone"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathPhone"/> <L7p:XmlMsgSrc stringValue="attributes"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/userinfo/phone/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXN1bHR9LAoke3hwYXRoUGhvbmUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Scope"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="phone"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${session.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="address"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAddress"/> <L7p:XmlMsgSrc stringValue="attributes"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/userinfo/address/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXN1bHR9LAoke3hwYXRoQWRkcmVzcy5yZXN1bHR9"/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Scope"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="address"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue=" === OTK specific SCOPE to retrieve the role of the resourse_owner === "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === By default this is used with MAG Manager (CA Mobile API Gateway) === "/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${session.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="user_role"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXN1bHR9LAogInJvbGUiOiIke2N1cnJlbnQudXNlci5yb2xlfSI="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Scope"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="user_role"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="Prepare the response, either plain JSON or a JWT"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXN1bHR9Cn0="/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbg=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${session.custom}"/> <L7p:Expression2 stringValue="openid_registration"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="openid_registration"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uLmN1c3RvbX0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="customJson"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="$..openid_registration.response.userinfo_signed_response_alg"/> <L7p:OtherTargetMessageVariable stringValue="customJson"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="alg"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthbGcucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="alg"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${alg}"/> <L7p:Expression2 stringValue="RS256"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="RS256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeJsonWebToken> <L7p:HeaderAction stringValue="Merge to Generated Header"/> <L7p:KeyGoid goidValue="0000000000000000ffffffffffffffff"/> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="RS256"/> <L7p:SignatureSourceType intValue="1"/> <L7p:SourceHeaders stringValue="{&quot;kid&quot;:&quot;default_ssl_key&quot;}"/> <L7p:SourceVariable stringValue="${resp}"/> <L7p:TargetVariable stringValue="resp"/> </L7p:EncodeJsonWebToken> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// RS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${alg}"/> <L7p:Expression2 stringValue="HS256"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="HS256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwfQ=="/> <L7p:VariableToSet stringValue="payload"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${session.client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeJsonWebToken> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="HS256"/> <L7p:SignatureSecretKey stringValue="${xpathSecret.result}"/> <L7p:SourceVariable stringValue="${payload}"/> <L7p:TargetVariable stringValue="resp"/> </L7p:EncodeJsonWebToken> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// HS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Handle alg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmNvbXBhY3R9"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vand0"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Create JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Plain JSON"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Create resposne as JWT if requested via Dynamic Registration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwfQ=="/> <L7p:ResponseContentType stringValue="${content-type}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain;charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="POST, GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sub = PPID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:Policy> OTK/ 07854a0de3db8f5849ecb6be3985c04c FOLDER OTK OTK/Internal-Tools/ 07854a0de3db8f5849ecb6be3985c04d FOLDER Internal-Tools OTK/Internal-Tools/OAuthManager/ 07854a0de3db8f5849ecb6be3985c04e FOLDER OAuthManager OTK/Internal-Tools/OAuth2-TestClients/ 07854a0de3db8f5849ecb6be3985c04f FOLDER OAuth2-TestClients OTK/Internal-Tools/OAuth2-TestClients/configuration/ 07854a0de3db8f5849ecb6be3985c050 FOLDER configuration OTK/Internal-Tools/OAuth2-TestClients/configuration/#OTK Client Context Variables 07854a0de3db8f5849ecb6be3985c043 POLICY #OTK Client Context Variables Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK Client Context Variable&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set Context Variables to override their values in the target policy below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/configuration/OTK Client Context Variables 07854a0de3db8f5849ecb6be3985c042 POLICY OTK Client Context Variables Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Global variables that needs to used by test clients"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Client credentials ==============="/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NTRmMGM0NTUtNGQ4MC00MjFmLTgyY2EtOTE5NGRmMjQ4NTlk"/> <L7p:VariableToSet stringValue="oauth2_client_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YTBmMjc0MmYtMzFjNy00MzZmLTk4MDItYjcwMTViOGZkOGU2"/> <L7p:VariableToSet stringValue="oauth2_client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="NWVlZDg2OGUtN2FkMC00MTcyLTg4ZjItNzA0YmNmNzhiNjFl"/> <L7p:VariableToSet stringValue="client_id_bcp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjA1NGU0ZDctNzdmMi00NmM5LWJjNGQtMTFhNDcyNTVhNmVj"/> <L7p:VariableToSet stringValue="client_secret_bcp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="NWVkYzRhMzgtNzVlYy00NjE3LTg4NTQtMWE3MWZmMWUwYTJl"/> <L7p:VariableToSet stringValue="client_id_icp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="NTAwNWE2NjktMDI5NS00NjAyLWJlN2QtNmE3NTM0MmRiNmQ4"/> <L7p:VariableToSet stringValue="client_secret_icp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YjM2ZmFlYjktNTAwZC00NThlLWE3YWYtOTMxNjBkNGNhOGUx"/> <L7p:VariableToSet stringValue="client_id_msso"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDFiMzUxZmItZjU2Yy00Y2NmLThlZmUtMzEyOWFkZTQwYWFh"/> <L7p:VariableToSet stringValue="client_secret_msso"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="SCOPE ==============="/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="oauth"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="c2NvcGVfdGVzdA=="/> <L7p:VariableToSet stringValue="oauth2_scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="oidc"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// SCOPE configured for the OpenID Connect client"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="cGhvbmUgZW1haWwgYWRkcmVzcyBwcm9maWxlIG9wZW5pZA=="/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Other client details ==============="/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0LnVybC5wcm90b2NvbH06Ly8ke3JlcXVlc3QudXJsLmhvc3R9OiR7cmVxdWVzdC51cmwucG9ydH0ke3JlcXVlc3QudXJsLnBhdGh9P2F1dGg9ZG9uZQ=="/> <L7p:VariableToSet stringValue="redirect_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The AuthServer shall display a web site"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="cGFnZQ=="/> <L7p:VariableToSet stringValue="display"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="AuthServer has to re-authenticate the user"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bG9naW4="/> <L7p:VariableToSet stringValue="prompt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SAML"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// used with the SAML grant_type"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0LnVybC5wcm90b2NvbH06Ly8ke3JlcXVlc3QudXJsLmhvc3R9"/> <L7p:VariableToSet stringValue="audience_recipient_restriction"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="SERVER paths --- visible in the DMZ network ==============="/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX06ODQ0Mw=="/> <L7p:VariableToSet stringValue="host_oauth2_auth_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L2F1dGgvb2F1dGgvdjIvYXV0aG9yaXpl"/> <L7p:VariableToSet stringValue="path_authorize"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L2F1dGgvb2F1dGgvdjIvdG9rZW4="/> <L7p:VariableToSet stringValue="path_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L29wZW5pZC9jb25uZWN0L3YxL3VzZXJpbmZv"/> <L7p:VariableToSet stringValue="path_userinfoendpoint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L29hdXRoL3YyL3Byb3RlY3RlZGFwaS9yZXNvdXJjZWZvbw=="/> <L7p:VariableToSet stringValue="path_resource_endpoint"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="SERVER paths --- visible in the Internal network ==============="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="OAuth Manager"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX06ODQ0Mw=="/> <L7p:VariableToSet stringValue="host_oauth_manager"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L29hdXRoL21hbmFnZXI="/> <L7p:VariableToSet stringValue="path_oauth_manager"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Test Client"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX06ODQ0Mw=="/> <L7p:VariableToSet stringValue="host_oauth_test_clients"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L29hdXRoL3YyL3NhbWxUb2tlblNlcnZlcg=="/> <L7p:VariableToSet stringValue="path_saml_sts"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="HTML for test clients"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Variable htmlTemplateTop depends on variable 'client_page'. This must be defined by any policy which includes this fragment."/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="htmlTemplateCss"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="htmlTemplateTop"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PC9kaXY+CjxkaXYgY2xhc3M9InJvdy1mbHVpZCBwb3J0YWwtZm9vdGVyIj4KICAgICAgICAgICAgICAgIDxkaXYgY2xhc3M9InNwYW4xMiI+CiAgICAgICAgICAgICAgICAgICAgPHAgY2xhc3M9InBvcnRhbC1jb3B5cmlnaHQiPsKpIENBIFRlY2hub2xvZ2llcy4gQWxsIHJpZ2h0cyByZXNlcnZlZC48L3A+CiAgICAgICAgICAgICAgICA8L2Rpdj4KICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgPC9kaXY+CiAgICA8L2Rpdj4KPC9ib2R5Pgo8L2h0bWw+"/> <L7p:VariableToSet stringValue="htmlTemplateBottom"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Overwrite configuration"/> </L7p:CommentAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="47d61f98-578b-4d6d-bde2-2ef59e170684"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke3BhdGhfdG9rZW59"/> <L7p:VariableToSet stringValue="location_tokenserver"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke3BhdGhfYXV0aG9yaXplfQ=="/> <L7p:VariableToSet stringValue="location_authserver"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke3BhdGhfdXNlcmluZm9lbmRwb2ludH0="/> <L7p:VariableToSet stringValue="location_userinfoendpoint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke3BhdGhfcmVzb3VyY2VfZW5kcG9pbnR9"/> <L7p:VariableToSet stringValue="location_resourceendpoint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoX21hbmFnZXJ9JHtwYXRoX29hdXRoX21hbmFnZXJ9"/> <L7p:VariableToSet stringValue="location_oauth_manager"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoX3Rlc3RfY2xpZW50c30ke3BhdGhfc2FtbF9zdHN9"/> <L7p:VariableToSet stringValue="location_saml_token_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoX3Rlc3RfY2xpZW50c30ke3JlcXVlc3QudXJsLnBhdGh9"/> <L7p:VariableToSet stringValue="location_app"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/configuration/v2GenerateAuthHeaderForClient 07854a0de3db8f5849ecb6be3985c041 POLICY v2GenerateAuthHeaderForClient Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Generates Authorization Header"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Inputs: token, target_url, target_http_method"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Outputs: authorization_header"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="bGF5ZXI3"/> <L7p:VariableToSet stringValue="ext"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="at"/> <L7p:OtherTargetMessageVariable stringValue="token"/> <L7p:Regex stringValue="\&quot;access_token\&quot;\s*\:\s*\&quot;([^&quot;]*)\&quot;"/> <L7p:RegexName stringValue="isolate the access token itself"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="at"/> <L7p:OtherTargetMessageVariable stringValue="token"/> <L7p:Regex stringValue="access_token\=([^&amp;]*)"/> <L7p:RegexName stringValue="isolate the access token itself - for implicit grant_type"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdFsxXX0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="token_type"/> <L7p:OtherTargetMessageVariable stringValue="token"/> <L7p:Regex stringValue="\&quot;token_type\&quot;\s*\:\s*\&quot;([^&quot;]*)\&quot;"/> <L7p:RegexName stringValue="isolate token type"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="token_type"/> <L7p:OtherTargetMessageVariable stringValue="token"/> <L7p:Regex stringValue="token_type\=([^&amp;]*)"/> <L7p:RegexName stringValue="isolate token type - for implicit grant_type"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${token_type[1]}"/> <L7p:Expression2 stringValue="Bearer"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="Bearer"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="QmVhcmVyICR7YWNjZXNzX3Rva2VufQ=="/> <L7p:VariableToSet stringValue="authorization_header"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=Bearer"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${token_type[1]}"/> <L7p:Expression2 stringValue="mac"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="mac"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnYXRld2F5LnRpbWUuc2Vjb25kc30="/> <L7p:VariableToSet stringValue="timestamp_sec"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate nonce"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:TargetVariable stringValue="nonce"/> </L7p:UUIDGenerator> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0YXJnZXRfaHR0cF9tZXRob2R9"/> <L7p:VariableToSet stringValue="http_method"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0YXJnZXRfdXJsfQ=="/> <L7p:VariableToSet stringValue="url"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="mk"/> <L7p:OtherTargetMessageVariable stringValue="token"/> <L7p:Regex stringValue="\&quot;mac_key\&quot;\s*\:\s*\&quot;([^&quot;]*)\&quot;"/> <L7p:RegexName stringValue="isolate mac key"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="mk"/> <L7p:OtherTargetMessageVariable stringValue="token"/> <L7p:Regex stringValue="mac_key\=([^&amp;]*)"/> <L7p:RegexName stringValue="isolate mac key - for implicit grant_type"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtta1sxXX0="/> <L7p:VariableToSet stringValue="mac_key"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="ma"/> <L7p:OtherTargetMessageVariable stringValue="token"/> <L7p:Regex stringValue="\&quot;mac_algorithm\&quot;\s*\:\s*\&quot;([^&quot;]*)\&quot;"/> <L7p:RegexName stringValue="isolate mac algorithm"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="ma"/> <L7p:OtherTargetMessageVariable stringValue="token"/> <L7p:Regex stringValue="mac_algorithm\=([^&amp;]*)"/> <L7p:RegexName stringValue="isolate mac algorithm - for implicit grant_type"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYVsxXX0="/> <L7p:VariableToSet stringValue="mac_algorithm"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="ed7648eb-50b8-49bd-874c-46d6c2c0d7c1"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${ext}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="TUFDIGlkPSIke2FjY2Vzc190b2tlbn0iLCB0cz0iJHt0aW1lc3RhbXBfc2VjfSIsIG5vbmNlPSIke25vbmNlfSIsIGV4dD0iJHtleHR9IiwgbWFjPSIke21hY30i"/> <L7p:VariableToSet stringValue="authorization_header"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${ext}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="TUFDIGlkPSIke2FjY2Vzc190b2tlbn0iLCB0cz0iJHt0aW1lc3RhbXBfc2VjfSIsIG5vbmNlPSIke25vbmNlfSIsIG1hYz0iJHttYWN9Ig=="/> <L7p:VariableToSet stringValue="authorization_header"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Build Authorization Header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=mac"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="authorization_header"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid token_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="authorization_header"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK Client Context Variables 07854a0de3db8f5849ecb6be3985c051 ENCAPSULATED_ASSERTION OTK Client Context Variables 69c9dd7c-4bdc-414c-8f91-c12088aecb77 1 custom string true oauth2_scope string htmlTemplateBottom string location_saml_token_server string location_userinfoendpoint string client_secret_icp string path_authorize string client_secret_bcp string path_token string custom_data string location_resourceendpoint string client_id_msso string htmlTemplateTop string location_authserver string oauth2_client_id string display string oauth2_client_secret string client_secret_msso string htmlTemplateCss string audience_recipient_restriction string scope string client_id_icp string client_id_bcp string location_oauth_manager string path_resource_endpoint string location_tokenserver string redirect_uri string location_app string prompt string customAssertions ServerRegistry.gif true Configuration for OTK test client false OTK/Internal-Tools/OAuth2-TestClients/OpenIDConnectClient - ICP 07854a0de3db8f5849ecb6be3985c052 SERVICE OpenIDConnectClient - ICP true /oauth/v2/client/icp DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SslAssertion/> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Return HTML error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValueReference="inline"><![CDATA[${htmlTemplateTop} <h1>Grant type: Implicit with OpenID Connect</h1> <pre>${error.msg}</pre> ${htmlTemplateBottom}]]></L7p:Content> <L7p:ContentType stringValue="text/html;charset=UTF-8"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="69c9dd7c-4bdc-414c-8f91-c12088aecb77"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Context Variables"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return false if the XSS tag is found"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.access_token}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="pr"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="pr"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HttpRoutingAssertion> <L7p:ProtectedServiceUrl stringValue="${location_resourceendpoint}?access_token=${request.http.parameter.access_token}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Call the protected resource endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.url.path}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue=".+/icp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNvZGV9"/> <L7p:VariableToSet stringValue="code"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfc2VjcmV0X2ljcH0="/> <L7p:VariableToSet stringValue="client_secret_display"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="client_secret_front"/> <L7p:OtherTargetMessageVariable stringValue="client_secret_display"/> <L7p:Regex stringValue="^(.{5})"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="client_secret_end"/> <L7p:OtherTargetMessageVariable stringValue="client_secret_display"/> <L7p:Regex stringValue="(.{5})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfc2VjcmV0X2Zyb250WzFdfSAuLi4gJHtjbGllbnRfc2VjcmV0X2VuZFsxXX0="/> <L7p:VariableToSet stringValue="client_secret_display"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Compute the client_secret for display"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW4gaWRfdG9rZW4="/> <L7p:VariableToSet stringValue="response_type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="view"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="view"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="tokenResult"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetContentType stringValue="text/html;charset=UTF-8"/> <L7p:TargetDataType variableDataType="message"/> <L7p:TargetVariableName stringValue="tokenResult"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHtodG1sVGVtcGxhdGVUb3B9CjxoMT5HcmFudCB0eXBlOiBJbXBsaWNpdCB3aXRoIE9wZW5JRCBDb25uZWN0PC9oMT4KJHt0b2tlblJlc3VsdC5tYWlucGFydH0KJHtodG1sVGVtcGxhdGVCb3R0b219"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHtodG1sVGVtcGxhdGVUb3B9CjxoMT5HcmFudCB0eXBlOiBJbXBsaWNpdCB3aXRoIE9wZW5JRCBDb25uZWN0PC9oMT4KPHA+U29ycnksIGJ1dCB0aGUgbGlmZXRpbWUgZm9yIHRoaXMgcGFnZSBoYXMgZXhwaXJlZC48L3A+CjxwPjxhIGhyZWY9IiR7bG9jYXRpb25fYXBwfSIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSI+UmVwZWF0IFJlcXVlc3Q8L2E+PC9wPgoke2h0bWxUZW1wbGF0ZUJvdHRvbX0="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="DISPLAY results"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="The received message will be sent to the user-agent which in turn send back the message"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="with parameters instead of a url-fragment"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.auth}"/> <L7p:Expression2 stringValue="done"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="done"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXRlfQ=="/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Received redirected message"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.auth}"/> <L7p:Expression2 stringValue="done"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="done"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.error}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="DENIED"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.auth}"/> <L7p:Expression2 stringValue="done"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="done"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="call"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="call"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjY2Vzc190b2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlkX3Rva2VufQ=="/> <L7p:VariableToSet stringValue="id_token"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:WssReplayProtection> <L7p:CustomExpiryTime intValue="300000"/> <L7p:CustomIdentifierVariable stringValue="request.http.parameter.access_token"/> <L7p:CustomProtection booleanValue="true"/> <L7p:CustomScope stringValue="bcp"/> </L7p:WssReplayProtection> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Below validation is a sample which simply succeeds if one method works."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="A real world client would have to validate the id_token dependant on the 'iss' (issuer)"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HS256"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validation using a shared secret (client_secret)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:KeyType stringValue="Certificate"/> <L7p:PrivateKeySource stringValue="client_secret_icp"/> <L7p:SignatureSecret stringValue="${client_secret_icp}"/> <L7p:SourcePayload stringValue="${id_token}"/> <L7p:TargetVariablePrefix stringValue="jwt"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// HS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="RS256"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validation using a public key"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:KeyGoid goidValue="0000000000000000ffffffffffffffff"/> <L7p:SourcePayload stringValue="${id_token}"/> <L7p:TargetVariablePrefix stringValue="jwt"/> <L7p:ValidationType stringValue="Using Recipient Key From List"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// RS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate id_token signature"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${didt.aud}"/> <L7p:Expression2 stringValue="${client_id_icp}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${client_id_icp}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dmFsaWQ="/> <L7p:VariableToSet stringValue="verified"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="aW52YWxpZA=="/> <L7p:VariableToSet stringValue="verified"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpZF90b2tlbn0="/> <L7p:VariableToSet stringValue="idToken_display"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="idToken_display"/> <L7p:Regex stringValue="[.]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=".&lt;br&gt;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="idTokenIssued"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHA+PGI+Tm8gSURfVE9LRU4gd2FzIGlzc3VlZDwvYj4uIFRoZXJlIGFyZSBzZXZlcmFsIHBvc3NpYmxlIHJlYXNvbnMgZm9yIHRoYXQ6PC9wPgo8b2w+CjxsaT50aGUgdXNlciBkaWQgbm90IGdyYW50IGl0PC9saT4KPGxpPnRoZSByZXF1ZXN0ZWQgcmVzcG9uc2VfdHlwZSBkaWQgbm90IGluY2x1ZGUgJ2lkX3Rva2VuJzwvbGk+CjxsaT50aGUgY2xpZW50IHdhcyBub3QgcmVnaXN0ZXJlZCBhcyBhIHZhbGlkIE9wZW5JRCBDb25uZWN0IGNsaWVudDwvbGk+Cjwvb2w+"/> <L7p:VariableToSet stringValue="idTokenIssued"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/html;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="tokenResult"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:MaximumQuantity intValue="1"/> <L7p:TargetVariable stringValue="key"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="tokenResult"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${key[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="1000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${tokenResult.mainpart}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location_app}?state=view&amp;code=${key[0]}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHtodG1sVGVtcGxhdGVUb3B9CjxoMT5HcmFudCB0eXBlOiBJbXBsaWNpdCB3aXRoIE9wZW5JRCBDb25uZWN0PC9oMT4KPHA+U29ycnksIGJ1dCB0aGUgYWNjZXNzX3Rva2VuIGhhcyBiZWVuIHByb2Nlc3NlZCBhbHJlYWR5LjwvcD4KPHA+PGEgaHJlZj0iJHtsb2NhdGlvbl9hcHB9IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5Ij5SZXBlYXQgUmVxdWVzdDwvYT48L3A+CiR7aHRtbFRlbXBsYXRlQm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="GRANTED"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="init"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="init"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2FsbA=="/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_id_icp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="response_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="response_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="redirect_uri"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="redirect_uri"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="display"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="display"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="prompt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="prompt"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="state"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="state"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="request.http.parameter.nonce"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonce"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2lkPSR7Y2xpZW50X2lkfSZzY29wZT0ke3Njb3BlfSZyZXNwb25zZV90eXBlPSR7cmVzcG9uc2VfdHlwZX0mcmVkaXJlY3RfdXJpPSR7cmVkaXJlY3RfdXJpfSZkaXNwbGF5PSR7ZGlzcGxheX0mcHJvbXB0PSR7cHJvbXB0fSZzdGF0ZT0ke3N0YXRlfSZub25jZT0ke25vbmNlfQ=="/> <L7p:VariableToSet stringValue="authRequestParameters"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location_authserver}?${authRequestParameters}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create auth-request and redirect client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXRlfQ=="/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aW5pdA=="/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="state"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="state"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="gateway.time.HHssmmSSS"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonce"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="INITIAL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Implicit Client Profile"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="response_type=token id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuthManager/oauth-manager-clients 07854a0de3db8f5849ecb6be3985c053 SERVICE oauth-manager-clients true /oauth/manager/clients DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Implementation of a simple oauth manager that uses API calls only to access the client- and tokenstore"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValueReference="inline"><![CDATA[<!DOCTYPE html> <html> <head> <title>${this.app.name}</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"/> <meta http-equiv="X-UA-Compatible" content="IE=8,IE=9,IE=10,IE=11,chrome=1" /> ${css} </head> <body> <div> <div class="navbar"> <div class="container-fluid"> ${brandLogo} <a class="site" href="${this.app.url.login}?state=init">${this.app.name}</a> <!--LOGGED_IN_USER_DIV--> </div> </div> <div class="container-fluid"> <!--LOGGED_IN_NAV_DIV--> <div> <h1>Error</h1> <code> ${error.msg} </code> </div> <p>Please try again. If the error occurs again please click <a href="${this.app.url.login}">here</a> to login again.</p> <p>If the error still occurs please contact the system administrator.</p> ${website_bottom}]]></L7p:Content> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="d00d4a19-e148-4650-bb05-71dd29807dc6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden when user logs in or if a cookie is available"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.username"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden when user is looking up values of a different user"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="lookupUser"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="401ad9ef-1814-48d5-a8ad-5004bb062b2e"/> </L7p:Include> <L7p:Include> <L7p:PolicyGuid stringValue="60b00d82-45c7-4447-bb79-e96c0434ec00"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke3JlcXVlc3QudXJsLmhvc3R9Ojg0NDMke3JlcXVlc3QudXJsLnBhdGh9"/> <L7p:VariableToSet stringValue="this.app.url.login"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="this.app.url.login"/> <L7p:Regex stringValue="/clients$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:OneOrMore L7p:Enabled="false" wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="c3R5bGU9ImRpc3BsYXk6IG5vbmU7Ig=="/> <L7p:VariableToSet stringValue="cassandraStyle"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="web content"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Configure the manager here"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="require SSL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Override content-type with text/html"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:RateLimit> <L7p:CounterName stringValue="${current.username}${request.url}"/> <L7p:MaxRequestsPerSecond stringValue="10"/> </L7p:RateLimit> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="111"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="111"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite content-type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="rate limit"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="6b4c28ef-123a-4acf-91e0-a593aaafc4a7"/> </L7p:Include> <L7p:Include> <L7p:PolicyGuid stringValue="9a97a300-c26d-496e-be89-66488d84ed64"/> </L7p:Include> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for a cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lm1haW5wYXJ0fSR7cmVxdWVzdC51cmx9"/> <L7p:VariableToSet stringValue="requestUrl"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Extra check for quotes/brackets"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="request.url"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="(%22|[&quot;]|%29|\(|%28|\))"/> <L7p:RegexName stringValue="Validate URL input"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="XSS Check"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="XSS Gatekeeper"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="js"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="website_top"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGRpdiBjbGFzcz0icm93LWZsdWlkIHBvcnRhbC1mb290ZXIiPgogICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ic3BhbjEyIj4KICAgICAgICAgICAgICAgICAgICA8cCBjbGFzcz0icG9ydGFsLWNvcHlyaWdodCI+wqkgQ0EgVGVjaG5vbG9naWVzLiBBbGwgcmlnaHRzIHJlc2VydmVkLjwvcD4KICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICA8L2Rpdj4KICAgICAgICA8L2Rpdj4KICAgIDwvZGl2PgogICAgPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPgogICAgICAgIGFjdGl2YXRlVG9nZ2xlQmxvY2tzKCk7CiAgICA8L3NjcmlwdD4KPC9ib2R5Pgo8L2h0bWw+"/> <L7p:VariableToSet stringValue="website_bottom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHVsIGNsYXNzPSJ1c2VyLW1lbnUgcHVsbC1yaWdodCI+CiAgICA8bGkgY2xhc3M9InRvZ2dsZSBkcm9wZG93biI+CiAgICAgICAgPHNwYW4gY2xhc3M9InRvZ2dsZS1saW5rIj4KICAgICAgICAgICAgJHtjdXJyZW50LnVzZXJuYW1lfSA8YiBjbGFzcz0iY2FyZXQiPjwvYj4KICAgICAgICA8L3NwYW4+CiAgICAgICAgPHVsIGNsYXNzPSJ0b2dnbGUtYmxvY2siPgogICAgICAgICAgICA8bGk+PGEgaHJlZj0iLi4vbWFuYWdlcj9zdGF0ZT1sb2dvdXQmc3luY2hUb2tlbj0ke3N5bmNoVG9rZW59Ij5Mb2dvdXQ8L2E+PC9saT4KICAgICAgICA8L3VsPgogICAgPC9saT4KPC91bD4="/> <L7p:VariableToSet stringValue="loggedInDiv"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="website_top"/> <L7p:Regex stringValue="&lt;!--LOGGED_IN_USER_DIV--&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="${loggedInDiv}"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="loggedInNavDiv"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="website_top"/> <L7p:Regex stringValue="&lt;!--LOGGED_IN_NAV_DIV--&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="${loggedInNavDiv}"/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="web content"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set web content here (js &amp; top/bottom)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Create the filters for looking up clients"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="filtersClients"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="filtersClientKeys"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[mag]"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="TWFzdGVyIGtleXMgYXJlIHVzZWQgdG8gaW5pdGlhbGl6ZSB0aGUgY2xpZW50IChlLmcuOiAvY29ubmVjdC9jbGllbnQvaW5pdGlhbGl6ZSk="/> <L7p:VariableToSet stringValue="master_message"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isAdmin}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="both client_ident and client_key empty, so no need to check permissions"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="registered"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="registered"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="keyAdded"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="keyAdded"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Don't allow a user to register client under another user"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${current.username}"/> <L7p:Expression2 stringValue="${request.http.parameter.registered_by}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${request.http.parameter.registered_by}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="If adding a client, check name matches"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${request.http.parameter.client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="get"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathRegisteredBy"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:registered_by/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${current.username}"/> <L7p:Expression2 stringValue="${xpathRegisteredBy.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${xpathRegisteredBy.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grab registered_by from client, compare to current user"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client check"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCreatedBy"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:created_by/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${current.username}"/> <L7p:Expression2 stringValue="${xpathCreatedBy.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${xpathCreatedBy.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="grab created_by from client key, compare to current user"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client key check"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="non-admin must match client's resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.msg}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error code message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.msg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="erro.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error.code: '${error.code}', error.msg: ${error.msg}"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create an error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="verify admin, or non-admin matches owner of client/key they're modifying"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="========================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== As of here: management tasks =="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="========================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Clients overview =="/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="export"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="export"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="85f8064b-3483-4448-add7-77f3e92127dd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client Export"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expose_client_secret"/> <L7p:value stringValue="${expose_client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="incoming_xml"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewoJImVycm9yIjoiY29uZmlndXJhdGlvbl9lcnJvciIsCgkiZXJyb3JfZGVzY3JpcHRpb24iOiJleHBvcnRpbmcgZGF0YSBmYWlsZWQgZHVlIHRvIG1pc2NvbmZpZ3VyYXRpb24iCn0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Export error: client_key='${request.http.parameter.client_key}', cert='${oauth2_server_certificate}', lookup offset='${offset}'"/> </L7p:AuditDetailAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHNjcmlwdD4KJChkb2N1bWVudCkucmVhZHkoZnVuY3Rpb24oKSB7Cgl2YXIgZXhwb3J0ZWRKc29uID0gJHtyZXNwLm1haW5wYXJ0fTsKCWV4cG9ydGVkSnNvbiA9IEpTT04uc3RyaW5naWZ5KGV4cG9ydGVkSnNvbiwgdW5kZWZpbmVkICwgNCk7CiAJJCgiI2V4cG9ydGVkVGV4dCIpLnRleHQoZXhwb3J0ZWRKc29uKTsKfSk7Cjwvc2NyaXB0Pg=="/> <L7p:VariableToSet stringValue="custom_js"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPHA+RXhwb3J0ZWQgY29uZmlndXJhdGlvbiBmb3IgY2xpZW50X2lkICcke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXIuY2xpZW50X2tleX0nOjwvcD4KPGRpdiBpZD0iaWRFeHBvcnRlZEpTT04iIHN0eWxlPSJiYWNrZ3JvdW5kLWNvbG9yOiNlZWU7Zm9udC1zaXplOjAuOWVtO2JvcmRlcjoxcHggc29saWQgIzMzMztwYWRkaW5nOjAgMWVtOyI+CjxwcmUgaWQ9ImV4cG9ydGVkVGV4dCI+PC9wcmU+CjwvZGl2Pgoke2N1c3RvbV9qc30KJHt3ZWJzaXRlX2JvdHRvbX0="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="export"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="manageClients"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="manageClients"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="get"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="findDates"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOffset"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/@offset"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="1"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientIdents"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_ident"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="lastClientIdent"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="xpathClientIdents.results"/> <L7p:Regex stringValue="\s*([^,]+)\]$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// sets lastClientIdent for pagination if records exist."/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:param name="this.app.url"/> <xsl:param name="offset"/> <xsl:param name="synchToken"/> <xsl:template match="/ns:values"> <table border="1" class="table-striped table-hover" id="tblResult" style="padding:2px; empty-cells: show; overflow: hidden;"> <tr style="background-color: rgb(216,216,216);"> <xsl:choose> <xsl:when test="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th>index</th> <xsl:for-each select="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th> <xsl:value-of select="name()"/> </th> </xsl:for-each> <th colspan="3">action</th> </xsl:when> <xsl:otherwise> <td> <xsl:text>No records found</xsl:text> </td> </xsl:otherwise> </xsl:choose> </tr> <xsl:for-each select="ns:value[node()]"> <xsl:variable name="tempClientName" select="descendant::node()[local-name()='name']"/> <xsl:variable name="tempClientIdent" select="descendant::node()[local-name()='client_ident']"/> <tr> <xsl:variable name="trPosition" select="position()"/> <td> <xsl:value-of select="@index+number($offset)"/> </td> <xsl:for-each select="descendant::node()[not(name()='')]"> <xsl:choose> <xsl:when test="name()='client_custom'"> <xsl:variable name="nextId" select="concat('custom_value',$trPosition,position())"/> <td id="{$nextId}" style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:when> <xsl:otherwise> <td style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:otherwise> </xsl:choose> </xsl:for-each> <td> <form action="{$this.app.url}?state=deleteClient" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmDelete('{$tempClientName}')"> <input name="name" type="hidden" value="{$tempClientName}"/> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Delete">Delete</button> </form> </td> <td> <form action="{$this.app.url}?state=editClient" enctype="application/x-www-form-urlencoded" method="POST"> <input name="name" type="hidden" value="{$tempClientName}"/> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Edit">Edit</button> </form> </td> <td> <form action="{$this.app.url}?state=clientKeys" enctype="application/x-www-form-urlencoded" method="POST"> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="List Keys">List Keys</button> </form> </td> </tr> </xsl:for-each> </table> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="toBeReturned"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== CHECK"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Only return page with navigation buttons if count &gt; 0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="List client Apps"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="manageClientsFilter"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="manageClientsFilter"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue="${request.http.parameter.filterClientName}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="get"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue="${request.http.parameter.filterOrganization}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="findDates"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOffset"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/@offset"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Expression2 stringValue="0.0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="0.0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientIdents"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_ident"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="lastClientIdent"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="xpathClientIdents.results"/> <L7p:Regex stringValue="\s*([^,]+)\]$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Display no results found if 0 results"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:param name="this.app.url"/> <xsl:param name="offset"/> <xsl:param name="synchToken"/> <xsl:template match="/ns:values"> <table border="1" class="table-striped table-hover" id="tblResult" style="padding:2px; empty-cells: show;"> <tr style="background-color: rgb(216,216,216);"> <xsl:choose> <xsl:when test="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th>index</th> <xsl:for-each select="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th> <xsl:value-of select="name()"/> </th> </xsl:for-each> <th colspan="3">action</th> </xsl:when> <xsl:otherwise> <td> <xsl:text>No records found</xsl:text> </td> </xsl:otherwise> </xsl:choose> </tr> <xsl:for-each select="ns:value[node()]"> <xsl:variable name="tempClientName" select="descendant::node()[local-name()='name']"/> <xsl:variable name="tempClientIdent" select="descendant::node()[local-name()='client_ident']"/> <tr> <xsl:variable name="trPosition" select="position()"/> <td> <xsl:value-of select="@index+number($offset)"/> </td> <xsl:for-each select="descendant::node()[not(name()='')]"> <xsl:choose> <xsl:when test="name()='client_custom'"> <xsl:variable name="nextId" select="concat('custom_value',$trPosition,position())"/> <td id="{$nextId}" style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:when> <xsl:otherwise> <td style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:otherwise> </xsl:choose> </xsl:for-each> <td> <form action="{$this.app.url}?state=deleteClient" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmDelete('{$tempClientName}')"> <input name="name" type="hidden" value="{$tempClientName}"/> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Delete">Delete</button> </form> </td> <td> <form action="{$this.app.url}?state=editClient" enctype="application/x-www-form-urlencoded" method="POST"> <input name="name" type="hidden" value="{$tempClientName}"/> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Edit">Edit</button> </form> </td> <td> <form action="{$this.app.url}?state=clientKeys" enctype="application/x-www-form-urlencoded" method="POST"> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="List Keys">List Keys</button> </form> </td> </tr> </xsl:for-each> </table> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="toBeReturned"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== CHECK"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Only return page with navigation buttons if count &gt; 0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtwYWdpbmF0aW9uQnV0dG9uc30KJHt0b0JlUmV0dXJuZWR9CiR7cGFnaW5hdGlvbkJ1dHRvbnN9"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="List client Apps"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Other =="/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="register"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="register"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHNjcmlwdD4KJChkb2N1bWVudCkucmVhZHkoZnVuY3Rpb24oKSB7CiAKIAkkKCcjYXV0aF9tZXRob2QnKS5jaGFuZ2UoZnVuY3Rpb24oKSB7CiAgCWlmKCAkKHRoaXMpLnZhbCgpID09ICJwcml2YXRlX2tleV9qd3QiKSB7CiAgICAgICQoJyNzZWNyZXQnKS5wcm9wKCAiZGlzYWJsZWQiLCB0cnVlICk7CiAgICAgICQoJyNqd2tzX29yX2p3a3NfdXJpJykuc2hvdygpOwogICAgfSBlbHNlIHsgICAgICAgCiAgICAgICQoJyNzZWNyZXQnKS5wcm9wKCAiZGlzYWJsZWQiLCBmYWxzZSApOwogICAgICAkKCcjandrc19yYWRpb19idXR0b24nKS5wcm9wKCAiY2hlY2tlZCIsIGZhbHNlICk7CiAgICAgICQoJyNqd2tzX3VyaV9yYWRpb19idXR0b24nKS5wcm9wKCAiY2hlY2tlZCIsIGZhbHNlICk7CiAgICAgICQoJyNqd2tzX29yX2p3a3NfdXJpJykuaGlkZSgpOwogICAgICAkKCcjandrc19yb3cnKS5oaWRlKCk7CiAgICAgICQoJyNqd2tzX3VyaV9yb3cnKS5oaWRlKCk7CiAgICB9CiAgfSk7CiAgCiAgICQoImlucHV0W25hbWUkPSdqd2tzX29yX2p3a3NfdXJpX3JhZGlvX2J1dHRvbiddIikuY2hhbmdlKGZ1bmN0aW9uKCkgewoJCXZhciB2YWx1ZSA9ICQodGhpcykudmFsKCk7CiAgICBpZiAodmFsdWUgPT0gJ2p3a3MnKSB7CiAgICAgICQoJyNqd2tzX3VyaV9yb3cnKS5oaWRlKCk7CiAgICAgICQoJyNqd2tzX3JvdycpLnNob3coKTsKICAgIH1lbHNlIGlmICh2YWx1ZSA9PSAnandrc191cmknKSB7CiAgICAgICQoJyNqd2tzX3JvdycpLmhpZGUoKTsKICAgICAgJCgnI2p3a3NfdXJpX3JvdycpLnNob3coKTsKICAgIH0KICB9KTsKCiAKfSk7Cjwvc2NyaXB0Pg=="/> <L7p:VariableToSet stringValue="custom_js"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Register"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="registered"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="registered"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm1hc3Rlcn0="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmF1dGhfbWV0aG9kfQ=="/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="200ba76e-b322-4c68-8d09-c1775db3a125"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid token_endpoint_auth_methods_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:Regex stringValue="^&quot;|&quot;$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:Regex stringValue="&quot;,\s+&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=","/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:OutputVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_methods_supported}"/> <L7p:Expression2 stringValue="${token_endpoint_auth_method}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${token_endpoint_auth_method}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given token_endpoint_auth_method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Y2xpZW50X3NlY3JldF9iYXNpYw=="/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set token_endpoint_auth_method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X3NlY3JldF9iYXNpYw=="/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_key}"/> <L7p:Expression2 stringValue="${client_secret}"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="${client_secret}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3a3Nfb3Jfandrc191cmlfcmFkaW9fYnV0dG9ufQ=="/> <L7p:VariableToSet stringValue="jwk_radio_btn"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3a3N9"/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3a3NfdXJpfQ=="/> <L7p:VariableToSet stringValue="jwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwk_radio_btn}"/> <L7p:Expression2 stringValue="jwks"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwks"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzfQ=="/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client gave jwks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwk_radio_btn}"/> <L7p:Expression2 stringValue="jwks_uri"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwks_uri"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzX3VyaX0="/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiI="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client gave jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// determine if jwks or jwks_uri will be used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwksOrJwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="jwks/jwk_uri should not be empty when using &quot;private_key_jwt&quot; auth method."/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check jwks/jwks_uri is not empty if method is &quot;private_key_jwt&quot;"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzT3JKd2tzX3VyaX0="/> <L7p:VariableToSet stringValue="secret_or_jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// private_key_jwt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Expression2 stringValue="private_key_jwt"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="secret_or_jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiI="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// anything else"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if it is private_key_jwt or anything else"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${secret_or_jwks}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="For an expiration date"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="openid_registration_response"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJvcGVuaWRfcmVnaXN0cmF0aW9uIjogewogICAgInJlcXVlc3QiOnt9LAogICAgIm9hdXRoX2NsaWVudCI6dHJ1ZSwKICAgICJyZXNwb25zZSI6JHtvcGVuaWRfcmVnaXN0cmF0aW9uX3Jlc3BvbnNlfQogIH0KfQ=="/> <L7p:VariableToSet stringValue="openid_registration"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="91d92cc0-8dc1-4595-b5da-5b649d7550a1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="account_plan_mapping_ids"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="${request.http.parameter.callback}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${request.http.parameter.client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${request.http.parameter.name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${secret_or_jwks}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_status"/> <L7p:value stringValue="${request.http.parameter.status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientname"/> <L7p:value stringValue="${request.http.parameter.name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientstatus"/> <L7p:value stringValue="${request.http.parameter.status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="description"/> <L7p:value stringValue="${request.http.parameter.description}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${request.http.parameter.environment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${genExpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="key_custom"/> <L7p:value stringValue="${openid_registration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue="${request.http.parameter.name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue="${request.http.parameter.org}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client_and_key"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client_key"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${request.http.parameter.registered_by}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${request.http.parameter.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="secret"/> <L7p:value stringValue="${request.http.parameter.secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="service_ids"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="status"/> <L7p:value stringValue="${request.http.parameter.status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="type"/> <L7p:value stringValue="${request.http.parameter.type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${result}"/> <L7p:Expression2 stringValue="persisted"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="persisted"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPGgxPlJlZ2lzdGVyIGEgTmV3IENsaWVudDwvaDE+CjxwPlRoZSBhcHBsaWNhdGlvbjogJyR7cmVxdWVzdC5odHRwLnBhcmFtZXRlci5uYW1lfScgaGFzIHN1Y2Nlc3NmdWxseSBiZWVuIHJlZ2lzdGVyZWQ8L3A+CjwvZGl2Pgoke3dlYnNpdGVfYm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Registered"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="deleteClient"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="deleteClient"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm5hbWV9"/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0aeb48ac-e6f2-400d-8c88-25a2bb246267"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${request.http.parameter.client_ident}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPHA+VGhlIGNsaWVudCBhcHBsaWNhdGlvbiAnJHtjbGllbnRfbmFtZX0nIHdhcyBkZWxldGVkIHN1Y2Nlc3NmdWxseSE8L3A+CjwvZGl2Pgoke3dlYnNpdGVfYm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Delete client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="editClient"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="editClient"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${request.http.parameter.client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="get"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathIdent"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_ident/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathDescription"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:description"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathName"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:name"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOrg"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:organization/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustomClient"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFR5cGUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="clientType"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${clientType}"/> <L7p:Expression2 stringValue="confidential"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="confidential"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PG9wdGlvbiB2YWx1ZT0iY29uZmlkZW50aWFsIiBzZWxlY3RlZD0ic2VsZWN0ZWQiPmNvbmZpZGVudGlhbDwvb3B0aW9uPjxvcHRpb24gdmFsdWU9InB1YmxpYyI+cHVibGljPC9vcHRpb24+"/> <L7p:VariableToSet stringValue="selectedOption"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="PG9wdGlvbiB2YWx1ZT0iY29uZmlkZW50aWFsIj5jb25maWRlbnRpYWw8L29wdGlvbj48b3B0aW9uIHZhbHVlPSJwdWJsaWMiIHNlbGVjdGVkPSJzZWxlY3RlZCI+cHVibGljPC9vcHRpb24+"/> <L7p:VariableToSet stringValue="selectedOption"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set the type, confidential or public"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEN1c3RvbUNsaWVudC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Edit Client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="updateClient"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="updateClient"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.org}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9jdXN0b219"/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_custom.mainpart}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="empty"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set the default value '{}'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="use given value"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check content"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JSONSchema> <L7p:OtherTargetMessageVariable stringValue="client_custom"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[{ "$schema": "http://json-schema.org/draft-04/schema#", "title": "UpdatedClient", "description": "Verify that client_custom is a JSON message", "type": "object" }]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> </L7p:JSONSchema> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="client_custom"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[&lt;&gt;&amp;]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The given field 'client_custom' is not valid JSON: '${client_custom.mainpart}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="133"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="133"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check custom field"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify that 'client_custom' is either empty or JSON"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8d84f9eb-cae8-4e86-8427-46643b53ef2c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client Update"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_custom"/> <L7p:value stringValue="${client_custom.mainpart}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${request.http.parameter.client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${request.http.parameter.name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom_client"/> <L7p:value stringValue="${request.http.parameter.custom_client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="description"/> <L7p:value stringValue="${request.http.parameter.description}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue="${request.http.parameter.org}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="type"/> <L7p:value stringValue="${request.http.parameter.type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPGgxPkVkaXQgQ2xpZW50PC9oMT4KPHA+VGhlIGFwcGxpY2F0aW9uOiAnJHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm5hbWV9JyBoYXMgc3VjY2Vzc2Z1bGx5IGJlZW4gdXBkYXRlZDwvcD4KPC9kaXY+CiR7d2Vic2l0ZV9ib3R0b219"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update the client store"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="clientKeys"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="clientKeys"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${request.http.parameter.client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${request.http.parameter.filterEnvironment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue="${request.http.parameter.filterStatus}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="findDates"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOffset"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/@offset"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="1"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKeys"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="lastClientKey"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="xpathClientKeys.results"/> <L7p:Regex stringValue="\s*([^,]+)\]$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// sets lastClientKey for pagination if records exist."/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:param name="this.app.url"/> <xsl:param name="request.http.parameter.client_ident"/> <xsl:param name="offset"/> <xsl:param name="synchToken"/> <xsl:template match="/ns:values"> <table border="1" class="table-striped table-hover" id="tblResult" style="padding:2px; empty-cells: show;"> <tr style="background-color: rgb(216,216,216);"> <xsl:choose> <xsl:when test="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th>index</th> <xsl:for-each select="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th> <xsl:value-of select="name()"/> </th> </xsl:for-each> <th colspan="4">action</th> </xsl:when> <xsl:otherwise> <td> <xsl:text>No records found</xsl:text> </td> </xsl:otherwise> </xsl:choose> </tr> <xsl:for-each select="ns:value[node()]"> <xsl:variable name="tempClientKey" select="descendant::node()[local-name()='client_key']"/> <xsl:variable name="tempClientSecret" select="descendant::node()[local-name()='secret']"/> <tr> <xsl:variable name="trPosition" select="position()"/> <td> <xsl:value-of select="@index+number($offset)"/> </td> <xsl:for-each select="descendant::node()[not(name()='')]"> <xsl:choose> <xsl:when test="name()='client_key_custom'"> <xsl:variable name="nextId" select="concat('custom_value',$trPosition,position())"/> <td class="custom-clickable popup_td" id="{$nextId}"> <div style="max-width: 170px; max-height: 100px; word-wrap:break-word; overflow: hidden;"> <xsl:value-of select="text()"/> </div> </td> </xsl:when> <xsl:when test="name()='secret'"> <td class="custom-clickable popup_td" name="secret"> <div style="max-width: 170px; max-height: 100px; word-wrap:break-word; overflow: hidden;"> <xsl:value-of select="text()"/> </div> </td> </xsl:when> <xsl:when test="name()='client_key'"> <td class="custom-clickable popup_td" name="client_key"> <div style="max-width: 170px; max-height: 100px; word-wrap:break-word; overflow: hidden;"> <xsl:value-of select="text()"/> </div> </td> </xsl:when> <xsl:when test="name()='scope'"> <td class="custom-clickable popup_td" name="scope"> <div style="max-width: 170px; max-height: 100px; word-wrap:break-word; overflow: hidden;"> <xsl:value-of select="text()"/> </div> </td> </xsl:when> <xsl:otherwise> <td style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:otherwise> </xsl:choose> </xsl:for-each> <td> <form action="{$this.app.url}?state=revokeKey" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmRevokeKey('{$tempClientKey}', '{$tempClientSecret}')"> <input name="client_key" type="hidden" value="{$tempClientKey}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Revoke">Revoke</button> </form> </td> <td> <form action="{$this.app.url}?state=editKey" enctype="application/x-www-form-urlencoded" method="POST"> <input name="client_key" type="hidden" value="{$tempClientKey}"/> <input name="client_ident" type="hidden" value="{$request.http.parameter.client_ident}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Edit">Edit</button> </form> </td> <td> <form action="{$this.app.url}?state=disableTokens" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmDisableTokens('{$tempClientKey}')"> <input name="client_key" type="hidden" value="{$tempClientKey}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Disable Tokens">Disable Tokens</button> </form> </td> <td> <form action="{$this.app.url}?state=export" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmExport('{$tempClientKey}')" target="_blank"> <input name="client_key" type="hidden" value="{$tempClientKey}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Export">Export</button> </form> </td> </tr> </xsl:for-each> </table> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="toBeReturned"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGRpdiBjbGFzcz0icGFnaW5hdGlvbiIgJHtjYXNzYW5kcmFTdHlsZX0+CiAgICAgICAgPHNwYW4gY2xhc3M9InByZXYtcGFnZS1saW5rIGRpc2FibGVkIiBvbmNsaWNrPSJsb2FkUHJldkNsaWVudEtleVBhZ2VDYXNzYW5kcmEodGhpcywgJ21hbmFnZUNsaWVudEtleXNSZXN1bHQnLCAoKCcke29mZnNldH0nID09ICcnKSA/IDAgOiBwYXJzZUludCgnJHtvZmZzZXR9JykpLCAnJHtsYXN0Q2xpZW50S2V5fScsICR7eHBhdGhDb3VudC5yZXN1bHR9KTsiPgogICAgICAgICAgICA8aSBjbGFzcz0iaWNvbi1wb3J0YWwtYXJyb3ctbGVmdCI+PC9pPiBQcmV2CiAgICAgICAgPC9zcGFuPgogICAgICAgIDxzcGFuIGNsYXNzPSJuZXh0LXBhZ2UtbGluayBkaXNhYmxlZCIgb25jbGljaz0ibG9hZE5leHRDbGllbnRLZXlQYWdlQ2Fzc2FuZHJhKHRoaXMsICdtYW5hZ2VDbGllbnRLZXlzUmVzdWx0JywgKCgnJHtvZmZzZXR9JyA9PSAnJykgPyAwIDogcGFyc2VJbnQoJyR7b2Zmc2V0fScpKSwgJyR7bGFzdENsaWVudEtleX0nLCAke3hwYXRoQ291bnQucmVzdWx0fSk7Ij4KICAgICAgICAgICAgTmV4dCA8aSBjbGFzcz0iaWNvbi1wb3J0YWwtYXJyb3ctcmlnaHQiPjwvaT4KICAgICAgICA8L3NwYW4+CiAgICA8L2Rpdj4="/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== CHECK"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Only return page with navigation buttons if count &gt; 0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="popupModal"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="List client keys"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="clientKeysPagination"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="clientKeysPagination"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${offset}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${request.http.parameter.client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.filterClientId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${request.http.parameter.filterEnvironment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue="${request.http.parameter.filterStatus}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="findDates"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOffset"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/@offset"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Expression2 stringValue="0.0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="0.0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${offset}"/> <L7p:Expression2 stringValue="0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="NE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="NE"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// count = 0, offset not 0, end of paging so don't render anything"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Expression2 stringValue="0.0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="0.0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKeys"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="lastClientKey"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="xpathClientKeys.results"/> <L7p:Regex stringValue="\s*([^,]+)\]$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if count 0, don't look for client_key for pagination"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)+number($offset)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:param name="this.app.url"/> <xsl:param name="request.http.parameter.client_ident"/> <xsl:param name="offset"/> <xsl:param name="synchToken"/> <xsl:template match="/ns:values"> <table border="1" class="table-striped table-hover" id="tblResult" style="padding:2px; empty-cells: show;"> <tr style="background-color: rgb(216,216,216);"> <xsl:choose> <xsl:when test="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th>index</th> <xsl:for-each select="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th> <xsl:value-of select="name()"/> </th> </xsl:for-each> <th colspan="4">action</th> </xsl:when> <xsl:otherwise> <td> <xsl:text>No records found</xsl:text> </td> </xsl:otherwise> </xsl:choose> </tr> <xsl:for-each select="ns:value[node()]"> <xsl:variable name="tempClientKey" select="descendant::node()[local-name()='client_key']"/> <tr> <xsl:variable name="trPosition" select="position()"/> <td> <xsl:value-of select="@index+number($offset)"/> </td> <xsl:for-each select="descendant::node()[not(name()='')]"> <xsl:choose> <xsl:when test="name()='client_key_custom'"> <xsl:variable name="nextId" select="concat('custom_value',$trPosition,position())"/> <td id="{$nextId}" style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:when> <xsl:otherwise> <td style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:otherwise> </xsl:choose> </xsl:for-each> <td> <form action="{$this.app.url}?state=revokeKey" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmRevokeKey('{$tempClientKey}')"> <input name="client_key" type="hidden" value="{$tempClientKey}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Revoke">Revoke</button> </form> </td> <td> <form action="{$this.app.url}?state=editKey" enctype="application/x-www-form-urlencoded" method="POST"> <input name="client_key" type="hidden" value="{$tempClientKey}"/> <input name="client_ident" type="hidden" value="{$request.http.parameter.client_ident}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Edit">Edit</button> </form> </td> <td> <form action="{$this.app.url}?state=disableTokens" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmDisableTokens('{$tempClientKey}')"> <input name="client_key" type="hidden" value="{$tempClientKey}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Disable Tokens">Disable Tokens</button> </form> </td> <td> <form action="{$this.app.url}?state=export" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmExport('{$tempClientKey}')" target="_blank"> <input name="client_key" type="hidden" value="{$tempClientKey}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Export">Export</button> </form> </td> </tr> </xsl:for-each> </table> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="toBeReturned"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGRpdiBjbGFzcz0icGFnaW5hdGlvbiIgJHtjYXNzYW5kcmFTdHlsZX0+CiAgICAgICAgPHNwYW4gY2xhc3M9InByZXYtcGFnZS1saW5rIGRpc2FibGVkIiBvbmNsaWNrPSJsb2FkUHJldkNsaWVudEtleVBhZ2UodGhpcywgJ21hbmFnZUNsaWVudEtleXNSZXN1bHQnLCAoKCcke29mZnNldH0nID09ICcnKSA/IDAgOiBwYXJzZUludCgnJHtvZmZzZXR9JykpLCAke3hwYXRoT2Zmc2V0LnJlc3VsdH0sICR7eHBhdGhDb3VudC5yZXN1bHR9KTsiPgogICAgICAgICAgICA8aSBjbGFzcz0iaWNvbi1wb3J0YWwtYXJyb3ctbGVmdCI+PC9pPiBQcmV2CiAgICAgICAgPC9zcGFuPgogICAgICAgIDxzcGFuIGNsYXNzPSJuZXh0LXBhZ2UtbGluayBkaXNhYmxlZCIgb25jbGljaz0ibG9hZE5leHRDbGllbnRLZXlQYWdlKHRoaXMsICdtYW5hZ2VDbGllbnRLZXlzUmVzdWx0JywgKCgnJHtvZmZzZXR9JyA9PSAnJykgPyAwIDogcGFyc2VJbnQoJyR7b2Zmc2V0fScpKSwgJHt4cGF0aE9mZnNldC5yZXN1bHR9LCAke3hwYXRoQ291bnQucmVzdWx0fSk7Ij4KICAgICAgICAgICAgTmV4dCA8aSBjbGFzcz0iaWNvbi1wb3J0YWwtYXJyb3ctcmlnaHQiPjwvaT4KICAgICAgICA8L3NwYW4+CiAgICA8L2Rpdj4="/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtwYWdpbmF0aW9uQnV0dG9uc30KJHt0b0JlUmV0dXJuZWR9CiR7cGFnaW5hdGlvbkJ1dHRvbnN9CjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4KaWYgKCR7eHBhdGhDb3VudC5yZXN1bHR9ID4gJHtvZmZzZXR9ICsgcmVzdWx0c1BlclBhZ2UpIHsKICAgIHRvZ2dsZURpc2FibGVkKCduZXh0LXBhZ2UtbGluaycsIGZhbHNlKTsKfQppZiAoJHtvZmZzZXR9ID4gMCkgewogICAgdG9nZ2xlRGlzYWJsZWQoJ3ByZXYtcGFnZS1saW5rJywgZmFsc2UpOwp9Cjwvc2NyaXB0Pg=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Update"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update the existing table only. Do NOT create the full page"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// standard paging render"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// handle new searches, paging, and edge-cases"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="clientKeys"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Branch after hitting 'Load prev - next page'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="clientPagination"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="clientPagination"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${offset}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="get"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="findDates"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOffset"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/@offset"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// don't redraw if next client page is empty"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathCount.result}"/> <L7p:Expression2 stringValue="0.0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="0.0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientIdents"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_ident"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudElkZW50cy5yZXN1bHR9"/> <L7p:VariableToSet stringValue="firstClientIdent"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="lastClientIdent"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="xpathClientIdents.results"/> <L7p:Regex stringValue="\s*([^,]+)\]$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)+number($offset)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:param name="this.app.url"/> <xsl:param name="offset"/> <xsl:param name="synchToken"/> <xsl:template match="/ns:values"> <table border="1" class="table-striped table-hover" id="tblResult" style="padding:2px; empty-cells: show; overflow: hidden;"> <tr style="background-color: rgb(216,216,216);"> <xsl:choose> <xsl:when test="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th>index</th> <xsl:for-each select="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th> <xsl:value-of select="name()"/> </th> </xsl:for-each> <th colspan="3">action</th> </xsl:when> <xsl:otherwise> <td> <xsl:text>No records found</xsl:text> </td> </xsl:otherwise> </xsl:choose> </tr> <xsl:for-each select="ns:value[node()]"> <xsl:variable name="tempClientName" select="descendant::node()[local-name()='name']"/> <xsl:variable name="tempClientIdent" select="descendant::node()[local-name()='client_ident']"/> <tr> <xsl:variable name="trPosition" select="position()"/> <td> <xsl:value-of select="@index+number($offset)"/> </td> <xsl:for-each select="descendant::node()[not(name()='')]"> <xsl:choose> <xsl:when test="name()='client_custom'"> <xsl:variable name="nextId" select="concat('custom_value',$trPosition,position())"/> <td id="{$nextId}" style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:when> <xsl:otherwise> <td style="max-width: 170px; word-wrap:break-word"> <xsl:value-of select="text()"/> </td> </xsl:otherwise> </xsl:choose> </xsl:for-each> <td> <form action="{$this.app.url}?state=deleteClient" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmDelete('{$tempClientName}')"> <input name="name" type="hidden" value="{$tempClientName}"/> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Delete">Delete</button> </form> </td> <td> <form action="{$this.app.url}?state=editClient" enctype="application/x-www-form-urlencoded" method="POST"> <input name="name" type="hidden" value="{$tempClientName}"/> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Edit">Edit</button> </form> </td> <td> <form action="{$this.app.url}?state=clientKeys" enctype="application/x-www-form-urlencoded" method="POST"> <input name="client_ident" type="hidden" value="{$tempClientIdent}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="List Keys">List Keys</button> </form> </td> </tr> </xsl:for-each> </table> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="toBeReturned"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtwYWdpbmF0aW9uQnV0dG9uc30KJHt0b0JlUmV0dXJuZWR9CiR7cGFnaW5hdGlvbkJ1dHRvbnN9CjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4KaWYgKCR7eHBhdGhDb3VudC5yZXN1bHR9ID4gJHtvZmZzZXR9ICsgcmVzdWx0c1BlclBhZ2UpIHsKICAgIHRvZ2dsZURpc2FibGVkKCduZXh0LXBhZ2UtbGluaycsIGZhbHNlKTsKfQppZiAoJHtvZmZzZXR9ID4gMCkgewogICAgdG9nZ2xlRGlzYWJsZWQoJ3ByZXYtcGFnZS1saW5rJywgZmFsc2UpOwp9Cjwvc2NyaXB0Pg=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Update"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update the existing table only. Do NOT create the full page"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:All> </wsp:OneOrMore> </wsp:All> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="clients"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Branch after hitting 'Load prev - next page'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="revokeKey"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="revokeKey"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key REGX"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Client key's character must only match a single character present in the list below [a-zA-Z0-9-]"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="client_key"/> <L7p:Regex stringValue="^[a-zA-Z0-9-]*$"/> <L7p:RegexName stringValue="Validate client_key"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="XSS Check for client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="If the client_key does not pass the XSS check, OTK fails with error message."/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5504276c-0a38-4380-8ec8-c4a9a4367957"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token Revocation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="61979ce3-676d-47ab-9ba2-37c1ec59124a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client Revoke Key"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPGgxPlJldm9rZSBDbGllbnQgS2V5PC9oMT4KPHA+VGhlIGNsaWVudF9rZXkgJyR7Y2xpZW50X2tleX0nIHdhcyBzdWNjZXNzZnVsbHkgcmV2b2tlZCE8L3A+CjwvZGl2Pgoke3dlYnNpdGVfYm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Revoke client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="addKey"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="addKey"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="custom_js"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KICAgIDxoMT5BZGQgQ2xpZW50IEtleTwvaDE+CiAgICA8cD5GaWxsIG91dCB0aGUgZm9ybSB0byBhZGQgYSBuZXcgY2xpZW50X2tleS48L3A+CiAgICA8Zm9ybSBhY3Rpb249IiR7dGhpcy5hcHAudXJsfT9zdGF0ZT1rZXlBZGRlZCIgbWV0aG9kPSJQT1NUIiBlbmN0eXBlPSJhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQiIGlkPSJhZGRLZXlGb3JtIiBvbnN1Ym1pdD0icmV0dXJuIHZhbGlkYXRlRm9ybUFkZEtleSgpIj4KICAgICAgICA8aW5wdXQgbmFtZT0iY2xpZW50X2lkZW50IiBpZD0iY2xpZW50X2lkZW50IiB0eXBlPSJoaWRkZW4iIHZhbHVlPSIke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXIuY2xpZW50X2lkZW50fSIvPgogICAgICAgIDxpbnB1dCBuYW1lPSJzeW5jaFRva2VuIiB0eXBlPSJoaWRkZW4iIHZhbHVlPSIke3N5bmNoVG9rZW59IiAvPgogICAgICAgIDxpbnB1dCBuYW1lPSJleHBpcmF0aW9uIiBpZD0iZXhwaXJhdGlvbiIgdHlwZT0iaGlkZGVuIiB2YWx1ZT0iJHtnZW5FeHBpcmF0aW9ufSIvPgogICAgICAgIDx0YWJsZSBjbGFzcz0idGFibGUtZm9ybSIgbmFtZT0idmFsdWVzIj4KICAgICAgICAgICA8dHI+PHRkPkNsaWVudCBLZXk8L3RkPjx0ZD48dGV4dGFyZWEgbmFtZT0iY2xpZW50X2tleSIgaWQ9ImNsaWVudF9rZXkiIGNvbHM9IjUwIiByb3dzPSIxMCIgbWF4bGVuZ3RoPSIyNTUiPiR7Z2VuVG9rZW59PC90ZXh0YXJlYT48YnI+KG11c3QgYmUgdW5pcXVlIHRvIHRoZSBzeXN0ZW0pPC90ZD48L3RyPgogICAgICAgICAgIDx0cj48dGQ+QXV0aGVudGljYXRpb24gTWV0aG9kPC90ZD48dGQ+CiAgICAgICAgICAgICAgICA8c2VsZWN0IG5hbWU9ImF1dGhfbWV0aG9kIiBpZD0iYXV0aF9tZXRob2QiPgogICAgICAgICAgICAgICAgICAgIDxvcHRpb24gdmFsdWU9ImNsaWVudF9zZWNyZXRfYmFzaWMiPkNsaWVudCBTZWNyZXQgKEJhc2ljKTwvb3B0aW9uPgogICAgICAgICAgICAgICAgICAgIDxvcHRpb24gdmFsdWU9ImNsaWVudF9zZWNyZXRfcG9zdCI+Q2xpZW50IFNlY3JldCAoUG9zdCk8L29wdGlvbj4KICAgICAgICAgICAgICAgICAgICA8b3B0aW9uIHZhbHVlPSJjbGllbnRfc2VjcmV0X2p3dCI+Q2xpZW50IFNlY3JldCAoSldUKTwvb3B0aW9uPgogICAgICAgICAgICAgICAgICAgIDxvcHRpb24gdmFsdWU9InByaXZhdGVfa2V5X2p3dCI+UHJpdmF0ZSBLZXkgKEpXVCk8L29wdGlvbj4KICAgICAgICAgICAgICAgIDwvc2VsZWN0PgogICAgICAgICAgICA8L3RkPjwvdHI+CiAgICAgICAgICAgIDx0cj48dGQ+Q2xpZW50IFNlY3JldDwvdGQ+PHRkPjx0ZXh0YXJlYSBuYW1lPSJzZWNyZXQiIGlkPSJzZWNyZXQiIGNvbHM9IjUwIiByb3dzPSIxMCI+JHtnZW5TZWNyZXR9PC90ZXh0YXJlYT48YnI+KHdoZW4gY2xpZW50IGlzIHJlZ2lzdGVyZWQgdGhyb3VnaCBPSURDIHdpdGggdG9rZW5fZW5kcG9pbnRfYXV0aF9tZXRob2QgYXMgUHJpdmF0ZV9rZXlfand0LCBzZWNyZXQgY2FuIGJlIGp3a3Mgb3Igandrc191cmkpPC90ZD48L3RyPgogICAgICAgICAgICA8dHIgc3R5bGU9ImRpc3BsYXk6IG5vbmUiIGlkPSJqd2tzX29yX2p3a3NfdXJpIj48dGQ+PC90ZD48dGQ+CiAgICAgICAgICAgICAgICA8aW5wdXQgbmFtZT0iandrc19vcl9qd2tzX3VyaV9yYWRpb19idXR0b24iIGlkPSJqd2tzX3JhZGlvX2J1dHRvbiIgdHlwZT0icmFkaW8iIHZhbHVlPSJqd2tzIj4gandrczxicj4KICAgICAgICAgICAgICAgIDxpbnB1dCBuYW1lPSJqd2tzX29yX2p3a3NfdXJpX3JhZGlvX2J1dHRvbiIgaWQ9Imp3a3NfdXJpX3JhZGlvX2J1dHRvbiIgdHlwZT0icmFkaW8iIHZhbHVlPSJqd2tzX3VyaSI+IGp3a3NfdXJpCgkJCTwvdGQ+PC90cj4KICAgICAgICAgICAgPHRyIHN0eWxlPSJkaXNwbGF5OiBub25lIiBpZD0iandrc19yb3ciPjx0ZD5KV0tzPGJyLz4oTVVTVCBiZSBKU09OKTwvdGQ+PHRkPjx0ZXh0YXJlYSBuYW1lPSJqd2tzIiBpZD0iandrcyIgY29scz0iNTAiIHJvd3M9IjEwIj48L3RleHRhcmVhPjwvdGQ+PC90cj4KICAgICAgICAgICAgPHRyIHN0eWxlPSJkaXNwbGF5OiBub25lIiBpZD0iandrc191cmlfcm93Ij48dGQ+SldLcyBVUkk8L3RkPjx0ZD48dGV4dGFyZWEgbmFtZT0iandrc191cmkiIGlkPSJqd2tzX3VyaSIgIGNvbHM9IjUwIiByb3dzPSIyIj48L3RleHRhcmVhPjwvdGQ+PC90cj4KICAgICAgICAgICAgPHRyPjx0ZD5bbWFnXSBNYXN0ZXIgS2V5PC90ZD48dGQ+PGlucHV0IG5hbWU9Im1hc3RlciIgaWQ9Im1hc3RlciIgdmFsdWU9InRydWUiIHR5cGU9ImNoZWNrYm94IiBvbmNoYW5nZT0icmV0dXJuIHRvZ2dsZU1hc3RlcigpOyI+ICR7bWFzdGVyX21lc3NhZ2V9PC90ZD48L3RyPgogICAgICAgICAgICA8dHI+PHRkPlN0YXR1czwvdGQ+PHRkPjxzZWxlY3QgbmFtZT0ic3RhdHVzIj48b3B0aW9uIHZhbHVlPSJFTkFCTEVEIj5FTkFCTEVEPC9vcHRpb24+PG9wdGlvbiB2YWx1ZT0iRElTQUJMRUQiPkRJU0FCTEVEPC9vcHRpb24+PC9zZWxlY3Q+PC90ZD48L3RyPgogICAgICAgICAgICA8dHI+PHRkPlNjb3BlPC90ZD48dGQ+PHRleHRhcmVhIG5hbWU9InNjb3BlIiBpZD0ic2NvcGUiIGNvbHM9IjUwIiByb3dzPSIxMCIgbWF4bGVuZ3RoPSI0MDAwIj5vb2I8L3RleHRhcmVhPjxicj4odXNlZCB3aXRoIG9hdXRoIDIuMCk8L3RkPjwvdHI+CiAgICAgICAgICAgIDx0cj48dGQ+Q2FsbGJhY2sgVVJMPC90ZD48dGQ+PGlucHV0IG5hbWU9ImNhbGxiYWNrIiBzaXplPSIxMjgiIHZhbHVlPSJvb2IiLz48YnI+KGluIG9hdXRoIDIuMCB0aGlzIGlzIGNhbGxlZCByZWRpcmVjdF91cmkpPC90ZD48L3RyPgogICAgICAgICAgICA8dHI+PHRkPkVudmlyb25tZW50PC90ZD48dGQ+PGlucHV0IG5hbWU9ImVudmlyb25tZW50IiBzaXplPSIxMjgiIHZhbHVlPSJBTEwiLz48L3RkPjwvdHI+CiAgICAgICAgICAgIDx0cj48dGQ+UmVnaXN0ZXJlZCBieTwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJyZWdpc3RlcmVkX2J5IiBpZD0icmVnaXN0ZXJlZF9ieSIgdmFsdWU9IiR7Y3VycmVudC51c2VybmFtZX0iIHR5cGU9InRleHQiIHNpemU9IjEyOCIgcmVhZG9ubHkvPjwvdGQ+PC90cj4KICAgICAgICAgICAgPHRyPjx0ZD48L3RkPjx0ZD4KICAgICAgICAgICAgICAgIDxidXR0b24gY2xhc3M9ImJ0biBidG4tcHJpbWFyeSIgaWQ9InN1Ym1pdEJ1dHRvbiIgdHlwZT0ic3VibWl0IiB2YWx1ZT0iQWRkIj5BZGQ8L2J1dHRvbj4mbmJzcDsKICAgICAgICAgICAgICAgIDxidXR0b24gY2xhc3M9ImJ0biBidG4tcHJpbWFyeSIgdHlwZT0icmVzZXQiPlJlc2V0PC9idXR0b24+CiAgICAgICAgICAgICAgICA8YSBocmVmPSIke3RoaXMuYXBwLnVybH0/c3RhdGU9Y2xpZW50S2V5cyZjbGllbnRfaWRlbnQ9JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0mc3luY2hUb2tlbj0ke3N5bmNoVG9rZW59IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IHB1bGwtcmlnaHQiPkNhbmNlbDwvYT4KICAgICAgICAgICAgPC90ZD48L3RyPgogICAgICAgIDwvdGFibGU+CiAgICA8L2Zvcm0+Cgo8L2Rpdj4KJHtjdXN0b21fanN9CiR7d2Vic2l0ZV9ib3R0b219"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Add Client Key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="keyAdded"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="keyAdded"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm1hc3Rlcn0="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmF1dGhfbWV0aG9kfQ=="/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="200ba76e-b322-4c68-8d09-c1775db3a125"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid token_endpoint_auth_methods_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:Regex stringValue="^&quot;|&quot;$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:Regex stringValue="&quot;,\s+&quot;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=","/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:OutputVariable stringValue="token_endpoint_auth_methods_supported"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_methods_supported}"/> <L7p:Expression2 stringValue="${token_endpoint_auth_method}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${token_endpoint_auth_method}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given token_endpoint_auth_method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Y2xpZW50X3NlY3JldF9iYXNpYw=="/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set token_endpoint_auth_method"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X3NlY3JldF9iYXNpYw=="/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_key}"/> <L7p:Expression2 stringValue="${client_secret}"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="${client_secret}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3a3Nfb3Jfandrc191cmlfcmFkaW9fYnV0dG9ufQ=="/> <L7p:VariableToSet stringValue="jwk_radio_btn"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3a3N9"/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3a3NfdXJpfQ=="/> <L7p:VariableToSet stringValue="jwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwk_radio_btn}"/> <L7p:Expression2 stringValue="jwks"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwks"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzfQ=="/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="jwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client gave jwks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwk_radio_btn}"/> <L7p:Expression2 stringValue="jwks_uri"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwks_uri"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzX3VyaX0="/> <L7p:VariableToSet stringValue="jwksOrJwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiI="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client gave jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// determine if jwks or jwks_uri will be used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwksOrJwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="jwks/jwk_uri should not be empty when using &quot;private_key_jwt&quot; auth method."/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check jwks/jwks_uri is not empty if method is &quot;private_key_jwt&quot;"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd2tzT3JKd2tzX3VyaX0="/> <L7p:VariableToSet stringValue="secret_or_jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// private_key_jwt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Expression2 stringValue="private_key_jwt"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="secret_or_jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiI="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// anything else"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if it is private_key_jwt or anything else"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${secret_or_jwks}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.registered_by}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICAiY2xpZW50X2lkIjogIiR7cmVxdWVzdC5odHRwLnBhcmFtZXRlci5jbGllbnRfaWRlbnR9IiwKICAgImNsaWVudF9zZWNyZXQiOgogICAgICIke2NsaWVudF9zZWNyZXR9IiwKICAgImNsaWVudF9zZWNyZXRfZXhwaXJlc19hdCI6ICIke2dlbkV4cGlyYXRpb259IiwKICAgImNsaWVudF9pZF9pc3N1ZWRfYXQiOiR7Z2F0ZXdheS50aW1lLnNlY29uZHN9LAogICAicmVnaXN0cmF0aW9uX2FjY2Vzc190b2tlbiI6CiAgICAgIiR7YWNjZXNzX3Rva2VufSIsCiAgICJyZWdpc3RyYXRpb25fY2xpZW50X3VyaSI6IiIsCiAgICJ0b2tlbl9lbmRwb2ludF9hdXRoX21ldGhvZCI6CiAgICAgIiR7dG9rZW5fZW5kcG9pbnRfYXV0aF9tZXRob2R9IiwKICAgInRva2VuX2VuZHBvaW50X2F1dGhfc2lnbmluZ19hbGciOiAiIiwKICAgImFwcGxpY2F0aW9uX3R5cGUiOiAiJHthcHBsaWNhdGlvbl90eXBlfSIsCiAgICJyZWRpcmVjdF91cmlzIjogWyIke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXIuY2FsbGJhY2t9Il0sCiAgICJjbGllbnRfbmFtZSI6ICIke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXIubmFtZX0iLAogICAic3ViamVjdF90eXBlIjogIiR7c3ViamVjdF90eXBlfSIsCiAgICJzZWN0b3JfaWRlbnRpZmllcl91cmkiOiIke3NlY3Rvcl9pZGVudGlmaWVyX3VyaX0iLAogICAiY29udGFjdHMiOiBbJHtjb250YWN0c31dLAogICJyZXNwb25zZV90eXBlcyI6WyR7cmVzcG9uc2VfdHlwZXN9XSwKICAiZ3JhbnRfdHlwZXMiOlske2dyYW50X3R5cGVzfV0sCiAgImlkX3Rva2VuX3NpZ25lZF9yZXNwb25zZV9hbGciOiIke2lkX3Rva2VuX3NpZ25pbmdfYWxnb3JpdGhtfSIsCiAgInVzZXJpbmZvX3NpZ25lZF9yZXNwb25zZV9hbGciOiIiLAogICJlbnZpcm9ubWVudCI6IiR7cmVxdWVzdC5odHRwLnBhcmFtZXRlci5lbnZpcm9ubWVudH0iLAogICJvcmdhbml6YXRpb24iOiIke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXIub3JnfSIsCiAgIm1hc3RlciI6JHttYXN0ZXJ9LAogICJkZXNjcmlwdGlvbiI6IiR7cmVxdWVzdC5odHRwLnBhcmFtZXRlci5kZXNjcmlwdGlvbn0iLAogICJzY29wZSI6IiR7cmVxdWVzdC5odHRwLnBhcmFtZXRlci5zY29wZX0iLAogICJqd2tzIjoke2p3a3N9LAogICJqd2tzX3VyaSI6IiR7andrc191cml9IgogIH0="/> <L7p:VariableToSet stringValue="openid_registration_response"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJvcGVuaWRfcmVnaXN0cmF0aW9uIjogewogICAgInJlcXVlc3QiOnt9LAogICAgIm9hdXRoX2NsaWVudCI6dHJ1ZSwKICAgICJyZXNwb25zZSI6JHtvcGVuaWRfcmVnaXN0cmF0aW9uX3Jlc3BvbnNlfQogIH0KfQ=="/> <L7p:VariableToSet stringValue="openid_registration"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="91d92cc0-8dc1-4595-b5da-5b649d7550a1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="account_plan_mapping_ids"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="${request.http.parameter.callback}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue="${request.http.parameter.client_ident}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${secret_or_jwks}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_status"/> <L7p:value stringValue="${request.http.parameter.status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientname"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientstatus"/> <L7p:value stringValue="${request.http.parameter.status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="description"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${request.http.parameter.environment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${request.http.parameter.expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="key_custom"/> <L7p:value stringValue="${openid_registration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client_and_key"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="persist_client_key"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${request.http.parameter.registered_by}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${request.http.parameter.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="secret"/> <L7p:value stringValue="${request.http.parameter.secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="service_ids"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="type"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${result}"/> <L7p:Expression2 stringValue="persisted"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="persisted"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPGgxPkFkZCBDbGllbnQgS2V5PC9oMT4KPHA+VGhlIGNsaWVudF8ga2V5ICcke2NsaWVudF9rZXl9JyBoYXMgc3VjY2Vzc2Z1bGx5IGJlZW4gcmVnaXN0ZXJlZDwvcD4KPC9kaXY+CiR7d2Vic2l0ZV9ib3R0b219"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Key added"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="editKey"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="editKey"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathStatus"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:status/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCallback"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:callback/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathEnvironment"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:environment/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustomKey"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathServiceIds"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:serviceids"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAccountPlanMappingIds"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:accountplanmappingids"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFN0YXR1cy5yZXN1bHR9"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_key}"/> <L7p:Expression2 stringValue="${xpathSecret.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${xpathSecret.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHRyPjx0ZD5bbWFnXSBNYXN0ZXIgS2V5PC90ZD48dGQ+PGlucHV0IG5hbWU9Im1hc3RlciIgaWQ9Im1hc3RlciIgdmFsdWU9InRydWUiIHR5cGU9ImNoZWNrYm94IiBvbmNoYW5nZT0icmV0dXJuIHRvZ2dsZU1hc3RlcigpOyIgY2hlY2tlZD4gICR7bWFzdGVyX21lc3NhZ2V9PC90ZD48L3RyPg=="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="U1RZTEU9ImJhY2tncm91bmQtY29sb3I6bGlnaHRncmF5IiByZWFkT25seT0idHJ1ZSI="/> <L7p:VariableToSet stringValue="secret_attributes"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHRyPjx0ZD5bbWFnXSBNYXN0ZXIgS2V5PC90ZD48dGQ+PGlucHV0IG5hbWU9Im1hc3RlciIgaWQ9Im1hc3RlciIgdmFsdWU9InRydWUiIHR5cGU9ImNoZWNrYm94IiBvbmNoYW5nZT0icmV0dXJuIHRvZ2dsZU1hc3RlcigpOyIgPiAgJHttYXN0ZXJfbWVzc2FnZX08L3RkPjwvdHI+"/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="U1RZTEU9ImJhY2tncm91bmQtY29sb3I6d2hpdGUi"/> <L7p:VariableToSet stringValue="secret_attributes"/> </L7p:SetVariable> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${status}"/> <L7p:Expression2 stringValue="ENABLED"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="ENABLED"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PG9wdGlvbiB2YWx1ZT0iRU5BQkxFRCIgc2VsZWN0ZWQ9InNlbGVjdGVkIj5FTkFCTEVEPC9vcHRpb24+PG9wdGlvbiB2YWx1ZT0iRElTQUJMRUQiPkRJU0FCTEVEPC9vcHRpb24+"/> <L7p:VariableToSet stringValue="selectedOption"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="PG9wdGlvbiB2YWx1ZT0iRElTQUJMRUQiIHNlbGVjdGVkPSJzZWxlY3RlZCI+RElTQUJMRUQ8L29wdGlvbj48b3B0aW9uIHZhbHVlPSJFTkFCTEVEIj5FTkFCTEVEPC9vcHRpb24+"/> <L7p:VariableToSet stringValue="selectedOption"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEN1c3RvbUtleS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="key_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHNjcmlwdD4KLy8gZHluYW1pYyBjb250ZW50CiQoZG9jdW1lbnQpLnJlYWR5KCBmdW5jdGlvbigpIHsgCiAgICAvLyBiZWF1dGlmeSBqc29uIGluIHNlY3JldCBmaWVsZAogICAgdmFyIHNlY3JldFZhbHVlID0gJCgndGV4dGFyZWEjc2VjcmV0JykudmFsKCk7CiAgICB0cnkgewogICAgICBzZWNyZXRWYWx1ZSA9IEpTT04uc3RyaW5naWZ5KCQucGFyc2VKU09OKHNlY3JldFZhbHVlKSwgbnVsbCwgNCk7CiAgICAgICQoJ3RleHRhcmVhI3NlY3JldCcpLnZhbChzZWNyZXRWYWx1ZSk7CiAgICB9IGNhdGNoIChlcnIpIHsKICAgICAgJCgndGV4dGFyZWEjc2VjcmV0JykuYXR0cigncm93cycsICcyJyk7CiAgICB9Cn0pOwo8L3NjcmlwdD4="/> <L7p:VariableToSet stringValue="custom_js"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Edit client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="keyEdited"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="keyEdited"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.master}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_key}"/> <L7p:Expression2 stringValue="${request.http.parameter.secret}"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="${request.http.parameter.secret}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="master-key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle a master key, set the client_secret appropriately"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmtleV9jdXN0b219"/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="key_custom"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${key_custom.mainpart}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="key_custom"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="empty"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set the default value '{}'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="use given value"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check content"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:JSONSchema> <L7p:OtherTargetMessageVariable stringValue="key_custom"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[{ "$schema": "http://json-schema.org/draft-04/schema#", "title": "UpdatedClientID", "description": "Verify that key_custom is a JSON message", "type": "object" }]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> </L7p:JSONSchema> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="key_custom"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[&lt;&gt;&amp;]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The given field 'key_custom' is not valid JSON: '${key_custom.mainpart}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="133"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="133"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check custom field"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify that 'key_custom' is either empty or JSON"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="aa4558fd-f638-409b-bbd8-13aad70b1960"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client GET"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// GET (validate client key valid) before disabling"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathKey"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5dc32f2b-bd22-4a80-af87-f55409432894"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client Key Update"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="account_plan_mapping_ids"/> <L7p:value stringValue="${request.http.parameter.account_plan_mapping_ids}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="${request.http.parameter.callback}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_status"/> <L7p:value stringValue="${request.http.parameter.status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="created_by"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom_key"/> <L7p:value stringValue="${request.http.parameter.custom_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${request.http.parameter.environment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="key_custom"/> <L7p:value stringValue="${key_custom.mainpart}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${request.http.parameter.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="secret"/> <L7p:value stringValue="${request.http.parameter.secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="service_ids"/> <L7p:value stringValue="${request.http.parameter.service_ids}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPGgxPkVkaXQgQ2xpZW50IEtleTwvaDE+CjxwPlRoZSBjbGllbnRfa2V5OiAnJHt4cGF0aEtleS5yZXN1bHR9JyBoYXMgc3VjY2Vzc2Z1bGx5IGJlZW4gdXBkYXRlZDwvcD4KPC9kaXY+CiR7d2Vic2l0ZV9ib3R0b219"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Edited client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="disableTokens"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="disableTokens"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c26cb94f-98ce-4582-aa8c-0508d24d7694"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token Disable"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPGgxPkRpc2FibGUgQ2xpZW50IEtleSBUb2tlbnM8L2gxPgo8cD5Ub2tlbnMgZm9yIHRoZSBjbGllbnRfa2V5ICcke2NsaWVudF9rZXl9JyB3ZXJlIHN1Y2Nlc3NmdWxseSBkaXNhYmxlZCE8L3A+CjwvZGl2Pgoke3dlYnNpdGVfYm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Disable tokens for client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="===Unknown state or authentication error=="/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.msg}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error code message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.msg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="erro.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error.code: '${error.code}', error.msg: ${error.msg}"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create an error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="tasks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-ropc 07854a0de3db8f5849ecb6be3985c054 SERVICE OAuth2Client-ropc true /oauth/v2/client/ropc* DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This is a test client for an OAuth 2 implementation using the resource owner password credentials grant type"/> </L7p:CommentAssertion> <L7p:SslAssertion/> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="69c9dd7c-4bdc-414c-8f91-c12088aecb77"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Context Variables"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="cm9wYw=="/> <L7p:VariableToSet stringValue="client_page"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjdGlvbn0="/> <L7p:VariableToSet stringValue="action"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CookieCredentialSource> <L7p:CookieName stringValue="l7otk2client"/> </L7p:CookieCredentialSource> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cookie.l7otk2client}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWUubDdvdGsyY2xpZW50fQ=="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get current token session id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionLocation"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:location/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQoKVGhlIGFjY2VzcyB0b2tlbiB3YXMgcmV0cmlldmVkIGZyb20gJHtzZXNzaW9uTG9jYXRpb24ucmVzdWx0fS4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="not found or no cacheKey"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${clearSessionForm}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="clear cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="l7otk2client=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; Path=/; Secure; HttpOnly"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="callapi"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="callapi"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X3Rva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRhcmdldH0="/> <L7p:VariableToSet stringValue="target_url"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="R0VU"/> <L7p:VariableToSet stringValue="target_http_method"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4844bcf1-2d2f-491d-87f1-40a5286b71eb"/> </L7p:Include> <L7p:HttpRoutingAssertion> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:ProtectedServiceUrl stringValue="${target_url}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${authorization_header}"/> <L7p:Name stringValue="authorization"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Call API"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="handshake"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="handshake"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.login}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item stringLength="included"> <L7p:Max intValue="-1"/> <L7p:Min intValue="1"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.password}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item stringLength="included"> <L7p:Max intValue="-1"/> <L7p:Min intValue="1"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="request.http.parameter.login"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="login"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="request.http.parameter.password"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="password"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRfdHlwZT1wYXNzd29yZCZ1c2VybmFtZT0ke2xvZ2lufSZzY29wZT0ke3Njb3BlfSZwYXNzd29yZD0ke3Bhc3N3b3JkfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="postMsg"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:Login stringValue="${oauth2_client_id}"/> <L7p:Password stringValue="${oauth2_client_secret}"/> <L7p:ProtectedServiceUrl stringValue="${location_tokenserver}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="postMsg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0KClRoZSBhY2Nlc3MgdG9rZW4gd2FzIHJldHJpZXZlZC4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:TargetVariable stringValue="tokenSessionId"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${tokenSessionId[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7dG9rZW5TZXNzaW9uSWRbMF19OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Handshake"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="clearSession"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="clearSession"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="Tm8gY3VycmVudCB0b2tlbi4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PTsgRXhwaXJlcz1UaHUsIDAxIEphbiAxOTcwIDAwOjAwOjAwIEdNVDsgUGF0aD0vOyBTZWN1cmU7IEh0dHBPbmx5"/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Clear session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="refresh"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="refresh"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="rt"/> <L7p:OtherTargetMessageVariable stringValue="current_token"/> <L7p:Regex stringValue="\&quot;refresh_token\&quot;\s*\:\s*\&quot;([^&quot;]*)\&quot;"/> <L7p:RegexName stringValue="isolate the refresh token"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtydFsxXX0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRfdHlwZT1yZWZyZXNoX3Rva2VuJnJlZnJlc2hfdG9rZW49JHtydFsxXX0="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="postMsg"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:Login stringValue="${oauth2_client_id}"/> <L7p:Password stringValue="${oauth2_client_secret}"/> <L7p:ProtectedServiceUrl stringValue="${location_tokenserver}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="application/xml"/> <L7p:Name stringValue="accept"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="postMsg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="3MVG94DzwlYDSHS6GTCNPxF87RQ8HrxbojWk89by7fE_H4ch8TsfZcaIFz.jdne83WCVPiD_xA93_Y8j4iomk"/> <L7p:Name stringValue="client_id"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="https://ssg61.l7tech.com:8443/salesforce/oauth/callback"/> <L7p:Name stringValue="redirect_uri"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="4922422941220601472"/> <L7p:Name stringValue="client_secret"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="authorization_code"/> <L7p:Name stringValue="grant_type"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${code}"/> <L7p:Name stringValue="code"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0KClRoZSBhY2Nlc3MgdG9rZW4gd2FzIHJlZnJlc2hlZC4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7Y2FjaGVLZXl9OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Refresh"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtodG1sVGVtcGxhdGVUb3B9Cgo8ZGl2IGlkPSJjb250ZW50Ij4KCiAgPElGUkFNRSBpZD1teWlmcmFtZSBzcmM9IiIgc3R5bGU9J2Rpc3BsYXk6bm9uZScgZnJhbWVib3JkZXI9IjAiIHNjcm9sbGluZz0iYXV0byI+CiAgPC9JRlJBTUU+CgogIDxoMT5HcmFudCB0eXBlOiBSZXNvdXJjZSBvd25lciBwYXNzd29yZCBjcmVkZW50aWFsczwvaDE+CiAgPGRpdiBzdHlsZT0ibWFyZ2luLWJvdHRvbTogMmVtOyBib3JkZXItYm90dG9tOiAxcHggc29saWQgI2NjYzsiPgogICAgPGgyPkN1cnJlbnQgQWNjZXNzIFRva2VuOjwvaDI+CiAgICAke2NsZWFyU2Vzc2lvbkZvcm19CiAgICA8cHJlPgoke2N1cnJlbnRfdG9rZW59CiAgICA8L3ByZT4KICA8L2Rpdj4KICA8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOiAyZW07Ij4KICAgIDxoMj5Jbml0aWF0ZSBuZXcgT0F1dGggaGFuZHNoYWtlPC9oMj4KICAgIDxmb3JtIGFjdGlvbj0iJHtyZXF1ZXN0LnVybC5wcm90b2NvbH06Ly8ke3JlcXVlc3QudXJsLmhvc3R9OiR7cmVxdWVzdC51cmwucG9ydH0ke3JlcXVlc3QudXJsLnBhdGh9IiBtZXRob2Q9IlBPU1QiIGNsYXNzPSJmb3JtLWJvZHkgZm9ybS1sb2dpbiIgc3R5bGU9Im1hcmdpbjogMDsiPgogICAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhY3Rpb24iIHZhbHVlPSJoYW5kc2hha2UiLz4KICAgICAgPGRpdiBjbGFzcz0iY29udHJvbC1ncm91cCI+CiAgICAgICAgPGxhYmVsPlVzZXJuYW1lICo8L2xhYmVsPgogICAgICAgIDxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJsb2dpbiIgY2xhc3M9ImlucHV0LWJsb2NrIj4KICAgICAgPC9kaXY+CiAgICAgIDxkaXYgY2xhc3M9ImNvbnRyb2wtZ3JvdXAiPgogICAgICAgIDxsYWJlbD5QYXNzd29yZCAqPC9sYWJlbD4KICAgICAgICA8aW5wdXQgdHlwZT0icGFzc3dvcmQiIG5hbWU9InBhc3N3b3JkIiBjbGFzcz0iaW5wdXQtYmxvY2siPgogICAgICA8L2Rpdj4KICAgICAgPGRpdiBjbGFzcz0icm93LWZsdWlkIj4KICAgICAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBwdWxsLXJpZ2h0IiB2YWx1ZT0iSW5pdGlhdGUiPkluaXRpYXRlPC9idXR0b24+CiAgICAgIDwvZGl2PgogICAgPC9mb3JtPgogIDwvZGl2PgogIDxkaXYgc3R5bGU9Im1hcmdpbi1ib3R0b206IDJlbTsiPgogICAgPGgyPlJlZnJlc2ggQ3VycmVudCBBY2Nlc3MgVG9rZW48L2gyPgogICAgICA8Zm9ybSBhY3Rpb249IiR7cmVxdWVzdC51cmwucHJvdG9jb2x9Oi8vJHtyZXF1ZXN0LnVybC5ob3N0fToke3JlcXVlc3QudXJsLnBvcnR9JHtyZXF1ZXN0LnVybC5wYXRofSI+CiAgICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImFjdGlvbiIKIHZhbHVlPSJyZWZyZXNoIi8+CiAgICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IGJ0bi1taW5pIiB2YWx1ZT0iUmVmcmVzaCI+UmVmcmVzaDwvYnV0dG9uPgogICAgPC9mb3JtPgoKICA8L2Rpdj4KICA8ZGl2IHN0eWxlPSJtYXJnaW4tYm90dG9tOiAyZW07Ij4KICAgIDxoMj5DYWxsIEFQSSBVc2luZyBDdXJyZW50IEFjY2VzcyBUb2tlbjwvaDI+CiAgICA8Zm9ybSBhY3Rpb249IiR7cmVxdWVzdC51cmwucHJvdG9jb2x9Oi8vJHtyZXF1ZXN0LnVybC5ob3N0fToke3JlcXVlc3QudXJsLnBvcnR9JHtyZXF1ZXN0LnVybC5wYXRofSI+CiAgICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImFjdGlvbiIKIHZhbHVlPSJjYWxsYXBpIi8+CiAgICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9InN0YXRlIgogdmFsdWU9InN0YXRlX3Rlc3QiLz4KICAgICAgVGFyZ2V0OiA8aW5wdXQgdHlwZT0idGV4dCIgbmFtZT0idGFyZ2V0IiBzaXplPTgwIHZhbHVlPSIke2xvY2F0aW9uX3Jlc291cmNlZW5kcG9pbnR9Ii8+CiAgICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IGJ0bi1taW5pIiB2YWx1ZT0iQ2FsbCBBUEkiPkNhbGwgQVBJPC9idXR0b24+CiAgICA8L2Zvcm0+CiAgICA8cHJlPgoke2FwaW91dHB1dH0KICAgIDwvcHJlPgogIDwvZGl2Pgo8L2Rpdj4KCiR7aHRtbFRlbXBsYXRlQm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${setCookie}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-client_credentials 07854a0de3db8f5849ecb6be3985c055 SERVICE OAuth2Client-client_credentials true /oauth/v2/client/clientcreds* DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This is a test client for an OAuth 2 implementation using the client credentials grant type"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Return HTML error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValueReference="inline"><![CDATA[${htmlTemplateTop} <div id="content"> <IFRAME id=myiframe src="" style='display:none' frameborder="0" scrolling="auto"> </IFRAME> <h1>Grant type: Client credentials</h1> <div style="margin-bottom: 2em; border-bottom: 1px solid #ccc;"> <h2>Current Access Token:</h2> ${clearSessionForm} <pre> ${error.msg} </pre> </div> <div style="margin-bottom: 2em;"> <h2>Initiate new OAuth handshake</h2> <form action="${request.url.protocol}://${request.url.host}:${request.url.port}${request.url.path}"> <input type="hidden" name="action" value="handshake"/> <input type="hidden" name="client_id" value="${oauth2_client_id}"/> <input type="hidden" name="redirect_uri" value="${redirectUri}"/> <input type="hidden" name="scope" value="${oauth2_scope}"/> <input type="hidden" name="state" value="state_test"/> <button type="submit" class="btn btn-primary btn-mini" value="Initiate">Initiate</button> </form> </div> <div style="margin-bottom: 2em;"> <h2>Call API Using Current Access Token</h3> <form action="${request.url.protocol}://${request.url.host}:${request.url.port}${request.url.path}"> <input type="hidden" name="action" value="callapi"/> <input type="hidden" name="state" value="state_test"/> Target: <input type="text" name="target" size=80 value="${location_resourceendpoint}"/> <button type="submit" class="btn btn-primary btn-mini" value="Call API">Call API</button> </form> <pre> ${apioutput} </pre> </div> </div> ${htmlTemplateBottom}]]></L7p:Content> <L7p:ContentType stringValue="text/html;charset=UTF-8"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:SslAssertion/> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="69c9dd7c-4bdc-414c-8f91-c12088aecb77"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Context Variables"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50Y3JlZHM="/> <L7p:VariableToSet stringValue="client_page"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjdGlvbn0="/> <L7p:VariableToSet stringValue="action"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return false if the XSS tag is found"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CookieCredentialSource> <L7p:CookieName stringValue="l7otk2client"/> </L7p:CookieCredentialSource> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cookie.l7otk2client}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWUubDdvdGsyY2xpZW50fQ=="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get current token session id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionLocation"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:location/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQoKVGhlIGFjY2VzcyB0b2tlbiB3YXMgcmV0cmlldmVkIGZyb20gJHtzZXNzaW9uTG9jYXRpb24ucmVzdWx0fS4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="not found or no cacheKey"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${clearSessionForm}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="clear cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="l7otk2client=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; Path=/; Secure; HttpOnly"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="callapi"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="callapi"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X3Rva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRhcmdldH0="/> <L7p:VariableToSet stringValue="target_url"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="R0VU"/> <L7p:VariableToSet stringValue="target_http_method"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4844bcf1-2d2f-491d-87f1-40a5286b71eb"/> </L7p:Include> <L7p:HttpRoutingAssertion> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:ProtectedServiceUrl stringValue="${target_url}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${authorization_header}"/> <L7p:Name stringValue="authorization"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Call API"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="handshake"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="handshake"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRfdHlwZT1jbGllbnRfY3JlZGVudGlhbHMmc2NvcGU9JHtvYXV0aDJfc2NvcGV9"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="postMsg"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:Login stringValue="${oauth2_client_id}"/> <L7p:Password stringValue="${oauth2_client_secret}"/> <L7p:ProtectedServiceUrl stringValue="${location_tokenserver}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="application/xml"/> <L7p:Name stringValue="accept"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="postMsg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0KClRoZSBhY2Nlc3MgdG9rZW4gd2FzIHJldHJpZXZlZC4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:TargetVariable stringValue="tokenSessionId"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${tokenSessionId[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7dG9rZW5TZXNzaW9uSWRbMF19OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Handshake"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="clearSession"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="clearSession"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="Tm8gY3VycmVudCB0b2tlbi4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PTsgRXhwaXJlcz1UaHUsIDAxIEphbiAxOTcwIDAwOjAwOjAwIEdNVDsgUGF0aD0vOyBTZWN1cmU7IEh0dHBPbmx5"/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Clear session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${setCookie}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-Implicit 07854a0de3db8f5849ecb6be3985c056 SERVICE OAuth2Client-Implicit true /oauth/v2/client/implicit* DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This is a test client for an OAuth 2 implementation using the implicit grant type"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Return HTML error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValueReference="inline"><![CDATA[${htmlTemplateTop} <div id="content"> <IFRAME id=myiframe src="" style='display:none' frameborder="0" scrolling="auto"> </IFRAME> <h1>Grant type: Implicit</h1> <div style="margin-bottom: 2em; border-bottom: 1px solid #ccc;"> <h2>Current Access Token:</h2> ${clearSessionForm} <pre> ${error.msg} </pre> </div> <div style="margin-bottom: 2em;"> <h2>Initiate new OAuth handshake</h2> <form action="${location_authserver}"> <input type="hidden" name="client_id" value="${oauth2_client_id}"/> <input type="hidden" name="redirect_uri" value="${redirect_uri}"/> <input type="hidden" name="response_type" value="token"/> <input type="hidden" name="scope" value="${oauth2_scope}"/> <input type="hidden" name="state" value="state_test"/> <button type="submit" class="btn btn-primary btn-mini" value="Initiate">Initiate</button> </form> </div> <div style="margin-bottom: 2em;"> <h2>Call API Using Current Access Token</h2> <form action="${request.url.protocol}://${request.url.host}:${request.url.port}${request.url.path}"> <input type="hidden" name="action" value="callapi"/> <input type="hidden" name="state" value="state_test"/> Target: <input type="text" name="target" size=80 value="${location_resourceendpoint}"/> <button type="submit" class="btn btn-primary btn-mini" value="Call API">Call API</button> </form> <pre> ${apioutput} </pre> </div> </div> ${htmlTemplateBottom}]]></L7p:Content> <L7p:ContentType stringValue="text/html;charset=UTF-8"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:SslAssertion/> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="69c9dd7c-4bdc-414c-8f91-c12088aecb77"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Context Variables"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="aW1wbGljaXQ="/> <L7p:VariableToSet stringValue="client_page"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjdGlvbn0="/> <L7p:VariableToSet stringValue="action"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjY2Vzc190b2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmVycm9yfQ=="/> <L7p:VariableToSet stringValue="error"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return false if the XSS tag is found"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CookieCredentialSource> <L7p:CookieName stringValue="l7otk2client"/> </L7p:CookieCredentialSource> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cookie.l7otk2client}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWUubDdvdGsyY2xpZW50fQ=="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get current token session id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionLocation"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:location/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQoKVGhlIGFjY2VzcyB0b2tlbiB3YXMgcmV0cmlldmVkIGZyb20gJHtzZXNzaW9uTG9jYXRpb24ucmVzdWx0fS4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="not found or no cacheKey"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${clearSessionForm}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="clear cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="l7otk2client=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; Path=/; Secure; HttpOnly"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="callapi"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="callapi"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X3Rva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRhcmdldH0="/> <L7p:VariableToSet stringValue="target_url"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="R0VU"/> <L7p:VariableToSet stringValue="target_http_method"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4844bcf1-2d2f-491d-87f1-40a5286b71eb"/> </L7p:Include> <L7p:HttpRoutingAssertion> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:ProtectedServiceUrl stringValue="${target_url}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${authorization_header}"/> <L7p:Name stringValue="authorization"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Call API"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0LnVybC5xdWVyeX0="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uVmFsdWV9CgpUaGUgYWNjZXNzIHRva2VuIHdhcyBleHRyYWN0ZWQgZnJvbSB0aGUgZnJhZ21lbnQgY29tcG9uZW50Lg=="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:TargetVariable stringValue="tokenSessionId"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${tokenSessionId[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7dG9rZW5TZXNzaW9uSWRbMF19OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Handshake callback"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="clearSession"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="clearSession"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="Tm8gY3VycmVudCB0b2tlbi4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PTsgRXhwaXJlcz1UaHUsIDAxIEphbiAxOTcwIDAwOjAwOjAwIEdNVDsgUGF0aD0vOyBTZWN1cmU7IEh0dHBPbmx5"/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Clear session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error}"/> <L7p:Expression2 stringValue="access_denied"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="access_denied"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error}"/> <L7p:Expression2 stringValue="access_denied"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="access_denied"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="QWNjZXNzIHdhcyBkZW5pZWQu"/> <L7p:VariableToSet stringValue="errorMessage"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Denied"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error}"/> <L7p:Expression2 stringValue="invalid_request"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="invalid_request"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="VGhlIHJlcXVlc3Qgd2FzIGludmFsaWQuIFBsZWFzZSB0cnkgYWdhaW4u"/> <L7p:VariableToSet stringValue="errorMessage"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="QW4gZXJyb3IgaGFzIG9jY3VycmVkOiAke2Vycm9yfQ=="/> <L7p:VariableToSet stringValue="errorMessage"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Unknown error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0LnVybC5xdWVyeX0KCiR7ZXJyb3JNZXNzYWdlfQ=="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uVmFsdWV9"/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:TargetVariable stringValue="tokenSessionId"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${tokenSessionId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7dG9rZW5TZXNzaW9uSWRbMF19OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${setCookie}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuthManager/oauth-manager-tokens 07854a0de3db8f5849ecb6be3985c057 SERVICE oauth-manager-tokens true /oauth/manager/tokens DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Implementation of a simple oauth manager that uses API calls only to access the client- and tokenstore"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValueReference="inline"><![CDATA[${website_top} <div> <h1>Error</h1> <code> ${error.msg} </code> </div> <p>Please try again. If the error occurs again please click <a href="${this.app.url.login}">here</a> to login again.</p> <p>If the error still occurs please contact the system administrator.</p> ${website_bottom}]]></L7p:Content> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden when user logs in or if a cookie is available"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.username"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden when user is looking up values of a different user"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="lookupUser"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="401ad9ef-1814-48d5-a8ad-5004bb062b2e"/> </L7p:Include> <L7p:Include> <L7p:PolicyGuid stringValue="60b00d82-45c7-4447-bb79-e96c0434ec00"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke3JlcXVlc3QudXJsLmhvc3R9Ojg0NDMke3JlcXVlc3QudXJsLnBhdGh9"/> <L7p:VariableToSet stringValue="this.app.url.login"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="this.app.url.login"/> <L7p:Regex stringValue="/tokens$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="web content"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Configure the manager here"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="require SSL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Override content-type with text/html"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:RateLimit> <L7p:CounterName stringValue="${current.username}${request.url}"/> <L7p:MaxRequestsPerSecond stringValue="10"/> </L7p:RateLimit> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="111"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="111"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite content-type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="rate limit"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="6b4c28ef-123a-4acf-91e0-a593aaafc4a7"/> </L7p:Include> <L7p:Include> <L7p:PolicyGuid stringValue="9a97a300-c26d-496e-be89-66488d84ed64"/> </L7p:Include> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Use an existing session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CodeInjectionProtectionAssertion> <L7p:IncludeBody booleanValue="true"/> <L7p:IncludeUrlPath booleanValue="true"/> <L7p:IncludeUrlQueryString booleanValue="true"/> <L7p:Protections codeInjectionProtectionTypeArray="included"> <L7p:item protectionType="htmlJavaScriptInjection"/> </L7p:Protections> <L7p:Target target="REQUEST"/> </L7p:CodeInjectionProtectionAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite content-type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PROTECT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Validate form field params against xss or injection attacks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="js"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="website_top"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGRpdiBjbGFzcz0icm93LWZsdWlkIHBvcnRhbC1mb290ZXIiPgogICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ic3BhbjEyIj4KICAgICAgICAgICAgICAgICAgICA8cCBjbGFzcz0icG9ydGFsLWNvcHlyaWdodCI+wqkgQ0EgVGVjaG5vbG9naWVzLiBBbGwgcmlnaHRzIHJlc2VydmVkLjwvcD4KICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICA8L2Rpdj4KICAgICAgICA8L2Rpdj4KICAgIDwvZGl2PgogICAgPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPgogICAgICAgIGFjdGl2YXRlVG9nZ2xlQmxvY2tzKCk7CiAgICA8L3NjcmlwdD4KPC9ib2R5Pgo8L2h0bWw+"/> <L7p:VariableToSet stringValue="website_bottom"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHVsIGNsYXNzPSJ1c2VyLW1lbnUgcHVsbC1yaWdodCI+CiAgICA8bGkgY2xhc3M9InRvZ2dsZSBkcm9wZG93biI+CiAgICAgICAgPHNwYW4gY2xhc3M9InRvZ2dsZS1saW5rIj4KICAgICAgICAgICAgJHtjdXJyZW50LnVzZXJuYW1lfSA8YiBjbGFzcz0iY2FyZXQiPjwvYj4KICAgICAgICA8L3NwYW4+CiAgICAgICAgPHVsIGNsYXNzPSJ0b2dnbGUtYmxvY2siPgogICAgICAgICAgICA8bGk+PGEgaHJlZj0iLi4vbWFuYWdlcj9zdGF0ZT1sb2dvdXQiPkxvZ291dDwvYT48L2xpPgogICAgICAgIDwvdWw+CiAgICA8L2xpPgo8L3VsPg=="/> <L7p:VariableToSet stringValue="loggedInDiv"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="website_top"/> <L7p:Regex stringValue="&lt;!--LOGGED_IN_USER_DIV--&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="${loggedInDiv}"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="loggedInNavDiv"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="website_top"/> <L7p:Regex stringValue="&lt;!--LOGGED_IN_NAV_DIV--&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="${loggedInNavDiv}"/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="web content"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set js and website_top/website_bottom content here"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Create the filters for looking up tokens"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="filtersTokens"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lm1haW5wYXJ0fSR7cmVxdWVzdC51cmx9"/> <L7p:VariableToSet stringValue="requestUrl"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Extra check for quotes/brackets"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="request.url"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="(%22|[&quot;]|%29|\(|%28|\))"/> <L7p:RegexName stringValue="Validate URL input"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="website_top may have had malicious data inside, so reset it"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="website_top"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="json response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return json error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:FalseAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="return false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="stop processing the whole policy"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:FalseAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="XSS check point"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isAdmin}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5eca3ff4-9f36-4498-9cb2-23952ffef469"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${current.username}"/> <L7p:Expression2 stringValue="${xpathResourceOwner.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${xpathResourceOwner.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="non-admin must match token's resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.msg}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error code message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.msg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error.code: '${error.code}', error.msg: ${error.msg}"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create an error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="verify admin, or non-admin matches owner of token they're modifying"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="========================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== As of here: management tasks =="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="========================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Tokens overview =="/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="manageOwnersClients"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="manageOwnersClients"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${offset}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="GE"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5eca3ff4-9f36-4498-9cb2-23952ffef469"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${request.http.parameter.filterRefreshToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${request.http.parameter.filterAccessToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="${request.http.parameter.filterStatus}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="findDates"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOffset"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/@offset"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-tokenstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:param name="this.app.url"/> <xsl:param name="offset"/> <xsl:param name="synchToken"/> <xsl:template match="/ns:values"> <table border="1" class="table-striped table-hover" id="tblResult" style="padding:2px; empty-cells: show;"> <tr style="background-color: rgb(216,216,216);"> <xsl:choose> <xsl:when test="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th>index</th> <xsl:for-each select="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th> <xsl:value-of select="name()"/> </th> </xsl:for-each> <th colspan="2">action</th> </xsl:when> <xsl:otherwise> <td> <xsl:text>No records found</xsl:text> </td> </xsl:otherwise> </xsl:choose> </tr> <xsl:for-each select="ns:value[node()]"> <xsl:variable name="tempToken" select="descendant::node()[local-name()='token']"/> <xsl:variable name="tempClient" select="descendant::node()[local-name()='client_key']"/> <xsl:variable name="tempOwner" select="descendant::node()[local-name()='resource_owner']"/> <xsl:variable name="tempStatus" select="descendant::node()[local-name()='status']"/> <tr> <td> <xsl:value-of select="@index+number($offset)"/> </td> <xsl:for-each select="descendant::node()[not(name()='')]"> <td> <xsl:value-of select="text()"/> </td> </xsl:for-each> <td> <form action="{$this.app.url}?state=revoke" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmRevoke('{$tempOwner}', '{$tempClient}')"> <input name="token" type="hidden" value="{$tempToken}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Revoke">Revoke</button> </form> </td> <td> <form action="{$this.app.url}?state=toggleStatus" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmStatusChange('{$tempToken}')"> <input name="token" type="hidden" value="{$tempToken}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <xsl:choose> <xsl:when test="$tempStatus = 'ENABLED'"> <input name="newStatus" type="hidden" value="DISABLED"/> <button class="btn btn-primary btn-mini" type="submit" value="DISABLE">DISABLE</button> </xsl:when> <xsl:otherwise> <input name="newStatus" type="hidden" value="ENABLED"/> <button class="btn btn-primary btn-mini" type="submit" value="ENABLE">ENABLE</button> </xsl:otherwise> </xsl:choose> </form> </td> </tr> </xsl:for-each> </table> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="toBeReturned"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4f667006-fac5-4714-a2e7-238496e926cf"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGRpdiBjbGFzcz0icGFnaW5hdGlvbiI+CiAgICA8c3BhbiBjbGFzcz0icHJldi1wYWdlLWxpbmsgZGlzYWJsZWQiIG9uY2xpY2s9ImxvYWRQcmV2VG9rZW5QYWdlQ2Fzc2FuZHJhKHRoaXMsICdtYW5hZ2VUb2tlbnNSZXN1bHQnLCAke29mZnNldH0sICcke3hwYXRoT2Zmc2V0LnJlc3VsdH0nLCAke3hwYXRoQ291bnQucmVzdWx0fSk7Ij4KICAgICAgICA8aSBjbGFzcz0iaWNvbi1wb3J0YWwtYXJyb3ctbGVmdCI+PC9pPiBQcmV2CiAgICA8L3NwYW4+CiAgICA8c3BhbiBjbGFzcz0ibmV4dC1wYWdlLWxpbmsgZGlzYWJsZWQiIG9uY2xpY2s9ImxvYWROZXh0VG9rZW5QYWdlQ2Fzc2FuZHJhKHRoaXMsICdtYW5hZ2VUb2tlbnNSZXN1bHQnLCAke29mZnNldH0sICcke3hwYXRoT2Zmc2V0LnJlc3VsdH0nLCAke3hwYXRoQ291bnQucmVzdWx0fSk7Ij4KICAgICAgICBOZXh0IDxpIGNsYXNzPSJpY29uLXBvcnRhbC1hcnJvdy1yaWdodCI+PC9pPgogICAgPC9zcGFuPgo8L2Rpdj4="/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGRpdiBjbGFzcz0icGFnaW5hdGlvbiI+CiAgICA8c3BhbiBjbGFzcz0icHJldi1wYWdlLWxpbmsgZGlzYWJsZWQiIG9uY2xpY2s9ImxvYWRQcmV2VG9rZW5QYWdlKHRoaXMsICdtYW5hZ2VUb2tlbnNSZXN1bHQnLCAke29mZnNldH0sICcke3hwYXRoT2Zmc2V0LnJlc3VsdH0nLCAke3hwYXRoQ291bnQucmVzdWx0fSk7Ij4KICAgICAgICA8aSBjbGFzcz0iaWNvbi1wb3J0YWwtYXJyb3ctbGVmdCI+PC9pPiBQcmV2CiAgICA8L3NwYW4+CiAgICA8c3BhbiBjbGFzcz0ibmV4dC1wYWdlLWxpbmsgZGlzYWJsZWQiIG9uY2xpY2s9ImxvYWROZXh0VG9rZW5QYWdlKHRoaXMsICdtYW5hZ2VUb2tlbnNSZXN1bHQnLCAke29mZnNldH0sICcke3hwYXRoT2Zmc2V0LnJlc3VsdH0nLCAke3hwYXRoQ291bnQucmVzdWx0fSk7Ij4KICAgICAgICBOZXh0IDxpIGNsYXNzPSJpY29uLXBvcnRhbC1hcnJvdy1yaWdodCI+PC9pPgogICAgPC9zcGFuPgo8L2Rpdj4="/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra or jdbc?"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPHNjcmlwdD4KLyogTXVzdCByZXNldCBzZXNzaW9uIHN0b3JhZ2Ugc28gcHJldmlvdXMgcGFnaW5nIHZhbHVlcyBhcmUgbm90IGF0dGVtcHRlZCBpbiBjYXNlIG9mIGNoYW5nZXMgKi8Kc2Vzc2lvblN0b3JhZ2UucGFnZSA9IDAKc2Vzc2lvblN0b3JhZ2UuZmlyc3RUb2tlbkZvclBhZ2VzID0gIltcIlwiXSIKPC9zY3JpcHQ+CjxkaXY+CjxoMT5NYW5hZ2UgVG9rZW5zPC9oMT4KPHA+VGhpcyBpcyBhbiBvdmVydmlldyBvZiBhbGwgdXNlcnMgd2l0aCBncmFudGVkIGNsaWVudCBhcHBsaWNhdGlvbnM8L3A+CiR7ZmlsdGVyc1Rva2Vuc30KPGRpdiBpZD0ibWFuYWdlVG9rZW5zUmVzdWx0Ij4KJHtwYWdpbmF0aW9uQnV0dG9uc30KJHt0b0JlUmV0dXJuZWR9CiR7cGFnaW5hdGlvbkJ1dHRvbnN9CjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4KaWYgKCR7eHBhdGhDb3VudC5yZXN1bHR9ID4gcmVzdWx0c1BlclBhZ2UpIHsKICAgIHRvZ2dsZURpc2FibGVkKCduZXh0LXBhZ2UtbGluaycsIGZhbHNlKTsKfQo8L3NjcmlwdD4KPC9kaXY+CjwvZGl2Pgoke3dlYnNpdGVfYm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPHNjcmlwdD4KLyogTXVzdCByZXNldCBzZXNzaW9uIHN0b3JhZ2Ugc28gcHJldmlvdXMgcGFnaW5nIHZhbHVlcyBhcmUgbm90IGF0dGVtcHRlZCBpbiBjYXNlIG9mIGNoYW5nZXMgKi8Kc2Vzc2lvblN0b3JhZ2UucGFnZSA9IDAKc2Vzc2lvblN0b3JhZ2UuZmlyc3RUb2tlbkZvclBhZ2VzID0gIltcIlwiXSIKPC9zY3JpcHQ+CjxoMT5NYW5hZ2UgVG9rZW5zPC9oMT4KPHA+VGhpcyBpcyBhbiBvdmVydmlldyBvZiBhbGwgY2xpZW50cyBncmFudGVkIGJ5IGEgcmVzb3VyY2Vfb3duZXI8L3A+CiR7d2Vic2l0ZV9ib3R0b219"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="List long living tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="manageTokensFilter"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="manageTokensFilter"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5eca3ff4-9f36-4498-9cb2-23952ffef469"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${request.http.parameter.filterRefreshToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${request.http.parameter.filterAccessToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="${request.http.parameter.filterStatus}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="findDates"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${offset}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOffset"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/@offset"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)+number($offset)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-tokenstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:param name="this.app.url"/> <xsl:param name="offset"/> <xsl:param name="synchToken"/> <xsl:template match="/ns:values"> <table border="1" class="table-striped table-hover" id="tblResult" style="padding:2px; empty-cells: show;"> <tr style="background-color: rgb(216,216,216);"> <xsl:choose> <xsl:when test="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th>index</th> <xsl:for-each select="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th> <xsl:value-of select="name()"/> </th> </xsl:for-each> <th colspan="2">action</th> </xsl:when> <xsl:otherwise> <td> <xsl:text>No records found</xsl:text> </td> </xsl:otherwise> </xsl:choose> </tr> <xsl:for-each select="ns:value[node()]"> <xsl:variable name="tempToken" select="descendant::node()[local-name()='token']"/> <xsl:variable name="tempClient" select="descendant::node()[local-name()='client_key']"/> <xsl:variable name="tempOwner" select="descendant::node()[local-name()='resource_owner']"/> <xsl:variable name="tempStatus" select="descendant::node()[local-name()='status']"/> <tr> <td> <xsl:value-of select="@index+number($offset)"/> </td> <xsl:for-each select="descendant::node()[not(name()='')]"> <td> <xsl:value-of select="text()"/> </td> </xsl:for-each> <td> <form action="{$this.app.url}?state=revoke" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmRevoke('{$tempOwner}', '{$tempClient}')"> <input name="token" type="hidden" value="{$tempToken}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Revoke">Revoke</button> </form> </td> <td> <form action="{$this.app.url}?state=toggleStatus" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmStatusChange('{$tempToken}')"> <input name="token" type="hidden" value="{$tempToken}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <xsl:choose> <xsl:when test="$tempStatus = 'ENABLED'"> <input name="newStatus" type="hidden" value="DISABLED"/> <button class="btn btn-primary btn-mini" type="submit" value="DISABLE">DISABLE</button> </xsl:when> <xsl:otherwise> <input name="newStatus" type="hidden" value="ENABLED"/> <button class="btn btn-primary btn-mini" type="submit" value="ENABLE">ENABLE</button> </xsl:otherwise> </xsl:choose> </form> </td> </tr> </xsl:for-each> </table> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="toBeReturned"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4f667006-fac5-4714-a2e7-238496e926cf"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==CHECK"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Count - only set navigation buttons (prev/next) if count &gt; 0. For empty result set, no pagination buttons are needed."/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="PGRpdiBpZD0ibWFuYWdlVG9rZW5zUmVzdWx0Ij4KJHtwYWdpbmF0aW9uQnV0dG9uc30KJHt0b0JlUmV0dXJuZWR9CiR7cGFnaW5hdGlvbkJ1dHRvbnN9CjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4KaWYgKCR7eHBhdGhDb3VudC5yZXN1bHR9ID4gcmVzdWx0c1BlclBhZ2UpIHsKICAgIHRvZ2dsZURpc2FibGVkKCduZXh0LXBhZ2UtbGluaycsIGZhbHNlKTsKfQo8L3NjcmlwdD4KPC9kaXY+"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Filter"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Branch after hitting the 'Search' button"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="manageOwnersClientsPagination"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="manageOwnersClientsPagination"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${offset}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5eca3ff4-9f36-4498-9cb2-23952ffef469"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="${offsetValue}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${lookupUser}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${request.http.parameter.filterRefreshToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${request.http.parameter.filterAccessToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="${request.http.parameter.filterStatus}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="findDates"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOffset"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/@offset"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENvdW50LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="count"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Expression2 stringValue="0.0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="0.0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// edge-case, no results, do nothing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCount"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:value)+number($offset)"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathTokens"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:token"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Expression2 stringValue="1.0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="1.0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="lastToken"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="xpathTokens.results"/> <L7p:Regex stringValue="([^,]+)\]$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if only 1 token returned"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="lastToken"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="xpathTokens.results"/> <L7p:Regex stringValue=",\s*([^,]+)\]$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// get the last token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-tokenstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:param name="this.app.url"/> <xsl:param name="offset"/> <xsl:param name="synchToken"/> <xsl:template match="/ns:values"> <table border="1" id="tblResult" style="padding:2px; empty-cells: show;"> <tr style="background-color: rgb(216,216,216);"> <xsl:choose> <xsl:when test="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th>index</th> <xsl:for-each select="ns:value[1][node()]/descendant::node()[not(name()='')]"> <th> <xsl:value-of select="name()"/> </th> </xsl:for-each> <th colspan="2">action</th> </xsl:when> <xsl:otherwise> <td> <xsl:text>No records found</xsl:text> </td> </xsl:otherwise> </xsl:choose> </tr> <xsl:for-each select="ns:value[node()]"> <xsl:variable name="tempToken" select="descendant::node()[local-name()='token']"/> <xsl:variable name="tempClient" select="descendant::node()[local-name()='client_key']"/> <xsl:variable name="tempOwner" select="descendant::node()[local-name()='resource_owner']"/> <xsl:variable name="tempStatus" select="descendant::node()[local-name()='status']"/> <tr> <td> <xsl:value-of select="@index+number($offset)"/> </td> <xsl:for-each select="descendant::node()[not(name()='')]"> <td> <xsl:value-of select="text()"/> </td> </xsl:for-each> <td> <form action="{$this.app.url}?state=revoke" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmRevoke('{$tempOwner}', '{$tempClient}')"> <input name="token" type="hidden" value="{$tempToken}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <button class="btn btn-primary btn-mini" type="submit" value="Revoke">Revoke</button> </form> </td> <td> <form action="{$this.app.url}?state=toggleStatus" enctype="application/x-www-form-urlencoded" method="POST" onsubmit="return confirmStatusChange('{$tempToken}')"> <input name="token" type="hidden" value="{$tempToken}"/> <input name="synchToken" type="hidden" value="{$synchToken}"/> <xsl:choose> <xsl:when test="$tempStatus = 'ENABLED'"> <input name="newStatus" type="hidden" value="DISABLED"/> <button class="btn btn-primary btn-mini" type="submit" value="DISABLE">DISABLE</button> </xsl:when> <xsl:otherwise> <input name="newStatus" type="hidden" value="ENABLED"/> <button class="btn btn-primary btn-mini" type="submit" value="ENABLE">ENABLE</button> </xsl:otherwise> </xsl:choose> </form> </td> </tr> </xsl:for-each> </table> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="toBeReturned"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4f667006-fac5-4714-a2e7-238496e926cf"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cassandra or jdbc?"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="paginationButtons"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtwYWdpbmF0aW9uQnV0dG9uc30KJHt0b0JlUmV0dXJuZWR9CiR7cGFnaW5hdGlvbkJ1dHRvbnN9CjxzY3JpcHQgdHlwZT0idGV4dC9qYXZhc2NyaXB0Ij4KaWYgKCR7eHBhdGhDb3VudC5yZXN1bHR9ID4gJHtvZmZzZXR9ICsgcmVzdWx0c1BlclBhZ2UpIHsKICAgIHRvZ2dsZURpc2FibGVkKCduZXh0LXBhZ2UtbGluaycsIGZhbHNlKTsKfQppZiAoJHtvZmZzZXR9ID4gMCkgewogICAgdG9nZ2xlRGlzYWJsZWQoJ3ByZXYtcGFnZS1saW5rJywgZmFsc2UpOwp9Cjwvc2NyaXB0Pg=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Update"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update the existing table only. Do NOT create the full page"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGgxPk1hbmFnZSBUb2tlbnM8L2gxPgo8cD5UaGlzIGlzIGFuIG92ZXJ2aWV3IG9mIGFsbCBjbGllbnRzIGdyYW50ZWQgYnkgYSByZXNvdXJjZV9vd25lcjwvcD4KJHt3ZWJzaXRlX2JvdHRvbX0="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Pagination"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Branch after hitting 'Load prev - next page'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="revoke"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="revoke"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5504276c-0a38-4380-8ec8-c4a9a4367957"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token Revocation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${token}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPGgxPlJldm9rZSBUb2tlbjwvaDE+CjxwPlRoZSB0b2tlbiAnJHt0b2tlbn0nIHdhcyBzdWNjZXNzZnVsbHkgZGVsZXRlZCE8L3A+CjwvZGl2Pgoke3dlYnNpdGVfYm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Revoke token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="toggleStatus"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="toggleStatus"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cb255195-d2fe-46fc-96d2-73a0c186f72a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token Update (token status)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="${request.http.parameter.newStatus}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGRpdj4KPGgxPlVwZGF0ZSBUb2tlbjwvaDE+CjxwPlRoZSB0b2tlbiAnJHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufScgaGFzIHN1Y2Nlc3NmdWxseSBiZWVuIHVwZGF0ZWQgdG8gc3RhdHVzICcke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXIubmV3U3RhdHVzfSchPC9wPgo8L2Rpdj4KJHt3ZWJzaXRlX2JvdHRvbX0="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Update token status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="===Unknown state or authentication error=="/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.msg}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error code message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.msg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="erro.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error.code: '${error.code}', error.msg: ${error.msg}"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create an error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="tasks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/OAuth2ClientHelper-REST-STS 07854a0de3db8f5849ecb6be3985c058 SERVICE OAuth2ClientHelper-REST-STS true /oauth/v2/samlTokenServer* DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This is a SAML token server used by SAML grant type test client"/> </L7p:CommentAssertion> <L7p:SslAssertion/> <L7p:HttpBasic/> <L7p:Authentication> <L7p:IdentityProviderName stringValue="Internal Identity Provider"/> </L7p:Authentication> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue=" Audience restriction must be created in advance as multiple variables are used"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmF1ZGllbmNlX3JlY2lwaWVudF9yZXN0cmljdGlvbn0="/> <L7p:VariableToSet stringValue="audience_recipient_restriction"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${audience_recipient_restriction}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue=" Audience restriction must be created in advance as multiple variables are used"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0LnVybC5wcm90b2NvbH06Ly8ke3JlcXVlc3QudXJsLmhvc3R9"/> <L7p:VariableToSet stringValue="audience_recipient_restriction"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==DEFAULT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if audience_recipient_restriction is empty, set it to ${request.url.protocol}://${request.url.host}"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SamlIssuer> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue=" Variable for audience and recipient restriction must be created in advance if more than one variable is referenced"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AudienceRestriction stringValue="${audience_recipient_restriction}"/> <L7p:AuthenticationStatement samlAuthenticationInfo="included"> <L7p:AuthenticationMethods stringArrayValue="included"/> <L7p:IncludeAuthenticationContextDeclaration booleanValue="false"/> </L7p:AuthenticationStatement> <L7p:NameQualifier stringValue=""/> <L7p:SubjectConfirmationDataRecipient stringValue="${audience_recipient_restriction}"/> <L7p:SubjectConfirmationMethodUri stringValue="urn:oasis:names:tc:SAML:1.0:cm:bearer"/> <L7p:Version boxedIntegerValue="2"/> </L7p:SamlIssuer> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="issuedSamlAssertion"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="samlBase64"/> <L7p:TransformType transformType="BASE64_ENCODE"/> </L7p:EncodeDecode> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="SAML token response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html; charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/OpenIDConnectClient-BCP 07854a0de3db8f5849ecb6be3985c059 SERVICE OpenIDConnectClient-BCP true /oauth/v2/client/bcp DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SslAssertion/> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Return HTML error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValueReference="inline"><![CDATA[${htmlTemplateTop} <h1>Grant type: Authorization code with OpenID Connect</h1> <pre>${error.msg}</pre> ${htmlTemplateBottom}]]></L7p:Content> <L7p:ContentType stringValue="text/html;charset=UTF-8"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="69c9dd7c-4bdc-414c-8f91-c12088aecb77"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Context Variables"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return false if the XSS tag is found"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.access_token}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="pr"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="pr"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HttpRoutingAssertion> <L7p:ProtectedServiceUrl stringValue="${location_resourceendpoint}?access_token=${request.http.parameter.access_token}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Call the protected resource endpoint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.url.path}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue=".+/bcp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfc2VjcmV0X2JjcH0="/> <L7p:VariableToSet stringValue="client_secret_display"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="client_secret_front"/> <L7p:OtherTargetMessageVariable stringValue="client_secret_display"/> <L7p:Regex stringValue="^(.{5})"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="client_secret_end"/> <L7p:OtherTargetMessageVariable stringValue="client_secret_display"/> <L7p:Regex stringValue="(.{5})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfc2VjcmV0X2Zyb250WzFdfSAuLi4gJHtjbGllbnRfc2VjcmV0X2VuZFsxXX0="/> <L7p:VariableToSet stringValue="client_secret_display"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Compute the client_secret for display"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y29kZQ=="/> <L7p:VariableToSet stringValue="response_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNvZGV9"/> <L7p:VariableToSet stringValue="code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="view"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="view"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="tokenResult"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetContentType stringValue="text/html;charset=UTF-8"/> <L7p:TargetDataType variableDataType="message"/> <L7p:TargetVariableName stringValue="tokenResult"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHtodG1sVGVtcGxhdGVUb3B9CjxoMT5HcmFudCB0eXBlOiBBdXRob3JpemF0aW9uIGNvZGUgd2l0aCBPcGVuSUQgQ29ubmVjdDwvaDE+CiR7dG9rZW5SZXN1bHQubWFpbnBhcnR9CiR7aHRtbFRlbXBsYXRlQm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHtodG1sVGVtcGxhdGVUb3B9CjxoMT5HcmFudCB0eXBlOiBBdXRob3JpemF0aW9uIGNvZGUgd2l0aCBPcGVuSUQgQ29ubmVjdDwvaDE+CjxwPlNvcnJ5LCBidXQgdGhlIGF1dGhvcml6YXRpb25fY29kZSBoYXMgYmVlbiBwcm9jZXNzZWQgYWxyZWFkeSBvciB0aGUgbGlmZXRpbWUgZm9yIHRoaXMgcGFnZSBoYXMgZXhwaXJlZC48L3A+CjxwPjxhIGhyZWY9IiR7bG9jYXRpb25fYXBwfSIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSI+UmVwZWF0IFJlcXVlc3Q8L2E+PC9wPgoke2h0bWxUZW1wbGF0ZUJvdHRvbX0="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="DISPLAY results"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.auth}"/> <L7p:Expression2 stringValue="done"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="done"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.error}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="DENIED"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="refresh"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="refresh"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="request.http.parameter.scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope_refresh"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="request.http.parameter.refresh_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="refresh_token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRfdHlwZT1yZWZyZXNoX3Rva2VuJnJlZnJlc2hfdG9rZW49JHtyZWZyZXNoX3Rva2VufSZzY29wZT0ke3Njb3BlX3JlZnJlc2h9"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="toServer"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:Login stringValue="${client_id_bcp}"/> <L7p:Password stringValue="${client_secret_bcp}"/> <L7p:ProtectedServiceUrl stringValue="${location_tokenserver}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Cookie"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="SOAPAction"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="toServer"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="authServerResponse"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="access_token"/> <L7p:OtherTargetMessageVariable stringValue="authServerResponse"/> <L7p:Regex stringValue="\&quot;access_token\&quot;:\&quot;([^&quot;]*)\&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthY2Nlc3NfdG9rZW5bMV19"/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="refresh_token"/> <L7p:OtherTargetMessageVariable stringValue="authServerResponse"/> <L7p:Regex stringValue="\&quot;refresh_token\&quot;:\&quot;([^&quot;]{1,60})\&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWZyZXNoX3Rva2VuWzFdfQ=="/> <L7p:VariableToSet stringValue="refresh_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="refresh_token_display"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="-- did we receive another refresh token?"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGJyLz4KPGhyLz4KPHA+PGI+TmV3IFJlZnJlc2ggVG9rZW4gRGVjbGluZWQ8L2I+PC9wPgo8cD5Vc2luZyB0aGUgcmVmcmVzaF90b2tlbiB0byByZXF1ZXN0IGEgbmV3IGFjY2Vzc190b2tlbiwgYSBuZXcgcmVmcmVzaCB0b2tlbiB3YXMgTk9UIHJlY2VpdmVkLjwvcD4KPGJyLz4="/> <L7p:VariableToSet stringValue="refresh_token_display"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/html;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="tokenResult"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:MaximumQuantity intValue="1"/> <L7p:TargetVariable stringValue="key"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="tokenResult"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${key[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="1000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${tokenResult.mainpart}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location_app}?state=view&amp;code=${key[0]}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="REFRESH the access_token and refresh Token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="call"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="call"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.auth}"/> <L7p:Expression2 stringValue="done"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="done"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:WssReplayProtection> <L7p:CustomExpiryTime intValue="300000"/> <L7p:CustomIdentifierVariable stringValue="code"/> <L7p:CustomProtection booleanValue="true"/> <L7p:CustomScope stringValue="myendpoiint"/> </L7p:WssReplayProtection> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="codeRequestResponse"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="redirect_uri"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="redirect_uri_encoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="cmVkaXJlY3RfdXJpPSR7cmVkaXJlY3RfdXJpX2VuY29kZWR9JmNvZGU9JHtjb2RlfSZncmFudF90eXBlPWF1dGhvcml6YXRpb25fY29kZSZzdGF0ZT0ke2dhdGV3YXkudGltZS55eXl5TU1kZEhIbW1zc1NTU30mY2xpZW50X2lkPSR7Y2xpZW50X2lkX2JjcH0mY2xpZW50X3NlY3JldD0ke2NsaWVudF9zZWNyZXRfYmNwfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="toServer"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:ProtectedServiceUrl stringValue="${location_tokenserver}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Cookie"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="SOAPAction"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="toServer"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="authServerResponse"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="access_token"/> <L7p:OtherTargetMessageVariable stringValue="authServerResponse"/> <L7p:Regex stringValue="\&quot;access_token\&quot;:\&quot;([^&quot;]*)\&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthY2Nlc3NfdG9rZW5bMV19"/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="refresh_token"/> <L7p:OtherTargetMessageVariable stringValue="authServerResponse"/> <L7p:Regex stringValue="\&quot;refresh_token\&quot;:\&quot;([^&quot;]{1,60})\&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWZyZXNoX3Rva2VuWzFdfQ=="/> <L7p:VariableToSet stringValue="refresh_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGJyLz4KPGhyLz4KPHA+PGI+UmVmcmVzaDwvYj48L3A+CjxwPlVzZSB0aGUgcmVmcmVzaF90b2tlbiB0byByZXF1ZXN0IGEgbmV3IGFjY2Vzc190b2tlbiBhbmQgcmVmcmVzaF90b2tlbjxici8+KGl0IGNhbm5vdCBiZSBleGNoYW5nZWQgZm9yIGEgbmV3IGlkX3Rva2VuKTwvcD4KPHA+VGhlIGNsaWVudCBuZWVkcyB0byBpbmNsdWRlIHRoZSBwYXJhbWV0ZXJzIGxpc3RlZCBiZWxvdy4gSXQgYWxzbyBuZWVkcyB0byBhdXRoZW50aWNhdGUgaXRzZWxmIHVzaW5nIGNsaWVudF9pZCBhbmQgY2xpZW50X3NlY3JldC48L3A+Cjxmb3JtIGFjdGlvbj0iJHtsb2NhdGlvbl9hcHB9IiBtZXRob2Q9IlBPU1QiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0ic3RhdGUiIHZhbHVlPSJyZWZyZXNoIj48YnIvPgo8dGFibGUgY2xhc3M9InRhYmxlLWZvcm0iPgo8dHI+ICAgIAo8dGQ+cmVmcmVzaF90b2tlbjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJyZWZyZXNoX3Rva2VuIiB2YWx1ZT0iJHtyZWZyZXNoX3Rva2VufSIgcmVhZG9ubHk9InJlYWRvbmx5Ij48L3RkPgo8L3RyPgo8dHI+Cjx0ZD5ncmFudF90eXBlPC90ZD48dGQ+PGlucHV0IHR5cGU9InRleHQiIG5hbWU9ImdyYW50X3R5cGUiIHZhbHVlPSJyZWZyZXNoX3Rva2VuIiByZWFkb25seT0icmVhZG9ubHkiPjwvdGQ+CjwvdHI+Cjx0cj4KPHRkPnNjb3BlPC90ZD48dGQ+PGlucHV0IHR5cGU9InRleHQiIG5hbWU9InNjb3BlIiB2YWx1ZT0iJHtzY29wZX0iIHJlYWRvbmx5PSJyZWFkb25seSI+PC90ZD4KPC90cj4KPHRyPgo8dGQ+VXNlIHRoZSByZWZyZXNoX3Rva2VuPC90ZD48dGQ+PGJ1dHRvbiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IGJ0bi1taW5pIiB0eXBlPSJzdWJtaXQiIHZhbHVlPSJSZWZyZXNoIj5SZWZyZXNoPC9idXR0b24+PC90ZD4KPC90cj4KPC90YWJsZT4KPC9mb3JtPgo8YnIvPg=="/> <L7p:VariableToSet stringValue="refresh_token_display"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="refresh_token_display"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for a refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="id_token"/> <L7p:OtherTargetMessageVariable stringValue="authServerResponse"/> <L7p:Regex stringValue="\&quot;id_token\&quot;:\&quot;([^&quot;]+)\&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpZF90b2tlblsxXX0="/> <L7p:VariableToSet stringValue="id_token"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Below validation is a sample which simply succeeds if one method works."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="A real world client would have to validate the id_token dependant on the 'iss' (issuer)"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HS256"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validation using a shared secret (client_secret)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:KeyType stringValue="Certificate"/> <L7p:PrivateKeySource stringValue="client_secret_bcp"/> <L7p:SignatureSecret stringValue="${client_secret_bcp}"/> <L7p:SourcePayload stringValue="${id_token}"/> <L7p:TargetVariablePrefix stringValue="jwt"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// HS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="RS256"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validation using a public key"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:KeyGoid goidValue="0000000000000000ffffffffffffffff"/> <L7p:SourcePayload stringValue="${id_token}"/> <L7p:TargetVariablePrefix stringValue="jwt"/> <L7p:ValidationType stringValue="Using Recipient Key From List"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// RS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate id_token signature"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${didt.aud}"/> <L7p:Expression2 stringValue="${client_id_bcp}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${client_id_bcp}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dmFsaWQ="/> <L7p:VariableToSet stringValue="verified"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="aW52YWxpZA=="/> <L7p:VariableToSet stringValue="verified"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="idTokenIssued"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHA+PGI+Tm8gSURfVE9LRU4gd2FzIGlzc3VlZDwvYj4uIFRoZXJlIGFyZSBzZXZlcmFsIHBvc3NpYmxlIHJlYXNvbnMgZm9yIHRoYXQ6PC9wPgo8b2w+CjxsaT50aGUgdXNlciBkaWQgbm90IGdyYW50IGl0PC9saT4KPGxpPnRoZSByZXF1ZXN0ZWQgU0NPUEUgZGlkIG5vdCBpbmNsdWRlICdvcGVuaWQnPC9saT4KPGxpPnRoZSBjbGllbnQgd2FzIG5vdCByZWdpc3RlcmVkIGFzIGEgdmFsaWQgT3BlbklEIENvbm5lY3QgY2xpZW50PC9saT4KPGxpPmEgcmVmcmVzaF90b2tlbiB3YXMgdXNlZCB0byByZXF1ZXN0IG5ldyB0b2tlbnMgYnV0IGEgcmVmcmVzaF90b2tlbiBjYW5ub3QgYmUgdXNlZCB0byByZXF1ZXN0IGEgbmV3IGlkX3Rva2VuPC9saT4KPC9vbD4="/> <L7p:VariableToSet stringValue="idTokenIssued"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for an id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/html;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="tokenResult"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:MaximumQuantity intValue="1"/> <L7p:TargetVariable stringValue="key"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="tokenResult"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${key[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="1000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${tokenResult.mainpart}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location_app}?state=view&amp;code=${key[0]}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHtodG1sVGVtcGxhdGVUb3B9CjxwPlNvcnJ5LCBidXQgdGhlIGF1dGhvcml6YXRpb25fY29kZSBoYXMgYmVlbiBwcm9jZXNzZWQgYWxyZWFkeS48L3A+CjxwPjxhIGNsYXNzPSJidG4gYnRuLXByaW1hcnkiIGhyZWY9IiR7bG9jYXRpb25fYXBwfSI+UmVwZWF0IFJlcXVlc3Q8L2E+PC9wPgoke2h0bWxUZW1wbGF0ZUJvdHRvbX0="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="GRANTED"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.state}"/> <L7p:Expression2 stringValue="init"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="init"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2FsbA=="/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_id_bcp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="response_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="response_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="redirect_uri"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="redirect_uri"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="display"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="display"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="prompt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="prompt"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="state"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="state"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="request.http.parameter.nonce"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonce"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2lkPSR7Y2xpZW50X2lkfSZyZXNwb25zZV90eXBlPSR7cmVzcG9uc2VfdHlwZX0mc2NvcGU9JHtzY29wZX0mcmVkaXJlY3RfdXJpPSR7cmVkaXJlY3RfdXJpfSZkaXNwbGF5PSR7ZGlzcGxheX0mcHJvbXB0PSR7cHJvbXB0fSZzdGF0ZT0ke3N0YXRlfSZub25jZT0ke25vbmNlfQ=="/> <L7p:VariableToSet stringValue="authRequestParameters"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location_authserver}?${authRequestParameters}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create auth-request and redirect client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="aW5pdA=="/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="state"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="state"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="gateway.time.HHssmmSSS"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonce"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHtodG1sVGVtcGxhdGVUb3B9CjxoMT5HcmFudCB0eXBlOiBBdXRob3JpemF0aW9uIGNvZGUgd2l0aCBPcGVuSUQgQ29ubmVjdDwvaDE+CjxwPlRoaXMgY2xpZW50IGlzIGdvaW5nIHRvIHJlcXVlc3QgYW4gT0F1dGggMi4wIGFjY2Vzc190b2tlbiwgcmVmcmVzaF90b2tlbiBhbmQgYW4gT3BlbklEIENvbm5lY3QgaWRfdG9rZW4uPC9wPgo8cD5UaGUgY2xpZW50IGlzIHVzaW5nIHRoZSA8Yj5yZXNwb25zZV90eXBlPWNvZGU8L2I+PC9wPgo8cD5UaGlzIGNsaWVudCBpcyBleHBvc2luZyBzb21lIHZhbHVlcyBPTkxZIHRvIGRpc3BsYXkgd2hhdCBpcyBnb2luZyBvbiBiZWhpbmQgdGhlIHNjZW5lcy4gJ0hpZGRlbicgaW4gdGhlIHRhYmxlIGJlbG93CiAgICByZWZlcnMgdG8gdmFsdWVzIHRoYXQgc2hvdWxkIG5vdC8gZG8gbm90IGhhdmUgdG8gYmUgZXhwb3NlZCB0byB0aGUgdXNlci1hZ2VudCBpbiBhIHJlYWwtd29ybGQgc2NlbmFyaW88L3A+CjxwPkZvciBhbnkgbW9yZSBkZXRhaWxzIHBsZWFzZSByZWZlciB0byB0aGlzIHdlYnNpdGU6IDxhIGhyZWY9Imh0dHA6Ly9vcGVuaWQubmV0L3NwZWNzL29wZW5pZC1jb25uZWN0LWJhc2ljLTFfMC5odG1sIiB0YXJnZXQ9Il9ibGFuayI+b3BlbmlkLm5ldC9zcGVjcy9vcGVuaWQtY29ubmVjdC1iYXNpYy0xXzAuaHRtbDwvYT48L3A+CjxwPldpdGggdGhpcyByZXNwb25zZV90eXBlIHRoZSBjbGllbnQgaGFzIHRvIGJ1aWxkIHVwIGEgcmVxdWVzdCB1c2luZyBmb2xsb3dpbmcgdmFsdWVzOjwvcD4KPHRhYmxlPgogICAgPHRyPjx0aD5QYXJhbWV0ZXI8L3RoPjx0aD5WYWx1ZTwvdGg+PHRoPlJlcXVpcmVkPC90aD48dGg+SGlkZGVuPC90aD48dGg+Q29tbWVudDwvdGg+PC90cj4KICAgIDx0cj48dGQ+Y2xpZW50X2lkPC90ZD48dGQ+JHtjbGllbnRfaWRfYmNwfTwvdGQ+PHRkPlllczwvdGQ+PHRkPk5vPC90ZD48dGQ+TVVTVCBiZSBrbm93biBhdCB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXI8L3RkPjwvdHI+CiAgICA8dHI+PHRkPnNjb3BlPC90ZD48dGQ+JHtzY29wZX08L3RkPjx0ZD5ZZXM8L3RkPjx0ZD5ObzwvdGQ+PHRkPk1VU1QgaW5jbHVkZSAnb3BlbmlkJyB0byBtYWtlIGl0IGEgdmFsaWQgT3BlbklEIENvbm5lY3QgcmVxdWVzdDwvdGQ+PC90cj4KICAgIDx0cj48dGQ+cmVzcG9uc2VfdHlwZTwvdGQ+PHRkPiR7cmVzcG9uc2VfdHlwZX08L3RkPjx0ZD5ZZXM8L3RkPjx0ZD5ObzwvdGQ+PHRkPk1VU1QgYmUgc2V0IHRvICdjb2RlJzwvdGQ+PC90cj4KICAgIDx0cj48dGQ+cmVkaXJlY3RfdXJpPC90ZD48dGQ+JHtyZWRpcmVjdF91cml9PC90ZD48dGQ+WWVzPC90ZD48dGQ+Tm88L3RkPjx0ZD5NVVNUIGJlIHByZS1yZWdpc3RlcmVkIHdpdGggdGhlIGF1dGhvcml6YXRpb24gc2VydmVyPC90ZD48L3RyPgogICAgPHRyPjx0ZD5ub25jZTwvdGQ+PHRkPiR7bm9uY2V9PC90ZD48dGQ+WWVzPC90ZD48dGQ+Tm88L3RkPjx0ZD5BIHJhbmRvbSB2YWx1ZSBvcGFxdWUgdG8gdGhlIHNlcnZlci4gSXQgaGFzIHRvIGFwcGVhciB3aXRoaW4gaWRfdG9rZW48L3RkPjwvdHI+CiAgICA8dHI+PHRkPnN0YXRlPC90ZD48dGQ+JHtzdGF0ZX08L3RkPjx0ZD5ObzwvdGQ+PHRkPk5vPC90ZD48dGQ+QSB2YWx1ZSBvcGFxdWUgdG8gdGhlIGF1dGhvcml6YXRpb24gc2VydmVyOyB3aWxsIGJlIHBhc3NlZCBiYWNrIHRvIHRoZSBjbGllbnQ8L3RkPjwvdHI+CiAgICA8dHI+PHRkPmRpc3BsYXk8L3RkPjx0ZD4ke2Rpc3BsYXl9PC90ZD48dGQ+Tm88L3RkPjx0ZD5ObzwvdGQ+PHRkPlZhbGlkIHZhbHVlcyB0aGF0IHNwZWNpZnkgaG93IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciBzaG91bGQgZGlzcGxheSB0aGUgYXV0aG9yaXphdGlvbiBwYWdlOiAncGFnZSd8J3BvcHVwJ3wndG91Y2gnfCd3YXAnPC90ZD48L3RyPgogICAgPHRyPjx0ZD5wcm9tcHQ8L3RkPjx0ZD4ke3Byb21wdH08L3RkPjx0ZD5ObzwvdGQ+PHRkPk5vPC90ZD48dGQ+VmFsaWQgdmFsdWVzIHRoYXQgc3BlY2lmeSBpZiB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgc2hvdWxkIChyZS0pYXV0aGVudGljYXRlIHRoZSB1c2VyOiAnbm9uZSd8J2xvZ2luJ3wnY29uc2VudCd8J3NlbGVjdF9hY2NvdW50JzwvdGQ+PC90cj4KPC90YWJsZT4KPC9icj4KPHA+VGhlIGNsaWVudCBpcyBzZW5kaW5nIHRoZSByZXF1ZXN0IHRvIHRoaXMgYXV0aG9yaXphdGlvbiBzZXJ2ZXIgdXNpbmcgSFRUUCAnUE9TVCc6PC9wPjxwcmU+JHtsb2NhdGlvbl9hdXRoc2VydmVyfTwvcHJlPgo8YnIvPgo8cD5UaGUgcGFyYW1ldGVyIHZhbHVlcyBtdXN0IGJlICdhcHBsaWNhdGlvbi94LXd3dy1mb3JtLXVybGVuY29kZWQnIGVuY29kZWQ6PC9wPgo8Zm9ybSBhY3Rpb249IiR7bG9jYXRpb25fYXBwfSI+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJzdGF0ZSIgdmFsdWU9ImluaXQiLz4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9Im5vbmNlIiB2YWx1ZT0iJHtub25jZX0iLz4KICAgIDxpbnB1dCB0eXBlPSJzdWJtaXQiIG5hbWU9InNlbmQiIHZhbHVlPSJzZW5kIi8+CjwvZm9ybT4KPHA+KFdoZW4geW91IGhpdCB0aGUgJ3NlbmQnIGJ1dHRvbiB0aGlzIHVzZXItYWdlbnQgc2VuZHMgYSByZXF1ZXN0IHRvIHRoZSBjbGllbnQsIHRoZSBjbGllbnQgcHJlcGFyZXMgdGhlIGF1dGhvcml6YXRpb24gcmVxdWVzdCBhbmQgZGlyZWN0cyB0aGlzIHVzZXItYWdlbnQgdG8gdGhlIHNlcnZlciBsb2NhdGlvbiB1c2luZyBhIHJlZGlyZWN0KTwvcD4KJHtodG1sVGVtcGxhdGVCb3R0b219"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="INITIAL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Basic Client Profile"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="response_type=code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuthManager/oauth-manager 07854a0de3db8f5849ecb6be3985c05a SERVICE oauth-manager true /oauth/manager DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Implementation of a simple oauth manager that uses API calls to access the client- and tokenstore"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValueReference="inline"><![CDATA[${website_top} <div> <h1>Error</h1> <code> ${error.msg} </code> </div> <p>Please try again. If the error occurs again please click <a href="${this.app.url.login}">here</a> to login again.</p> <p>If the error still occurs please contact the system administrator.</p> ${website_bottom}]]></L7p:Content> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden when user logs in or if a cookie is available"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.username"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overridden when user is looking up values of a different user"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="lookupUser"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="401ad9ef-1814-48d5-a8ad-5004bb062b2e"/> </L7p:Include> <L7p:Include> <L7p:PolicyGuid stringValue="60b00d82-45c7-4447-bb79-e96c0434ec00"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="js"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="website_top"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGRpdiBjbGFzcz0icm93LWZsdWlkIHBvcnRhbC1mb290ZXIiPgogICAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ic3BhbjEyIj4KICAgICAgICAgICAgICAgICAgICA8cCBjbGFzcz0icG9ydGFsLWNvcHlyaWdodCI+wqkgQ0EgVGVjaG5vbG9naWVzLiBBbGwgcmlnaHRzIHJlc2VydmVkLjwvcD4KICAgICAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICA8L2Rpdj4KICAgICAgICA8L2Rpdj4KICAgIDwvZGl2PgogICAgPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPgogICAgICAgIGFjdGl2YXRlVG9nZ2xlQmxvY2tzKCk7CiAgICA8L3NjcmlwdD4KPC9ib2R5Pgo8L2h0bWw+"/> <L7p:VariableToSet stringValue="website_bottom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt3ZWJzaXRlX3RvcH0KPHA+QW4gZXJyb3Igb2NjdXJlZC4gUGxlYXNlIGxvZ2luIGFnYWluIGFuZCBvciBjb250YWN0IHlvdXIgYWRtaW5pc3RyYXRvci48L3A+CjxwPjxhIGhyZWY9IiR7dGhpcy5hcHAudXJsfSI+TG9naW48L2E+PC9wPgoke3dlYnNpdGVfYm90dG9tfQ=="/> <L7p:VariableToSet stringValue="website_error"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="web content"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Configure the manager here"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="require SSL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Override content-type with text/html"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lm1haW5wYXJ0fSR7cmVxdWVzdC51cmx9"/> <L7p:VariableToSet stringValue="requestUrl"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Extra check for quotes/brackets"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="request.url"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="(%22|[&quot;]|%29|\(|%28|\))"/> <L7p:RegexName stringValue="Validate URL input"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f22ad51b-f3a5-48e6-be1b-be6b6098d8e7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Server Website Template"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="json response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return json error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="error.content"/> <L7p:value stringValue="${error.msg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="new.content"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="other"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="task"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:FalseAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="return false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="stop processing the whole policy"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:FalseAssertion> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:RateLimit> <L7p:CounterName stringValue="${current.username}${request.url}"/> <L7p:MaxRequestsPerSecond stringValue="10"/> </L7p:RateLimit> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="111"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="111"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite content-type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="rate limit"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="login"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="login"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="6b4c28ef-123a-4acf-91e0-a593aaafc4a7"/> </L7p:Include> <L7p:Include> <L7p:PolicyGuid stringValue="9a97a300-c26d-496e-be89-66488d84ed64"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHVsIGNsYXNzPSJ1c2VyLW1lbnUgcHVsbC1yaWdodCI+CiAgICA8bGkgY2xhc3M9InRvZ2dsZSBkcm9wZG93biI+CiAgICAgICAgPHNwYW4gY2xhc3M9InRvZ2dsZS1saW5rIj4KICAgICAgICAgICAgJHtjdXJyZW50LnVzZXJuYW1lfSA8YiBjbGFzcz0iY2FyZXQiPjwvYj4KICAgICAgICA8L3NwYW4+CiAgICAgICAgPHVsIGNsYXNzPSJ0b2dnbGUtYmxvY2siPgogICAgICAgICAgICA8bGk+PGEgaHJlZj0iP3N0YXRlPWxvZ291dCZzeW5jaFRva2VuPSR7c3luY2hUb2tlbn0iPkxvZ291dDwvYT48L2xpPgogICAgICAgIDwvdWw+CiAgICA8L2xpPgo8L3VsPg=="/> <L7p:VariableToSet stringValue="loggedinDiv"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="website_top"/> <L7p:Regex stringValue="&lt;!--LOGGED_IN_USER_DIV--&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="${loggedinDiv}"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="loggedInNavDiv"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="website_top"/> <L7p:Regex stringValue="&lt;!--LOGGED_IN_NAV_DIV--&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="${loggedinNavDiv}"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHVzZXJzZXNzaW9uPgogPHVzZXI+PCFbQ0RBVEFbJHtjdXJyZW50LnVzZXJuYW1lfV1dPjwvdXNlcj4KIDxyb2xlPjwhW0NEQVRBWyR7Y3VycmVudC51c2VyLnJvbGV9XV0+PC9yb2xlPgogPGxvb2t1cFVzZXI+PCFbQ0RBVEFbJHtsb29rdXBVc2VyfV1dPjwvbG9va3VwVXNlcj4KIDxzeW5jaFRva2VuPjwhW0NEQVRBWyR7eHBhdGhTeW5jaFRva2VuLnJlc3VsdH1dXT48L3N5bmNoVG9rZW4+CjwvdXNlcnNlc3Npb24+"/> <L7p:VariableToSet stringValue="userSession"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${session.lifetime.s}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="${cacheName}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue="${session.lifetime.s}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${userSession}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Use an existing session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="=== As of here: session handling tasks"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="login"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="login"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b560d25b-98a1-47bb-ac4a-84bd9329da21"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acrValuesRequested"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authHeader"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authIdToken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authSession"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookie"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookiename"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="oauth_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="oauth_verifier"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="password"/> <L7p:value stringValue="${request.http.parameter.password}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="prompt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="provider"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="state"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="username"/> <L7p:value stringValue="${request.http.parameter.username}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:UUIDGenerator> <L7p:MaximumQuantity intValue="2"/> <L7p:Quantity stringValue="2"/> <L7p:TargetVariable stringValue="sessionID"/> </L7p:UUIDGenerator> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHVzZXJzZXNzaW9uPgogPHVzZXI+PCFbQ0RBVEFbJHtjdXJyZW50LnVzZXJuYW1lfV1dPjwvdXNlcj4KIDxyb2xlPjwhW0NEQVRBWyR7Y3VycmVudC51c2VyLnJvbGV9XV0+PC9yb2xlPgogPGxvb2t1cFVzZXI+PCFbQ0RBVEFbJHtsb29rdXBVc2VyfV1dPjwvbG9va3VwVXNlcj4KIDxzeW5jaFRva2VuPjwhW0NEQVRBWyR7c2Vzc2lvbklEWzFdfV1dPjwvc3luY2hUb2tlbj4KPC91c2Vyc2Vzc2lvbj4="/> <L7p:VariableToSet stringValue="userSession"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${session.lifetime.s}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="${cacheName}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue="${session.lifetime.s}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${userSession}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${session.lifetime.s}"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uSURbMF19fCR7ZXhwaXJhdGlvbi5zZWNvbmRzfXw="/> <L7p:VariableToSet stringValue="cookieContent"/> </L7p:SetVariable> <L7p:GenerateSecurityHash> <L7p:Base64Data stringValue="JHtjb29raWVDb250ZW50fQ=="/> <L7p:KeyText stringValue="${cookieKey}"/> <L7p:LineBreak lineBreak="CR-LF"/> <L7p:TargetOutputVariable stringValue="actualHash"/> </L7p:GenerateSecurityHash> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="actualHash"/> <L7p:Regex stringValue="[ =+/]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWVDb250ZW50fSR7YWN0dWFsSGFzaH0="/> <L7p:VariableToSet stringValue="cookieContent"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cookieContent"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cookieContent"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${cookieName}=${cookieContent}; Path=/; Secure; HttpOnly"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${this.app.url}?state=init&amp;synchToken=${sessionID[1]}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Authenticate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="logout"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="logout"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${session.lifetime.s}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="${cacheName}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${cookieName}=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/; Secure; HttpOnly"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${this.app.url}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:HeaderName stringValue="Pragma"/> <L7p:HeaderValue stringValue="no-store"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:HeaderName stringValue="Cache-Control"/> <L7p:HeaderValue stringValue="no-cache"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Logout"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue="init"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="init"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGgxPk9BdXRoIE1hbmFnZXI8L2gxPgo8cD5UaGlzIG1hbmFnZW1lbnQgYXBwbGljYXRpb24gaXMgYSBzaW1wbGUgdG9vbCB0byBtYW5hZ2UgY2xpZW50IGFwcGxpY2F0aW9ucyBhbmQgZ3JhbnRlZCByZXNvdXJjZSBvd25lci9jbGllbnQgY29tYmluYXRpb25zPC9wPgoke3dlYnNpdGVfYm90dG9tfQ=="/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Init"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionID}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue="${session.lifetime.s}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="${cacheName}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${state}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="JHt3ZWJzaXRlX3RvcH0KPGZvcm0gYWN0aW9uPSIke3RoaXMuYXBwLnVybH0iIG1ldGhvZD0iUE9TVCIgY2xhc3M9ImZvcm0tYm9keSBmb3JtLWxvZ2luIj4KICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJzdGF0ZSIgdmFsdWU9ImxvZ2luIi8+CiAgICAgICAgICAgIDxsZWdlbmQ+RW50ZXIgWW91ciBVc2VybmFtZSAmIFBhc3N3b3JkPC9sZWdlbmQ+CiAgICAgICAgICAgIDxkaXYgY2xhc3M9ImNvbnRyb2wtZ3JvdXAiPgogICAgICAgICAgICAgIDxsYWJlbD5Vc2VybmFtZSAqPC9sYWJlbD4KICAgICAgICAgICAgICA8aW5wdXQgdHlwZT0idGV4dCIgbmFtZT0idXNlcm5hbWUiIGNsYXNzPSJpbnB1dC1ibG9jayI+CiAgICAgICAgICAgIDwvZGl2PgogICAgICAgICAgICA8ZGl2IGNsYXNzPSJjb250cm9sLWdyb3VwIj4KICAgICAgICAgICAgICA8bGFiZWw+UGFzc3dvcmQgKjwvbGFiZWw+CiAgICAgICAgICAgICAgPGlucHV0IHR5cGU9InBhc3N3b3JkIiBuYW1lPSJwYXNzd29yZCIgY2xhc3M9ImlucHV0LWJsb2NrIj4KICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICAgIDxkaXYgY2xhc3M9InJvdy1mbHVpZCI+CiAgICAgICAgICAgICAgPGRpdiBjbGFzcz0ic3BhbjEyIj4KICAgICAgICAgICAgICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IHB1bGwtcmlnaHQiPkxvZ2luPC9idXR0b24+CiAgICAgICAgICAgICAgPC9kaXY+CiAgICAgICAgICAgIDwvZGl2Pgo8L2Zvcm0+CiR7d2Vic2l0ZV9ib3R0b219"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.msg}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get the error code message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.msg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:VariableToSet stringValue="erro.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error.code: '${error.code}', error.msg: ${error.msg}"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create an error response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${cookieName}=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Path=/; Secure; HttpOnly"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:Enabled booleanValue="false"/> <L7p:HeaderName stringValue="Pragma"/> <L7p:HeaderValue stringValue="no-store"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:Enabled booleanValue="false"/> <L7p:HeaderName stringValue="Cache-Control"/> <L7p:HeaderValue stringValue="no-cache"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Initial call"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="tasks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/OAuth2Clients 07854a0de3db8f5849ecb6be3985c05b SERVICE OAuth2Clients true /oauth/v2/client DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Redirect to the client overview page"/> </L7p:CommentAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="69c9dd7c-4bdc-414c-8f91-c12088aecb77"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Context Variables"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhdGlvbl9hcHB9L2F1dGhjb2Rl"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="302"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> <L7p:ResponseStatus stringValue="302"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Location"/> <L7p:HeaderValue stringValue="${location}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-authorization_code 07854a0de3db8f5849ecb6be3985c05c SERVICE OAuth2Client-authorization_code true /oauth/v2/client/authcode* DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This is a test client for an OAuth 2 implementation using the authorization code grant type"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTML"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Return HTML error response"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Content stringValueReference="inline"><![CDATA[${htmlTemplateTop} <div id="content"> <IFRAME id=myiframe src="" style='display:none' frameborder="0" scrolling="auto"> </IFRAME> <h1>Grant type: Authorization code</h1> <div style="margin-bottom: 2em; border-bottom: 1px solid #ccc;"> <h2>Current Access Token:</h2> ${clearSessionForm} <pre> ${error.msg} </pre> </div> <div style="margin-bottom: 2em;"> <h2>Initiate new OAuth handshake</h2> <form action="${location_authserver}"> <input type="hidden" name="response_type" value="code"/> <input type="hidden" name="client_id" value="${oauth2_client_id}"/> <input type="hidden" name="redirect_uri" value="${redirect_uri}"/> <input type="hidden" name="scope" value="${oauth2_scope}"/> <input type="hidden" name="state" value="state_test"/> <button type="submit" class="btn btn-primary btn-mini" value="Initiate">Initiate</button> </form> </div> <div style="margin-bottom: 2em;"> <h2>Refresh Current Access Token</h2> <form action="${request.url.protocol}://${request.url.host}:${request.url.port}${request.url.path}"> <input type="hidden" name="action" value="refresh"/> <button type="submit" class="btn btn-primary btn-mini" value="Refresh">Refresh</button> </form> </div> <div style="margin-bottom: 2em;"> <h2>Call API Using Current Access Token</h2> <form action="${request.url.protocol}://${request.url.host}:${request.url.port}${request.url.path}"> <input type="hidden" name="action" value="callapi"/> <input type="hidden" name="state" value="state_test"/> Target: <input type="text" name="target" size=80 value="${location_resourceendpoint}"/> <button type="submit" class="btn btn-primary btn-mini" value="Call API">Call API</button> </form> <pre> ${apioutput} </pre> </div> </div> ${htmlTemplateBottom}]]></L7p:Content> <L7p:ContentType stringValue="text/html;charset=UTF-8"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:SslAssertion/> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="69c9dd7c-4bdc-414c-8f91-c12088aecb77"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Context Variables"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXV0aGNvZGU="/> <L7p:VariableToSet stringValue="client_page"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjdGlvbn0="/> <L7p:VariableToSet stringValue="action"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNvZGV9"/> <L7p:VariableToSet stringValue="code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmVycm9yfQ=="/> <L7p:VariableToSet stringValue="error"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a3f4d9e9-c770-4361-a0c8-1dd722349778"/> <L7p:EncapsulatedAssertionConfigName stringValue="API XSS Protection"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="return false if the XSS tag is found"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allinput"/> <L7p:value stringValue="${request.mainpart}${request.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CookieCredentialSource> <L7p:CookieName stringValue="l7otk2client"/> </L7p:CookieCredentialSource> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cookie.l7otk2client}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWUubDdvdGsyY2xpZW50fQ=="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get current token session id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionLocation"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:location/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQoKVGhlIGFjY2VzcyB0b2tlbiB3YXMgcmV0cmlldmVkIGZyb20gJHtzZXNzaW9uTG9jYXRpb24ucmVzdWx0fS4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="not found or no cacheKey"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${clearSessionForm}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="clear cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="l7otk2client=; Expires=Thu, 01-Jan-1970 00:00:01 GMT; Path=/; Secure; HttpOnly"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="callapi"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="callapi"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X3Rva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRhcmdldH0="/> <L7p:VariableToSet stringValue="target_url"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="R0VU"/> <L7p:VariableToSet stringValue="target_http_method"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4844bcf1-2d2f-491d-87f1-40a5286b71eb"/> </L7p:Include> <L7p:HttpRoutingAssertion> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:ProtectedServiceUrl stringValue="${target_url}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${authorization_header}"/> <L7p:Name stringValue="authorization"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Call API"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRfdHlwZT1hdXRob3JpemF0aW9uX2NvZGUmY29kZT0ke2NvZGV9JnJlZGlyZWN0X3VyaT0ke3JlZGlyZWN0X3VyaX0mY2xpZW50X2lkPSR7b2F1dGgyX2NsaWVudF9pZH0mY2xpZW50X3NlY3JldD0ke29hdXRoMl9jbGllbnRfc2VjcmV0fQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="postMsg"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:ProtectedServiceUrl stringValue="${location_tokenserver}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="application/xml"/> <L7p:Name stringValue="accept"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="postMsg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0KClRoZSBhY2Nlc3MgdG9rZW4gd2FzIHJldHJpZXZlZCBieSBjbGllbnQgdmlhIGEgY2FsbGJhY2sgdG8gdGhlIAphdXRob3JpemF0aW9uIHNlcnZlciBiYXNlZCBvbiB0aGUgYXV0aG9yaXphdGlvbiBjb2RlIHZhbHVlIApyZXR1cm5lZCAoJHtjb2RlfSkgb24gdGhlIHJlZGlyZWN0aW9uCmJhY2sgZnJvbSB0aGUgYXV0aG9yaXphdGlvbiBzZXJ2ZXIu"/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:TargetVariable stringValue="tokenSessionId"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${tokenSessionId[0]}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7dG9rZW5TZXNzaW9uSWRbMF19OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Handshake callback"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="clearSession"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="clearSession"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="Tm8gY3VycmVudCB0b2tlbi4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PTsgRXhwaXJlcz1UaHUsIDAxIEphbiAxOTcwIDAwOjAwOjAwIEdNVDsgUGF0aD0vOyBTZWN1cmU7IEh0dHBPbmx5"/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Clear session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error}"/> <L7p:Expression2 stringValue="access_denied"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="access_denied"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error}"/> <L7p:Expression2 stringValue="access_denied"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="access_denied"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="QWNjZXNzIHdhcyBkZW5pZWQu"/> <L7p:VariableToSet stringValue="errorMessage"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Denied"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error}"/> <L7p:Expression2 stringValue="invalid_request"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="invalid_request"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="VGhlIHJlcXVlc3Qgd2FzIGludmFsaWQuIFBsZWFzZSB0cnkgYWdhaW4u"/> <L7p:VariableToSet stringValue="errorMessage"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="QW4gZXJyb3IgaGFzIG9jY3VycmVkOiAke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXIuZXJyb3J9"/> <L7p:VariableToSet stringValue="errorMessage"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Unknown error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIiLAogICJ0b2tlbl90eXBlIjoiIiwKICAiZXhwaXJlc19pbiI6LAogICJyZWZyZXNoX3Rva2VuIjoiIiwKICAic2NvcGUiOiIiCn0="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIiLAogICJ0b2tlbl90eXBlIjoiIiwKICAiZXhwaXJlc19pbiI6LAogICJyZWZyZXNoX3Rva2VuIjoiIiwKICAic2NvcGUiOiIiCn0KCiR7ZXJyb3JNZXNzYWdlfQ=="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:TargetVariable stringValue="tokenSessionId"/> </L7p:UUIDGenerator> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${tokenSessionId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0iYWN0aW9uIiB2YWx1ZT0iY2xlYXJTZXNzaW9uIi8+CiAgICA8YnV0dG9uIHR5cGU9InN1Ym1pdCIgY2xhc3M9ImJ0biBidG4tcHJpbWFyeSBidG4tbWluaSIgdmFsdWU9IkNsZWFyIFNlc3Npb24iPkNsZWFyIFNlc3Npb248L2J1dHRvbj4KPC9mb3JtPgo8YnIgLz4="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7dG9rZW5TZXNzaW9uSWRbMF19OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="refresh"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="refresh"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="rt"/> <L7p:OtherTargetMessageVariable stringValue="current_token"/> <L7p:Regex stringValue="\&quot;refresh_token\&quot;\s*\:\s*\&quot;([^&quot;]*)\&quot;"/> <L7p:RegexName stringValue="isolate the refresh token"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtydFsxXX0="/> <L7p:VariableToSet stringValue="refresh_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRfdHlwZT1yZWZyZXNoX3Rva2VuJnJlZnJlc2hfdG9rZW49JHtyZWZyZXNoX3Rva2VufSZzY29wZT0ke29hdXRoMl9zY29wZX0="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="postMsg"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:Login stringValue="${oauth2_client_id}"/> <L7p:Password stringValue="${oauth2_client_secret}"/> <L7p:ProtectedServiceUrl stringValue="${location_tokenserver}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="application/xml"/> <L7p:Name stringValue="accept"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="postMsg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="3MVG94DzwlYDSHS6GTCNPxF87RQ8HrxbojWk89by7fE_H4ch8TsfZcaIFz.jdne83WCVPiD_xA93_Y8j4iomk"/> <L7p:Name stringValue="client_id"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="https://ssg61.l7tech.com:8443/salesforce/oauth/callback"/> <L7p:Name stringValue="redirect_uri"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="4922422941220601472"/> <L7p:Name stringValue="client_secret"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="authorization_code"/> <L7p:Name stringValue="grant_type"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${code}"/> <L7p:Name stringValue="code"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0KClRoZSBhY2Nlc3MgdG9rZW4gd2FzIHJlZnJlc2hlZC4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7Y2FjaGVLZXl9OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Refresh"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${setCookie}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> </wsp:Policy> OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-SAML-Bearer 07854a0de3db8f5849ecb6be3985c05d SERVICE OAuth2Client-SAML-Bearer true /oauth/v2/client/saml* DELETE POST GET PUT false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This is a test client for an OAuth 2 implementation using the saml grant type"/> </L7p:CommentAssertion> <L7p:SslAssertion/> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="69c9dd7c-4bdc-414c-8f91-c12088aecb77"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Context Variables"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="c2FtbA=="/> <L7p:VariableToSet stringValue="client_page"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheKeySaml"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjdGlvbn0="/> <L7p:VariableToSet stringValue="action"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dXJuOmlldGY6cGFyYW1zOm9hdXRoOmdyYW50LXR5cGU6c2FtbDItYmVhcmVy"/> <L7p:VariableToSet stringValue="saml_grant_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLlNBTUxSZXNwb25zZX0="/> <L7p:VariableToSet stringValue="SAMLResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Tm8gY3VycmVudCBzYW1s"/> <L7p:VariableToSet stringValue="current_saml"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="setCookieSaml"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CookieCredentialSource> <L7p:CookieName stringValue="l7otk2client"/> </L7p:CookieCredentialSource> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cookie.l7otk2client}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWUubDdvdGsyY2xpZW50fQ=="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get current token session id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionLocation"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:location/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQoKVGhlIGFjY2VzcyB0b2tlbiB3YXMgcmV0cmlldmVkIGZyb20gJHtzZXNzaW9uTG9jYXRpb24ucmVzdWx0fS4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0iUE9TVCI+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhY3Rpb24iIHZhbHVlPSJjbGVhclNlc3Npb24iLz4KICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IGJ0bi1taW5pIiB2YWx1ZT0iQ2xlYXIgU2Vzc2lvbiI+Q2xlYXIgU2Vzc2lvbjwvYnV0dG9uPgo8L2Zvcm0+CjxiciAvPg=="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="not found or no cacheKey"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// find current token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CookieCredentialSource> <L7p:CookieName stringValue="l7otk2samlfromsts"/> </L7p:CookieCredentialSource> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${cookie.l7otk2samlfromsts}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWUubDdvdGsyc2FtbGZyb21zdHN9"/> <L7p:VariableToSet stringValue="cacheKeySaml"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKeySaml}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="samlValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="samlValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="samlDecoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYW1sRGVjb2RlZH0="/> <L7p:VariableToSet stringValue="current_saml"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0iUE9TVCI+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhY3Rpb24iIHZhbHVlPSJjbGVhclNlc3Npb24iLz4KICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IGJ0bi1taW5pIiB2YWx1ZT0iQ2xlYXIgU2Vzc2lvbiI+Q2xlYXIgU2Vzc2lvbjwvYnV0dG9uPgo8L2Zvcm0+CjxiciAvPg=="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// find current SAML token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${clearSessionForm}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PTsgRXhwaXJlcz1UaHUsIDAxIEphbiAxOTcwIDAwOjAwOjAwIEdNVDsgUGF0aD0vOyBTZWN1cmU7IEh0dHBPbmx5"/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdvdGsyc2FtbGZyb21zdHM9OyBFeHBpcmVzPVRodSwgMDEgSmFuIDE5NzAgMDA6MDA6MDAgR01UOyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookieSaml"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// clear token session form"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${SAMLResponse}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item stringLength="included"> <L7p:Max intValue="-1"/> <L7p:Min intValue="1"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtTQU1MUmVzcG9uc2V9"/> <L7p:VariableToSet stringValue="current_saml"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="current_saml"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="current_saml"/> <L7p:TransformType transformType="BASE64_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X3NhbWx9"/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:TargetVariable stringValue="samlTokenSessionId"/> </L7p:UUIDGenerator> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYW1sVG9rZW5TZXNzaW9uSWRbMF19"/> <L7p:VariableToSet stringValue="cacheKeySaml"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKeySaml}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0iUE9TVCI+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhY3Rpb24iIHZhbHVlPSJjbGVhclNlc3Npb24iLz4KICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IGJ0bi1taW5pIiB2YWx1ZT0iQ2xlYXIgU2Vzc2lvbiI+Q2xlYXIgU2Vzc2lvbjwvYnV0dG9uPgo8L2Zvcm0+CjxiciAvPg=="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyc2FtbGZyb21zdHM9JHtjYWNoZUtleVNhbWx9OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookieSaml"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// receive new SAML token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="callapi"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="callapi"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X3Rva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRhcmdldH0="/> <L7p:VariableToSet stringValue="target_url"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="R0VU"/> <L7p:VariableToSet stringValue="target_http_method"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4844bcf1-2d2f-491d-87f1-40a5286b71eb"/> </L7p:Include> <L7p:HttpRoutingAssertion> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:ProtectedServiceUrl stringValue="${target_url}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${authorization_header}"/> <L7p:Name stringValue="authorization"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="apioutput"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Call API"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="handshake"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="handshake"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYW1sX2dyYW50X3R5cGV9"/> <L7p:VariableToSet stringValue="notencodedgranttype"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="notencodedgranttype"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="encodedgranttype"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="current_saml"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="encoded_saml"/> <L7p:TransformType transformType="BASE64_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="encoded_saml"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="encoded_saml"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRfdHlwZT0ke2VuY29kZWRncmFudHR5cGV9JmFzc2VydGlvbj0ke2VuY29kZWRfc2FtbH0mc2NvcGU9JHtvYXV0aDJfc2NvcGV9"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="postMsg"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="oauth2_client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="oauth2_client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:Login stringValue="${oauth2_client_id}"/> <L7p:Password stringValue="${oauth2_client_secret}"/> <L7p:ProtectedServiceUrl stringValue="${location_tokenserver}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="application/xml"/> <L7p:Name stringValue="accept"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="postMsg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="3MVG94DzwlYDSHS6GTCNPxF87RQ8HrxbojWk89by7fE_H4ch8TsfZcaIFz.jdne83WCVPiD_xA93_Y8j4iomk"/> <L7p:Name stringValue="client_id"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="https://ssg61.l7tech.com:8443/salesforce/oauth/callback"/> <L7p:Name stringValue="redirect_uri"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="4922422941220601472"/> <L7p:Name stringValue="client_secret"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="authorization_code"/> <L7p:Name stringValue="grant_type"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${code}"/> <L7p:Name stringValue="code"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0KClRoZSBhY2Nlc3MgdG9rZW4gd2FzIHJldHJpZXZlZCB2aWEgaGFuZHNoYWtlLg=="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZS5tYWlucGFydH0="/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:UUIDGenerator> <L7p:TargetVariable stringValue="tokenSessionId"/> </L7p:UUIDGenerator> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlblNlc3Npb25JZFswXX0="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGZvcm0gYWN0aW9uPSIiIG1ldGhvZD0iUE9TVCI+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJhY3Rpb24iIHZhbHVlPSJjbGVhclNlc3Npb24iLz4KICAgIDxidXR0b24gdHlwZT0ic3VibWl0IiBjbGFzcz0iYnRuIGJ0bi1wcmltYXJ5IGJ0bi1taW5pIiB2YWx1ZT0iQ2xlYXIgU2Vzc2lvbiI+Q2xlYXIgU2Vzc2lvbjwvYnV0dG9uPgo8L2Zvcm0+CjxiciAvPg=="/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PSR7Y2FjaGVLZXl9OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Handshake"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${action}"/> <L7p:Expression2 stringValue="clearSession"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="clearSession"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Tm8gY3VycmVudCB0b2tlbi4="/> <L7p:VariableToSet stringValue="current_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Tm8gY3VycmVudCBzYW1s"/> <L7p:VariableToSet stringValue="current_saml"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="clearSessionForm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdvdGsyY2xpZW50PTsgRXhwaXJlcz1UaHUsIDAxIEphbiAxOTcwIDAwOjAwOjAwIEdNVDsgUGF0aD0vOyBTZWN1cmU7IEh0dHBPbmx5"/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// delete cookie"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdvdGsyc2FtbGZyb21zdHM9OyBFeHBpcmVzPVRodSwgMDEgSmFuIDE5NzAgMDA6MDA6MDAgR01UOyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookieSaml"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a6fba62-00a1-4d4c-a135-6c2d44bbf582"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Delete"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// saml"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKeySaml}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Clear session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// tasks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${current_saml}"/> <L7p:Expression2 stringValue="No current saml"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="No current saml"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X3NhbWx9"/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="current_saml_summary"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create summary of SAML assertion information"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="current_saml_summary"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="html"/> <xsl:template match="/"> <b>SAML Assertion Summary</b><br/> NameID: <xsl:value-of select="//*[local-name()='NameID']"/><br/> SubjectConfimation: <xsl:value-of select="//*[local-name()='SubjectConfirmation']/@Method"/><br/> NotBefore: <xsl:value-of select="//*[local-name()='Conditions']/@NotBefore"/><br/> NotOnOrAfter: <xsl:value-of select="//*[local-name()='Conditions']/@NotOnOrAfter"/><br/> AuthenticationContext: <xsl:value-of select="//*[local-name()='AuthnContext']"/><br/> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> </L7p:XslTransformation> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Escape &amp;lt; character in SAML assertion for HTML display"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="current_saml"/> <L7p:Regex stringValue="&lt;/"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&amp;lt;/"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Add line break and escape &amp;lt; character in SAML assertion for HTML display"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="current_saml"/> <L7p:Regex stringValue="&lt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&lt;br&gt;&amp;lt;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="current_saml"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Build HTML template for SAML assertion display if exists"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="text/html;charset=UTF-8"/> </L7p:HardcodedResponse> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${setCookie}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${setCookie}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// token cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${setCookieSaml}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:HeaderName stringValue="Set-Cookie"/> <L7p:HeaderValue stringValue="${setCookieSaml}"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// SAML cookie"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/ 07854a0de3db8f5849ecb6be3985c02a FOLDER OTK OTK/Internal-OAuthValidation/ 07854a0de3db8f5849ecb6be3985c02b FOLDER Internal-OAuthValidation OTK/Internal-OAuthValidation/oauth-validation-validate-v2-idtoken 07854a0de3db8f5849ecb6be3985c02c SERVICE oauth-validation-validate-v2-idtoken true /oauth/validation/validate/v2/idtoken OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Generates the JWT token based on the incoming id_token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Or validates one"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The generated JWT will be used with the alg configured in #OTK id_token Configuration"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="5004${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="235c4605-3a50-45f9-b54c-4c4c661e96cc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK FIP Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="action"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="check_expiration"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="id_token"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.action}"/> <L7p:Expression2 stringValue="validate"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="validate"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check parameters for validation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="access_token"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="action"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="azp"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_key"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="code"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="nonce"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="resource_owner"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="salt"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="third_party_sso_token"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="third_party_sso_token_type"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="custom"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request.http.parameter.action}"/> <L7p:Expression2 stringValue="create"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="create"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="create"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check parameters for create"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.action}"/> <L7p:Expression2 stringValue="validate"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="validate"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlkX3Rva2VufQ=="/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNoZWNrX2V4cGlyYXRpb259"/> <L7p:VariableToSet stringValue="check_expiration"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="32d58e80-53a2-49fd-935a-391b1755e9fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Lookup"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue="xml"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCountChildren"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="round(count(/ns:values/*))&lt;=0"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbGlkYXRpb24geG1sbnM9Imh0dHA6Ly9ucy5sN3RlY2guY29tLzIwMTIvMTEvb3RrLW92cCI+CiA8cmVzdWx0Pm5vbmU8L3Jlc3VsdD4KPC92YWxpZGF0aW9uPg=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSharedSecretType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:shared_secret_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSharedSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:shared_secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAzp"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:azp/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSalt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:salt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e3e6f2b3-011a-437f-9ff0-ac911591ebfc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${xpathAzp.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="check_expiration"/> <L7p:value stringValue="${check_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${xpathResourceOwner.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${xpathSalt.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${xpathSharedSecret.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_alg"/> <L7p:value stringValue="${xpathSharedSecretType.result}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate or fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="status"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the status of the id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate an id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request.http.parameter.action}"/> <L7p:Expression2 stringValue="create"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="create"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="the given client_key is unknown: Given: '${request.http.parameter.client_key}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="201"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="201"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="find the client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjY2Vzc190b2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNvZGV9"/> <L7p:VariableToSet stringValue="code"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ea0db7be-ce05-4daa-a5fb-ac1ea3e74d49"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Generation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${request.http.parameter.acr}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${request.http.parameter.auth_time}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${request.http.parameter.azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue="${code}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${request.http.parameter.custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${request.http.parameter.nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${request.http.parameter.resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${request.http.parameter.salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${xpathSecret.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${request.http.parameter.third_party_sso_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${request.http.parameter.third_party_sso_token_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="the id_token could not be created"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="taken from id_token generation assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="create"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create the id_token - JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="db7a90bf-e85d-42bd-93db-a2950dbc2a51"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="iss"/> <L7p:value stringValue="${iss}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${request.http.parameter.resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${request.http.parameter.salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${shared_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_type"/> <L7p:value stringValue="${alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue="${sub}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="the id_token could not be persisted"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="122"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="122"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="persist"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="generated_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="generated_sso_token_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="PHZhbGlkYXRpb24geG1sbnM9Imh0dHA6Ly9ucy5sN3RlY2guY29tLzIwMTIvMTEvb3RrLW92cCI+CiA8cmVzdWx0PnZhbGlkPC9yZXN1bHQ+CiA8and0PiR7and0fTwvand0PgogPGlkX3Rva2VuX3R5cGU+JHtnZW5lcmF0ZWRfc3NvX3Rva2VuX3R5cGV9PC9pZF90b2tlbl90eXBlPgo8L3ZhbGlkYXRpb24+"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="text/xml;charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="create"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate an JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Internal-OAuthValidation/oauth-validation-validate-v2-token 07854a0de3db8f5849ecb6be3985c02d SERVICE oauth-validation-validate-v2-token true /oauth/validation/validate/v2/token OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Validates OAuth 2.0 Access Tokens"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="For Bearer token, pass in Authorization header OR access_token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="For MAC token, pass in Authorization header, http_method, url"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="5001${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="235c4605-3a50-45f9-b54c-4c4c661e96cc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK FIP Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="access_token"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="http_method"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="isonetime"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="scope_fail"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="scope_required"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="url"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="no parameters or duplicate parameters or a missing access_token: Given='${access_token}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAuaGVhZGVyLmF1dGhvcml6YXRpb259"/> <L7p:VariableToSet stringValue="auth_header"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjY2Vzc190b2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlzb25ldGltZX0="/> <L7p:VariableToSet stringValue="onetime"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNjb3BlX3JlcXVpcmVkfQ=="/> <L7p:VariableToSet stringValue="scope_required"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNjb3BlX2ZhaWx9"/> <L7p:VariableToSet stringValue="scope_fail"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3ec61a3a-f7ee-4541-b47d-c83534ca51ff"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Access Token Retrieval"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allow_header"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="allow_query"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_header"/> <L7p:value stringValue="${auth_header}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_access_token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code token from retrieval assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Find"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Find the token in the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope_fail}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="scope_fail"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="scope_fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if a value was given. Use 'false' as default"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${onetime}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="true|false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="onetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="onetime"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if a value was given. Use 'false' as default"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="uuid"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="UUID"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate if access_token is UUID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="14db913e-ab30-49d9-a762-962c0798f2a1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Validate JWT OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${query_db}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${jwt_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Query DB or Not"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="JWT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate if access_token is JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token is invalid or revoked or none was given"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="992"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="992"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate either JWT or UUID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5182a003-cb58-4b5f-939f-5af9e8e5ec73"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OAuth 2 Token Validation - BEARER"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="tokenValues"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Bearer"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="MAC"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="MAC"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c48ee8b2-20d0-4320-b836-694e55942c45"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OAuth 2 Token Validation - MAC"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="http_method"/> <L7p:value stringValue="${request.http.parameter.http_method}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="tokenValues"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="url"/> <L7p:value stringValue="${request.http.parameter.url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MAC"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="WARNING: Server misconfigured! Configure it to support 'Bearer' or 'MAC' token profile"/> </L7p:AuditDetailAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Error code created by validation assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle validation error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> </wsp:All> </wsp:Policy> OTK/Internal-OAuthValidation/oauth-validation-validate-v2-refreshtoken 07854a0de3db8f5849ecb6be3985c02e SERVICE oauth-validation-validate-v2-refreshtoken true /oauth/validation/validate/v2/refreshtoken OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Validates an OAuth 2.0 Refresh Token"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|DELETE|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="5002${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="235c4605-3a50-45f9-b54c-4c4c661e96cc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK FIP Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_key"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="rtoken"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="scope"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${request.http.parameter.rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="lookup"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Lookup the token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="70e143f9-373f-4919-b104-620462f42e79"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Refresh Token Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${request.http.parameter.client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.requested"/> <L7p:value stringValue="${request.http.parameter.scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token.status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="tokenValues"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> </wsp:All> </wsp:Policy> OTK/Internal-OAuthValidation/oauth-validation-v2-client 07854a0de3db8f5849ecb6be3985c02f SERVICE oauth-validation-v2-client true /oauth/validation/v2/client OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Validates the given client_id and secret"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Gets called when clients request an access_token"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="5000${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="235c4605-3a50-45f9-b54c-4c4c661e96cc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK FIP Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVycy5jbGllbnRfa2V5fEBAfSMjJHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVycy5jbGllbnRfc2VjcmV0fEBAfSMjJHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVycy5jbGllbnRfbmFtZXxAQH0jIyR7cmVxdWVzdC5odHRwLnBhcmFtZXRlcnMuY2xpZW50X3R5cGV8QEB9IyMke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXJzLmVudmlyb25tZW50fEBAfSMjJHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVycy5leHBpcmF0aW9ufEBAfSMjJHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVycy5zdGF0dXN8QEB9IyMke3JlcXVlc3QuaHR0cC5wYXJhbWV0ZXJzLnNjb3BlfEBAfSMj"/> <L7p:VariableToSet stringValue="requestParams"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requestParams}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Presence of ';@@'; indicates duplicate parameters"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="requestParams"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="@@"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9zZWNyZXR9"/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="no parameters or duplicate parameters or a missing client_key: Given='${client_key}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Lookup"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Lookup the client values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify that only one client_id gets exported"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:keys/ns:values/ns:value)=1"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify that the requested client_key is included in the provided input message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_key/text()=$client_key"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given client_key is unknown. Given='${client_key}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="201"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="201"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="verify that the client is the right one and that it exists"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmV4cGlyYXRpb259"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no check"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="expiration"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="figure out if the expiration should be checked"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="6af83b79-d346-4867-bbb1-aa9042d90893"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_assertion"/> <L7p:value stringValue="${request.http.parameter.client_assertion}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_assertion_type"/> <L7p:value stringValue="${request.http.parameter.client_assertion_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_info"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${request.http.parameter.client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_status"/> <L7p:value stringValue="${request.http.parameter.status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_type"/> <L7p:value stringValue="${request.http.parameter.client_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${request.http.parameter.environment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${request.http.parameter.scope}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> </wsp:All> </wsp:Policy> OTK/Internal-OAuthValidation/oauth-validation-v2-revocation 07854a0de3db8f5849ecb6be3985c030 SERVICE oauth-validation-v2-revocation true /oauth/validation/v2/revocation OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Revokes access_token or refresh_token"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="5003${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="235c4605-3a50-45f9-b54c-4c4c661e96cc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK FIP Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_id"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="token"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="token_type_hint"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VuX3R5cGVfaGludH0="/> <L7p:VariableToSet stringValue="token_type_hint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZH0="/> <L7p:VariableToSet stringValue="client_id"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="access_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:Expression2 stringValue="refresh_token"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="refresh_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="118"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="118"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="access_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:Expression2 stringValue="refresh_token"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="refresh_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the lookup encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Lookup"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Lookup the token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOwnership"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aE93bmVyc2hpcC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="expected_client_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Setting 'expected_client_id' to 'client_id'. Will return 'revoked' for unknown given token"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfaWR9"/> <L7p:VariableToSet stringValue="expected_client_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="unknown"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client id"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set the client_id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_id}"/> <L7p:Expression2 stringValue="${expected_client_id}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${expected_client_id}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="unauthorized client_id. Given: '${client_id}', valid: '${expected_client_id}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="117"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="117"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_id"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="verify that the client is valid for this token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="access_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cf1c08ae-8f8e-48db-b01b-89eb891615a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="refresh_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="temp_token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_type_hint}"/> <L7p:Expression2 stringValue="refresh_token"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="refresh_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cf1c08ae-8f8e-48db-b01b-89eb891615a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="refresh_token"/> <L7p:value stringValue="${token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="temp_token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type_hint=refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the persisting encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remove"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remove the token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="eyJyZXN1bHQiOiJyZXZva2VkIn0="/> <L7p:ResponseContentType stringValue="application/json;charset=UTF-8"/> </L7p:HardcodedResponse> </wsp:All> </wsp:Policy> OTK/ 07854a0de3db8f5849ecb6be3985c036 FOLDER OTK OTK/Internal-Session/ 07854a0de3db8f5849ecb6be3985c037 FOLDER Internal-Session OTK/Internal-Session/oauth-session 07854a0de3db8f5849ecb6be3985c038 SERVICE oauth-session true /oauth/session/* OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Stores/gets data from cache and/or oauth_session"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Mandatory params for store: cacheKey,value, cacheId,cacheAge,cacheMaxEntries,cacheMaxSize"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Optional params for store: dbAge"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Mandatory params for get: cacheKey"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Optional params for get: cacheId,cacheAge"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Mandatory params for delete: cacheKey, cacheID, cacheAge, cacheMaxEntries, cacheMaxSize"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|PUT|DELETE|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="235c4605-3a50-45f9-b54c-4c4c661e96cc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK FIP Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4200"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="operation"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="request.url.path"/> <L7p:Regex stringValue="/oauth/session/(get|store|delete|deleteExpired)$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvcGVyYXRpb25bMV19"/> <L7p:VariableToSet stringValue="operation"/> </L7p:SetVariable> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="303"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="303"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="path"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="checking for a valid path"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="get"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="get"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="cacheAge"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="cacheId"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="cacheKey"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4201"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlS2V5fQ=="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlSWR9"/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlQWdlfQ=="/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheMaxEntries"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheMaxSize"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a2364b62-7ea8-4a77-a610-3ece64aec8ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session DB"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session NoSQL"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4201"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4201"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="get"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="store"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="store"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="cacheAge"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="cacheId"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="cacheKey"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="cacheMaxEntries"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="cacheMaxSize"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="dbAge"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="value"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnZhbHVlfQ=="/> <L7p:VariableToSet stringValue="value"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlTWF4RW50cmllc30="/> <L7p:VariableToSet stringValue="cacheMaxEntries"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlTWF4U2l6ZX0="/> <L7p:VariableToSet stringValue="cacheMaxSize"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmRiQWdlfQ=="/> <L7p:VariableToSet stringValue="dbAge"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlS2V5fQ=="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlSWR9"/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlQWdlfQ=="/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a2364b62-7ea8-4a77-a610-3ece64aec8ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session DB"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session NoSQL"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4200"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="delete"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="delete"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="cacheId"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="cacheKey"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="cacheAge"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4202"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlS2V5fQ=="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlSWR9"/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhY2hlQWdlfQ=="/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheMaxEntries"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheMaxSize"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a2364b62-7ea8-4a77-a610-3ece64aec8ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session DB"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session NoSQL"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4202"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4202"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="delete"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="deleteExpired"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="deleteExpired"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"/> </L7p:HtmlFormDataAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4203"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a2364b62-7ea8-4a77-a610-3ece64aec8ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session DB"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session NoSQL"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4203"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4203"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="deleteExpired"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/ 07854a0de3db8f5849ecb6be3985c03a FOLDER OTK OTK/Internal-TokenPersistenceLayer/ 07854a0de3db8f5849ecb6be3985c03b FOLDER Internal-TokenPersistenceLayer OTK/Internal-TokenPersistenceLayer/oauth-tokenstore 07854a0de3db8f5849ecb6be3985c03c SERVICE oauth-tokenstore true /oauth/tokenstore/* OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Maintains the token storage persistence"/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="POST|PUT|DELETE|GET"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4100"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="235c4605-3a50-45f9-b54c-4c4c661e96cc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK FIP Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4100"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="operation"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="request.url.path"/> <L7p:Regex stringValue="/oauth/tokenstore/(get|revoke|store|getTemp|update|delete|disable|register|remove|jwt_register|jwt_removal|jwt_lookup|(tokens/count))$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvcGVyYXRpb25bMV19"/> <L7p:VariableToSet stringValue="operation"/> </L7p:SetVariable> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="303"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4100"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="303"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="path"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="checking for a valid path"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAubWV0aG9kfQ=="/> <L7p:VariableToSet stringValue="method"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to extract 'dbsystem' and make it available to 'OTK Token DB GET'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${request.http.parameter.custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="get|getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm9mZnNldH0="/> <L7p:VariableToSet stringValue="queryOffset"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="get"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="get"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJ0b2tlbn0="/> <L7p:VariableToSet stringValue="rtoken"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXR1c30="/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmZvcm1hdH0="/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW4="/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1c2e888c-7f82-45f5-9bdf-9ef42fd65bd3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4109"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4109"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Longliving tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="getTemp"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="getTemp"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnZlcmlmaWVyfQ=="/> <L7p:VariableToSet stringValue="verifier"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmZvcm1hdH0="/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGVtcG9yYXJ5"/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1c2e888c-7f82-45f5-9bdf-9ef42fd65bd3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4110"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4110"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="temporary tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-IDs 4109, 4110"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'get' and 'getTemp'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="store"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="store"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_key"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_name"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="custom"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="number"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="expiration"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="resource_owner"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="number"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="rexpiration"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="rtoken"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="scope"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="secret"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="status"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="token"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudH0="/> <L7p:VariableToSet stringValue="client"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmV4cGlyYXRpb259"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9uYW1lfQ=="/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNjb3BlfQ=="/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmN1c3RvbX0="/> <L7p:VariableToSet stringValue="custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXR1c30="/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJ0b2tlbn0="/> <L7p:VariableToSet stringValue="rtoken"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJleHBpcmF0aW9ufQ=="/> <L7p:VariableToSet stringValue="rexpiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2F1dGgycnRva2Vu"/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="517aebd3-6ce1-4e8e-bce1-fb7d065c34e1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4102"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4102"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="oauth 2.0, access_token, refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="callback"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_key"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_name"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="custom"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="number"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="expiration"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="resource_owner"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="scope"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="secret"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="token"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudH0="/> <L7p:VariableToSet stringValue="client"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmV4cGlyYXRpb259"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhbGxiYWNrfQ=="/> <L7p:VariableToSet stringValue="callback"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9uYW1lfQ=="/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNjb3BlfQ=="/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmN1c3RvbX0="/> <L7p:VariableToSet stringValue="custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGVtcG9yYXJ5"/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Setting it to ENABLED as default value. It is not used but the underlying layer needs a value"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="RU5BQkxFRA=="/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="517aebd3-6ce1-4e8e-bce1-fb7d065c34e1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4100"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4100"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="oauth 1.0/ 2.0, temporary token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_key"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_name"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="true"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="custom"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="number"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="expiration"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="resource_owner"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="scope"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:Name stringValue="secret"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="status"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="token"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudH0="/> <L7p:VariableToSet stringValue="client"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmV4cGlyYXRpb259"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9uYW1lfQ=="/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNjb3BlfQ=="/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmN1c3RvbX0="/> <L7p:VariableToSet stringValue="custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXR1c30="/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2F1dGgydG9rZW4="/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="517aebd3-6ce1-4e8e-bce1-fb7d065c34e1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4102"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4102"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="oauth 2.0, access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:HtmlFormDataAssertion> <L7p:AllowGet booleanValue="true"/> <L7p:AllowPost booleanValue="true"/> <L7p:DisallowOtherFields booleanValue="true"/> <L7p:FieldSpecs htmlFormFieldSpecArray="included"> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="client_key"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="number"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="expiration"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="secret"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="status"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="temp_token"/> </L7p:item> <L7p:item htmlFormFieldSpec="included"> <L7p:AllowEmpty boxedBooleanValue="false"/> <L7p:DataType fieldDataType="any"/> <L7p:MaxOccurs intValue="1"/> <L7p:MinOccurs intValue="1"/> <L7p:Name stringValue="token"/> </L7p:item> </L7p:FieldSpecs> </L7p:HtmlFormDataAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudH0="/> <L7p:VariableToSet stringValue="client"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmV4cGlyYXRpb259"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXR1c30="/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRlbXBfdG9rZW59"/> <L7p:VariableToSet stringValue="temp_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2F1dGgxdG9rZW4="/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="517aebd3-6ce1-4e8e-bce1-fb7d065c34e1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4101"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4101"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="oauth 1.0, oauth_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Store the token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID, several ones"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'store'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="update"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="update"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXR1c30="/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmV4cGlyYXRpb259"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnZlcmlmaWVyfQ=="/> <L7p:VariableToSet stringValue="verifier"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="42b930fc-438f-4aaa-a702-7c45efe216fb"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'update'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="revoke"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="revoke"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJ0b2tlbn0="/> <L7p:VariableToSet stringValue="rtoken"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb0f2fdc-9337-4201-af2b-dc3e5c11be0f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Revocation"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Nosql Revocation"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4106"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4106"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'revoke'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="disable"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="disable"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c62bf4a9-cb28-4cb8-820e-af45be202425"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Disable"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Disable"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4108"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4108"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'disable'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="delete"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="delete"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRva2VufQ=="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJ0b2tlbn0="/> <L7p:VariableToSet stringValue="refresh_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnRlbXBfdG9rZW59"/> <L7p:VariableToSet stringValue="temp_token"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e75b13e-317f-407a-b80a-2dbb21d099d7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4107"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4107"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'delete'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="tokens/count"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm90aGVyfQ=="/> <L7p:VariableToSet stringValue="other"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4114"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e6c28878-44b1-4761-8aa2-be5d961794ce"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Count"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL, Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Count"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4114"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB Operation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="eyJjb3VudCI6ICR7Y291bnR9fQ=="/> <L7p:ResponseContentType stringValue="application/json; charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4114"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'tokens/count'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${method}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="POST"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="jwt_register"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwt_register"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmF6cH0="/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmlzc30="/> <L7p:VariableToSet stringValue="iss"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3dH0="/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN1Yn0="/> <L7p:VariableToSet stringValue="sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNhbHR9"/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNoYXJlZF9zZWNyZXR9"/> <L7p:VariableToSet stringValue="shared_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNoYXJlZF9zZWNyZXRfdHlwZX0="/> <L7p:VariableToSet stringValue="shared_secret_type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="be6e4478-8216-4c75-b2f2-f0f80a7a0117"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token DB Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="identifier"/> <L7p:value stringValue="${identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${shared_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_type"/> <L7p:value stringValue="${shared_secret_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthenB9"/> <L7p:VariableToSet stringValue="temp.azp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYWx0fQ=="/> <L7p:VariableToSet stringValue="temp.salt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzaGFyZWRfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="temp.shared_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpc3N9"/> <L7p:VariableToSet stringValue="temp.iss"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3R9"/> <L7p:VariableToSet stringValue="temp.jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNvdXJjZV9vd25lcn0="/> <L7p:VariableToSet stringValue="temp.resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzdWJ9"/> <L7p:VariableToSet stringValue="temp.sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzaGFyZWRfc2VjcmV0X3R5cGV9"/> <L7p:VariableToSet stringValue="temp.shared_secret_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store variables because OTK id_token NoSQL Remove will override them"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="logout_apps"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token NoSQL Remove"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLmF6cH0="/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnNhbHR9"/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnNoYXJlZF9zZWNyZXR9"/> <L7p:VariableToSet stringValue="shared_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLmlzc30="/> <L7p:VariableToSet stringValue="iss"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLmp3dH0="/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnN1Yn0="/> <L7p:VariableToSet stringValue="sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnNoYXJlZF9zZWNyZXRfdHlwZX0="/> <L7p:VariableToSet stringValue="shared_secret_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="restore variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remove it first because of Cassandra update limitation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token NoSQL Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4111"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4111"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="REGISTER_ID_TOKEN"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="POST"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used for storage, insert"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${method}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="GET"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="jwt_lookup"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwt_lookup"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3dH0="/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmF6cH0="/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN1Yn0="/> <L7p:VariableToSet stringValue="sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmZvcm1hdH0="/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a23761d-8dde-4295-b30e-6241cbdb14e5"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token DB Lookup"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token NoSQL Lookup"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4112"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4112"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="LOOKUP_ID_TOKEN"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="GET"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Getting values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${method}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="DELETE"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="jwt_removal"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwt_removal"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmp3dH0="/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmxvZ291dF9hcHBzfQ=="/> <L7p:VariableToSet stringValue="logout_apps"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmF6cH0="/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8b48d23c-1a9f-416d-bdd7-153098f31a9a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token DB Remove"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token NoSQL Remove"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4113"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4113"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="REMOVE_ID_TOKEN"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DELETE"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Remove values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// most likely parameters were not provided as specified"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/ 07854a0de3db8f5849ecb6be3985c022 FOLDER OTK OTK/Internal-Client/ 07854a0de3db8f5849ecb6be3985c023 FOLDER Internal-Client OTK/Internal-Client/oauth-clients 07854a0de3db8f5849ecb6be3985c024 SERVICE oauth-clients true /oauth/clientstore/* OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Accesses the OTK client storage."/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="operation"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="request.url.path"/> <L7p:Regex stringValue="/oauth/clientstore/(get|update|delete|store|getKey|revoke|getAll|portal|(clientKeys/count))$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvcGVyYXRpb25bMV19"/> <L7p:VariableToSet stringValue="operation"/> </L7p:SetVariable> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="303"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="303"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="path"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// checking for a valid path"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="get|getKey|getAll"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="These need to be updated to reflect the methods that should be allowed"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="UE9TVHxQVVR8REVMRVRFfEdFVA=="/> <L7p:VariableToSet stringValue="allowed_http_methods"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTP Allowed Methods"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAwMA=="/> <L7p:VariableToSet stringValue="api_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="get|getKey|getAll"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="store"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="These need to be updated to reflect the methods that should be allowed"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="UE9TVHxQVVR8REVMRVRFfEdFVA=="/> <L7p:VariableToSet stringValue="allowed_http_methods"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTP Allowed Methods"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAwMQ=="/> <L7p:VariableToSet stringValue="api_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="store"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="delete"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="These need to be updated to reflect the methods that should be allowed"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="UE9TVHxQVVR8REVMRVRFfEdFVA=="/> <L7p:VariableToSet stringValue="allowed_http_methods"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTP Allowed Methods"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAwMg=="/> <L7p:VariableToSet stringValue="api_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="delete"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="update"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="These need to be updated to reflect the methods that should be allowed"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="UE9TVHxQVVR8REVMRVRFfEdFVA=="/> <L7p:VariableToSet stringValue="allowed_http_methods"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTP Allowed Methods"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAwMw=="/> <L7p:VariableToSet stringValue="api_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="update"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="revoke"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="These need to be updated to reflect the methods that should be allowed"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="UE9TVHxQVVR8REVMRVRFfEdFVA=="/> <L7p:VariableToSet stringValue="allowed_http_methods"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTP Allowed Methods"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAwNA=="/> <L7p:VariableToSet stringValue="api_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="revoke"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="clientKeys/count"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="R0VU"/> <L7p:VariableToSet stringValue="allowed_http_methods"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAwNQ=="/> <L7p:VariableToSet stringValue="api_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="instances"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set http allowed methods and API ID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="${allowed_http_methods}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="${api_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="true"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="235c4605-3a50-45f9-b54c-4c4c661e96cc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK FIP Client Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="${api_id}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="get|getKey|getAll"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm5hbWV9"/> <L7p:VariableToSet stringValue="name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm9yZ30="/> <L7p:VariableToSet stringValue="org"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlZ2lzdGVyZWRfYnl9"/> <L7p:VariableToSet stringValue="registered_by"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmZvcm1hdH0="/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnF1ZXJ5T2Zmc2V0fQ=="/> <L7p:VariableToSet stringValue="queryOffset"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmZpbHRlclN0YXR1c30="/> <L7p:VariableToSet stringValue="filterStatus"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmVudmlyb25tZW50fQ=="/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm1hc3Rlcn0="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2e7c73ef-afbf-47f8-89e0-8ba80095c2b3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue="0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="queryOffset"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="offset handling"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'get' or 'getKey' or 'getAll'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="store"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="store"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm5hbWV9"/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm9yZ30="/> <L7p:VariableToSet stringValue="org"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnJlZ2lzdGVyZWRfYnl9"/> <L7p:VariableToSet stringValue="registered_by"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhbGxiYWNrfQ=="/> <L7p:VariableToSet stringValue="callback"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmRlc2NyaXB0aW9ufQ=="/> <L7p:VariableToSet stringValue="description"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmVudmlyb25tZW50fQ=="/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmV4cGlyYXRpb259"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnBlcnNpc3RfdHlwZX0="/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNjb3BlfQ=="/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXR1c30="/> <L7p:VariableToSet stringValue="client_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9jdXN0b219"/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXlfY3VzdG9tfQ=="/> <L7p:VariableToSet stringValue="key_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlcnZpY2VfaWRzfQ=="/> <L7p:VariableToSet stringValue="service_ids"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjY291bnRfcGxhbl9tYXBwaW5nX2lkc30="/> <L7p:VariableToSet stringValue="account_plan_mapping_ids"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnR5cGV9"/> <L7p:VariableToSet stringValue="type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3d07e7a4-b419-4664-9360-0782ea930372"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="persist"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4001"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'store'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="delete"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="delete"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cbe9a7d5-8e32-418a-b366-26494a1e765c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4002"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'delete' client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="update"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="update"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm5hbWV9"/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmRlc2NyaXB0aW9ufQ=="/> <L7p:VariableToSet stringValue="description"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnR5cGV9"/> <L7p:VariableToSet stringValue="type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm9yZ30="/> <L7p:VariableToSet stringValue="org"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9jdXN0b219"/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="service_ids"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="account_plan_mapping_ids"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="key_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="created_by"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50"/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8982a1ae-c908-44d9-9c62-e4ef5a9f2148"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4003"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updates a client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlY3JldH0="/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXR1c30="/> <L7p:VariableToSet stringValue="client_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNjb3BlfQ=="/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNhbGxiYWNrfQ=="/> <L7p:VariableToSet stringValue="callback"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmVudmlyb25tZW50fQ=="/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNyZWF0ZWRfYnl9"/> <L7p:VariableToSet stringValue="created_by"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXlfY3VzdG9tfQ=="/> <L7p:VariableToSet stringValue="key_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnNlcnZpY2VfaWRzfQ=="/> <L7p:VariableToSet stringValue="service_ids"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmFjY291bnRfcGxhbl9tYXBwaW5nX2lkc30="/> <L7p:VariableToSet stringValue="account_plan_mapping_ids"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleQ=="/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8982a1ae-c908-44d9-9c62-e4ef5a9f2148"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4003"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="updates a client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4003"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'update'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${operation}"/> <L7p:Expression2 stringValue="revoke"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="revoke"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9rZXl9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="IMPORTANT: associatied token should also be removed"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="IMPORTANT: if this operation was called via 'oauth/manager' it has been done!"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="338a6974-8d3a-4ee9-9c40-a7069681799a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Revoke Key"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Revoke Key"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the error code is set by the DB encas"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="4004"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="JHtyZXN1bHR9"/> <L7p:EarlyResponse booleanValue="true"/> <L7p:ResponseContentType stringValue="${content-type}"/> <L7p:ResponseStatus stringValue="${status}"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4004"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'revoke' client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="clientKeys/count"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm90aGVyfQ=="/> <L7p:VariableToSet stringValue="other"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmNsaWVudF9pZGVudH0="/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="${api_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df10cf53-7b6f-4194-831e-d15685d8ef6f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Key DB Count"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL, Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Key NoSQL Count"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="${api_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB Operation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:HardcodedResponse> <L7p:Base64ResponseBody stringValue="eyJjb3VudCI6ICR7Y291bnR9fQ=="/> <L7p:ResponseContentType stringValue="application/json; charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="API-ID 4005"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle 'clientKeys/count'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/ 07854a0de3db8f5849ecb6be3985bf56 FOLDER OTK OTK/Shared-OAuth/ 07854a0de3db8f5849ecb6be3985bf57 FOLDER Shared-OAuth OTK/Shared-OAuth/Policy Fragments/ 07854a0de3db8f5849ecb6be3985bf58 FOLDER Policy Fragments OTK/Shared-OAuth/Policy Fragments/caching/ 07854a0de3db8f5849ecb6be3985bf59 FOLDER caching OTK/Shared-OAuth/Policy Fragments/response_types/ 07854a0de3db8f5849ecb6be3985bf5a FOLDER response_types OTK/Shared-OAuth/Policy Fragments/pof/ 07854a0de3db8f5849ecb6be3985bf5b FOLDER pof OTK/Shared-OAuth/Policy Fragments/authentication/ 07854a0de3db8f5849ecb6be3985bf5c FOLDER authentication OTK/Shared-OAuth/Policy Fragments/grant_types/ 07854a0de3db8f5849ecb6be3985bf5d FOLDER grant_types OTK/Shared-OAuth/Policy Fragments/manager/ 07854a0de3db8f5849ecb6be3985bf5e FOLDER manager OTK/Shared-OAuth/Policy Fragments/manager/manage/ 07854a0de3db8f5849ecb6be3985bf5f FOLDER manage OTK/Shared-OAuth/Policy Fragments/manager/manage/token/ 07854a0de3db8f5849ecb6be3985bf60 FOLDER token OTK/Shared-OAuth/Policy Fragments/manager/manage/client/ 07854a0de3db8f5849ecb6be3985bf61 FOLDER client OTK/Shared-OAuth/Policy Fragments/manage/ 07854a0de3db8f5849ecb6be3985bf62 FOLDER manage OTK/Shared-OAuth/Policy Fragments/manage/session/ 07854a0de3db8f5849ecb6be3985bf63 FOLDER session OTK/Shared-OAuth/Policy Fragments/manage/id_token/ 07854a0de3db8f5849ecb6be3985bf64 FOLDER id_token OTK/Shared-OAuth/Policy Fragments/manage/analyse/ 07854a0de3db8f5849ecb6be3985bf65 FOLDER analyse OTK/Shared-OAuth/Policy Fragments/manage/token/ 07854a0de3db8f5849ecb6be3985bf66 FOLDER token OTK/Shared-OAuth/Policy Fragments/manage/client/ 07854a0de3db8f5849ecb6be3985bf67 FOLDER client OTK/Shared-OAuth/Policy Fragments/validation - verification/ 07854a0de3db8f5849ecb6be3985bf68 FOLDER validation - verification OTK/Shared-OAuth/Policy Fragments/configuration/ 07854a0de3db8f5849ecb6be3985bf69 FOLDER configuration OTK/Shared-OAuth/Policy Fragments/configuration/Authorization Server/ 07854a0de3db8f5849ecb6be3985bf6a FOLDER Authorization Server OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/ 07854a0de3db8f5849ecb6be3985bf6b FOLDER Discovery Endpoint OTK/Shared-OAuth/Policy Fragments/configuration/JWKs Endpoint/ 07854a0de3db8f5849ecb6be3985bf6c FOLDER JWKs Endpoint OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/ 07854a0de3db8f5849ecb6be3985bf6d FOLDER oauth manager OTK/Shared-OAuth/Server/ 07854a0de3db8f5849ecb6be3985bf6e FOLDER Server OTK/Shared-OAuth/Server/Internal/ 07854a0de3db8f5849ecb6be3985bf6f FOLDER Internal OTK/Shared-OAuth/Server/Internal/Documentation/ 07854a0de3db8f5849ecb6be3985bf70 FOLDER Documentation OTK/Shared-OAuth/Customizations/ 07854a0de3db8f5849ecb6be3985bf71 FOLDER Customizations OTK/Shared-OAuth/Customizations/grant_types/ 07854a0de3db8f5849ecb6be3985bf72 FOLDER grant_types OTK/Shared-OAuth/Customizations/Authorization Server/ 07854a0de3db8f5849ecb6be3985bf73 FOLDER Authorization Server OTK/Shared-OAuth/Customizations/oauth manager/ 07854a0de3db8f5849ecb6be3985bf74 FOLDER oauth manager OTK/Shared-OAuth/Customizations/caching/ 07854a0de3db8f5849ecb6be3985bf75 FOLDER caching OTK/Shared-OAuth/Customizations/authentication/ 07854a0de3db8f5849ecb6be3985bf76 FOLDER authentication OTK/Shared-OAuth/Customizations/JWKs Endpoint/ 07854a0de3db8f5849ecb6be3985bf77 FOLDER JWKs Endpoint OTK/Shared-OAuth/Customizations/Token Server/ 07854a0de3db8f5849ecb6be3985bf78 FOLDER Token Server OTK/Shared-OAuth/Customizations/cors/ 07854a0de3db8f5849ecb6be3985bf79 FOLDER cors OTK/Shared-OAuth/Customizations/Discovery Endpoint/ 07854a0de3db8f5849ecb6be3985bf7a FOLDER Discovery Endpoint OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/ 07854a0de3db8f5849ecb6be3985bf7b FOLDER RECOMMENDED OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/ 07854a0de3db8f5849ecb6be3985bf7c FOLDER OPTIONAL OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/ 07854a0de3db8f5849ecb6be3985bf7d FOLDER REQUIRED OTK/Shared-OAuth/Customizations/id_token/ 07854a0de3db8f5849ecb6be3985bf7e FOLDER id_token OTK/Shared-OAuth/Policy Fragments/manager/manage/token/OTK Manager Token Get (token) 07854a0de3db8f5849ecb6be3985bf10 POLICY OTK Manager Token Get (token) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eG1s"/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW4="/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${return_json}"/> <L7p:Expression2 stringValue="true"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="anNvbg=="/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Setting return format"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8ff483eb-ee66-4d70-a719-9e21d1bc5176"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="rtoken"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="rtoken"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="queryOffset"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="queryOffset"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/get?token=${token}&amp;rtoken=${rtoken}&amp;client_key=${client_key}&amp;resource_owner=${resource_owner}&amp;status=${token_status}&amp;format=${format}&amp;offset=${queryOffset}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK PKCE Validation 07854a0de3db8f5849ecb6be3985bf05 POLICY OTK PKCE Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy has to be used as an encapsulated assertion!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy validates a code_verifier in the context of PKCE."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Input:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- A JSON message as input which includes the key 'code_challenge', 'code_challenge_method'."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- A 'code_verifier'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="If 'code_challenge' is empty no validation will be done."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Output:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- 'error.code' in the case of an error"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9ufQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="session"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="$..code_challenge"/> <L7p:OtherTargetMessageVariable stringValue="session"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jcodeChallenge"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqY29kZUNoYWxsZW5nZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="codeChallenge"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="codeChallenge"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="codeChallenge"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${codeChallenge}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${codeVerifier}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="[\w\d-_~.]{43,128}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="$..code_challenge_method"/> <L7p:OtherTargetMessageVariable stringValue="session"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jcodeChallengeMethod"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqY29kZUNoYWxsZW5nZU1ldGhvZC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="codeChallengeMethod"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${codeChallengeMethod}"/> <L7p:Expression2 stringValue="plain"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="plain"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${codeVerifier}"/> <L7p:Expression2 stringValue="${codeChallenge}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${codeChallenge}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="plain"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${codeChallengeMethod}"/> <L7p:Expression2 stringValue="s256"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="s256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:GenerateSecurityHash> <L7p:Algorithm stringValue="SHA-256"/> <L7p:Base64Data stringValue="JHtjb2RlVmVyaWZpZXJ9"/> <L7p:LineBreak lineBreak="CR-LF"/> <L7p:TargetOutputVariable stringValue="transformedCodeVerifier"/> </L7p:GenerateSecurityHash> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="transformedCodeVerifier"/> <L7p:Regex stringValue="\+"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="-"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="transformedCodeVerifier"/> <L7p:Regex stringValue="\/"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="_"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="transformedCodeVerifier"/> <L7p:Regex stringValue="\s|="/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${transformedCodeVerifier}"/> <L7p:Expression2 stringValue="${codeChallenge}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${codeChallenge}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="s256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Code Challenge exist"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${codeChallenge}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Code Challenge not exist"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTEz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Failed PKCE validation: given verifier: '${codeVerifier}', calculated challenge: '${transformedCodeVerifier}', expected: '${codechallenge}'"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/id_token/#OTK id_token KID Configuration 07854a0de3db8f5849ecb6be3985be9e POLICY #OTK id_token KID Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK id_token KID Configuration&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/#OTK openid userinfo_endpoint 07854a0de3db8f5849ecb6be3985bea7 POLICY #OTK openid userinfo_endpoint Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid userinfo_endpoint&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/caching/OTK Cache Look Up Customization 07854a0de3db8f5849ecb6be3985bec6 POLICY OTK Cache Look Up Customization Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="***** OTK Cache Look Up Customization *****"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Available context variables:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** cacheID (String) - the ID of the cache to be stored"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** cacheKey - the key associated with the value to be looked up"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** maxEntryAge - the max age that the cache was originally created with"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Must return: the variable 'resp' as a Message for found content"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Must fail if the looked up value does not exist!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Replace the assertion below if desired with an assertion that supports key- value data structures"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** If this assertion is replaced also replace it at 'OTK Cache Store Customization'"/> </L7p:CommentAssertion> <L7p:CacheLookup> <L7p:CacheEntryKey stringValue="${cacheKey}"/> <L7p:CacheId stringValue="${actualCacheID}"/> <L7p:ContentTypeOverride stringValue=""/> <L7p:MaxEntryAgeSeconds stringValue="${maxEntryAge}"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:Target target="OTHER"/> </L7p:CacheLookup> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Persist 07854a0de3db8f5849ecb6be3985bf43 POLICY OTK Client Persist Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy persists a client. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_client_and_key}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2FuZF9rZXk="/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client and client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_client}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50"/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_client_key}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleQ=="/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="persist_type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set the correct persistence type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3d07e7a4-b419-4664-9360-0782ea930372"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="callback"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="callback"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="description"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="description"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="org"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="org"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="registered_by"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="registered_by"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="environment"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="environment"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="key_custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="key_custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="service_ids"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="service_ids"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="account_plan_mapping_ids"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="account_plan_mapping_ids"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="persist_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="persist_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2FsbGJhY2s9JHtjYWxsYmFja30mY2xpZW50X2lkZW50PSR7Y2xpZW50X2lkZW50fSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleX0mZGVzY3JpcHRpb249JHtkZXNjcmlwdGlvbn0mZW52aXJvbm1lbnQ9JHtlbnZpcm9ubWVudH0mZXhwaXJhdGlvbj0ke2V4cGlyYXRpb259Jm5hbWU9JHtjbGllbnRfbmFtZX0mb3JnPSR7b3JnfSZwZXJzaXN0X3R5cGU9JHtwZXJzaXN0X3R5cGV9JnJlZ2lzdGVyZWRfYnk9JHtyZWdpc3RlcmVkX2J5fSZzY29wZT0ke3Njb3BlfSZzZWNyZXQ9JHtjbGllbnRfc2VjcmV0fSZzdGF0dXM9JHtjbGllbnRfc3RhdHVzfSZ0eXBlPSR7dHlwZX0mY2xpZW50X2N1c3RvbT0ke2NsaWVudF9jdXN0b219JmNsaWVudF9rZXlfY3VzdG9tPSR7a2V5X2N1c3RvbX0mc2VydmljZV9pZHM9JHtzZXJ2aWNlX2lkc30mYWNjb3VudF9wbGFuX21hcHBpbmdfaWRzPSR7YWNjb3VudF9wbGFuX21hcHBpbmdfaWRzfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/store"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Export 07854a0de3db8f5849ecb6be3985bf46 POLICY OTK Client Export Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Builds the JSON returned when a user exports client information for SDK configuration"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjsgY2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpbmNvbWluZ194bWwubWFpbnBhcnR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="xmlClientInfo"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify that only one client_id gets exported"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="xmlClientInfo"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:keys/ns:values/ns:value)=1"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify that the requested client_key is included in the provided input message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="xmlClientInfo"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_key/text()=$client_key"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:LookupTrustedCertificate> <L7p:TrustedCertificateName stringValue="${oauth2_server_certificate}"/> <L7p:VariableName stringValue="certificate"/> </L7p:LookupTrustedCertificate> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Certificate lookup failed! attempted to look up ${oauth2_server_certificate}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTMy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="FAIL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Look up certificate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjZXJ0aWZpY2F0ZS5wZW19"/> <L7p:VariableToSet stringValue="certificate.pem"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="certificate.pem"/> <L7p:Regex stringValue="\n(.)"/> <L7p:RegexName stringValue="Normalize Certificate"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&quot;,&quot;$1"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="certificate.pem"/> <L7p:Regex stringValue="\r"/> <L7p:RegexName stringValue="Remove carriage return"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f0db12ba-404c-4674-a54e-571ed6d2f1bc"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Variable Configuration"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="incoming"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="incoming-resp"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="parent-element"/> <L7p:value stringValue="${parent_element}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="parent_element"/> <L7p:value stringValue="${parent_element}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="75c95854-92b4-4293-92e5-6d63b6d94812"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAS Variable Configuration"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Escape quotes"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Escape quotes for xml to json transformation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="xmlClientInfo"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:mag="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output indent="yes" method="xml"/> <xsl:template match="@*|node()"> <xsl:copy> <xsl:apply-templates select="@*|node()"/> </xsl:copy> </xsl:template> <xsl:template match="*[not(self::mag:client_custom)][not(self::mag:client_key_custom)]/text()"> <xsl:call-template name="replace"> <xsl:with-param name="pS" select="normalize-space(.)"/> </xsl:call-template> </xsl:template> <xsl:template name="replace"> <xsl:param name="pS"/> <xsl:param name="pTarget" select="'&quot;'"/> <xsl:param name="pReplacement" select="'\&quot;'"/> <xsl:if test="$pS"> <xsl:value-of select="substring-before(concat($pS,$pTarget), $pTarget)"/> <xsl:if test="contains($pS, $pTarget)"> <xsl:value-of select="$pReplacement"/> </xsl:if> <xsl:call-template name="replace"> <xsl:with-param name="pS" select="substring-after($pS, $pTarget)"/> <xsl:with-param name="pTarget" select="$pTarget"/> <xsl:with-param name="pReplacement" select="$pReplacement"/> </xsl:call-template> </xsl:if> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="xmlClientInfo"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:mag="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text"/> <xsl:param name="certificate.pem"/> <xsl:param name="oauth2_server_hostname"/> <xsl:param name="oauth2_server_port"/> <xsl:param name="oauth2_server_url_prefix"/> <xsl:param name="oauth2_auth_path"/> <xsl:param name="oauth2_token_path"/> <xsl:param name="oauth2_token_revocation_path"/> <xsl:param name="usersession_logout_path"/> <xsl:param name="userinfo_path"/> <xsl:param name="usersession_status_path"/> <xsl:param name="mas_json"/> <xsl:param name="mag_json"/> <xsl:param name="export_custom"/> <xsl:param name="expose_client_secret"/> <xsl:strip-space elements="*"/> <xsl:template match="text()"> <xsl:value-of select="normalize-space()"/> </xsl:template> <xsl:strip-space elements="certificate.pem"/> <xsl:template match="/mag:values"> { "server": { "hostname": "<xsl:value-of select="$oauth2_server_hostname"/>", "port": <xsl:value-of select="$oauth2_server_port"/>, "prefix": "<xsl:value-of select="$oauth2_server_url_prefix"/>", "server_certs": [ [ "<xsl:value-of select="normalize-space($certificate.pem)"/>" ] ] }, "oauth": { "client": { "organization": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:organization"/>", "description": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:description"/>", "client_name": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:name"/>", "client_type": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:type"/>", "registered_by": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:registered_by"/>", "client_custom": <xsl:value-of select="mag:clients/mag:values/mag:value/mag:client_custom"/>, "client_ids": [ <xsl:for-each select="mag:keys/mag:values/mag:value"> { "client_id": "<xsl:value-of select="mag:client_key"/>", "client_secret":"<xsl:if test="$expose_client_secret = 'true'"><xsl:value-of select="mag:secret"/></xsl:if>", "scope": "<xsl:value-of select="mag:scope"/>", "redirect_uri": "<xsl:value-of select="mag:callback"/>", "environment": "<xsl:value-of select="mag:environment"/>", "status": "<xsl:value-of select="mag:status"/>", "registered_by": "<xsl:value-of select="mag:created_by"/>", "service_ids": "<xsl:value-of select="mag:serviceids"/>", "account_plan_mapping_ids": "<xsl:value-of select="mag:accountplanmappingids"/>", "client_key_custom": <xsl:value-of select="mag:client_key_custom"/> }<xsl:if test="position() != last()">,</xsl:if> </xsl:for-each> ] }, "system_endpoints": { "authorization_endpoint_path": "<xsl:value-of select="$oauth2_auth_path"/>", "token_endpoint_path": "<xsl:value-of select="$oauth2_token_path"/>", "token_revocation_endpoint_path": "<xsl:value-of select="$oauth2_token_revocation_path"/>", "usersession_logout_endpoint_path": "<xsl:value-of select="$usersession_logout_path"/>", "usersession_status_endpoint_path": "<xsl:value-of select="$usersession_status_path"/>" }, "oauth_protected_endpoints": { "userinfo_endpoint_path": "<xsl:value-of select="$userinfo_path"/>" } }<xsl:if test="$mas_json">,<xsl:value-of select="normalize-space($mas_json)" xml:space="preserve"/></xsl:if> <xsl:if test="$mag_json">,<xsl:value-of select="normalize-space($mag_json)" xml:space="preserve"/></xsl:if>, "custom": { <xsl:value-of select="$export_custom"/> } }</xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4bWxDbGllbnRJbmZvLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwfQ=="/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Session Validation 07854a0de3db8f5849ecb6be3985bf04 POLICY OTK Session Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="32d58e80-53a2-49fd-935a-391b1755e9fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Lookup"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue="xml"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCountChildren"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="round(count(/ns:values/*))&lt;=0"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbGlkYXRpb24geG1sbnM9Imh0dHA6Ly9ucy5sN3RlY2guY29tLzIwMTIvMTEvb3RrLW92cCI+CiA8cmVzdWx0Pm5vbmU8L3Jlc3VsdD4KIDx0aGlyZF9wYXJ0eV9zc29fdG9rZW4+PC90aGlyZF9wYXJ0eV9zc29fdG9rZW4+CiA8dGhpcmRfcGFydHlfc3NvX3Rva2VuX3R5cGU+PC90aGlyZF9wYXJ0eV9zc29fdG9rZW5fdHlwZT4KPC92YWxpZGF0aW9uPg=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="fe106e73-03df-4ca6-93d0-381a6b5b6ccb"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Variable resp"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSharedSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:shared_secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSharedSecretType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:shared_secret_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAzp"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:azp/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSalt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:salt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e3e6f2b3-011a-437f-9ff0-ac911591ebfc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${xpathAzp.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="check_expiration"/> <L7p:value stringValue="${check_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${xpathResourceOwner.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${xpathSalt.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${xpathSharedSecret.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_alg"/> <L7p:value stringValue="${xpathSharedSecretType.result}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="jwt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="jwt"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="check_expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="check_expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMsg"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/idtoken?action=validate&amp;check_expiration=${check_expiration}&amp;id_token=${jwt}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMsg"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResult"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:result/text()='none'"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b361237e-4720-47aa-9448-cb07437e2b83"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Validate Third Party SSO Token"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Authorization Server/#OTK Authorization Server Website Template 07854a0de3db8f5849ecb6be3985bed0 POLICY #OTK Authorization Server Website Template Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK Authorization Website Template&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// DISABLE or REMOVE to activate branch"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${content}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== getting started: copy variable 'content' found at around line 29 of the target policy"/> </L7p:CommentAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// success, check that variable 'error.content' is empty and overwrite 'content'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// DISABLE or REMOVE to activate branch"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.msg}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== getting started: copy 'error.msg' found at around line 37 of the target policy"/> </L7p:CommentAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error, check that variable 'error.msg' is not empty and overwrite it"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// responses"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/cors/OTK CORS extension 07854a0de3db8f5849ecb6be3985bec0 POLICY OTK CORS extension Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"/> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Disable 07854a0de3db8f5849ecb6be3985bf34 POLICY OTK Token Disable Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy disables token issued to a given client_key (client_id)"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c62bf4a9-cb28-4cb8-820e-af45be202425"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Disable"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Disable"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="PUT"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/disable?client_key=${client_key}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="datasbase system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/#OTK Variable Configuration 07854a0de3db8f5849ecb6be3985bebe POLICY #OTK Variable Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK Variable Configuration&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Revocation 07854a0de3db8f5849ecb6be3985bf2e POLICY OTK Token Revocation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes a client. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb0f2fdc-9337-4201-af2b-dc3e5c11be0f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Revocation"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Nosql Revocation"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="rtoken"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="rtoken"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="DELETE"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/revoke?client_key=${client_key}&amp;resource_owner=${resource_owner}&amp;token=${token}&amp;rtoken=${rtoken}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/caching/OTK Cache Store Customization 07854a0de3db8f5849ecb6be3985bec5 POLICY OTK Cache Store Customization Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="***** OTK Cache Store Customization *****"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**********************************************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Available context variables:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** cacheID (String) - the ID of the cache to be stored"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** cacheKey - the key associated with the given value for the cache identified by cacheID"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** maxEntries - the maximum number of entries allowed in the cache. Adding more than this limit would force some existing items to be removed."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** maxEntryAge - the maximum length (seconds) to keep entries in the cache. "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** maxEntrySize - the maximum size in bytes allowable for the value"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Replace the assertion below if desired with an assertion that support key- value data structures"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** If this assertion is replaced also replace it at 'OTK Cache Look Up Customization'"/> </L7p:CommentAssertion> <L7p:CacheStorage> <L7p:CacheEntryKey stringValue="${cacheKey}"/> <L7p:CacheId stringValue="${actualCacheID}"/> <L7p:MaxEntries stringValue="${maxEntries}"/> <L7p:MaxEntryAgeSeconds stringValue="${maxEntryAge}"/> <L7p:MaxEntrySizeBytes stringValue="${maxEntrySize}"/> <L7p:OtherTargetMessageVariable stringValue="msg"/> <L7p:Target target="OTHER"/> </L7p:CacheStorage> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/caching/OTK Caching Customization 07854a0de3db8f5849ecb6be3985bec7 POLICY OTK Caching Customization Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="**********************************************"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy gets executed whenever an OTK Cache * assertion is used."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be modified in order to set default configuration values for caches that are introduced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="For each cache follow the example shown below:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- Add an 'All assertions must evaluate to true' assertion"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- Check for the cacheID (name) and set values appropriately"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="***** OTK Cache Look Up Customization *****"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Customizable hook for cache lookup. This is used by OTK Cache Handler as a policy fragment"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Available context variables:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** cacheID (String) - the ID of the cache to be stored"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** cacheKey - the key associated with the value to be looked up"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** maxEntryAge - the max age in seconds for entries into this cache"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="***** OTK Cache Store Customization *****"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Customizable hook for cache store. This is used by OTK Cache Handler as a policy fragment, and is called for REMOVE, STORE and FLUSH operations"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Available context variables:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** cacheID (String) - the ID of the cache to be stored"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** cacheKey - the key associated with the given value for the cache identified by cacheID"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** maxEntries - the maximum number of entries allowed in the cache. Adding more than this limit would force some existing items to be removed."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** maxEntryAge - the max age in seconds for entries into this cache"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** maxEntrySize - the maximum size in bytes allowable for the value"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**********************************************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** NOTE: only one maxEntryAge, maxEntrySize and maxEntries value is supported per cacheID "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Changing any of these values after the cache has been created will result in the cache configuration being updated."/> </L7p:CommentAssertion> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="**********************************************"/> </L7p:CommentAssertion> <wsp:OneOrMore L7p:Enabled="false" wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheID}"/> <L7p:Expression2 stringValue="myCache"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="myCache"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntryAge}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure the new lifetime"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTIwMA=="/> <L7p:VariableToSet stringValue="maxEntryAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="maxEntryAge"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if an entryAge has been given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure number of valid entries"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTAw"/> <L7p:VariableToSet stringValue="maxEntries"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure entrySize for cache entries"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTAwMDA="/> <L7p:VariableToSet stringValue="maxEntrySize"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="myCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// sample configuration where a given maxEntryAge is accepted but maxEntrySize, maxEntries given in the Cache UI are being ignored"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheID}"/> <L7p:Expression2 stringValue="anotherCache"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="anotherCache"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure the new lifetime"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTIwMA=="/> <L7p:VariableToSet stringValue="maxEntryAge"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure number of valid entries"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTAw"/> <L7p:VariableToSet stringValue="maxEntries"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure entrySize for cache entries"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTAwMDA="/> <L7p:VariableToSet stringValue="maxEntrySize"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="anotherCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// sample configuration where maxEntryAge, maxEntrySize, maxEntries given in the Cache UI are being ignored"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="example"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure default values per cacheID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Handler 07854a0de3db8f5849ecb6be3985bf4b POLICY OTK Cache Handler Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder are named: "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === OTK Caching Customization, OTK Cache Look Up Customization, OTK Cache Store Customization"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="******** OTK Cache Handler *******"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="******** DO NOT CALL or use this policy directly. It is included as a Policy Fragment in the following policies:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="******** 1. OTK Cache Look Up"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="******** 2. OTK Cache Store"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="******** 3. OTK Cache Remove"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="******** 4. OTK Cache Flush"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="******** Please use one of the above policies instead"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntryAge}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure default lifetime"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="maxEntryAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="maxEntryAge"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if an maxEntryAge has been given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntrySize}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure default size in byte"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTAwMDA="/> <L7p:VariableToSet stringValue="maxEntrySize"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="maxEntrySize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if an maxEntrySize has been given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntries}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="new"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// configure default number of entries"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTAwMDA="/> <L7p:VariableToSet stringValue="maxEntries"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="maxEntries"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if an maxEntries has been given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Include> <L7p:PolicyGuid stringValue="5d784354-3317-43a9-815f-6a2def4ff712"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjYWNoZUlEfSR7bWF4RW50cnlBZ2V9"/> <L7p:VariableToSet stringValue="actualCacheID"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cache.op}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="GET"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="GET"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="063c9cb0-439d-40c0-bc5b-f91635e27201"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="GET"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cache.op}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="GET"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="GET"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cache.op}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="FLUSH"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="maxEntryAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== SET"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// maxEntryAge to 0 for FLUSH operation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="bc23bf0e-5b66-49d0-bfa1-7f6f5701b392"/> </L7p:Include> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="NTAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OTHER"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// STORE, REMOVE, FLUSH"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="operations"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Remove 07854a0de3db8f5849ecb6be3985bf4e POLICY OTK Cache Remove Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="***** OTK Cache Remove *********************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Removes the value from the cache identified by cacheID and maxEntryAge by key: cacheKey. The cache value is replaced with an empty value"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**********************************************"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheID}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntryAge}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntries}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntrySize}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="valid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for required fields"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="UkVNT1ZF"/> <L7p:VariableToSet stringValue="cache.op"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== SET"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// context variables for OTK Cache Handler"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Include> <L7p:PolicyGuid stringValue="c7ffb033-cf81-44e1-8e89-0c25b1963b60"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/token/OTK Manager Token Disable 07854a0de3db8f5849ecb6be3985bf0e POLICY OTK Manager Token Disable Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy disables token issued to a given client_key (client_id)"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="242ddfd2-cf9e-448d-aadb-f7b6b67cc868"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token DB Disable"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token NoSQL Disable"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="PUT"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/disable?client_key=${client_key}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="datasbase system"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid token_endpoint_auth_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985beb4 POLICY #OTK openid token_endpoint_auth_signing_alg_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid token_endpoint_auth_signing_alg_values_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Specify a comma separated list of values with each value within double-quotes"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Example: &quot;value01&quot;, &quot;value02&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="NOTE: OTK currently does not support these methods"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/token/OTK Manager Token Update (token status) 07854a0de3db8f5849ecb6be3985bf0f POLICY OTK Manager Token Update (token status) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="verifier"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0dfff5df-a150-4117-bde2-1c1afe088e3c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="PUT"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/update?resource_owner=${resource_owner}&amp;token=${token}&amp;status=${token_status}&amp;verifier=${verifier}&amp;expiration=${expiration}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid display_values_supported 07854a0de3db8f5849ecb6be3985beb7 POLICY #OTK openid display_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid display_values_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Add OpenID Supported Display Values"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Specify a comma separated list of values with each value within double-quotes"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Example: &quot;value01&quot;, &quot;value02&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid display_values_supported 07854a0de3db8f5849ecb6be3985bee7 POLICY OTK openid display_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="OpenID Supported Display Values"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Overwrite within: #OTK openid display_values_supported"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="InBhZ2Ui"/> <L7p:VariableToSet stringValue="display_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="3472e3ff-8e84-4808-ad6a-a02b7ee212bd"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${display_values_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="display_values_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Authorization Code Validation 07854a0de3db8f5849ecb6be3985bf0a POLICY OTK Authorization Code Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy validated and deletes authorization_code's that were issued by the ssg"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0be824ec-c764-4371-a228-03cdf9b0e3ad"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (temporary)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${code}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="verifier"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCallback"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:callback"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:expiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKey"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTEz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="code was not found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Lookup"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Lookup the code values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${xpathClientKey.result}"/> <L7p:Expression2 stringValue="${client_id}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${client_id}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given client_id is not expected: Given: '${client_id}', expected: '${xpathClientKey.result}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE3"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="code was not found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="validate that it's the original client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check that authorization code is not expired"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${xpathExpiration.result}"/> <L7p:Expression2 stringValue="${gateway.time.seconds}"/> <L7p:Operator operator="GE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="GE"/> <L7p:RightValue stringValue="${gateway.time.seconds}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given code has expired"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTEz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="code was not found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="expiration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="redirect_uri parameter must match redirect_uri parameter used in authorization request."/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathCallback.result}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue="${xpathCallback.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${xpathCallback.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="match"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathCallback.result}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="none used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given redirect_uri does not match the initial code request one. Initial: '${xpathCallback.result}', given: '${redirect_uri}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE0"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="code was not found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="redirect_uri"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="validate redirect_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="========== Delete the authorization code. The authorization code should be consumed at most once. =========="/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cf1c08ae-8f8e-48db-b01b-89eb891615a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="refresh_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="temp_token"/> <L7p:value stringValue="${code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNjb3BlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aE93bmVyLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEN1c3RvbS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="session_output"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/cors/#OTK CORS 07854a0de3db8f5849ecb6be3985bebf POLICY #OTK CORS Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK CORS&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== To enable custom CORS logic, set 'useDefaultCors' to false ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== And implement custom handling in OTK CORS extension"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="useDefaultCors"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK CORS 07854a0de3db8f5849ecb6be3985bee8 POLICY OTK CORS Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Configured the usage for CORS with OTK"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="By default OTK uses this assertion at protected API's"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This is mainly relevant for public clients (such as JavaScript clients)"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Variable 'custom' is available but not used by default"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="By default OTK sets it to the URL PATH and QUERY component of the API receiving the request"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// will be overwritten if an error occurs"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isPreflight"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isCors"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="2de17fe4-7702-4dd6-9fd8-8168c783dd95"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${useDefaultCors}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireCORS}"/> <L7p:Expression2 stringValue="optional"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="optional"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireCORS}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// 'requireCORS' == optional or false"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CORS> <L7p:AcceptedMethods stringListValue="included"> <L7p:item stringValue="GET"/> <L7p:item stringValue="PUT"/> <L7p:item stringValue="POST"/> <L7p:item stringValue="DELETE"/> <L7p:item stringValue="OPTIONS"/> </L7p:AcceptedMethods> <L7p:RequireCors booleanValue="false"/> </L7p:CORS> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb3JzLmlzUHJlZmxpZ2h0fQ=="/> <L7p:VariableToSet stringValue="isPreflight"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb3JzLmlzQ09SU30="/> <L7p:VariableToSet stringValue="isCors"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireCORS}"/> <L7p:Expression2 stringValue="optional"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="optional"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireCORS}"/> <L7p:Expression2 stringValue="ignore"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="ignore"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// make sure we always have a value"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aWdub3Jl"/> <L7p:VariableToSet stringValue="requireCORS"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ignore, not supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireCORS}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CORS> <L7p:AcceptedMethods stringListValue="included"> <L7p:item stringValue="GET"/> <L7p:item stringValue="PUT"/> <L7p:item stringValue="POST"/> <L7p:item stringValue="DELETE"/> <L7p:item stringValue="OPTIONS"/> </L7p:AcceptedMethods> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// CORS required"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:CORS> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb3JzLmlzUHJlZmxpZ2h0fQ=="/> <L7p:VariableToSet stringValue="isPreflight"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb3JzLmlzQ09SU30="/> <L7p:VariableToSet stringValue="isCors"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// required"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="CORS is required but this request did not match. 'requireCORS=${requireCORS}, isPreflight=${cors.isPreflight}, isCORS=${cors.isCORS}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTM0"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if CORS is required or optional or forbidden"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==DEFAULT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${useDefaultCors}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="e1c18409-70e7-413d-948c-b12125310d63"/> </L7p:Include> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/#OTK openid discovery_endpoint DEBUG 07854a0de3db8f5849ecb6be3985bea9 POLICY #OTK openid discovery_endpoint DEBUG Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid discovery_endpoint DEBUG&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid discovery_endpoint DEBUG 07854a0de3db8f5849ecb6be3985bedc POLICY OTK openid discovery_endpoint DEBUG Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: OTK openid discovery_endpoint DEBUG"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="debugOnSuccess"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="debugOnError"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="246611d9-7b56-4154-9efa-554dd89c4784"/> </L7p:Include> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="debugOnError"/> <L7p:item stringValue="debugOnSuccess"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/authentication/#OTK SiteMinder Check Protected Resource 07854a0de3db8f5849ecb6be3985beca POLICY #OTK SiteMinder Check Protected Resource Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Policy: &quot;OTK User Authentication Extension&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Policy: &quot;MAG Session Validation - Third Party SSO Token&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== If using SiteMinder, set your configuration below ==="/> </L7p:CommentAssertion> <L7p:SiteMinderCheckProtected> <L7p:Action stringValue="GET"/> <L7p:AgentId stringValue="siteminder-instance"/> <L7p:Prefix stringValue="siteminder"/> <L7p:ProtectedResource stringValue="/mode"/> <L7p:SmAgentName stringValue="agent"/> </L7p:SiteMinderCheckProtected> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/authentication/OTK User Authentication Extension 07854a0de3db8f5849ecb6be3985becd POLICY OTK User Authentication Extension Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target Policy: &quot;OTK User Authentication&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== Change the assertions below to select a different Identity Provider, if needed"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== Output: ${current.username}, ${salt}, ${third_party_sso_token} and ${third_party_sso_token_type}"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=="/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// modify this check if this policy branch should also be used for other validations than just by username"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${username}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:XpathCredentialSource> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// creating an authorization context"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:PasswordExpression xpathExpressionValue="included"> <L7p:Expression stringValue="$password"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:PasswordExpression> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="$username"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:XpathCredentialSource> <L7p:CommentAssertion> <L7p:Comment stringValue="Implement a RateLimit assertion here if rate limiting is required for authentication"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Enable/ Disable whatever branch is required"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:Authentication> <L7p:IdentityProviderName stringValue="Internal Identity Provider"/> </L7p:Authentication> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default: use the given username"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHt1c2VybmFtZX0="/> <L7p:VariableToSet stringValue="current.username"/> </L7p:SetVariable> <L7p:IdentityAttributes> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Lookup the internal ID for creating 'salt'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:IdentityProviderOid goidValue="0000000000000000fffffffffffffffe"/> <L7p:LookupAttributes identityMappingArray="included"> <L7p:item internalAttributeMapping="included"> <L7p:AttributeConfig attributeConfig="included"> <L7p:Header header="included"> <L7p:Name stringValue="Unique ID"/> <L7p:Type variableDataType="string"/> <L7p:UsersOrGroups usersOrGroups="BOTH"/> <L7p:VariableName stringValue="id"/> </L7p:Header> <L7p:VariableName stringValue="id"/> </L7p:AttributeConfig> <L7p:ProviderOid goidValue="0000000000000000fffffffffffffffe"/> </L7p:item> </L7p:LookupAttributes> <L7p:VariablePrefix stringValue="given_username"/> </L7p:IdentityAttributes> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnaXZlbl91c2VybmFtZS5pZH0="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ddd9d3b1-ca24-4be7-8ad1-7f073b13ad6e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Attribute Look Up"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// get the user id to be used for 'salt' which is used for 'sub' when generating an id_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${provider}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_username"/> <L7p:value stringValue="${current.username}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IDP"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Configure your IDP"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All L7p:Enabled="false" wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="326e038f-2f83-4d87-a3a0-075c96e7ad8c"/> </L7p:Include> <L7p:SiteMinderAuthenticate> <L7p:CookieSourceVar stringValue=""/> <L7p:NamedUser stringValue="${creds}"/> <L7p:Prefix stringValue="siteminder"/> </L7p:SiteMinderAuthenticate> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzaXRlbWluZGVyLnNtY29udGV4dC5hdHRyaWJ1dGVzLkFUVFJfVVNFUk5BTUV9"/> <L7p:VariableToSet stringValue="current.username"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzaXRlbWluZGVyLnNtY29udGV4dC5hdHRyaWJ1dGVzLkFUVFJfVVNFUlVOSVZFUlNBTElEfQ=="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Other available attributes:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="ATTR_USERDN, ATTR_USERUNIVERSALID, ATTR_AUTH_DIR_OID, ATTR_AUTH_DIR_NAME, ATTR_AUTH_DIR_SERVER, ATTR_AUTH_DIR_NAMESPACE, ATTR_USERNAME"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="09be8009-c273-4608-8f4d-5ac4f31eb7eb"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Configure Context Variables For Third Party SSO"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SiteMinder"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// pre-configured for use with SiteMinder"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:ExportVariables> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Update the exports if adding outputs"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="current.user.attributes"/> <L7p:item stringValue="current.username"/> <L7p:item stringValue="salt"/> <L7p:item stringValue="third_party_sso_token"/> <L7p:item stringValue="third_party_sso_token_type"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid claim_types_supported 07854a0de3db8f5849ecb6be3985beb0 POLICY #OTK openid claim_types_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid claim_types_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Add OpenID Supported Claim Types"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Specify a comma separated list of values with each value within double-quotes"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Example: &quot;value01&quot;, &quot;value02&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Client JWT Values 07854a0de3db8f5849ecb6be3985befb POLICY OTK Client JWT Values Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: OTK JWT Extraction"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Extract and export values contained inside a JWT"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// to allow json value evaluation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ewoJImhlYWRlciI6ICR7and0X2hlYWRlcn0sCgkicGF5bG9hZCI6ICR7and0X3BheWxvYWR9Cn0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="jwt_json"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract hashing algorithm "/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="header.alg"/> <L7p:OtherTargetMessageVariable stringValue="jwt_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwt_alg"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract Issuer (&quot;iss&quot;) from payload"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="payload.iss"/> <L7p:OtherTargetMessageVariable stringValue="jwt_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwt_iss"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract Subject (&quot;sub&quot;) from payload"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="payload.sub"/> <L7p:OtherTargetMessageVariable stringValue="jwt_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwt_sub"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract Expiration (&quot;exp&quot;) from payload"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="payload.exp"/> <L7p:OtherTargetMessageVariable stringValue="jwt_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwt_exp"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract JWT ID (&quot;jti&quot;) from payload"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="payload.jti"/> <L7p:OtherTargetMessageVariable stringValue="jwt_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwt_jti"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract Audience (&quot;aud&quot;) from payload"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="payload.aud"/> <L7p:OtherTargetMessageVariable stringValue="jwt_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwt_aud"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3RfYWxnLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="jwt_alg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3RfaXNzLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="iss"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3Rfc3ViLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3RfZXhwLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3RfanRpLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="jti"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3RfYXVkLnJlc3VsdHN9"/> <L7p:VariableToSet stringValue="aud"/> </L7p:SetVariable> <L7p:Split> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// can be an array of values"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="aud"/> <L7p:OutputVariable stringValue="aud"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="extract"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// invalid jwt"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTIx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/grant_types/#OTK Configured Grant Types 07854a0de3db8f5849ecb6be3985bebd POLICY #OTK Configured Grant Types Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK Configured Grant Types&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== To add new custom grant types, set the variable &quot;grant_type_custom&quot; to a ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== space separated list (for multiple grant types) ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== Enable the two lines below to enable custom grant types"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== Implement custom grant type in OTK grant_type=CUSTOM"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z3JhbnRUeXBlQ3VzdG9tMSBncmFudFR5cGVDdXN0b20y"/> <L7p:Enabled booleanValue="false"/> <L7p:VariableToSet stringValue="grant_type_custom"/> </L7p:SetVariable> <L7p:ExportVariables> <L7p:Enabled booleanValue="false"/> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="grant_type_custom"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=ID_TOKEN 07854a0de3db8f5849ecb6be3985bf25 POLICY OTK response_type=ID_TOKEN Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation implementation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ea0db7be-ce05-4daa-a5fb-ac1ea3e74d49"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Generation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${acr}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${authTime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="id_token_signed_response_alg"/> <L7p:value stringValue="${id_token_signed_response_alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${xpathSecret.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="subject_type"/> <L7p:value stringValue="${subject_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="db7a90bf-e85d-42bd-93db-a2950dbc2a51"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="iss"/> <L7p:value stringValue="${iss}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${shared_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_type"/> <L7p:value stringValue="${alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue="${sub}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="generated_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="generated_sso_token_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbGlkYXRpb24geG1sbnM9Imh0dHA6Ly9ucy5sN3RlY2guY29tLzIwMTIvMTEvb3RrLW92cCI+CiA8cmVzdWx0PnZhbGlkPC9yZXN1bHQ+CiA8and0PiR7and0fTwvand0PgogPGlkX3Rva2VuX3R5cGU+JHtnZW5lcmF0ZWRfc3NvX3Rva2VuX3R5cGV9PC9pZF90b2tlbl90eXBlPgo8L3ZhbGlkYXRpb24+"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImlkX3Rva2VuIgogICAgIHZhbHVlPSIke2p3dH0iLz4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImlkX3Rva2VuX3R5cGUiCiAgICAgdmFsdWU9IiR7Z2VuZXJhdGVkX3Nzb190b2tlbl90eXBlfSIvPg=="/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2lkX3Rva2VuPSR7and0fSZpZF90b2tlbl90eXBlPSR7Z2VuZXJhdGVkX3Nzb190b2tlbl90eXBlfQ=="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set responses"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_keyEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_ownerEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="azp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="azpEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="nonce"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonceEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="salt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="saltEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="third_party_sso_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="third_party_sso_tokenEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="third_party_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="third_party_sso_token_typeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="acr"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="acrEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authTime"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authTimeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="customEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="YWN0aW9uPWNyZWF0ZSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleUVuY29kZWR9JnJlc291cmNlX293bmVyPSR7cmVzb3VyY2Vfb3duZXJFbmNvZGVkfSZhenA9JHthenBFbmNvZGVkfSZub25jZT0ke25vbmNlRW5jb2RlZH0mc2FsdD0ke3NhbHRFbmNvZGVkfSZ0aGlyZF9wYXJ0eV9zc29fdG9rZW49JHt0aGlyZF9wYXJ0eV9zc29fdG9rZW5FbmNvZGVkfSZ0aGlyZF9wYXJ0eV9zc29fdG9rZW5fdHlwZT0ke3RoaXJkX3BhcnR5X3Nzb190b2tlbl90eXBlRW5jb2RlZH0mYWNyPSR7YWNyRW5jb2RlZH0mYXV0aF90aW1lPSR7YXV0aFRpbWVFbmNvZGVkfSZjdXN0b209JHtjdXN0b219"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="idtokenmessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/idtoken"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="idtokenmessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation[ns:result='valid']/ns:jwt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathIdTokenType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation[ns:result='valid']/ns:id_token_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImlkX3Rva2VuIgogICAgIHZhbHVlPSIke3hwYXRoSnd0LnJlc3VsdH0iLz4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImlkX3Rva2VuX3R5cGUiCiAgICAgdmFsdWU9IiR7eHBhdGhJZFRva2VuVHlwZS5yZXN1bHR9Ii8+"/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2lkX3Rva2VuPSR7eHBhdGhKd3QucmVzdWx0fSZpZF90b2tlbl90eXBlPSR7eHBhdGhJZFRva2VuVHlwZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set responses"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Generate ID_Token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/oauth manager/#oauth manager website brand logo 07854a0de3db8f5849ecb6be3985bec2 POLICY #oauth manager website brand logo Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;oauth manager website brand logo&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager website brand logo 07854a0de3db8f5849ecb6be3985bef3 POLICY oauth manager website brand logo Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This represents the only instance of the logo to be included on all pages"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The span can be changed to any other tag (ie an anchor) but the class must remain"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="brandLogo"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="443d757f-f2d1-4868-98d4-516fcfb8ff2e"/> </L7p:Include> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="brandLogo"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=CODE ID_TOKEN 07854a0de3db8f5849ecb6be3985bf27 POLICY OTK response_type=CODE ID_TOKEN Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cidm"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="openIDConnectCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Only do something if openid is a granted SCOPE value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="================="/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code will be set if session store failed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="115 indicates that 'openid' was not part of SCOPE which is fine"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="115"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="115"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="either empty or 115 which is fine"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="91b9aa9b-fbe4-4944-8629-04c5695d122f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (temporary token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="${redirect_uri}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${genExpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Generate Code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation implementation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="32d58e80-53a2-49fd-935a-391b1755e9fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Lookup"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:jwt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEp3dC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:DecodeJsonWebToken> <L7p:SourcePayload stringValue="${jwt}"/> <L7p:TargetVariablePrefix stringValue="decoded"/> <L7p:ValidationType stringValue="None"/> </L7p:DecodeJsonWebToken> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="nonce"/> <L7p:OtherTargetMessageVariable stringValue="decoded"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="existingNonce"/> </L7p:EvaluateJsonPathExpression> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// existing authorization should still regen id_token if nonce changed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${existingNonce}"/> <L7p:Expression2 stringValue="${nonce}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="${nonce}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="57d4baf4-144b-4ab0-829f-4276bd4517b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Configured Grant Types"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtncmFudF90eXBlX2p3dH0="/> <L7p:VariableToSet stringValue="generated_sso_token_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ea0db7be-ce05-4daa-a5fb-ac1ea3e74d49"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Generation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${acr}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${authTime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="id_token_signed_response_alg"/> <L7p:value stringValue="${id_token_signed_response_alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${xpathSecret.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="subject_type"/> <L7p:value stringValue="${subject_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="db7a90bf-e85d-42bd-93db-a2950dbc2a51"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="iss"/> <L7p:value stringValue="${iss}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${shared_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_type"/> <L7p:value stringValue="${alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue="${sub}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create new one"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// find existing id_token or create a new one"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="generated_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="generated_sso_token_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbGlkYXRpb24geG1sbnM9Imh0dHA6Ly9ucy5sN3RlY2guY29tLzIwMTIvMTEvb3RrLW92cCI+CiA8cmVzdWx0PnZhbGlkPC9yZXN1bHQ+CiA8and0PiR7and0fTwvand0PgogPGlkX3Rva2VuX3R5cGU+JHtnZW5lcmF0ZWRfc3NvX3Rva2VuX3R5cGV9PC9pZF90b2tlbl90eXBlPgo8L3ZhbGlkYXRpb24+"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImNvZGUiCiAgICAgdmFsdWU9IiR7Z2VuVG9rZW59Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJpZF90b2tlbiIKICAgICB2YWx1ZT0iJHtqd3R9Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJpZF90b2tlbl90eXBlIgogICAgIHZhbHVlPSIke2dlbmVyYXRlZF9zc29fdG9rZW5fdHlwZX0iLz4="/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2NvZGU9JHtnZW5Ub2tlbn0maWRfdG9rZW49JHtqd3R9JmlkX3Rva2VuX3R5cGU9JHtnZW5lcmF0ZWRfc3NvX3Rva2VuX3R5cGV9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_keyEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_ownerEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="azp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="azpEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="nonce"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonceEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="salt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="saltEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="third_party_sso_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="third_party_sso_tokenEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="third_party_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="third_party_sso_token_typeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="acr"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="acrEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authTime"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authTimeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="customEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="genToken"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="codeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="YWN0aW9uPWNyZWF0ZSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleUVuY29kZWR9JnJlc291cmNlX293bmVyPSR7cmVzb3VyY2Vfb3duZXJFbmNvZGVkfSZhenA9JHthenBFbmNvZGVkfSZub25jZT0ke25vbmNlRW5jb2RlZH0mc2FsdD0ke3NhbHRFbmNvZGVkfSZ0aGlyZF9wYXJ0eV9zc29fdG9rZW49JHt0aGlyZF9wYXJ0eV9zc29fdG9rZW5FbmNvZGVkfSZ0aGlyZF9wYXJ0eV9zc29fdG9rZW5fdHlwZT0ke3RoaXJkX3BhcnR5X3Nzb190b2tlbl90eXBlRW5jb2RlZH0mYWNyPSR7YWNyRW5jb2RlZH0mYXV0aF90aW1lPSR7YXV0aFRpbWVFbmNvZGVkfSZjdXN0b209JHtjdXN0b21FbmNvZGVkfSZjb2RlPSR7Y29kZUVuY29kZWR9"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="idtokenmessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/idtoken"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="idtokenmessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation[ns:result='valid']/ns:jwt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathIdTokenType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation[ns:result='valid']/ns:id_token_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImNvZGUiCiAgICAgdmFsdWU9IiR7Z2VuVG9rZW59Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJpZF90b2tlbiIKICAgICB2YWx1ZT0iJHt4cGF0aEp3dC5yZXN1bHR9Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJpZF90b2tlbl90eXBlIgogICAgIHZhbHVlPSIke3hwYXRoSWRUb2tlblR5cGUucmVzdWx0fSIvPg=="/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2NvZGU9JHtnZW5Ub2tlbn0maWRfdG9rZW49JHt4cGF0aEp3dC5yZXN1bHR9JmlkX3Rva2VuX3R5cGU9JHt4cGF0aElkVG9rZW5UeXBlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=token id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Generate ID_Token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/id_token/#OTK id_token configuration 07854a0de3db8f5849ecb6be3985bea2 POLICY #OTK id_token configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK id_token configuration&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK id_token configuration 07854a0de3db8f5849ecb6be3985beec POLICY OTK id_token configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Configure these values which are used when id_tokens (JWT) are generated"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*** iss, issuer identifier"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*** id_token_signing_algorithm, the algorithm to be used to sign the id_token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*** valid id_token_signing_algorithm values: HS256, RS256 or CUSTOM"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*** if using CUSTOM, another variable must be set to specify which algorithm is to be used."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*** valid subject_type: pairwise, public"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Configure this value to a servername that identifies the environment"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="=="/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Issuer Identifier (including protocol and port)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX06JHtnYXRld2F5Lm90ay5wb3J0fQ=="/> <L7p:VariableToSet stringValue="iss"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="=="/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// valid values: HS256, RS256 or CUSTOM"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="SFMyNTY="/> <L7p:VariableToSet stringValue="id_token_signing_algorithm"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="=="/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// valid values: pairwise, public"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="cGFpcndpc2U="/> <L7p:VariableToSet stringValue="subject_type"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="856b256e-6622-4995-a272-bd2b9376d70d"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid response_modes_supported 07854a0de3db8f5849ecb6be3985beb1 POLICY #OTK openid response_modes_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid response_modes_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Flush 07854a0de3db8f5849ecb6be3985bf4c POLICY OTK Cache Flush Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="***** OTK Cache Flush ***********************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Flushes the entire contents of a cache identified by cacheID and maxEntryAge"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**********************************************"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheID}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntryAge}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="valid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for required fields"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="RkxVU0g="/> <L7p:VariableToSet stringValue="cache.op"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Zmx1c2g="/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MQ=="/> <L7p:VariableToSet stringValue="maxEntries"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAwMDA="/> <L7p:VariableToSet stringValue="maxEntrySize"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== SET"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// context variables for OTK Cache Handler, do not override maxEntryAge here (it is done later in OTK Cache Handler"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Include> <L7p:PolicyGuid stringValue="c7ffb033-cf81-44e1-8e89-0c25b1963b60"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Client Validation 07854a0de3db8f5849ecb6be3985bf01 POLICY OTK Client Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="IMPORTANT:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment expects the result of the clientstore that was generated using the operation 'getAll'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfaW5mby5tYWlucGFydH0="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="client_info"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD11dGYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// select the client type. If 'confidential' a client secret MUST be provided"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="xpathClientType"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// select the client secret. For 'public' clients the secret has to be looked up"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="xpathClientSecret"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// select client_key_custom"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="xpathClientAuthMethod"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_key_custom/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudFR5cGUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="registered_client_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudFNlY3JldC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="registered_client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudEF1dGhNZXRob2QucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="registered_client_key_custom"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create json to extract values"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZWdpc3RlcmVkX2NsaWVudF9rZXlfY3VzdG9tfQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="client_key_custom_json"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpressionV2> <L7p:Expression stringValue="openid_registration.response.token_endpoint_auth_method"/> <L7p:OtherTargetMessageVariable stringValue="client_key_custom_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="auth_method"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoX21ldGhvZC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_endpoint_auth_method"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract auth_method if given"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: invalid client_id or invalid registration: client_id: '${client_id}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// unknown client_id or incomplete registration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Look up"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Look up type and secret"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKey"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_key/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify the key being used is not a master key."/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue="${xpathClientKey.result}"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="${xpathClientKey.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: invalid client_key, given key: '${xpathClientKey.result}', secret: '${client_secret}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="It cannot be a master-key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registered_client_type}"/> <L7p:Expression2 stringValue="public"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="public"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_assertion_type}"/> <L7p:Expression2 stringValue="urn:ietf:params:oauth:client-assertion-type:jwt-bearer"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="urn:ietf:params:oauth:client-assertion-type:jwt-bearer"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:secret=$client_secret"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Expression2 stringValue="client_secret_basic"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_secret_basic"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Expression2 stringValue="client_secret_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_secret_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_method}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: given client_secret is wrong or a confidential client did not provide a secret, given secret: '${client_secret}', client_type: '${registered_client_type}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="secret"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathStatus"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:status/text()=$client_status"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: given status is not as expected, given status: '${client_status}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTI2"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:expiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathExpiration.result}"/> <L7p:Expression2 stringValue="0"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${now.seconds}"/> <L7p:Expression2 stringValue="${xpathExpiration.result}"/> <L7p:Operator operator="LE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LE"/> <L7p:RightValue stringValue="${xpathExpiration.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: the client_id has expired! Expiration date: '${xpathExpiration.result}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTI3"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check expiration date"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="expiration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientName"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:name/text()=$client_name"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: given client_name is not as expected, given client_name: '${client_name}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTI4"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client name"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathEnvironment"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:environment/text()=$environment"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: given environment is not as expected, given environment: '${environment}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTI5"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="environment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${xpathScope.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="${scope}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: given SCOPE is not as expected, given SCOPE: '${scope}', granted SCOPE: ${xpathScope.result}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE1"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="scope"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_type}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registered_client_type}"/> <L7p:Expression2 stringValue="${client_type}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${client_type}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: given client_type is not as expected, given client_type: '${client_type}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTMw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWdpc3RlcmVkX2NsaWVudF9zZWNyZXR9"/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Set secret"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set the secret to be exported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_assertion_type}"/> <L7p:Expression2 stringValue="urn:ietf:params:oauth:client-assertion-type:jwt-bearer"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="urn:ietf:params:oauth:client-assertion-type:jwt-bearer"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="95cbe0f8-be1f-4b57-bb4d-41be17e84c05"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client JWT Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_assertion"/> <L7p:value stringValue="${client_assertion}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key_custom"/> <L7p:value stringValue="${registered_client_key_custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// invalid client"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzA2"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: Invalid client jwt for client authentication"/> <L7p:Level stringValue="FINE"/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client JWT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Validate client jwt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValidationValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${xpathClientKey.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAcceptableAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resp.mainpart}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// find values in cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientType"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:type"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathName"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:name"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClient"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:client_ident"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientCustom"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:client_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:scope"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathEnvironment"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:environment"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCreatedBy"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:created_by"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKeyCustom"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_key_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathServiceIds"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:serviceids"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAccountPlanMappingIds"/> <L7p:XmlMsgSrc stringValue="client_info"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:accountplanmappingids"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// [allClientValidationValuesCache]"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="allClientValidationValuesCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${xpathClientKey.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="xpath"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="build response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Update (setting verifier) 07854a0de3db8f5849ecb6be3985bf35 POLICY OTK Token Update (setting verifier) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="42b930fc-438f-4aaa-a702-7c45efe216fb"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="verifier"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="verifier"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="PUT"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/update?resource_owner=${resource_owner}&amp;token=${token}&amp;status=${token_status}&amp;verifier=${verifier}&amp;expiration=${expiration}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Storage (oauth_token) 07854a0de3db8f5849ecb6be3985bf2f POLICY OTK Token Storage (oauth_token) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2F1dGgxdG9rZW4="/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="custom"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="517aebd3-6ce1-4e8e-bce1-fb7d065c34e1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="temp_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="temp_token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleT0ke2NsaWVudF9rZXl9JmNsaWVudD0ke2NsaWVudH0mZXhwaXJhdGlvbj0ke2V4cGlyYXRpb259JnNlY3JldD0ke3Rva2VuX3NlY3JldH0mc3RhdHVzPSR7dG9rZW5fc3RhdHVzfSZ0ZW1wX3Rva2VuPSR7dGVtcF90b2tlbn0mdG9rZW49JHt0b2tlbn0="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/store"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid grant_types_supported 07854a0de3db8f5849ecb6be3985beae POLICY #OTK openid grant_types_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid grant_types_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Add OpenID Supported Grant Types"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Specify a comma separated list of values with each value within double-quotes"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Example: &quot;value01&quot;, &quot;value02&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="NOTE: The values in this configuration should match the values configured in 'OTK Configured Grant Types' and its #policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/#OTK openid claims_supported 07854a0de3db8f5849ecb6be3985bea8 POLICY #OTK openid claims_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid claims_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid claims_supported 07854a0de3db8f5849ecb6be3985bedf POLICY OTK openid claims_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="InN1YiIsICJpc3MiLCAiYXV0aF90aW1lIiwgImFjciIsICJhdWQiLCAiYXpwIiwgImV4cCIsICJjX2hhc2giLCAiYXRfaGFzaCIsICJub25jZSI="/> <L7p:VariableToSet stringValue="claims_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// RECOMMENDED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="263aace6-a721-4f34-b55a-81ef1e04b3c2"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${claims_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="claims_supported"/> <L7p:item stringValue="discovery.endpoint.enabled"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK Generate OAuth Token 07854a0de3db8f5849ecb6be3985bed4 POLICY OTK Generate OAuth Token Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Poilcy generates tokens and their lifetimes"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb420fe0-7400-448a-ac1f-984794796f45"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Lifetime Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth 2.0 ==================="/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${at}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${oauth2_access_token_lifetime_sec}"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvYXV0aDJfYWNjZXNzX3Rva2VuX2xpZmV0aW1lX3NlY30="/> <L7p:VariableToSet stringValue="lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="access token oauth 2.0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rft}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${oauth2_refresh_token_lifetime_sec}"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvYXV0aDJfcmVmcmVzaF90b2tlbl9saWZldGltZV9zZWN9"/> <L7p:VariableToSet stringValue="lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="refresh token oauth 2.0"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${ac}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${oauth2_auth_code_lifetime_sec}"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvYXV0aDJfYXV0aF9jb2RlX2xpZmV0aW1lX3NlY30="/> <L7p:VariableToSet stringValue="lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="authorization_code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_client_id_lifetime_m}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${oauth2_client_id_lifetime_m}"/> <L7p:DateOffsetField intValue="12"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvYXV0aDJfY2xpZW50X2lkX2xpZmV0aW1lX219"/> <L7p:VariableToSet stringValue="lifetime"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="expiration.seconds"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client_id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cidm}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_client_id_lifetime_SDK_m}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${oauth2_client_id_lifetime_SDK_m}"/> <L7p:DateOffsetField intValue="12"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvYXV0aDJfY2xpZW50X2lkX2xpZmV0aW1lX1NES19tfQ=="/> <L7p:VariableToSet stringValue="lifetime"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="expiration.seconds"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client_id for Mobile SDK"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth 1.0 ==================="/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${urt}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${art}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${oauth_v1_request_token_lifetime_s}"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvYXV0aF92MV9yZXF1ZXN0X3Rva2VuX2xpZmV0aW1lX3N9"/> <L7p:VariableToSet stringValue="lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unauthorized/ authorized request token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${ot}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${oauth_v1_access_token_lifetime_s}"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtvYXV0aF92MV9hY2Nlc3NfdG9rZW5fbGlmZXRpbWVfc30="/> <L7p:VariableToSet stringValue="lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="oauth_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${ock}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth_v1_consumer_key_lifetime_m}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${oauth_v1_consumer_key_lifetime_m}"/> <L7p:DateOffsetField intValue="12"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="expiration.seconds"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="lifetime"/> </L7p:SetVariable> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="oauth_consumer_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the lifetime for the token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:UUIDGenerator> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Generate the token and the secret"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:MaximumQuantity intValue="2"/> <L7p:Quantity stringValue="2"/> <L7p:TargetVariable stringValue="tokenSecret"/> </L7p:UUIDGenerator> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlblNlY3JldFswXX0="/> <L7p:VariableToSet stringValue="genToken"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlblNlY3JldFsxXX0="/> <L7p:VariableToSet stringValue="genSecret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtleHBpcmF0aW9uLnNlY29uZHN9"/> <L7p:VariableToSet stringValue="genExpiration"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Remove 07854a0de3db8f5849ecb6be3985bf3c POLICY OTK id_token Remove Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8b48d23c-1a9f-416d-bdd7-153098f31a9a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token DB Remove"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token NoSQL Remove"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="jwt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="jwt"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="azp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="azp"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="logout_apps_query_string"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ae28328f-f88f-4a94-a076-2254e79fdaf9"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Variable logout_apps_query_string"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="DELETE"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/jwt_removal?jwt=${jwt}&amp;azp=${azp}${logout_apps_query_string}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK OAuth 2 Token Validation-MAC 07854a0de3db8f5849ecb6be3985befd POLICY OTK OAuth 2 Token Validation-MAC Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Validates OAuth 2.0 MAC Token profile Access Tokens"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="For MAC tokens only"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlblZhbHVlcy5tYWlucGFydH0="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="tokenValues"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="MAC"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="MAC"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:expiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathStatus"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:status/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token does not exist (expired, revoked, replaced, unknown, ...). access_token='${access_token}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Token"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for token type, token existence, token values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathStatus.result}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="ENABLED"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token disabled, status: ${xpathStatus.result}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${now.seconds}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LE"/> <L7p:RightValue stringValue="${xpathExpiration.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token expired, expiration: ${xpathExpiration.result}, time_now: ${gateway.time.seconds}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="expiration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="${scope_fail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${xpathScope.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="${scope_required}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token was not granted for required scope, required: ${scope_required}, granted: ${xpathScope.result}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="scope"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${onetime}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cf1c08ae-8f8e-48db-b01b-89eb891615a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="refresh_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="temp_token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${result}"/> <L7p:Expression2 stringValue="1 token(s) deleted"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="1 token(s) deleted"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token may still be usable although it was marked as one-time access_token"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remove"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="isonetime"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for one-time usage"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="=== MAC token profile specific validations and token secret lookup"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="ts"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="auth_header"/> <L7p:Regex stringValue="ts\s*=&quot;\s*([^&quot;]*)&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${ts[1]}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0c1sxXX0="/> <L7p:VariableToSet stringValue="timestamp_sec"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="nonce"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="auth_header"/> <L7p:Regex stringValue="nonce\s*=&quot;\s*([^&quot;]*)&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${nonce[1]}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtub25jZVsxXX0="/> <L7p:VariableToSet stringValue="nonce"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0aW1lc3RhbXBfc2VjfSR7bm9uY2V9JHt0b2tlbn0="/> <L7p:VariableToSet stringValue="replay_arg"/> </L7p:SetVariable> <L7p:WssReplayProtection> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Set the right timeframe!"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CustomExpiryTime intValue="300000"/> <L7p:CustomIdentifierVariable stringValue="replay_arg"/> <L7p:CustomProtection booleanValue="true"/> <L7p:CustomScope stringValue="${service.oid}"/> </L7p:WssReplayProtection> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="ext"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="auth_header"/> <L7p:Regex stringValue="ext\s*=&quot;\s*([^&quot;]*)&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${ext[1]}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtleHRbMV19"/> <L7p:VariableToSet stringValue="ext"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="ext"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="ext is optional"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNlY3JldC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="mac_key"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${mac_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aG1hYy1zaGEtMQ=="/> <L7p:VariableToSet stringValue="mac_algorithm"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="request_mac"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="auth_header"/> <L7p:Regex stringValue="mac\s*=&quot;\s*([^&quot;]*)&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${request_mac[1]}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0X21hY1sxXX0="/> <L7p:VariableToSet stringValue="request_mac"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Generate mac and compare to mac in the request message"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ba969a40-56c5-407b-8056-d531b5a2cf59"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK v2GenerateRequestMac"/> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request_mac}"/> <L7p:Expression2 stringValue="${mac}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${mac}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="==="/> </L7p:CommentAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKey"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOwner"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:resource_owner"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustom"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MAC specific"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="do some MAC token profile specific validations"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Something during MAC token validation went wrong"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Do MAC specific validations and create response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${tokenValues.mainpart}"/> <L7p:Expression2 stringValue="&lt;token&gt;"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="&lt;token&gt;"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Delete 07854a0de3db8f5849ecb6be3985bf18 POLICY OTK Manager Client Delete Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes a client. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a4a14e8c-8828-40a2-8276-661aa65e05e6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client DB Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client NoSQL Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="DELETE"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/delete?client_ident=${client_ident}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK id_token Validation-HS256 07854a0de3db8f5849ecb6be3985bf08 POLICY OTK id_token Validation-HS256 Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target Policy: OTK id_token Validation"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== This policy validates a JWT against the HS256 algorithm"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:DecodeJsonWebToken> <L7p:KeyType stringValue="Certificate"/> <L7p:PrivateKeySource stringValue="shared_secret"/> <L7p:SignatureSecret stringValue="${shared_secret}"/> <L7p:SourcePayload stringValue="${jwt}"/> <L7p:TargetVariablePrefix stringValue="id_token"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="valid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given JWT is invalid: '${jwt}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="error.code"/> <L7p:item stringValue="id_token.header"/> <L7p:item stringValue="id_token.header.names"/> <L7p:item stringValue="id_token.payload"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Authorization Server/#OTK Authorization Server Configuration 07854a0de3db8f5849ecb6be3985bed1 POLICY #OTK Authorization Server Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK Authorization Server&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid userinfo_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985beb2 POLICY #OTK openid userinfo_signing_alg_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid userinfo_signing_alg_values_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/id_token/OTK id_token Validation - CUSTOM 07854a0de3db8f5849ecb6be3985bea0 POLICY OTK id_token Validation - CUSTOM Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target Policy: &quot;OTK id_token Validation&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== The policy is executed when the decoded JWT issuer matches the iss specified in &quot;#OTK id_token configuration&quot; and the "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${id_token_signing_algorithm} variable is not set to HS256"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== This policy validates a JWT using CUSTOM algorithm. Implement your custom JWT validation below"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== This policy by default support RS256 using the default ssl key of the gateway"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_signing_algorithm}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="rs256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${shared_secret}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="default_ssl_key"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:DecodeJsonWebToken> <L7p:KeyGoid goidValue="0000000000000000ffffffffffffffff"/> <L7p:SourcePayload stringValue="${jwt}"/> <L7p:TargetVariablePrefix stringValue="id_token"/> <L7p:ValidationType stringValue="Using Recipient Key From List"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Verify the signature validation result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default: RS256 using default ssl key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given JWT is invalid: '${jwt}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// implement validation for different algorithms"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="error.code"/> <L7p:item stringValue="id_token.header"/> <L7p:item stringValue="id_token.header.names"/> <L7p:item stringValue="id_token.payload"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/id_token/OTK id_token Validation - CUSTOM ISS 07854a0de3db8f5849ecb6be3985be9f POLICY OTK id_token Validation - CUSTOM ISS Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target Policy: &quot;OTK id_token Validation&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== The policy is executed when the decoded JWT issuer does NOT match the iss specified in &quot;#OTK id_token configuration&quot; and the "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${id_token_signing_algorithm} variable is set to CUSTOM"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy validates a JWT based on CUSTOM ISS. Implement your CUSTOM ISS id_token validation below."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== the policy must export:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${didt.sub}"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${didt.aud}"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${didt.exp}"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${didt.azp}"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${didt.acr}"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${resource_owner}"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== ${salt}"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== after setting the above variables, enable the export assertion below"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== and set each variable to be exported"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This branch is used with [mag] if the enrollment feature is used"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Update this branch to your needs"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Has to match the 'iss' value in MAG Device Enrollment Configuration"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${didt.iss}"/> <L7p:Expression2 stringValue="https://enrollment.gateway.ca.com"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="https://enrollment.gateway.ca.com"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${shared_secret_alg}"/> <L7p:Expression2 stringValue="HS256"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="HS256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:DecodeJsonWebToken> <L7p:SignatureSecret stringValue="${shared_secret}"/> <L7p:SourcePayload stringValue="${jwt}"/> <L7p:TargetVariablePrefix stringValue="sessionDataOutput"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Verify the signature validation result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionDataOutput.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// HS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${shared_secret_alg}"/> <L7p:Expression2 stringValue="RS256"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="RS256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:LookupTrustedCertificate> <L7p:AllowMultipleCertificates booleanValue="false"/> <L7p:TrustedCertificateName stringValue="${shared_secret}"/> <L7p:VariableName stringValue="cert"/> </L7p:LookupTrustedCertificate> <L7p:DecodeJsonWebToken> <L7p:KeyType stringValue="Certificate"/> <L7p:PrivateKeySource stringValue="${cert}"/> <L7p:SourcePayload stringValue="${jwt}"/> <L7p:TargetVariablePrefix stringValue="sessionDataOutput"/> <L7p:ValidationType stringValue="Using Recipient Key From Context Variable"/> </L7p:DecodeJsonWebToken> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Verify the signature validation result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sessionDataOutput.valid}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// RS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The enrollment sessionData validation failed! Configured alg: '${enrollment_sig_alg}'"/> </L7p:AuditDetailAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="132"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="132"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate against configured alg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uRGF0YU91dHB1dC5wYXlsb2FkfQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="profile"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="exp"/> <L7p:OtherTargetMessageVariable stringValue="profile"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="exp"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="aud"/> <L7p:OtherTargetMessageVariable stringValue="profile"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="aud"/> </L7p:EvaluateJsonPathExpression> <L7p:CommentAssertion> <L7p:Comment stringValue="=="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Validate the id_token:"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="audience"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// has to match the used client_id when this token was retrieved"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue="${aud.result}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${aud.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="expiration"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// verify that the token has not expired"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${gateway.time.seconds}"/> <L7p:Expression2 stringValue="${exp.result}"/> <L7p:Operator operator="LE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LE"/> <L7p:RightValue stringValue="${exp.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Extract user data:"/> </L7p:CommentAssertion> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="sub"/> <L7p:OtherTargetMessageVariable stringValue="profile"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="sub"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="preferred_username"/> <L7p:OtherTargetMessageVariable stringValue="profile"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="preferred_username"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzdWIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="didt.sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdWQucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="didt.aud"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtleHAucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="didt.exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdWQucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="didt.azp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MQ=="/> <L7p:VariableToSet stringValue="didt.acr"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtwcmVmZXJyZWRfdXNlcm5hbWUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="salt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// specify a secret used with this provider only"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="YXNlY3JldHZhbHVldGhhdGlza25vd25oZXJlb25seWFuZGFzZWNyZXQ="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[mag]"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// enrollment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// custom iss"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="didt.acr"/> <L7p:item stringValue="didt.aud"/> <L7p:item stringValue="didt.azp"/> <L7p:item stringValue="didt.exp"/> <L7p:item stringValue="didt.sub"/> <L7p:item stringValue="resource_owner"/> <L7p:item stringValue="salt"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK id_token Validation 07854a0de3db8f5849ecb6be3985bf06 POLICY OTK id_token Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="third_party_sso_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="third_party_sso_token_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="PHRoaXJkX3BhcnR5X3Nzb190b2tlbj48L3RoaXJkX3BhcnR5X3Nzb190b2tlbj4KPHRoaXJkX3BhcnR5X3Nzb190b2tlbl90eXBlPjwvdGhpcmRfcGFydHlfc3NvX3Rva2VuX3R5cGU+"/> <L7p:VariableToSet stringValue="third_party_sso_resp_elements"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="jwt.payload"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="jwt"/> <L7p:Regex stringValue=".[.](.+)[.]"/> <L7p:RegexName stringValue="extract payload from JWT"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="jwt.payload"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="jwt.payload"/> <L7p:TransformType transformType="BASE64_DECODE"/> </L7p:EncodeDecode> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given JWT is invalid: '${jwt}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== EXTRACT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Get payload from JWT and extract the json into variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="d00d4a19-e148-4650-bb05-71dd29807dc6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token configuration"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// ${subject_type}, ${id_token_signing_algorithm}, ${iss}"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${shared_secret_alg}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="=="/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// valid values: HS256, RS256 or CUSTOM"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtzaGFyZWRfc2VjcmV0X2FsZ30="/> <L7p:VariableToSet stringValue="id_token_signing_algorithm"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="alg"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// choose the algorithm. Either the configured one or the runtime one"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${didt.iss}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="${iss}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${shared_secret}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${azp}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${salt}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if any required params are missing, look them up"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="32d58e80-53a2-49fd-935a-391b1755e9fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Lookup"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${didt.azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue="xml"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue="${didt.sub}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSharedSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:shared_secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAzp"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:azp/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSalt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:salt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${shared_secret}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNoYXJlZFNlY3JldC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="shared_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// shared_secret"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFJlc291cmNlT3duZXIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${azp}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEF6cC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// azp"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${salt}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNhbHQucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// salt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== LOOKUP"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if lookup needed"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_signing_algorithm}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="hs256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="6dcdce05-ffdc-4ccd-9c9c-dab02c6594b4"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// HS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_signing_algorithm}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="hs256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="edd1acbd-1584-434d-be40-6a6abaf0a9ed"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Any other algorithm"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Choose Algorithm"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="06247a28-fa89-4967-8a4d-b6f3769b46f1"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Extract Third Party SSO Token"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PCFbQ0RBVEFbJHt0aGlyZF9wYXJ0eV9zc29fdG9rZW59XV0+"/> <L7p:VariableToSet stringValue="third_party_sso_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PCFbQ0RBVEFbJHt0aGlyZF9wYXJ0eV9zc29fdG9rZW5fdHlwZX1dXT4="/> <L7p:VariableToSet stringValue="third_party_sso_token_type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${check_expiration}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="with expiration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${check_expiration}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="without expiration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The id_token is invalid: '${id_token.payload}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue="${didt.azp}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${didt.azp}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The azp is not valid for this id_token: azp: '${didt.azp}', expected: '${azp}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE3"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4abca6f4-c8e6-47e7-b99e-bd1c2202fdca"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Variable third_party_sso_resp_elements"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default iss"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${didt.iss}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="${iss}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="66baadf7-101b-49bc-94b8-8309546a303d"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// custom iss"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given ISS is invalid: '${didt.iss}', configured iss = '${iss}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// no valid ISS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==Validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Based on iss from payload, select an algorithm"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${azp}"/> <L7p:Expression2 stringValue="${didt.azp}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${didt.azp}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The azp is not valid for this id_token: azp: '${didt.azp}', expected: '${azp}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE3"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="third_party_sso_resp_elements"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4abca6f4-c8e6-47e7-b99e-bd1c2202fdca"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Variable third_party_sso_resp_elements"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Store 07854a0de3db8f5849ecb6be3985bf4f POLICY OTK Cache Store Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="***** OTK Cache Store *********************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Stores the given msg in the cache identified by cacheID and maxEntryAge with key: cacheKey."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**********************************************"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheID}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntryAge}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntries}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntrySize}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="valid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for required fields"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="U1RPUkU="/> <L7p:VariableToSet stringValue="cache.op"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== SET"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// context variables for OTK Cache Handler"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Include> <L7p:PolicyGuid stringValue="c7ffb033-cf81-44e1-8e89-0c25b1963b60"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid userinfo_endpoint 07854a0de3db8f5849ecb6be3985bedb POLICY OTK openid userinfo_endpoint Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke3VzZXJpbmZvX3BhdGh9"/> <L7p:VariableToSet stringValue="userinfo_endpoint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="50aa304e-d9fe-4050-b47d-6523908c3836"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${userinfo_endpoint}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="userinfo_endpoint"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/grant_types/OTK grant_type=SAML Authentication 07854a0de3db8f5849ecb6be3985bebb POLICY OTK grant_type=SAML Authentication Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target Policy: &quot;OTK grant_type=SAML&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="========== Validate the trusted issuer by adding a FIP here =========="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="A FIP has to be introduced in order to accept only trusted clients"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Remove the Stop assertion once the FIP is configured"/> </L7p:CommentAssertion> <L7p:FalseAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="WARNING"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Replace this assertion with a federated identity assertion. Do not just delete it!"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:FalseAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtiZWFyZXJUb2tlbi5tYWlucGFydH0="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="bearerToken"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="bearerToken"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(//saml2:Assertion)=1"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="saml2"/> <L7p:value stringValue="urn:oasis:names:tc:SAML:2.0:assertion"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ds"/> <L7p:value stringValue="http://www.w3.org/2000/09/xmldsig#"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/response_types/OTK check response type supported 07854a0de3db8f5849ecb6be3985bf2b POLICY OTK check response type supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: OTK check response type supported"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="if_response_type_supported"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="if_response_type_supported"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="if_response_type_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Key Update 07854a0de3db8f5849ecb6be3985bf17 POLICY OTK Manager Client Key Update Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy updates a client_id. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleQ=="/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="description"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="org"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="variables"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="initialize variables that are not used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="39cca824-a1b6-4e2a-a493-fd72f441dc9e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="callback"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="callback"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="environment"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="environment"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="created_by"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="created_by"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="key_custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="key_custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="service_ids"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="service_ids"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="account_plan_mapping_ids"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="account_plan_mapping_ids"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2FsbGJhY2s9JHtjYWxsYmFja30mY2xpZW50X2lkZW50PSR7Y2xpZW50X2lkZW50fSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleX0mZGVzY3JpcHRpb249JHtkZXNjcmlwdGlvbn0mZW52aXJvbm1lbnQ9JHtlbnZpcm9ubWVudH0mbmFtZT0ke2NsaWVudF9uYW1lfSZvcmc9JHtvcmd9JnBlcnNpc3RfdHlwZT0ke3BlcnNpc3RfdHlwZX0mc2NvcGU9JHtzY29wZX0mc2VjcmV0PSR7Y2xpZW50X3NlY3JldH0mc3RhdHVzPSR7Y2xpZW50X3N0YXR1c30mdHlwZT0ke3R5cGV9JmNyZWF0ZWRfYnk9JHtjcmVhdGVkX2J5fSZjbGllbnRfa2V5X2N1c3RvbT0ke2tleV9jdXN0b219JmFjY291bnRfcGxhbl9tYXBwaW5nX2lkcz0ke2FjY291bnRfcGxhbl9tYXBwaW5nX2lkc30mc2VydmljZV9pZHM9JHtzZXJ2aWNlX2lkc30="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/update"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid acr_values_supported 07854a0de3db8f5849ecb6be3985beb6 POLICY #OTK openid acr_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid acr_values_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Add OpenID Supported Authentication Context References (ACR)"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Specify a comma separated list of values with each value within double-quotes"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Example: &quot;value01&quot;, &quot;value02&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/API XSS Protection 07854a0de3db8f5849ecb6be3985bf07 POLICY API XSS Protection Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This assertion will check against any potential XSS risks."/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key REGX"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="allinput"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="(%3c|[&lt;])(\w|%(?!20))"/> <L7p:RegexName stringValue="Validate all input"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="103"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="API XSS Protection caught potential security risks."/> </L7p:AuditDetailAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite content-type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PROTECT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Validate form field params against xss or injection attacks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/#OTK Validate JWT OAuth Token 07854a0de3db8f5849ecb6be3985bea4 POLICY #OTK Validate JWT OAuth Token Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: #OTK Validate JWT OAuth Token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Private key to decode JWT can be modified in the below assertion."/> </L7p:CommentAssertion> <L7p:DecodeJsonWebToken> <L7p:FailUnverifiedSignature booleanValue="true"/> <L7p:KeyAlias stringValue="ssl"/> <L7p:KeyGoid goidValue="00000000000000000000000000000002"/> <L7p:SourcePayload stringValue="${access_token}"/> <L7p:TargetVariablePrefix stringValue="jwt"/> <L7p:ValidationType stringValue="Using Recipient Key From List"/> </L7p:DecodeJsonWebToken> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="convert payload to json, to extract values in the next steps"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtqd3QucGF5bG9hZH0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="payload_json"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract JTI which is also the access_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="jti"/> <L7p:OtherTargetMessageVariable stringValue="payload_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jti"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:CommentAssertion> <L7p:Comment stringValue="By default, the database will be queried for JWT validation (using 'JTI')"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Enable the following disabled assertions to not query the database when validating JWT"/> </L7p:CommentAssertion> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract hte issuer (iss)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Enabled booleanValue="false"/> <L7p:Expression stringValue="iss"/> <L7p:OtherTargetMessageVariable stringValue="payload_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="iss"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract the audience (aud)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Enabled booleanValue="false"/> <L7p:Expression stringValue="aud"/> <L7p:OtherTargetMessageVariable stringValue="payload_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="aud"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract expiration (exp)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Enabled booleanValue="false"/> <L7p:Expression stringValue="exp"/> <L7p:OtherTargetMessageVariable stringValue="payload_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="exp"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract the SCOPE that was granted for this token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Enabled booleanValue="false"/> <L7p:Expression stringValue="token_details.scope"/> <L7p:OtherTargetMessageVariable stringValue="payload_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="scope"/> </L7p:EvaluateJsonPathExpressionV2> <wsp:OneOrMore L7p:Enabled="false" wsp:Usage="Required"> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract the resource owner if it exists"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="token_details.preferred_username"/> <L7p:OtherTargetMessageVariable stringValue="payload_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="owner"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set variable to unknown if owner not part of payload"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dW5rbm93bg=="/> <L7p:VariableToSet stringValue="owner.result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Sets owner "/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Set resp with extracted values, used for validation later"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:Enabled booleanValue="false"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Use the following assertion to validate JWT by querying database for access_token (jti)"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Disable the following context variable assertion (query_db) if database query is not required for validation"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="query_db"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid acr_values_supported 07854a0de3db8f5849ecb6be3985bee1 POLICY OTK openid acr_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="OpenID Supported Authentication Context References (ACR)"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Overwrite within: #OTK openid acr_values_supported"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="IjAi"/> <L7p:VariableToSet stringValue="acr_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="db9efa3b-2f39-49b6-a3e8-e0ab1e247bc5"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${acr_values_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="acr_values_supported"/> <L7p:item stringValue="discovery.endpoint.enabled"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/authentication/OTK Cookie Management Configuration 07854a0de3db8f5849ecb6be3985bec9 POLICY OTK Cookie Management Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="The value of cookieKey is used to created a signed cookie"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Change"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="YTIxMDAwZTItYjI2Yi00ZTQzLWEzMmMtYjczZTAyZDU1M2Ew"/> <L7p:VariableToSet stringValue="cookieKey"/> </L7p:SetVariable> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="cookieKey"/> <L7p:item stringValue="cookieName"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/authentication/OTK Cookie Management 07854a0de3db8f5849ecb6be3985bf54 POLICY OTK Cookie Management Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Handles cookie validation. Also creates cookies"/> </L7p:CommentAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="24c69ac9-326f-4a01-bd3c-02b11aec741a"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWVOYW1lfT07IEV4cGlyZXM9VGh1LCAwMSBKYW4gMTk3MCAwMDowMDowMCBHTVQ7IFBhdGg9LzsgU2VjdXJlOyBIdHRwT25seQ=="/> <L7p:VariableToSet stringValue="setCookieDelete"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${task}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="authUserCookie"/> <L7p:OtherTargetMessageVariable stringValue="cookie"/> <L7p:PatternContainsVariables booleanValue="true"/> <L7p:Regex stringValue="${cookieName}=([a-zA-Z0-9-_/%]{1,128})"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoVXNlckNvb2tpZVsxXX0="/> <L7p:VariableToSet stringValue="cookieContent"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cookieContent"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cookieContent"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:Split> <L7p:InputVariable stringValue="cookieContent"/> <L7p:OutputVariable stringValue="userSession"/> <L7p:SplitPattern stringValue="|"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1c2VyU2Vzc2lvblswXX0="/> <L7p:VariableToSet stringValue="cookieID"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1c2VyU2Vzc2lvblsxXX0="/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1c2VyU2Vzc2lvblsyXX0="/> <L7p:VariableToSet stringValue="signature"/> </L7p:SetVariable> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="expiration: '${expiration}', now: '${gateway.time.seconds}', content: '${cookieContent}', cookie: '${cookie}'"/> <L7p:Enabled booleanValue="false"/> </L7p:AuditDetailAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Expression2 stringValue="${gateway.time.seconds}"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="${gateway.time.seconds}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:GenerateSecurityHash> <L7p:Base64Data stringValue="JHtjb29raWVJRH18JHtleHBpcmF0aW9ufXw="/> <L7p:KeyText stringValue="${cookieKey}"/> <L7p:LineBreak lineBreak="CR-LF"/> <L7p:TargetOutputVariable stringValue="actualHash"/> </L7p:GenerateSecurityHash> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="actualHash"/> <L7p:Regex stringValue="[ =+/]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${actualHash}"/> <L7p:Expression2 stringValue="${signature}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${signature}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="userSessionIDCacheV2"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cookieID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="cookieValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cookieValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cookieValue"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${task}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:UUIDGenerator> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// sessionID"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:MaximumQuantity intValue="1"/> <L7p:TargetVariable stringValue="cookieID"/> </L7p:UUIDGenerator> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="${lifetime}"/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWVJRFswXX18JHtleHBpcmF0aW9uLnNlY29uZHN9fA=="/> <L7p:VariableToSet stringValue="cookieContent"/> </L7p:SetVariable> <L7p:GenerateSecurityHash> <L7p:Base64Data stringValue="JHtjb29raWVDb250ZW50fQ=="/> <L7p:KeyText stringValue="${cookieKey}"/> <L7p:LineBreak lineBreak="CR-LF"/> <L7p:TargetOutputVariable stringValue="actualHash"/> </L7p:GenerateSecurityHash> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="actualHash"/> <L7p:Regex stringValue="[ =+/]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWVDb250ZW50fSR7YWN0dWFsSGFzaH0="/> <L7p:VariableToSet stringValue="cookieContent"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cookieContent"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cookieContent"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="userSessionIDCacheV2"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cookieID}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${cookieValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="create"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create or validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb29raWVOYW1lfT0ke2Nvb2tpZUNvbnRlbnR9OyBQYXRoPS87IFNlY3VyZTsgSHR0cE9ubHk="/> <L7p:VariableToSet stringValue="setCookie"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Signing Algorithm-HS256 07854a0de3db8f5849ecb6be3985bf3d POLICY OTK id_token Signing Algorithm-HS256 Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== This policy is used by OTK id_token Generation when id_token_signing_algorithm=HS256"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${append}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeJsonWebToken> <L7p:EncryptionSourceType intValue="2"/> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="HS256"/> <L7p:SignatureSecretKey stringValue="${shared_secret}"/> <L7p:SourceVariable stringValue="${idtoken}"/> <L7p:TargetVariable stringValue="jwt"/> </L7p:EncodeJsonWebToken> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default "/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${append}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeJsonWebToken> <L7p:EncryptionSourceType intValue="2"/> <L7p:HeaderAction stringValue="Merge to Generated Header"/> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="HS256"/> <L7p:SignatureSecretKey stringValue="${shared_secret}"/> <L7p:SourceHeaders stringValue="${append}"/> <L7p:SourceVariable stringValue="${idtoken}"/> <L7p:TargetVariable stringValue="jwt"/> </L7p:EncodeJsonWebToken> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Append third party sso token to JWT header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The JWT could not be created"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// generate signed JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="error.code"/> <L7p:item stringValue="jwt.compact"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/id_token/OTK id_token Signing Algorithm - CUSTOM 07854a0de3db8f5849ecb6be3985bea1 POLICY OTK id_token Signing Algorithm - CUSTOM Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target Policy: &quot;OTK id_token Generation&quot; when id_token_signing_algorithm is not HS256"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== This policy is used by OTK id_token Generation when id_token_signing_algorithm=RS256"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== It uses the default SSL key found on the gateway"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${append}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// add header 'kid'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:EncryptionSourceType intValue="2"/> <L7p:HeaderAction stringValue="Merge to Generated Header"/> <L7p:KeyGoid goidValue="0000000000000000ffffffffffffffff"/> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="RS256"/> <L7p:SignatureSourceType intValue="1"/> <L7p:SourceHeaders stringValue="${kid_header}"/> <L7p:SourceVariable stringValue="${idtoken}"/> <L7p:TargetVariable stringValue="jwt"/> </L7p:EncodeJsonWebToken> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default "/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${append}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="append"/> <L7p:Regex stringValue="}$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=",&quot;kid&quot;:&quot;${kid}&quot;}"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:EncodeJsonWebToken> <L7p:EncryptionSourceType intValue="2"/> <L7p:HeaderAction stringValue="Merge to Generated Header"/> <L7p:KeyGoid goidValue="0000000000000000ffffffffffffffff"/> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="RS256"/> <L7p:SignatureSourceType intValue="1"/> <L7p:SourceHeaders stringValue="${append}"/> <L7p:SourceVariable stringValue="${idtoken}"/> <L7p:TargetVariable stringValue="jwt"/> </L7p:EncodeJsonWebToken> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Append third party sso token to JWT header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The JWT could not be created"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// generate signed JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// the shared secret actually is the name of the key that was used for signing the token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtraWR9"/> <L7p:VariableToSet stringValue="shared_secret"/> </L7p:SetVariable> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="error.code"/> <L7p:item stringValue="jwt.compact"/> <L7p:item stringValue="shared_secret"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Generation 07854a0de3db8f5849ecb6be3985bf3a POLICY OTK id_token Generation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Look for '#OTK id_token configuration' and 'OTK id_token Signing Algorithm - ...'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy generates an id_token and exposes it as a JWT"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="d00d4a19-e148-4650-bb05-71dd29807dc6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token configuration"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="eb420fe0-7400-448a-ac1f-984794796f45"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Lifetime Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateFormat stringValue="&lt;Second Timestamp&gt;"/> <L7p:DateOffsetExpression stringValue="${id_token_lifetime_s}"/> <L7p:VariableToSet stringValue="exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="append"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Nope"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom}"/> <L7p:Expression2 stringValue="openid_registration"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="openid_registration"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXN0b219"/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="custom_local"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract the subject_type"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="$..openid_registration.response.subject_type"/> <L7p:OtherTargetMessageVariable stringValue="custom_local"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="client.subject_type"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract the id_token_signed_response_alg"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="$..openid_registration.response.id_token_signed_response_alg"/> <L7p:OtherTargetMessageVariable stringValue="custom_local"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="client.id_token_signed_response_alg"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnQuc3ViamVjdF90eXBlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="subject_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnQuaWRfdG9rZW5fc2lnbmVkX3Jlc3BvbnNlX2FsZy5yZXN1bHR9"/> <L7p:VariableToSet stringValue="id_token_signing_algorithm"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Yes, extract subject_type and id_token_signed_response_algorithm"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check if the client registered via OIDC Dynamic Registration and use registered values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authTime}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnYXRld2F5LnRpbWUuc2Vjb25kc30="/> <L7p:VariableToSet stringValue="authTime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set the authentication time"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${acr}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="acr"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set the acr value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${subject_type}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${subject_type}"/> <L7p:Expression2 stringValue="pairwise"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="pairwise"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="subject_type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// pairwise"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${subject_type}"/> <L7p:Expression2 stringValue="public"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="public"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="subject_type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// public"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The id_token could not be created"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTMx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// generate the id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="57d4baf4-144b-4ab0-829f-4276bd4517b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Configured Grant Types"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtncmFudF90eXBlX2p3dH0="/> <L7p:VariableToSet stringValue="generated_sso_token_type"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="480f6b8b-b83f-405a-a893-92a327303b04"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Variable append - Third Party SSO Token Type"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpZHRva2VufQ=="/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="id_token_json"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="sub"/> <L7p:OtherTargetMessageVariable stringValue="id_token_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="local.sub"/> </L7p:EvaluateJsonPathExpression> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_signing_algorithm}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="HS256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="74e1ae47-706e-457b-b501-1b94cc68b9c7"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// HS256"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_signing_algorithm}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="HS256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1f484c5f-423e-4163-98fc-ee6e26c1379c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token KID Configuration"/> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="b586c3c4-f952-45de-b17b-d12d2c5ff49e"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Any other algorithm"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// choose an algorithm"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhbC5zdWIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3QuY29tcGFjdH0="/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpZF90b2tlbl9zaWduaW5nX2FsZ29yaXRobX0="/> <L7p:VariableToSet stringValue="alg"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=TOKEN ID_TOKEN 07854a0de3db8f5849ecb6be3985bf29 POLICY OTK response_type=TOKEN ID_TOKEN Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy handles the response_type 'TOKEN ID_TOKEN'"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5FeHBpcmF0aW9ufQ=="/> <L7p:VariableToSet stringValue="token_expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Custom data passed to JWT generation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ewoJInNlc3Npb25fb3V0cHV0IjogJHtjdXN0b219LCAKCSJ1c2VybmFtZSI6ICIke3Jlc291cmNlX293bmVyfSIKfQoKCg=="/> <L7p:VariableToSet stringValue="jwt_custom"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0bbc94ef-dd4b-4936-b056-69455b375d7d"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate JWT OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="aud"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${jwt_custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jti"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="lifetime"/> <L7p:value stringValue="${lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation implementation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ea0db7be-ce05-4daa-a5fb-ac1ea3e74d49"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Generation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${acr}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${authTime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${xpathSecret.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="db7a90bf-e85d-42bd-93db-a2950dbc2a51"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="iss"/> <L7p:value stringValue="${iss}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${shared_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_type"/> <L7p:value stringValue="${alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue="${sub}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="generated_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="generated_sso_token_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbGlkYXRpb24geG1sbnM9Imh0dHA6Ly9ucy5sN3RlY2guY29tLzIwMTIvMTEvb3RrLW92cCI+CiA8cmVzdWx0PnZhbGlkPC9yZXN1bHQ+CiA8and0PiR7and0fTwvand0PgogPGlkX3Rva2VuX3R5cGU+JHtnZW5lcmF0ZWRfc3NvX3Rva2VuX3R5cGV9PC9pZF90b2tlbl90eXBlPgo8L3ZhbGlkYXRpb24+"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2FjY2Vzc190b2tlbj0ke2FjY2Vzc190b2tlbn0mZXhwaXJlc19pbj0ke2xpZmV0aW1lfSZ0b2tlbl90eXBlPUJlYXJlciZpZF90b2tlbj0ke2p3dH0maWRfdG9rZW5fdHlwZT0ke2dlbmVyYXRlZF9zc29fdG9rZW5fdHlwZX0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set responses"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_keyEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_ownerEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="access_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="access_tokenEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="azp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="azpEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="nonce"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonceEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="salt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="saltEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="third_party_sso_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="third_party_sso_tokenEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="third_party_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="third_party_sso_token_typeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="acr"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="acrEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authTime"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authTimeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="customEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="YWN0aW9uPWNyZWF0ZSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleUVuY29kZWR9JnJlc291cmNlX293bmVyPSR7cmVzb3VyY2Vfb3duZXJFbmNvZGVkfSZhY2Nlc3NfdG9rZW49JHthY2Nlc3NfdG9rZW5FbmNvZGVkfSZhenA9JHthenBFbmNvZGVkfSZub25jZT0ke25vbmNlRW5jb2RlZH0mc2FsdD0ke3NhbHRFbmNvZGVkfSZ0aGlyZF9wYXJ0eV9zc29fdG9rZW49JHt0aGlyZF9wYXJ0eV9zc29fdG9rZW5FbmNvZGVkfSZ0aGlyZF9wYXJ0eV9zc29fdG9rZW5fdHlwZT0ke3RoaXJkX3BhcnR5X3Nzb190b2tlbl90eXBlRW5jb2RlZH0mYWNyPSR7YWNyRW5jb2RlZH0mYXV0aF90aW1lPSR7YXV0aFRpbWVFbmNvZGVkfSZjdXN0b209JHtjdXN0b21FbmNvZGVkfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="idtokenmessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/idtoken"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="idtokenmessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation[ns:result='valid']/ns:jwt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathIdTokenType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation[ns:result='valid']/ns:id_token_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImFjY2Vzc190b2tlbiIKICAgICB2YWx1ZT0iJHthY2Nlc3NfdG9rZW59Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJleHBpcmVzX2luIgogICAgIHZhbHVlPSIke2xpZmV0aW1lfSIvPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idG9rZW5fdHlwZSIKICAgICB2YWx1ZT0iQmVhcmVyIi8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJpZF90b2tlbiIKICAgICB2YWx1ZT0iJHt4cGF0aEp3dC5yZXN1bHR9Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJpZF90b2tlbl90eXBlIgogICAgIHZhbHVlPSIke3hwYXRoSWRUb2tlblR5cGUucmVzdWx0fSIvPg=="/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2FjY2Vzc190b2tlbj0ke2FjY2Vzc190b2tlbn0mZXhwaXJlc19pbj0ke2xpZmV0aW1lfSZ0b2tlbl90eXBlPUJlYXJlciZpZF90b2tlbj0ke3hwYXRoSnd0LnJlc3VsdH0maWRfdG9rZW5fdHlwZT0ke3hwYXRoSWRUb2tlblR5cGUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=token id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="47b375d9-e1bd-48a7-821a-2d78ba2615d6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${token_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="${token_status}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${at_jwt}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="formResp"/> <L7p:Regex stringValue="access_token&quot;[\s]*value=[\s]*&quot;[^&quot;]*&quot;/&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token&quot; value=&quot;${at_jwt}&quot;/&gt;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="location"/> <L7p:Regex stringValue="access_token=.*&amp;e"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token=${at_jwt}&amp;e"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if use JWT, update acces_token in client response or location"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=CODE ID_TOKEN TOKEN 07854a0de3db8f5849ecb6be3985bf28 POLICY OTK response_type=CODE ID_TOKEN TOKEN Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="openIDConnectCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Only do something if openid is a granted SCOPE value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="================="/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code will be set if session store failed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="115 indicates that 'openid' was not part of SCOPE which is fine"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="115"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="115"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="either empty or 115 which is fine"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="91b9aa9b-fbe4-4944-8629-04c5695d122f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (temporary token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="${redirect_uri}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${genExpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="authorizationCode"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Generate code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5FeHBpcmF0aW9ufQ=="/> <L7p:VariableToSet stringValue="token_expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="47b375d9-e1bd-48a7-821a-2d78ba2615d6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${token_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${mac_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="${token_status}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Custom data passed to JWT generation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ewoJInNlc3Npb25fb3V0cHV0IjogJHtjdXN0b219LCAKCSJ1c2VybmFtZSI6ICIke3Jlc291cmNlX293bmVyfSIKfQoKCg=="/> <L7p:VariableToSet stringValue="jwt_custom"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0bbc94ef-dd4b-4936-b056-69455b375d7d"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate JWT OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="aud"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${jwt_custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jti"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="lifetime"/> <L7p:value stringValue="${lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Generate token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation implementation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="32d58e80-53a2-49fd-935a-391b1755e9fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Lookup"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:jwt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEp3dC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:DecodeJsonWebToken> <L7p:SourcePayload stringValue="${jwt}"/> <L7p:TargetVariablePrefix stringValue="decoded"/> <L7p:ValidationType stringValue="None"/> </L7p:DecodeJsonWebToken> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="nonce"/> <L7p:OtherTargetMessageVariable stringValue="decoded"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="existingNonce"/> </L7p:EvaluateJsonPathExpression> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// existing authorization should still regen id_token if nonce changed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${existingNonce}"/> <L7p:Expression2 stringValue="${nonce}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="${nonce}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="57d4baf4-144b-4ab0-829f-4276bd4517b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Configured Grant Types"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtncmFudF90eXBlX2p3dH0="/> <L7p:VariableToSet stringValue="generated_sso_token_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// existing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:secret/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ea0db7be-ce05-4daa-a5fb-ac1ea3e74d49"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Generation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${acr}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${authTime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${azp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue="${authorizationCode}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="id_token_signed_response_alg"/> <L7p:value stringValue="${id_token_signed_response_alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${xpathSecret.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="subject_type"/> <L7p:value stringValue="${subject_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${third_party_sso_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${third_party_sso_token_type}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="db7a90bf-e85d-42bd-93db-a2950dbc2a51"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="iss"/> <L7p:value stringValue="${iss}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${shared_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_type"/> <L7p:value stringValue="${alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue="${sub}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create new one"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// find existing id_token or create a new one"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="generated_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="generated_sso_token_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbGlkYXRpb24geG1sbnM9Imh0dHA6Ly9ucy5sN3RlY2guY29tLzIwMTIvMTEvb3RrLW92cCI+CiA8cmVzdWx0PnZhbGlkPC9yZXN1bHQ+CiA8and0PiR7and0fTwvand0PgogPGlkX3Rva2VuX3R5cGU+JHtnZW5lcmF0ZWRfc3NvX3Rva2VuX3R5cGV9PC9pZF90b2tlbl90eXBlPgo8L3ZhbGlkYXRpb24+"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImNvZGUiCiAgICAgdmFsdWU9IiR7YXV0aG9yaXphdGlvbkNvZGV9Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJpZF90b2tlbiIKICAgICB2YWx1ZT0iJHtqd3R9Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJpZF90b2tlbl90eXBlIgogICAgIHZhbHVlPSIke2dlbmVyYXRlZF9zc29fdG9rZW5fdHlwZX0iLz4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImFjY2Vzc190b2tlbiIKICAgICB2YWx1ZT0iJHthY2Nlc3NfdG9rZW59Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJleHBpcmVzX2luIgogICAgIHZhbHVlPSIke2xpZmV0aW1lfSIvPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idG9rZW5fdHlwZSIKICAgICB2YWx1ZT0iQmVhcmVyIi8+"/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2NvZGU9JHthdXRob3JpemF0aW9uQ29kZX0maWRfdG9rZW49JHtqd3R9JmlkX3Rva2VuX3R5cGU9JHtnZW5lcmF0ZWRfc3NvX3Rva2VuX3R5cGV9JmFjY2Vzc190b2tlbj0ke2FjY2Vzc190b2tlbn0mZXhwaXJlc19pbj0ke2xpZmV0aW1lfSZ0b2tlbl90eXBlPUJlYXJlcg=="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_keyEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_ownerEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="azp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="azpEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="nonce"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="nonceEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="salt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="saltEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="third_party_sso_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="third_party_sso_tokenEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="third_party_sso_token_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="third_party_sso_token_typeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="acr"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="acrEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authTime"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authTimeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="customEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorizationCode"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="codeEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="access_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="access_tokenEncoded"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="YWN0aW9uPWNyZWF0ZSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleUVuY29kZWR9JnJlc291cmNlX293bmVyPSR7cmVzb3VyY2Vfb3duZXJFbmNvZGVkfSZhenA9JHthenBFbmNvZGVkfSZub25jZT0ke25vbmNlRW5jb2RlZH0mc2FsdD0ke3NhbHRFbmNvZGVkfSZ0aGlyZF9wYXJ0eV9zc29fdG9rZW49JHt0aGlyZF9wYXJ0eV9zc29fdG9rZW5FbmNvZGVkfSZ0aGlyZF9wYXJ0eV9zc29fdG9rZW5fdHlwZT0ke3RoaXJkX3BhcnR5X3Nzb190b2tlbl90eXBlRW5jb2RlZH0mYWNyPSR7YWNyRW5jb2RlZH0mYXV0aF90aW1lPSR7YXV0aFRpbWVFbmNvZGVkfSZjdXN0b209JHtjdXN0b21FbmNvZGVkfSZjb2RlPSR7Y29kZUVuY29kZWR9JmFjY2Vzc190b2tlbj0ke2FjY2Vzc190b2tlbkVuY29kZWR9"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="idtokenmessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/idtoken"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="idtokenmessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation[ns:result='valid']/ns:jwt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathIdTokenType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation[ns:result='valid']/ns:id_token_type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2NvZGU9JHthdXRob3JpemF0aW9uQ29kZX0mYWNjZXNzX3Rva2VuPSR7YWNjZXNzX3Rva2VufSZleHBpcmVzX2luPSR7bGlmZXRpbWV9JnRva2VuX3R5cGU9QmVhcmVyJmlkX3Rva2VuPSR7eHBhdGhKd3QucmVzdWx0fSZpZF90b2tlbl90eXBlPSR7eHBhdGhJZFRva2VuVHlwZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=token id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Generate ID_Token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${at_jwt}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="formResp"/> <L7p:Regex stringValue="access_token&quot;[\s]*value=[\s]*&quot;[^&quot;]*&quot;/&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token&quot; value=&quot;${at_jwt}&quot;/&gt;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="location"/> <L7p:Regex stringValue="access_token=.*&amp;e"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token=${at_jwt}&amp;e"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if use JWT, update acces_token in client response or location"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Authorization Request Validation 07854a0de3db8f5849ecb6be3985bf0b POLICY OTK Authorization Request Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment shall only be used as encapsulated assertion which has the same name."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This encapsulated assertion is used at the OAuth 2.0 authorization endpoint."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="It validates the given parameters of the incoming response_type request."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The authorization endpoint will check the response, it will either be 'valid' or 'invalid'."/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error_redirect_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9"/> <L7p:VariableToSet stringValue="given_redirect_uri"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${codeChallenge}"/> <L7p:Expression2 stringValue=""/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${codeChallenge}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue=".{0}|[\w\d-_~.]{43,128}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${codeChallengeMethod}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${codeChallengeMethod}"/> <L7p:Expression2 stringValue="plain"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="plain"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${codeChallengeMethod}"/> <L7p:Expression2 stringValue="s256"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="s256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTEy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PKCE"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for PKCE related values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify the client is not using a master key."/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue="xpathSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:secret!=$client_key"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:type/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathName"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:name/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:client_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCallback"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:callback/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathStatus"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:status/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:expiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKeyCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_key_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientIdent"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_ident/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathStatus.result}"/> <L7p:Expression2 stringValue="ENABLED"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="ENABLED"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathExpiration.result}"/> <L7p:Expression2 stringValue="0"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${gateway.time.seconds}"/> <L7p:Expression2 stringValue="${xpathExpiration.result}"/> <L7p:Operator operator="LE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LE"/> <L7p:RightValue stringValue="${xpathExpiration.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check expiration date"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENhbGxiYWNrLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="callbacks"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:IncludeEntireExpressionCapture booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="callbacks"/> <L7p:Regex stringValue="\s"/> <L7p:RegexName stringValue="Remove white spaces"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Given client_id is invalid: '${client_key}'. It may be DISABLED or EXPIRED, status: '${xpathStatus.result}', or marked as 'Master Key' (client_id == client_secret)"/> </L7p:AuditDetailAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Retrieve client details"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="And validate expiration the and status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="If redirect_uri parameter is passed in, then it must match redirect_uri entered during client registration."/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${callbacks}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Split> <L7p:InputVariable stringValue="callbacks"/> <L7p:OutputVariable stringValue="callbacks"/> <L7p:SplitPattern stringValue=",|;"/> </L7p:Split> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${callbacks}"/> <L7p:Expression2 stringValue="${redirect_uri}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${redirect_uri}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="redirect_uri"/> <L7p:Regex stringValue="^[a-zA-Z][a-zA-Z\d+-.]{0,256}:/"/> <L7p:RegexName stringValue="Check that redirect_uri is an absolute URI"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check that redirect_uri does not include a fragment component"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue="#"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="#"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="If redirect_uri parameter is not passed in, then use redirect_uri entered during client registration."/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjYWxsYmFja3N9"/> <L7p:VariableToSet stringValue="redirect_uri"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="redirect_uri"/> <L7p:Regex stringValue="^[a-zA-Z][a-zA-Z\d+-.]{0,256}:/"/> <L7p:RegexName stringValue="Check that redirect_uri is an absolute URI"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="redirect_uri"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue=",[a-zA-Z][a-zA-Z\d+-.]{0,256}:/"/> <L7p:RegexName stringValue="Check that redirect_uri is just one absolute URI"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check that redirect_uri does not include a fragment component"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue="#"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="#"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="|oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${callbacks}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="|oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="No redirect available"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="If redirect_uri parameter is passed and none was registered use the one passed in"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${callbacks}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="|oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="redirect_uri"/> <L7p:Regex stringValue="^[a-zA-Z][a-zA-Z\d+-.]{0,256}:/"/> <L7p:RegexName stringValue="Check that redirect_uri is an absolute URI"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="OPEN REDIRECT_URI! Should NOT be supported. Given: '${given_redirect_uri}'"/> </L7p:AuditDetailAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check that redirect_uri does not include a fragment component"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue="#"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="#"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:FalseAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DISABLE"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="DISABLE TO SUPPORT OPEN REDIRECT_URIs. This is NOT recommended"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:FalseAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Open redirect"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Mismatching redirect uri. Given: '${given_redirect_uri}', registered: '${callbacks}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE0"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validate redirect_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Public clients must have registered redirect_uri"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${xpathType.result}"/> <L7p:Expression2 stringValue="public"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="public"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${callbacks}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${callbacks}"/> <L7p:Expression2 stringValue="oob"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Confidential clients utilizing implicit grant_type must have registered redirect_uri"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${xpathType.result}"/> <L7p:Expression2 stringValue="confidential"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="confidential"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${response_type}"/> <L7p:Expression2 stringValue="code"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="code"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${callbacks}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${xpathType.result}"/> <L7p:Expression2 stringValue="confidential"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="confidential"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${response_type}"/> <L7p:Expression2 stringValue="code"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="code"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The combination of client type and response_type requires a registered redirect_uri: client_id: '${client_key}', client_type: '${xpathType.result}', response_type: '${response_type}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTMw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check on the client type. There is a difference between confidantial and public clients"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CustomAssertion> <L7p:base64SerializedValue>rO0ABXNyADFjb20ubDd0ZWNoLnBvbGljeS5hc3NlcnRpb24uQ3VzdG9tQXNzZXJ0aW9uSG9sZGVyZtcreFwddTICAAlaAAxpc1VpQXV0b09wZW5MAApjYXRlZ29yaWVzdAAPTGphdmEvdXRpbC9TZXQ7TAAIY2F0ZWdvcnl0ACpMY29tL2w3dGVjaC9wb2xpY3kvYXNzZXJ0aW9uL2V4dC9DYXRlZ29yeTtMAA9jdXN0b21Bc3NlcnRpb250ADFMY29tL2w3dGVjaC9wb2xpY3kvYXNzZXJ0aW9uL2V4dC9DdXN0b21Bc3NlcnRpb247TAAUY3VzdG9tTW9kdWxlRmlsZU5hbWV0ABJMamF2YS9sYW5nL1N0cmluZztMAA9kZXNjcmlwdGlvblRleHRxAH4ABEwAD3BhbGV0dGVOb2RlTmFtZXEAfgAETAAOcG9saWN5Tm9kZU5hbWVxAH4ABEwAHnJlZ2lzdGVyZWRDdXN0b21GZWF0dXJlU2V0TmFtZXEAfgAEeHIAJWNvbS5sN3RlY2gucG9saWN5LmFzc2VydGlvbi5Bc3NlcnRpb27bX2OZPL2isQIAAloAB2VuYWJsZWRMABBhc3NlcnRpb25Db21tZW50dAAvTGNvbS9sN3RlY2gvcG9saWN5L2Fzc2VydGlvbi9Bc3NlcnRpb24kQ29tbWVudDt4cAFwAXNyABFqYXZhLnV0aWwuSGFzaFNldLpEhZWWuLc0AwAAeHB3DAAAAAI/QAAAAAAAAXNyAChjb20ubDd0ZWNoLnBvbGljeS5hc3NlcnRpb24uZXh0LkNhdGVnb3J5WrCcZaFE/jUCAAJJAAVteUtleUwABm15TmFtZXEAfgAEeHAAAAALdAAQQ3VzdG9tQXNzZXJ0aW9uc3hwc3IAMGNvbS5sN3RlY2guY3VzdG9tLmF1dGgyc2NvcGUuU2NvcGVJc3N1ZUFzc2VydGlvbq3QL6kxW8jlAgADTAAOb3V0cHV0VmFyaWFibGVxAH4ABEwAD3Njb3BlUmVnaXN0ZXJlZHEAfgAETAAOc2NvcGVSZXF1ZXN0ZWRxAH4ABHhwcHQAFCR7eHBhdGhTY29wZS5yZXN1bHR9dAAIJHtzY29wZX10AC1vdGstU2NvcGVJc3N1aW5nQW5kVmVyaWZpY2F0aW9uQXNzZXJ0aW9ucy5qYXJ0AK9WYWxpZGF0ZXMgdGhlIHJlcXVlc3RlZCBTQ09QRSBhZ2FpbnN0IFNDT1BFJ3MgdGhhdCB3ZXJlIHJlZ2lzdGVyZWQgZm9yIHRoZSBjbGllbnQuIEl0IG9ubHkgaXNzdWVzIFNDT1BFJ3MgdGhhdCBhcmUgYSBzdWJzZXQgb2YgdGhlIHJlZ2lzdGVyZWQgb25lcy4gSXQgd2lsbCBmYWlsIGlmIG5vbmUgbWF0Y2gudAART1RLIFNDT1BFIElzc3Vpbmd0ABFPVEsgU0NPUEUgSXNzdWluZ3A=</L7p:base64SerializedValue> </L7p:CustomAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MAC"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="SCOPE openid is not valid for MAC token profile"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Registered SCOPE: '${xpathScope.result}', Requested SCOPE: '${scope}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE1"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9"/> <L7p:VariableToSet stringValue="error_redirect_uri"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Check SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${given_redirect_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// either not openid or redirect_uri not empty"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Requested SCOPE includes openid but redirect_uri not given"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9"/> <L7p:VariableToSet stringValue="error_redirect_uri"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="redirect_uri check"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// for openid scope only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// nope"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathClientKeyCustom.result}"/> <L7p:Expression2 stringValue="openid_registration"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="openid_registration"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if it does NOT contain oauth client, continue the remaining branch to check against open id parameters."/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathClientKeyCustom.result}"/> <L7p:Expression2 stringValue="oauth_client"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="oauth_client"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudEtleUN1c3RvbS5yZXN1bHR9"/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="clientKeyCustom"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="$..openid_registration.response.response_types"/> <L7p:OtherTargetMessageVariable stringValue="clientKeyCustom"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="responseTypes"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="IiR7cmVzcG9uc2VUeXBlcy5yZXN1bHRzfSI="/> <L7p:VariableToSet stringValue="clientResponseTypes"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="clientResponseTypes"/> <L7p:Regex stringValue=",\s+"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&quot;,&quot;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="clientResponseTypes"/> <L7p:PatternContainsVariables booleanValue="true"/> <L7p:Regex stringValue="&quot;${response_type}&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="unsupported response_type: '${response_type}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE2"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9"/> <L7p:VariableToSet stringValue="error_redirect_uri"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Dynamic Registration"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if the client registered dynamically and verify the requested response_type is valid for it"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZnJhZ21lbnQ="/> <L7p:VariableToSet stringValue="response_mode_default"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="code"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_types_supported"/> <L7p:Regex stringValue="&quot;code&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="cXVlcnk="/> <L7p:VariableToSet stringValue="response_mode_default"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_types_supported"/> <L7p:Regex stringValue="&quot;token&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="token.id_token|id_token.token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${nonce}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_types_supported"/> <L7p:Regex stringValue="&quot;token id_token&quot;|&quot;id_token token&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="code.id_token|id_token.code"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${nonce}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_types_supported"/> <L7p:Regex stringValue="&quot;code id_token&quot;|&quot;id_token code&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="code id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="id_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${nonce}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_types_supported"/> <L7p:Regex stringValue="&quot;id_token&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="code.token|token.code"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${nonce}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_types_supported"/> <L7p:Regex stringValue="&quot;code token&quot;|&quot;token code&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="code token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="code.id_token.token|code.token.id_token|id_token.code.token|id_token.token.code|token.code.id_token|token.id_token.code"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${nonce}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df2e409a-ab62-452b-93b0-01437f067c41"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_types_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_types_supported"/> <L7p:Regex stringValue="&quot;code id_token token&quot;|&quot;code token id_token&quot;|&quot;token id_token code&quot;|&quot;token code id_token&quot;|&quot;id_token code token&quot;|&quot;id_token token code&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="code id_token token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="OIDC Certification expects response_type to be token when nonce is missing"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_type}"/> <L7p:Expression2 stringValue="token"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${nonce}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="nonce not provided for response_type: '${response_type}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9"/> <L7p:VariableToSet stringValue="error_redirect_uri"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="nonce missing"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="unsupported response_type: '${response_type}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE2"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9"/> <L7p:VariableToSet stringValue="error_redirect_uri"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="invalid response_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validate response_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="&quot;&quot;"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZV9tb2RlX2RlZmF1bHR9"/> <L7p:VariableToSet stringValue="response_mode"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set default response mode"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ed1ec222-d3a0-4807-ae3b-5a7e4caceea7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_modes_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_modes_supported"/> <L7p:Regex stringValue="&quot;form_post&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="query"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="query"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ed1ec222-d3a0-4807-ae3b-5a7e4caceea7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_modes_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_modes_supported"/> <L7p:Regex stringValue="&quot;query&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="query"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="fragment"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="fragment"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ed1ec222-d3a0-4807-ae3b-5a7e4caceea7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK openid response_modes_supported"/> </L7p:Encapsulated> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="response_modes_supported"/> <L7p:Regex stringValue="&quot;fragment&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fragment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="unsupported response_mode: '${response_mode}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE2"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9"/> <L7p:VariableToSet stringValue="error_redirect_uri"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate response_mode"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid service_documentation 07854a0de3db8f5849ecb6be3985beaf POLICY #OTK openid service_documentation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid service_documentation&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Modify the location of the Swagger API that describes OTK API's"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=SAML 07854a0de3db8f5849ecb6be3985bf1a POLICY OTK grant_type=SAML Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Grant Type: urn:ietf:params:oauth:grant-type:saml2-bearer"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This is an OAuth extension"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${assertion}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for required variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="========== Validation of the SAML assertion =========="/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthc3NlcnRpb259"/> <L7p:VariableToSet stringValue="bearerToken"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:CharacterEncoding stringValueNull="null"/> <L7p:SourceVariableName stringValue="bearerToken"/> <L7p:TargetContentType stringValue="text/xml;charset=UTF-8"/> <L7p:TargetDataType variableDataType="message"/> <L7p:TargetVariableName stringValue="bearerToken"/> <L7p:TransformType transformType="BASE64_DECODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ValidateNonSoapSamlToken> <L7p:AudienceRestriction stringValue="${conditions}"/> <L7p:AuthenticationStatement samlAuthenticationInfo="included"> <L7p:AuthenticationMethods stringArrayValue="included"> <L7p:item stringValue="urn:ietf:rfc:1510"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwoFactorContract"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:1.0:am:unspecified"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:1.0:am:SPKI"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:1.0:am:X509-PKI"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:Smartcard"/> <L7p:item stringValue="urn:ietf:rfc:3075"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:TimeSyncToken"/> <L7p:item stringValue="urn:ietf:rfc:2945"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:SmartcardPKI"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:PreviousSession"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileTwoFactorUnregistered"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorContract"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:NomadTelephony"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:MobileOneFactorUnregistered"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:AuthenticatedTelephony"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:1.0:am:PGP"/> <L7p:item stringValue="urn:ietf:rfc:2246"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:PersonalizedTelephony"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocol"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:Telephony"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:InternetProtocolPassword"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:2.0:ac:classes:SoftwarePKI"/> <L7p:item stringValue="urn:oasis:names:tc:SAML:1.0:am:password"/> </L7p:AuthenticationMethods> </L7p:AuthenticationStatement> <L7p:MaxExpiry longValue="3600000"/> <L7p:NameFormats stringArrayValue="included"> <L7p:item stringValue="urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified"/> </L7p:NameFormats> <L7p:NameQualifier stringValue=""/> <L7p:OtherTargetMessageVariable stringValue="bearerToken"/> <L7p:SubjectConfirmationDataCheckValidity booleanValue="false"/> <L7p:SubjectConfirmationDataRecipient stringValue="${receipient}"/> <L7p:SubjectConfirmations stringArrayValue="included"> <L7p:item stringValue="urn:oasis:names:tc:SAML:1.0:cm:bearer"/> </L7p:SubjectConfirmations> <L7p:Target target="OTHER"/> <L7p:Version boxedIntegerValue="2"/> </L7p:ValidateNonSoapSamlToken> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="== To implement SAML Authentication, edit the &quot;OTK grant_type=SAML Authentication&quot; policy."/> </L7p:CommentAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="a3aabd3c-d281-4dd9-b668-0d937773f52d"/> </L7p:Include> <L7p:CommentAssertion> <L7p:Comment stringValue="============================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="========== Get Subject Name ID from SAML token =========="/> </L7p:CommentAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="bearerToken"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/saml2:Assertion/saml2:Subject/saml2:NameID"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="saml2"/> <L7p:value stringValue="urn:oasis:names:tc:SAML:2.0:assertion"/> </L7p:entry> </L7p:Namespaces> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="openid not permitted"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope"/> <L7p:Regex stringValue="\bopenid\b[ ]|\bopenid\b|[ ]\bopenid\b"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY29wZX0="/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwb25zZVhwYXRoLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="owner"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAic2NvcGUiOiIke3Njb3BlLmdyYW50ZWR9Igp9"/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=BEARER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJtYWMiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAic2NvcGUiOiIke3Njb3BlLmdyYW50ZWR9IiwKICAibWFjX2tleSI6IiR7bWFjX3NlY3JldH0iLAogICJtYWNfYWxnb3JpdGhtIjoiaG1hYy1zaGEtMSIKfQ=="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYWNfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=MAC"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/#OTK Token Lifetime Configuration 07854a0de3db8f5849ecb6be3985bec4 POLICY #OTK Token Lifetime Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK Token Lifetime Configuration&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/#OTK openid scopes_supported 07854a0de3db8f5849ecb6be3985bea6 POLICY #OTK openid scopes_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid scopes_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Add OpenID Supported SCOPE values"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Specify a comma separated list of values with each value within double-quotes"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Example: &quot;value01&quot;, &quot;value02&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid scopes_supported 07854a0de3db8f5849ecb6be3985bee6 POLICY OTK openid scopes_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="OpenID Supported SCOPE values"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Overwrite within: #OTK openid scopes_supported"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="SCOPE: 'openid_client_registration' gets issued to clients using the dynamic registration feature"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The access_token issued at dynamic registration receives only that one SCOPE"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// This is proprietary to OTK"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="b3BlbmlkX2NsaWVudF9yZWdpc3RyYXRpb24="/> <L7p:VariableToSet stringValue="dynamic_registration_scope"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Configure all supported SCOPE's for general use in 'scopes_supported'"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Im9wZW5pZCIsICJlbWFpbCIsICJwcm9maWxlIiwgIiR7ZHluYW1pY19yZWdpc3RyYXRpb25fc2NvcGV9Ig=="/> <L7p:VariableToSet stringValue="scopes_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// RECOMMENDED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="ea68cf34-1eaf-4404-b678-17468fb87ea3"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scopes_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="dynamic_registration_scope"/> <L7p:item stringValue="scopes_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/authentication/OTK FIP Client Authentication Extension 07854a0de3db8f5849ecb6be3985becb POLICY OTK FIP Client Authentication Extension Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target policy: OTK FIP Client Authentication"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== this policy can be used to implement FIP Authentication"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Drag the 'Authenticate Against Identity Provider' assertion onto this comment"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IMPORTANT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Do not remove this assertion!"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="${apiPrefix}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="205"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="clientauthentication"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="validating the clients certificate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/authentication/OTK FIP Client Authentication 07854a0de3db8f5849ecb6be3985bf50 POLICY OTK FIP Client Authentication Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment should be used as an encapsulated assertion"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment will authenticate a client certificate against a configuration FIP"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The fragment will create an error message and an http status code"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Thie policy should be used at the beginning of a policy after requiring SSL with a client certificate"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="When OTK/MAG gets installed this policy is used at endpoint the the /storage and /ovp folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="To implement FIP Authentication, edit the &quot;OTK FIP Client Authentication Extension&quot; policy"/> </L7p:CommentAssertion> <L7p:Include> <L7p:PolicyGuid stringValue="26e7f045-75ad-4868-baf1-321c7de9d63c"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Update 07854a0de3db8f5849ecb6be3985bf45 POLICY OTK Client Update Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy updates a client. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50"/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="callback"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="created_by"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="variables"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="initialize variables that are not used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8982a1ae-c908-44d9-9c62-e4ef5a9f2148"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="description"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="description"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="org"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="org"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2FsbGJhY2s9JHtjYWxsYmFja30mY2xpZW50X2lkZW50PSR7Y2xpZW50X2lkZW50fSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleX0mZGVzY3JpcHRpb249JHtkZXNjcmlwdGlvbn0mZW52aXJvbm1lbnQ9JHtlbnZpcm9ubWVudH0mbmFtZT0ke2NsaWVudF9uYW1lfSZvcmc9JHtvcmd9JnBlcnNpc3RfdHlwZT0ke3BlcnNpc3RfdHlwZX0mc2NvcGU9JHtzY29wZX0mc2VjcmV0PSR7c2VjcmV0fSZzdGF0dXM9JHtjbGllbnRfc3RhdHVzfSZ0eXBlPSR7dHlwZX0mY3JlYXRlZF9ieT0ke2NyZWF0ZWRfYnl9JmNsaWVudF9jdXN0b209JHtjbGllbnRfY3VzdG9tfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/update"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Revoke Key 07854a0de3db8f5849ecb6be3985bf16 POLICY OTK Manager Client Revoke Key Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes a client. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9aa8efc0-671c-403d-9dbe-a3c09a3a3d97"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client DB Revoke Key"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client NoSQL Revoke Key"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="DELETE"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/revoke?client_ident=${client_ident}&amp;client_key=${client_key}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/#OTK OVP Configuration 07854a0de3db8f5849ecb6be3985becf POLICY #OTK OVP Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK OVP Configuration&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client GET 07854a0de3db8f5849ecb6be3985bf41 POLICY OTK Client GET Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy get a client - client_id. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="get|getKey|getAll"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unknown operation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2e7c73ef-afbf-47f8-89e0-8ba80095c2b3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue="0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="queryOffset"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="offset handling"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="format"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="format"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="org"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="org"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="registered_by"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="registered_by"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="queryOffset"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="queryOffset"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="filterStatus"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="filterStatus"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="environment"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="environment"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="master"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="master"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/${operation}?client_ident=${client_ident}&amp;client_key=${client_key}&amp;format=${format}&amp;name=${name}&amp;org=${org}&amp;registered_by=${registered_by}&amp;queryOffset=${queryOffset}&amp;filterStatus=${filterStatus}&amp;environment=${environment}&amp;master=${master}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Get (temporary) 07854a0de3db8f5849ecb6be3985bf38 POLICY OTK Token Get (temporary) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGVtcG9yYXJ5"/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eG1s"/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="queryOffset"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${return_json}"/> <L7p:Expression2 stringValue="true"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="anNvbg=="/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Setting return format"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1c2e888c-7f82-45f5-9bdf-9ef42fd65bd3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="verifier"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="verifier"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/getTemp?token=${token}&amp;verifier=${verifier}&amp;client_key=${client_key}&amp;resource_owner=${resource_owner}&amp;format=${format}&amp;offset=${queryOffset}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Storage (access_token) 07854a0de3db8f5849ecb6be3985bf33 POLICY OTK Token Storage (access_token) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy stores an access token. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2F1dGgydG9rZW4="/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="517aebd3-6ce1-4e8e-bce1-fb7d065c34e1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleT0ke2NsaWVudF9rZXl9JmNsaWVudD0ke2NsaWVudH0mY2xpZW50X25hbWU9JHtjbGllbnRfbmFtZX0mZXhwaXJhdGlvbj0ke2V4cGlyYXRpb259JnJlc291cmNlX293bmVyPSR7cmVzb3VyY2Vfb3duZXJ9JnNjb3BlPSR7c2NvcGV9JnN0YXR1cz0ke3Rva2VuX3N0YXR1c30mdG9rZW49JHt0b2tlbn0mY3VzdG9tPSR7Y3VzdG9tfQ=="/> <L7p:VariableToSet stringValue="forMessage"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmb3JNZXNzYWdlfSZzZWNyZXQ9JHt0b2tlbl9zZWNyZXR9"/> <L7p:VariableToSet stringValue="forMessage"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmb3JNZXNzYWdlfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/store"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${result}"/> <L7p:Expression2 stringValue="persisted"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="persisted"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK HTTP Method Validation 07854a0de3db8f5849ecb6be3985befe POLICY OTK HTTP Method Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttZXRob2R9"/> <L7p:VariableToSet stringValue="http_method_allowed"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAubWV0aG9kfQ=="/> <L7p:VariableToSet stringValue="http_method_used"/> </L7p:SetVariable> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="method"/> <L7p:OutputVariable stringValue="method"/> <L7p:SplitPattern stringValue="|"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${method}"/> <L7p:Expression2 stringValue="${request.http.method}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${request.http.method}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDA1"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICAgICAgICAgICAgICAgImVycm9yIjoiaW52YWxpZF9tZXRob2QiLAogICAgICAgICAgICAgICAgImVycm9yX2Rlc2NyaXB0aW9uIjoiJHtyZXF1ZXN0Lmh0dHAubWV0aG9kfSBub3QgcGVybWl0dGVkIgogICAgICAgICAgICAgICAgfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:AddHeader> <L7p:HeaderName stringValue="ALLOW"/> <L7p:HeaderValue stringValue="${method}"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Persist 07854a0de3db8f5849ecb6be3985bf3e POLICY OTK id_token Persist Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="be6e4478-8216-4c75-b2f2-f0f80a7a0117"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token DB Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthenB9"/> <L7p:VariableToSet stringValue="temp.azp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzYWx0fQ=="/> <L7p:VariableToSet stringValue="temp.salt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzaGFyZWRfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="temp.shared_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpc3N9"/> <L7p:VariableToSet stringValue="temp.iss"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3R9"/> <L7p:VariableToSet stringValue="temp.jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNvdXJjZV9vd25lcn0="/> <L7p:VariableToSet stringValue="temp.resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzdWJ9"/> <L7p:VariableToSet stringValue="temp.sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzaGFyZWRfc2VjcmV0X3R5cGV9"/> <L7p:VariableToSet stringValue="temp.shared_secret_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="store variables because OTK id_token NoSQL Remove will override them"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="logout_apps"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token NoSQL Remove"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLmF6cH0="/> <L7p:VariableToSet stringValue="azp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnNhbHR9"/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnNoYXJlZF9zZWNyZXR9"/> <L7p:VariableToSet stringValue="shared_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLmlzc30="/> <L7p:VariableToSet stringValue="iss"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLmp3dH0="/> <L7p:VariableToSet stringValue="jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnJlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnN1Yn0="/> <L7p:VariableToSet stringValue="sub"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0ZW1wLnNoYXJlZF9zZWNyZXRfdHlwZX0="/> <L7p:VariableToSet stringValue="shared_secret_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="restore variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remove it first because of Cassandra update limitation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token NoSQL Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="jwt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="jwt"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sub"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="sub"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="salt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="salt"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="shared_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="shared_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="shared_secret_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="shared_secret_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="iss"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="iss"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="azp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="azp"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="and0PSR7and0fSZyZXNvdXJjZV9vd25lcj0ke3Jlc291cmNlX293bmVyfSZzdWI9JHtzdWJ9JnNhbHQ9JHtzYWx0fSZzaGFyZWRfc2VjcmV0PSR7c2hhcmVkX3NlY3JldH0mc2hhcmVkX3NlY3JldF90eXBlPSR7c2hhcmVkX3NlY3JldF90eXBlfSZpc3M9JHtpc3N9JmF6cD0ke2F6cH0="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/jwt_register"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager set valid user 07854a0de3db8f5849ecb6be3985beef POLICY oauth manager set valid user Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== This policy makes sure a non-administrator can only see their own data"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== This policy uses the variable 'current.user.role' which is exposed by 'OTK User Authentication'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Modify 'OTK User Authentication' to map usernames to roles."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Do not modify this policy for that task."/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="${cacheName}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${sessionID}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathSessionValue.result"/> <L7p:TargetContentType stringValue="text/xml;charset=UTF-8"/> <L7p:TargetDataType variableDataType="message"/> <L7p:TargetVariableName stringValue="userSession"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSessionUser"/> <L7p:XmlMsgSrc stringValue="userSession"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/usersession/user"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSessionUserRole"/> <L7p:XmlMsgSrc stringValue="userSession"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/usersession/role"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathLookupUser"/> <L7p:XmlMsgSrc stringValue="userSession"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/usersession/lookupUser"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSynchToken"/> <L7p:XmlMsgSrc stringValue="userSession"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/usersession/synchToken"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathSynchToken.result}"/> <L7p:Expression2 stringValue="${request.http.parameter.synchToken}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${request.http.parameter.synchToken}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNlc3Npb25Vc2VyLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="current.username"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNlc3Npb25Vc2VyUm9sZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="current.user.role"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aExvb2t1cFVzZXIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="session.lookupUser"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLmxvb2t1cFVzZXJ9"/> <L7p:VariableToSet stringValue="lookupUser"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isAdmin"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFN5bmNoVG9rZW4ucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="synchToken"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${current.user.role}"/> <L7p:Expression2 stringValue="admin"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="admin"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isAdmin"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnVzZXJuYW1lfQ=="/> <L7p:VariableToSet stringValue="lookupUser"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="admin"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="find out if the current user is an admin"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid token_endpoint_auth_methods_supported 07854a0de3db8f5849ecb6be3985beb3 POLICY #OTK openid token_endpoint_auth_methods_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid token_endpoint_auth_methods_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Add OpenID Supported Authentication methods"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Specify a comma separated list of values with each value within double-quotes"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Example: &quot;value01&quot;, &quot;value02&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="NOTE: OTK currently only supports 'client_secret_basic', 'client_secret_post'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/JWKs Endpoint/#OTK openid jwks_endpoint Configuration 07854a0de3db8f5849ecb6be3985bea3 POLICY #OTK openid jwks_endpoint Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid jwks_endpoint Configuration&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/JWKs Endpoint/OTK openid jwks_endpoint Configuration 07854a0de3db8f5849ecb6be3985bed3 POLICY OTK openid jwks_endpoint Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Multiple RSA keys can be specified"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="OTK uses the default SSL key by default"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="It is recommended to replace that key with a key made for this environment"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="It is also recommeded to update the key_id's (kid)"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="After updating 'kid' here update it also in 'OTK id_token Signing Algorithm - CUSTOM'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="After updating 'kid' here update it also in 'OTK id_token Validation - CUSTOM'"/> </L7p:CommentAssertion> <L7p:CreateJsonWebKey> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Add the private keys to be used with signing JWT (id_token)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Keys keys="included"> <L7p:item key="included"> <L7p:KeyId stringValue="default_ssl_key"/> <L7p:PublicKeyUse stringValue="Signature"/> <L7p:SourceKeyGoid goidValue="0000000000000000ffffffffffffffff"/> </L7p:item> </L7p:Keys> <L7p:TargetVariable stringValue="jwks"/> </L7p:CreateJsonWebKey> <L7p:Include> <L7p:PolicyGuid stringValue="8e3e1336-9fd7-46cd-b86c-a6ad8d89f204"/> </L7p:Include> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="jwks"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Update (user to request_token) 07854a0de3db8f5849ecb6be3985bf2d POLICY OTK Token Update (user to request_token) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="verifier"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="42b930fc-438f-4aaa-a702-7c45efe216fb"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="PUT"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/update?resource_owner=${resource_owner}&amp;token=${token}&amp;status=${token_status}&amp;verifier=${verifier}&amp;expiration=${expiration}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid ui_locales_supported 07854a0de3db8f5849ecb6be3985beb5 POLICY #OTK openid ui_locales_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid ui_locales_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Specify a comma separated list of values with each value within double-quotes"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Example: &quot;value01&quot;, &quot;value02&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="NOTE: OTK currently does not support any other locales"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid ui_locales_supported 07854a0de3db8f5849ecb6be3985bee2 POLICY OTK openid ui_locales_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ImVuLVVTIg=="/> <L7p:VariableToSet stringValue="ui_locales_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="da4c6896-31bd-481f-ac1e-bf4d2ea1e406"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${ui_locales_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="ui_locales_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK SCOPE Verification 07854a0de3db8f5849ecb6be3985befa POLICY OTK SCOPE Verification Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy validates SCOPE"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="resetting any context variable to handle cases where it is not defined"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHthbnl9"/> <L7p:VariableToSet stringValue="any"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:Split> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="valid SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:InputVariable stringValue="scope.granted"/> <L7p:OutputVariable stringValue="scopeGranted"/> <L7p:SplitPattern stringValue="[ ]"/> </L7p:Split> <L7p:Split> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="required SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:InputVariable stringValue="scope.required"/> <L7p:OutputVariable stringValue="scopeRequired"/> <L7p:SplitPattern stringValue="[ ]"/> </L7p:Split> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${scope.required}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ForEachLoop L7p:Usage="Required" iterationLimit="100" loopVariable="scopeRequired" variablePrefix="verifyScope"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="found"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${scopeGranted}"/> <L7p:Expression2 stringValue="${verifyScope.current}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${verifyScope.current}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${any}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="verifyScope.break"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="any"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="pass and break from iteration if any scopes are found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${any}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="NE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="NE"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="all"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="if we want to ensure all scopes match, we need to keep iterating"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="found"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${scopeGranted}"/> <L7p:Expression2 stringValue="${verifyScope.current}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Operator operator="NE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="NE"/> <L7p:RightValue stringValue="${verifyScope.current}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${any}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="NE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="NE"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="found"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="verifyScope.break"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="all"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="if we require all scopes to be found, and we find a scope that doesn't match, break"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${any}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="any"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="continue iterating if 'any' flag is true"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="iterate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="over each SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </L7p:ForEachLoop> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${found}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${fail}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="NE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="NE"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="pass if scopes were found and 'fail' flag is not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${found}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="NE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="NE"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${fail}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="pass if 'fail' flag is set and the scope is not found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE1"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="verification"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager dates tokens 07854a0de3db8f5849ecb6be3985bef0 POLICY oauth manager dates tokens Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:MsgVarPrefix stringValue="xsltFindDates"/> <L7p:OtherTargetMessageVariable stringValue="findDates"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-tokenstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text" omit-xml-declaration="yes"/> <xsl:template match="/"> <xsl:for-each select="(//ns:rexpiration|//ns:expiration|//ns:created)[text()!='0']"> <xsl:value-of select="text()"/><xsl:text>;</xsl:text> </xsl:for-each> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmaW5kRGF0ZXMubWFpbnBhcnR9"/> <L7p:VariableToSet stringValue="inputDates"/> </L7p:SetVariable> <L7p:Split> <L7p:InputVariable stringValue="inputDates"/> <L7p:OutputVariable stringValue="dates"/> <L7p:SplitPattern stringValue=";"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:ForEachLoop L7p:Usage="Required" iterationLimit="10000" loopVariable="dates" variablePrefix="date"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkYXRlLmN1cnJlbnR9"/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateFormat stringValue="&lt;Timestamp&gt;"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="current"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="toBeReturned"/> <L7p:PatternContainsVariables booleanValue="true"/> <L7p:Regex stringValue="[&gt;]${date.current}[&lt;]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&gt;${current.yyyy-MM-dd HH:mm:ss}&lt;"/> <L7p:Target target="OTHER"/> </L7p:Regex> </L7p:ForEachLoop> </wsp:All> <L7p:TrueAssertion/> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="toBeReturned"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid service_documentation 07854a0de3db8f5849ecb6be3985bed6 POLICY OTK openid service_documentation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke3NlcnZpY2VfZG9jdW1lbnRhdGlvbl9wYXRofQ=="/> <L7p:VariableToSet stringValue="service_documentation"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="3aad8ca6-1a3e-4067-bbc6-b9df513cf8e8"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${service_documentation}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="service_documentation"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/pof/OTK Token Count 07854a0de3db8f5849ecb6be3985bf20 POLICY OTK Token Count Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Ensure OTK Token count is within configured limits"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Operator operator="NE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="NE"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1e31b7cc-3bc0-4eb1-b722-be0623b852f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Count Check"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL, Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Count Check"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Unable to retrieve Token count from the database"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Get current count"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="No Results"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${tokenQuery.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${tokenQuery.queryresult.count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlblF1ZXJ5LmFjY2Vzc190b2tlbnNbMF19"/> <L7p:VariableToSet stringValue="oldestToken"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlblF1ZXJ5LmNyZWF0ZWRbMF19"/> <L7p:VariableToSet stringValue="oldestTokenCreated"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Results"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Check results"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Set count and oldest token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Within limit"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${tokenQuery.queryresult.count}"/> <L7p:Expression2 stringValue="${max_oauth_token_count}"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="${max_oauth_token_count}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${tokenQuery.queryresult.count}"/> <L7p:Expression2 stringValue="${max_oauth_token_count}"/> <L7p:Operator operator="GE"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="GE"/> <L7p:RightValue stringValue="${max_oauth_token_count}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${max_oauth_token_behaviour}"/> <L7p:Expression2 stringValue="error"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="error"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTM1"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${max_oauth_token_behaviour}"/> <L7p:Expression2 stringValue="cycle"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="cycle"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="280c8701-2641-413d-a3f5-107fa84e0ad0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Revocation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Revoke oldest token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${oldestToken}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Cycle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Max reached"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Check count against limit"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=CODE TOKEN 07854a0de3db8f5849ecb6be3985bf26 POLICY OTK response_type=CODE TOKEN Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="openIDConnectCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Only do something if openid is a granted SCOPE value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="================="/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code will be set if session store failed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="115 indicates that 'openid' was not part of SCOPE which is fine"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="115"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="115"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="either empty or 115 which is fine"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="91b9aa9b-fbe4-4944-8629-04c5695d122f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (temporary token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="${redirect_uri}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${genExpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="authorizationCode"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Generate code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5FeHBpcmF0aW9ufQ=="/> <L7p:VariableToSet stringValue="token_expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="47b375d9-e1bd-48a7-821a-2d78ba2615d6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${token_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${mac_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="${token_status}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Custom data passed to JWT generation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ewoJInNlc3Npb25fb3V0cHV0IjogJHtjdXN0b219LCAKCSJ1c2VybmFtZSI6ICIke3Jlc291cmNlX293bmVyfSIKfQoKCg=="/> <L7p:VariableToSet stringValue="jwt_custom"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0bbc94ef-dd4b-4936-b056-69455b375d7d"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate JWT OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="aud"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${jwt_custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jti"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="lifetime"/> <L7p:value stringValue="${lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Generate token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImFjY2Vzc190b2tlbiIKICAgICB2YWx1ZT0iJHthY2Nlc3NfdG9rZW59Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJleHBpcmVzX2luIgogICAgIHZhbHVlPSIke2xpZmV0aW1lfSIvPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idG9rZW5fdHlwZSIKICAgICB2YWx1ZT0iQmVhcmVyIi8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJjb2RlIgogICAgIHZhbHVlPSIke2F1dGhvcml6YXRpb25Db2RlfSIvPg=="/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2FjY2Vzc190b2tlbj0ke2FjY2Vzc190b2tlbn0mZXhwaXJlc19pbj0ke2xpZmV0aW1lfSZ0b2tlbl90eXBlPUJlYXJlciZjb2RlPSR7YXV0aG9yaXphdGlvbkNvZGV9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set responses"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${at_jwt}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="formResp"/> <L7p:Regex stringValue="access_token&quot;[\s]*value=[\s]*&quot;[^&quot;]*&quot;/&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token&quot; value=&quot;${at_jwt}&quot;/&gt;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="location"/> <L7p:Regex stringValue="access_token=.*&amp;e"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token=${at_jwt}&amp;e"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if use JWT, update acces_token in client response or location"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK Variable Configuration 07854a0de3db8f5849ecb6be3985bef5 POLICY OTK Variable Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="TUFD"/> <L7p:Enabled booleanValue="false"/> <L7p:VariableToSet stringValue="oauth2_token_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="QkVBUkVS"/> <L7p:VariableToSet stringValue="oauth2_token_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Server type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Configure the type of token that should be issued. MAG supports 'BEARER' only"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX06JHtnYXRld2F5Lm90ay5wb3J0fQ=="/> <L7p:VariableToSet stringValue="host_oauth2_auth_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L2F1dGgvb2F1dGgvdjIvYXV0aG9yaXpl"/> <L7p:VariableToSet stringValue="oauth2_auth_path"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L2F1dGgvb2F1dGgvdjIvdG9rZW4="/> <L7p:VariableToSet stringValue="oauth2_token_path"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L2F1dGgvb2F1dGgvdjIvdG9rZW4vcmV2b2tl"/> <L7p:VariableToSet stringValue="oauth2_token_revocation_path"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Server Auth Server"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Configure values related to the authorization server"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="Please review the values below and configure them to your needs"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Match the hostname that will be used by oauth clients"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtnYXRld2F5LmNsdXN0ZXIuaG9zdG5hbWV9"/> <L7p:VariableToSet stringValue="oauth2_server_hostname"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Match the name of the cert that is used when SSL connections are made with oauth clients. The name has to match the value in 'Tasks - Manage Certificates'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtnYXRld2F5LmNsdXN0ZXIuaG9zdG5hbWV9"/> <L7p:VariableToSet stringValue="oauth2_server_certificate"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Match the port through which oauth clients connect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtnYXRld2F5Lm90ay5wb3J0fQ=="/> <L7p:VariableToSet stringValue="oauth2_server_port"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the url prefix if a prefix has been used when these policies were installed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="oauth2_server_url_prefix"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="expose_client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="enable_anonymous_client_export"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Modify the value below ONLY if the path has been modified"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="L2Nvbm5lY3Qvc2Vzc2lvbi9sb2dvdXQ="/> <L7p:VariableToSet stringValue="usersession_logout_path"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L29wZW5pZC9jb25uZWN0L3YxL3VzZXJpbmZv"/> <L7p:VariableToSet stringValue="userinfo_path"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L2Nvbm5lY3Qvc2Vzc2lvbi9zdGF0dXM="/> <L7p:VariableToSet stringValue="usersession_status_path"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L29wZW5pZC9jb25uZWN0L2p3a3MuanNvbg=="/> <L7p:VariableToSet stringValue="jwks_uri_path"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L29wZW5pZC9jb25uZWN0L3JlZ2lzdGVy"/> <L7p:VariableToSet stringValue="oidc_register_path"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="L2FwaWRvY3MvYXV0aC9vYXV0aC92Mi9zd2FnZ2Vy"/> <L7p:VariableToSet stringValue="service_documentation_path"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="The content below will be added to the configuration export JSON message as is"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Im9hdXRoX2RlbW9fcHJvdGVjdGVkX2FwaV9lbmRwb2ludF9wYXRoIjoiL29hdXRoL3YyL3Byb3RlY3RlZGFwaS9mb28iLAoibWFnX2RlbW9fcHJvZHVjdHNfZW5kcG9pbnRfcGF0aCI6Ii9wcm90ZWN0ZWQvcmVzb3VyY2UvcHJvZHVjdHMi"/> <L7p:VariableToSet stringValue="export_custom"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Cache Lifetime for JWT as client credential can be modified in the customizable policy"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTgwMA=="/> <L7p:VariableToSet stringValue="client_credential_jwt_cache_lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Export"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Configure values related to the OAuth Manager client_id export feature"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Include> <L7p:PolicyGuid stringValue="ab74d42c-0db5-4a39-a5c5-663c23e8f158"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/#OTK openid response_types_supported 07854a0de3db8f5849ecb6be3985beaa POLICY #OTK openid response_types_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid response_types_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/pof/OTK setClientKeyOptionalValues 07854a0de3db8f5849ecb6be3985bf1f POLICY OTK setClientKeyOptionalValues Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Used at two positions within the clientstore policy"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="b29i"/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="handle optional scope"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${environment}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="QUxM"/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="handle optional environment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${callback}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="b29i"/> <L7p:VariableToSet stringValue="callback"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="handle optional callback"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${key_custom}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="key_custom"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an empty value, set default if found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="handle optional custom field. We always want valid JSON"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/oauth manager/#oauth manager config 07854a0de3db8f5849ecb6be3985bec3 POLICY #oauth manager config Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;oauth manager config&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager config 07854a0de3db8f5849ecb6be3985bef2 POLICY oauth manager config Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Configure OAuth Manager details to your needs"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="T0F1dGggTWFuYWdlcg=="/> <L7p:VariableToSet stringValue="this.app.name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Change_it"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="This is used to sign the cookie. Change this value to a unique value."/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZWY2MjQ1ZGEtZjQ0Mi00YTYyLTllOTktNTJkMWI3ZGI1NGZk"/> <L7p:VariableToSet stringValue="cookieKey"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Change_it"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="This is the lifetime of a user session, including the cookie lifetime"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzYwMA=="/> <L7p:VariableToSet stringValue="session.lifetime.s"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="May"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Change this URL to a fixed value if desired"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke3JlcXVlc3QudXJsLmhvc3R9OiR7Z2F0ZXdheS5vdGsucG9ydH0ke3JlcXVlc3QudXJsLnBhdGh9"/> <L7p:VariableToSet stringValue="this.app.url"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Most likely no changes needed as of here"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="css"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="bDdtYW5hZ2VyQ2FjaGU="/> <L7p:VariableToSet stringValue="cacheName"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Watch out"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="If this values gets changed it has to be changed at 'oauth manager validate cookie' also"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bDdtYW5hZ2Vy"/> <L7p:VariableToSet stringValue="cookieName"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLnN0YXRlfQ=="/> <L7p:VariableToSet stringValue="state"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="sessionID"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="95ebb6bb-096c-462e-9e14-ff66b538e6e3"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used with searches for tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm9mZnNldH0="/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${offset}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used with searches for tokens"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MA=="/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="offset"/> </L7p:SetVariable> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used for pagination in OAuth Manager"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAucGFyYW1ldGVyLm9mZnNldFZhbHVlfQ=="/> <L7p:VariableToSet stringValue="offsetValue"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="offsetValue"/> </L7p:SetVariable> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Validate JWT OAuth Token 07854a0de3db8f5849ecb6be3985bf09 POLICY OTK Validate JWT OAuth Token Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: OTK Validate JWT OAuth Token"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize variable 'query_db'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="query_db"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="e2cb9346-339b-4e4c-96a3-313f6634e8b8"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqdGkucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="jwt_id"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// invalid jwt"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTIx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=AUTHORIZATION_CODE 07854a0de3db8f5849ecb6be3985bf1b POLICY OTK grant_type=AUTHORIZATION_CODE Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy handles the grant_type authorization_code"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_id}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for required variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5a70e794-d2a3-4f99-8b9f-4a0e3eb18324"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Authorization Code Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue="${code}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="redirect_uri"/> <L7p:value stringValue="${redirect_uri}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CommentAssertion> <L7p:Comment stringValue="=========== Create ID_TOKEN and response message ==========="/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="MAC"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="MAC"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJtYWMiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIsCiAgIm1hY19rZXkiOiIke21hY19zZWNyZXR9IiwKICAibWFjX2FsZ29yaXRobSI6ImhtYWMtc2hhLTEiCn0="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYWNfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MAC"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=MAC"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="No id_token"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="If 'no-id-token' is part of the granted SCOPE do not issue an id_token. Used for the client 'MAG Authorization Server'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="no-id-token"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OpenID Connect"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The client request SCOPE=openid"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Do not go in here if this code is used to register a device. In that case we do not want to create an id_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="msso_register"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mobile SSO Scope Verification"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="openIDConnectCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTEz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify session was found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="xpathValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="sessionValue"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzZXNzaW9uVmFsdWV9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="session"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathSalt"/> <L7p:XmlMsgSrc stringValue="session"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/salt"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNhbHQucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Salt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathNonce"/> <L7p:XmlMsgSrc stringValue="session"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/nonce"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aE5vbmNlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="nonce"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="nonce"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Nonce"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${magidentifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ee4c5b85-4511-4031-beb0-5572a4f50530"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Device App Persist - Authorization Code"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${magidentifier}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfaWR9"/> <L7p:VariableToSet stringValue="valid_user"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Audience"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the audience (valid user) for the id_token. either the client_id or the mag-identifier"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAcr"/> <L7p:XmlMsgSrc stringValue="session"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/acr"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAuthTime"/> <L7p:XmlMsgSrc stringValue="session"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/authTime"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathTPSSOToken"/> <L7p:XmlMsgSrc stringValue="session"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/third_party_sso_token"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathTPSSOTokenType"/> <L7p:XmlMsgSrc stringValue="session"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/third_party_sso_token_type"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathMaxAge"/> <L7p:XmlMsgSrc stringValue="session"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/max_age"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:TrueAssertion/> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEF1dGhUaW1lLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="auth_time"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ea0db7be-ce05-4daa-a5fb-ac1ea3e74d49"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Generation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue="${xpathAcr.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authTime"/> <L7p:value stringValue="${auth_time}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${valid_user}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="code"/> <L7p:value stringValue="${code}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${session_output}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="nonce"/> <L7p:value stringValue="${nonce}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token"/> <L7p:value stringValue="${xpathTPSSOToken.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="third_party_sso_token_type"/> <L7p:value stringValue="${xpathTPSSOTokenType.result}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="db7a90bf-e85d-42bd-93db-a2950dbc2a51"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Persist"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${valid_user}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="iss"/> <L7p:value stringValue="${iss}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${jwt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue="${salt}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue="${shared_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_type"/> <L7p:value stringValue="${alg}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue="${sub}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="id_token"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// find existing id_token or create a new one"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIsCiAgImlkX3Rva2VuIjoiJHtqd3R9IiwKICAiaWRfdG9rZW5fdHlwZSI6IiR7Z2VuZXJhdGVkX3Nzb190b2tlbl90eXBlfSIKfQ=="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OpenID Connect"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Handle the OpenID Connect flow"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="115"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="115"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for previous errors. 115 is ok"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="No OpenID Connect"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The client did not request 'SCOPE=openid'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope.granted}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="No OpenID Connect"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The client did not request SCOPE=openid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="action"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="OpenID Connect"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${clientResponse}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="Bearer"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="Bearer"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIKfQ=="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="nonce"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Bearer"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="No OpenID Connect involved"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager validate cookie 07854a0de3db8f5849ecb6be3985bef4 POLICY oauth manager validate cookie Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== This policy validates the cookie used with OAuth Manager"/> </L7p:CommentAssertion> <L7p:CookieCredentialSource> <L7p:CookieName stringValue="l7manager"/> <L7p:VariablePrefix stringValue="session"/> </L7p:CookieCredentialSource> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="session.l7manager"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cookieContent"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:Split> <L7p:InputVariable stringValue="cookieContent"/> <L7p:OutputVariable stringValue="userSession"/> <L7p:SplitPattern stringValue="|"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1c2VyU2Vzc2lvblswXX0="/> <L7p:VariableToSet stringValue="sessionID"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1c2VyU2Vzc2lvblsxXX0="/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1c2VyU2Vzc2lvblsyXX0="/> <L7p:VariableToSet stringValue="signature"/> </L7p:SetVariable> <L7p:GenerateSecurityHash> <L7p:Base64Data stringValue="JHtzZXNzaW9uSUR9fCR7ZXhwaXJhdGlvbn18"/> <L7p:KeyText stringValue="${cookieKey}"/> <L7p:LineBreak lineBreak="CR-LF"/> <L7p:TargetOutputVariable stringValue="actualHash"/> </L7p:GenerateSecurityHash> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="actualHash"/> <L7p:Regex stringValue="[ =+/]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${actualHash}"/> <L7p:Expression2 stringValue="${signature}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${signature}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${expiration}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GE"/> <L7p:RightValue stringValue="${gateway.time.seconds}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="expiration"/> <L7p:item stringValue="sessionID"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=TOKEN 07854a0de3db8f5849ecb6be3985bf2a POLICY OTK response_type=TOKEN Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5FeHBpcmF0aW9ufQ=="/> <L7p:VariableToSet stringValue="token_expiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9I2FjY2Vzc190b2tlbj0ke2FjY2Vzc190b2tlbn0mZXhwaXJlc19pbj0ke2xpZmV0aW1lfQ=="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImFjY2Vzc190b2tlbiIKICAgICB2YWx1ZT0iJHthY2Nlc3NfdG9rZW59Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJleHBpcmVzX2luIgogICAgIHZhbHVlPSIke2xpZmV0aW1lfSIvPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idG9rZW5fdHlwZSIKICAgICB2YWx1ZT0iQmVhcmVyIi8+"/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhdGlvbn0mdG9rZW5fdHlwZT1CZWFyZXI="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="mac_key"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=BEARER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnZW5TZWNyZXR9"/> <L7p:VariableToSet stringValue="mac_key"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImFjY2Vzc190b2tlbiIKICAgICB2YWx1ZT0iJHthY2Nlc3NfdG9rZW59Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJleHBpcmVzX2luIgogICAgIHZhbHVlPSIke2xpZmV0aW1lfSIvPgogICAgPGlucHV0IHR5cGU9ImhpZGRlbiIgbmFtZT0idG9rZW5fdHlwZSIKICAgICB2YWx1ZT0ibWFjIi8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJtYWNfa2V5IgogICAgIHZhbHVlPSIke21hY19rZXl9Ii8+CiAgICA8aW5wdXQgdHlwZT0iaGlkZGVuIiBuYW1lPSJtYWNfYWxnb3JpdGhtIgogICAgIHZhbHVlPSJobWFjLXNoYS0xIi8+"/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhdGlvbn0mdG9rZW5fdHlwZT1tYWMmbWFjX2tleT0ke21hY19rZXl9Jm1hY19hbGdvcml0aG09aG1hYy1zaGEtMQ=="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response_mode=form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=MAC"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="complete the location header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="47b375d9-e1bd-48a7-821a-2d78ba2615d6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (access_token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${token_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue="${mac_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue="${token_status}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Custom data passed to JWT generation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ewoJInNlc3Npb25fb3V0cHV0IjogJHtjdXN0b219LCAKCSJ1c2VybmFtZSI6ICIke3Jlc291cmNlX293bmVyfSIKfQoKCg=="/> <L7p:VariableToSet stringValue="jwt_custom"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="0bbc94ef-dd4b-4936-b056-69455b375d7d"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate JWT OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="aud"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${jwt_custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jti"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="lifetime"/> <L7p:value stringValue="${lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${at_jwt}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="formResp"/> <L7p:Regex stringValue="access_token&quot;[\s]*value=[\s]*&quot;[^&quot;]*&quot;/&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token&quot; value=&quot;${at_jwt}&quot;/&gt;"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="location"/> <L7p:Regex stringValue="access_token=.*&amp;e"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="access_token=${at_jwt}&amp;e"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if use JWT, update acces_token in client response or location"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="135"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="135"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZXJyb3I9YWNjZXNzX2RlbmllZCZlcnJvcl9kZXNjcmlwdGlvbj1tYXhpbXVtJTIwbnVtYmVyJTIwb2YlMjB0b2tlbnMlMjByZWFjaGVk"/> <L7p:VariableToSet stringValue="location_error"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="135"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZXJyb3I9c2VydmVyX2Vycm9yJmVycm9yX2Rlc2NyaXB0aW9uPWFuJTIwdW5rbm93biUyMGVycm9yJTIwb2NjdXJyZWQ="/> <L7p:VariableToSet stringValue="location_error"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error Code Set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZXJyb3I9aW52YWxpZF90b2tlbl90eXBlJmVycm9yX2Rlc2NyaXB0aW9uPWludmFsaWQlMjB0b2tlbiUyMHR5cGUlMjBzcGVjaWZpZWQ="/> <L7p:VariableToSet stringValue="location_error"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue="?"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="?"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9JiR7bG9jYXRpb25fZXJyb3J9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9PyR7bG9jYXRpb25fZXJyb3J9"/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="construct location header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/token/OTK Manager Token Revocation 07854a0de3db8f5849ecb6be3985bf11 POLICY OTK Manager Token Revocation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes a client. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b9e87b0b-95de-4cdb-bcf7-4f85d30fe67e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token DB Revocation"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Token NoSQL Revocation"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="rtoken"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="rtoken"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="DELETE"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/revoke?client_key=${client_key}&amp;resource_owner=${resource_owner}&amp;token=${token}&amp;rtoken=${rtoken}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Persist 07854a0de3db8f5849ecb6be3985bf13 POLICY OTK Manager Client Persist Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy persists a client. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_client_and_key}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2FuZF9rZXk="/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client and client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_client}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50"/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${persist_client_key}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleQ=="/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="persist_type"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set the correct persistence type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="102a76f5-ae47-4930-8d93-bd02d738a3ee"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client DB Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client NoSQL Persist"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="callback"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="callback"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="description"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="description"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="org"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="org"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="registered_by"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="registered_by"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="environment"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="environment"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="key_custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="key_custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="service_ids"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="service_ids"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="account_plan_mapping_ids"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="account_plan_mapping_ids"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="persist_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="persist_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2FsbGJhY2s9JHtjYWxsYmFja30mY2xpZW50X2lkZW50PSR7Y2xpZW50X2lkZW50fSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleX0mZGVzY3JpcHRpb249JHtkZXNjcmlwdGlvbn0mZW52aXJvbm1lbnQ9JHtlbnZpcm9ubWVudH0mZXhwaXJhdGlvbj0ke2V4cGlyYXRpb259Jm5hbWU9JHtjbGllbnRfbmFtZX0mb3JnPSR7b3JnfSZwZXJzaXN0X3R5cGU9JHtwZXJzaXN0X3R5cGV9JnJlZ2lzdGVyZWRfYnk9JHtyZWdpc3RlcmVkX2J5fSZzY29wZT0ke3Njb3BlfSZzZWNyZXQ9JHtjbGllbnRfc2VjcmV0fSZzdGF0dXM9JHtjbGllbnRfc3RhdHVzfSZ0eXBlPSR7dHlwZX0mY2xpZW50X2N1c3RvbT0ke2NsaWVudF9jdXN0b219JmNsaWVudF9rZXlfY3VzdG9tPSR7a2V5X2N1c3RvbX0mc2VydmljZV9pZHM9JHtzZXJ2aWNlX2lkc30mYWNjb3VudF9wbGFuX21hcHBpbmdfaWRzPSR7YWNjb3VudF9wbGFuX21hcHBpbmdfaWRzfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/store"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/#OTK openid id_token_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985beac POLICY #OTK openid id_token_signing_alg_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid id_token_signing_alg_values_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/session/OTK Session-Store 07854a0de3db8f5849ecb6be3985bf47 POLICY OTK Session-Store Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy stores a session. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_session_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="c3RvcmU="/> <L7p:VariableToSet stringValue="operation"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a2364b62-7ea8-4a77-a610-3ece64aec8ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session DB"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session NoSQL"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheId}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==cacheId"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheAge}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==cacheAge"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheMaxEntries}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheMaxEntries"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==cacheMaxEntries"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheMaxSize}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheMaxSize"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==cacheMaxSize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbAge}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="dbAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==dbAge"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==DEFAULT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set default empty values for any non mandatory fields that haven't been specified"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheKey"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheKey"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheId"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheId"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheAge"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheAge"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheMaxEntries"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheMaxEntries"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheMaxSize"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheMaxSize"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="dbAge"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="dbAge"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="value"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="value"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2FjaGVLZXk9JHtjYWNoZUtleX0mY2FjaGVJZD0ke2NhY2hlSWR9JmNhY2hlQWdlPSR7Y2FjaGVBZ2V9JmNhY2hlTWF4RW50cmllcz0ke2NhY2hlTWF4RW50cmllc30mY2FjaGVNYXhTaXplPSR7Y2FjaGVNYXhTaXplfSZkYkFnZT0ke2RiQWdlfSZ2YWx1ZT0ke3ZhbHVlfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="storeSession"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_session_server}/oauth/session/store"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="storeSession"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Lookup 07854a0de3db8f5849ecb6be3985bf39 POLICY OTK id_token Lookup Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a23761d-8dde-4295-b30e-6241cbdb14e5"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token DB Lookup"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token NoSQL Lookup"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="jwt"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="jwt"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sub"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="sub"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="azp"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="azp"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="format"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="format"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/jwt_lookup?resource_owner=${resource_owner}&amp;jwt=${jwt}&amp;sub=${sub}&amp;azp=${azp}&amp;format=${format}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/#OTK openid jwks_uri 07854a0de3db8f5849ecb6be3985beab POLICY #OTK openid jwks_uri Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid jwks_uri&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Get (token) 07854a0de3db8f5849ecb6be3985bf30 POLICY OTK Token Get (token) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eG1s"/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW4="/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${return_json}"/> <L7p:Expression2 stringValue="true"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="anNvbg=="/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Setting return format"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1c2e888c-7f82-45f5-9bdf-9ef42fd65bd3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="rtoken"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="rtoken"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="queryOffset"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="queryOffset"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/get?token=${token}&amp;rtoken=${rtoken}&amp;client_key=${client_key}&amp;resource_owner=${resource_owner}&amp;status=${token_status}&amp;format=${format}&amp;offset=${queryOffset}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/analyse/OTK Analyze App Usage 07854a0de3db8f5849ecb6be3985bf3f POLICY OTK Analyze App Usage Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy gets analytics-like data. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Parameter 'other' is available but currently not used"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_ident}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// missing parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for missing parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:ConcurrentAll wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="df10cf53-7b6f-4194-831e-d15685d8ef6f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Key DB Count"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL, Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Key NoSQL Count"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="db"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb3VudH0="/> <L7p:VariableToSet stringValue="installCount"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="other"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="other"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/clientKeys/count?client_ident=${client_ident}&amp;other=${other}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="clientstore_resp"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="$..count"/> <L7p:OtherTargetMessageVariable stringValue="clientstore_resp"/> <L7p:Target target="OTHER"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqc29uUGF0aC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="installCount"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="extracting response data failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="unknown error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Install Count"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e6c28878-44b1-4761-8aa2-be5d961794ce"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Count"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Active Users"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="MySQL, Oracle"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Count"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Active Users"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Cassandra"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="db"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjb3VudH0="/> <L7p:VariableToSet stringValue="activeUsers"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="other"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="other"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/tokens/count?client_ident=${client_ident}&amp;other=${other}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="tokenstore_resp"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="$..count"/> <L7p:OtherTargetMessageVariable stringValue="tokenstore_resp"/> <L7p:Target target="OTHER"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqc29uUGF0aC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="activeUsers"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="extracting response data failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="unknown error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Active Users"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:ConcurrentAll> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/#OTK Fail with error message 07854a0de3db8f5849ecb6be3985beba POLICY #OTK Fail with error message Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK Fail with error message&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set Context Variables to override their values in the target policy below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Customizations:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="DO NOT CHANGE OR OVERWRITE EXISTING ERROR CODES!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Add error codes as desired! Follow the existing pattern!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Create any code in the 700-899 range!"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="custom"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="custom"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImN1c3RvbV9lcnJvciIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiQ3VzdG9tIGVycm9yIGRlc2NyaXB0aW9uIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== custom"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// custom error handling"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Fail with error message 07854a0de3db8f5849ecb6be3985befc POLICY OTK Fail with error message Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy should be used as an encapsulated assertion"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="OTK has error responses configured that are specified here"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="OTK policies pass in an error code and this encapsulated assertion will return appropriate errors"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="==="/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="cache errors for performance reasons"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFpbEVycm9yTWVzc2FnZUNhY2hl"/> <L7p:VariableToSet stringValue="cacheName"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remember if a value if cache"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isCached"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:HandleErrors L7p:Usage="Required" includeIOException="false" variablePrefix="errors"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="From cache"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheName}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${givenErrorCode}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAcceptableAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="300"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="cacheValue"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="errordetail"/> <L7p:OtherTargetMessageVariable stringValue="cacheValue"/> <L7p:Regex stringValue="status([0-9]{1,10})description(.+)"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcmRldGFpbFsxXX0="/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvcmRldGFpbFsyXX0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="remember if a value if cache"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isCached"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="from cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Include> <L7p:PolicyGuid stringValue="99bf7e79-03d3-4a56-89e6-972626d7edae"/> </L7p:Include> <L7p:CommentAssertion> <L7p:Comment stringValue="CA Mobile API Gateway related"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="15795857-d8a2-4b45-9722-94fc1ce9098a"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Fail with error message"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.msg}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="OAuth token validation related"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="990"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="990"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVmFsaWRhdGlvbiBlcnJvciIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="990"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="expired or unknown token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="991"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="991"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVmFsaWRhdGlvbiBlcnJvciIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="991"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="missing SCOPE, permissions"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="992"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="992"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVmFsaWRhdGlvbiBlcnJvciIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="992"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no or multiple access_token were provided"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="993"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="993"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVmFsaWRhdGlvbiBlcnJvciIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="993"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="disabled token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="OAuth authorization page related"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="114"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="114"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVkaXJlY3RfdXJpIiwKICAiZXJyb3JfZGVzY3JpcHRpb24iOiJPbmUgb3IgbW9yZSByZWRpcmVjdF91cmkgdmFsdWVzIGFyZSBpbnZhbGlkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="114"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="mismatching redirect uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="123"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="123"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImF1dGhlbnRpY2F0aW9uX2Vycm9yIiwKICAiZXJyb3JfZGVzY3JpcHRpb24iOiJUaGUgcmVzb3VyY2Vfb3duZXIgY2FuY2VsbGVkIGF1dGhlbnRpY2F0aW9uIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="123"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="resource owner denied authentication"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="124"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="124"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImFjY2Vzc19kZW5pZWQiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6IlRoZSByZXNvdXJjZV9vd25lciBkZW5pZWQgYWNjZXNzIHRvIHJlc291cmNlcyIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="124"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="resource owner denied access to resources"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="110"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="110"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHNlc3Npb24gaGFzIGV4cGlyZWQgb3IgYWxyZWFkeSBiZWVuIGdyYW50ZWQuIFRoZSBsb2dpbiBwcm9jZXNzIGhhcyB0byBiZSByZXBlYXRlZCB0byBiZSBzdWNjZXNzZnVsIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="110"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="Authentication related"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="201"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="201"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfY2xpZW50IiwKICAiZXJyb3JfZGVzY3JpcHRpb24iOiJUaGUgZ2l2ZW4gY2xpZW50IGNyZWRlbnRpYWxzIHdlcmUgbm90IHZhbGlkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="201"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid client related"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="202"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="202"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImxvZ2luX3JlcXVpcmVkIiwKICAiZXJyb3JfZGVzY3JpcHRpb24iOiJUaGUgcmVzb3VyY2Ugb3duZXIgY291bGQgbm90IGJlIGF1dGhlbnRpY2F0ZWQgZHVlIHRvIG1pc3Npbmcgb3IgaW52YWxpZCBjcmVkZW50aWFscyIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="202"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid resource owner credentials"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="203"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="203"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAz"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiU1NMIGlzIHJlcXVpcmVkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="203"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Missing SSL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="204"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="204"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAz"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiU1NMIHdpdGggY2xpZW50IGF1dGhlbnRpY2F0aW9uIGlzIHJlcXVpcmVkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Missing SSL and/or client certificate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="205"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="205"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogImVycm9yIjoiaW52YWxpZF9yZXF1ZXN0IiwKICJlcnJvcl9kZXNjcmlwdGlvbiI6IlRoZSBjbGllbnQgY2VydGlmaWNhdGUgaXMgbm90IHZhbGlkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="205"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid client certificate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CommentAssertion> <L7p:Comment stringValue="Others"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="103"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="103"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="no parameters or duplicate parameters or a missing required parameters"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiTWlzc2luZyBvciBkdXBsaWNhdGUgcGFyYW1ldGVycyIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="103"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid parameter related"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="111"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="111"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The number of requests has exceeded the accepted limit"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDI5"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIG51bWJlciBvZiBwZXJtaXR0ZWQgcmVxdWVzdHMgaGFzIGJlZW4gZXhjZWVkZWQiCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="111"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="too many requests"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="112"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="112"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="either an invalid code_challenge or code_challenge_method"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoidGhlIGNvZGVfY2hhbGxlbmdlIG9yIGNvZGVfY2hhbGxlbmdlX21ldGhvZCBpcyBpbnZhbGlkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="112"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid PKCE parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="113"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="113"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfZ3JhbnQiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6IlRoZSBnaXZlbiBncmFudCBpcyBpbnZhbGlkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="113"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid grant"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="115"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="115"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfc2NvcGUiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6Ik5vIHJlZ2lzdGVyZWQgc2NvcGUgdmFsdWUgZm9yIHRoaXMgY2xpZW50IGhhcyBiZWVuIHJlcXVlc3RlZCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="115"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="no matching registered SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="116"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="116"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6InVuc3VwcG9ydGVkX3Jlc3BvbnNlX3R5cGUiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6Ik5vbmUgb2YgdGhlIHN1cHBvcnRlZCByZXNwb25zZV90eXBlcyB3ZXJlIHVzZWQiCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="116"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unsupported response type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="117"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="117"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6InVuYXV0aG9yaXplZF9jbGllbnQiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6IlRoZSBjbGllbnQgbWlzc2VzIGF1dGhvcml6YXRpb24gZm9yIHRoaXMgcmVxdWVzdCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="117"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="missing client authorization"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="118"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="118"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NTAz"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6InVuc3VwcG9ydGVkX3Rva2VuX3R5cGUiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6InRoZSBnaXZlbiB0eXBlIG9mIHRva2VuIGlzIG5vdCBzdXBwb3J0ZWQiCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="118"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unsupported token type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="119"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="119"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6InVuc3VwcG9ydGVkX2dyYW50X3R5cGUiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6IlRoZSBnaXZlbiBncmFudF90eXBlIGlzIG5vdCBzdXBwb3J0ZWQiCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="119"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unsupported grant_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="120"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="120"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGlkX3Rva2VuIGhhcyBtaXNzaW5nIGNsYWltcyBvciBoYXMgZXhwaXJlZCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="120"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="121"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="121"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGdpdmVuIEpXVCBpcyBpbnZhbGlkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="121"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="122"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="122"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIEpXVCAtIGlkX3Rva2VuIGNvdWxkIG5vdCBiZSBjcmVhdGVkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="122"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="JWT - id_token could not be created"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="300"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="300"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiQ2xpZW50KF9pZCkgdmFsdWUgY291bGQgbm90IGJlIHBlcnNpc3RlZCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="client_id could not be persisted"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="301"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="301"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHZhbHVlIGZvciAncGVyc2lzdF90eXBlJyBpcyBub3Qgc3VwcG9ydGVkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="301"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unknown persist_type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="303"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="303"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHBhdGggY29tcG9uZW50IG9mIHRoZSBVUkwgaXMgaW52YWxpZCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="303"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invald path"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="304"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="304"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAy"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImNvbnNlbnRfcmVxdWlyZWQiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6IlRoZSBhdXRob3JpemF0aW9uIHNlcnZlciByZXF1aXJlcyB1c2VyIGNvbnNlbnQiCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="304"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="consent required"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="125"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="125"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiQSB2ZXJpZmllciBoYXMgYWxyZWFkeSBiZWVuIHNldCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="125"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid verifier"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="126"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="126"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGdpdmVuIHN0YXR1cyBkb2VzIG5vdCBtYXRjaCB0aGUgYWN0dWFsIGNsaWVudCBzdGF0dXMiCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="126"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid client_id status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="127"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="127"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGdpdmVuIGNsaWVudF9pZCBoYXMgZXhwaXJlZCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="127"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="expired client_id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="128"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="128"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGNsaWVudCBuYW1lIGlzIG5vdCB2YWxpZCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="128"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid client name"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="129"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="129"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGVudmlyb25tZW50IGlzIG5vdCB2YWxpZCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="129"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid environment"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="130"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="130"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGNsaWVudCB0eXBlIGlzIG5vdCB2YWxpZCIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="130"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid client type"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="131"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="131"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGlkX3Rva2VuIGNvdWxkIG5vdCBiZSBjcmVhdGVkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="131"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="id_token error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="132"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="132"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHNlcnZlciBjb25maWd1cmF0aW9uIGlzIGludmFsaWQuIENvbnRhY3QgdGhlIGFkbWluaXN0cmF0b3IiCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="132"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid server configuration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="133"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="133"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIGdpdmVuIG1lc3NhZ2UgaXMgbm90IGEgdmFsaWQgSlNPTiBvYmplY3QiCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="133"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="invalid JSON object"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="134"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="134"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHJlcXVlc3QgZGlkIG5vdCBtYXRjaCBDT1JTIHJlcXVpcmVtZW50cyIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="134"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="CORS requirements did not match"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="135"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="135"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIG1heGltdW0gbnVtYmVyIG9mIHRva2VucyBoYXMgYmVlbiByZWFjaGVkIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="135"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Max number of OAuth Sessions reached"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="136"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="136"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfY29uZmlndXJhdGlvbiIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHB1YmxpYyBrZXkgaGFzaCBjb3VsZCBub3QgYmUgY3JlYXRlZC4gQ29udGFjdCB0aGUgYWRtaW5pc3RyYXRvciIKfQ=="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="136"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// public key hash could not be created"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="305"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="305"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWQgandrcyBhbmQgandrc191cmkiLAogICJlcnJvcl9kZXNjcmlwdGlvbiI6IlRoZSBqd2tzX3VyaSBhbmQgandrcyBwYXJhbWV0ZXJzIE1VU1QgTk9UIGJlIHVzZWQgdG9nZXRoZXIuIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="305"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// both jwks and jwks_uri are provided at OIDC registration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="306"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="306"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWQgY2xpZW50IiwKICAiZXJyb3JfZGVzY3JpcHRpb24iOiJUaGUgZ2l2ZW4gSldUIGZvciBjbGllbnQgYXV0aGVudGljYXRpb24gaXMgaW52YWxpZC4iCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="306"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client jwt for client authentication is invalid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="307"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="307"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfY2xpZW50IiwKICAiZXJyb3JfZGVzY3JpcHRpb24iOiJSZXF1ZXN0IGlzIGEgcmVwbGF5IGF0dGFjay4iCn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="307"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// request is a replay attack"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="308"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="308"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAx"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfY2xpZW50IiwKICAiZXJyb3JfZGVzY3JpcHRpb24iOiJSZXBsYXkgYXR0YWNrIHByb3RlY3Rpb24gY291bGQgbm90IGJlIGFwcGxpZWQuIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="308"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// replay attack protection could not be applied"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue="000"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="000"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NTAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHJlcXVlc3QgZmFpbGVkIGR1ZSB0byBzb21lIHVua25vd24gcmVhc29uIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unknown server side error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="An unknown or empty error code was given: Given: API-Prefix: '${apiPrefix}', error code: '${givenErrorCode}'. Setting it to '000'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NTAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="override"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set to '000' since none was given"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="givenErrorCode"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsCiAgImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHJlcXVlc3QgZmFpbGVkIGR1ZSB0byBzb21lIHVua25vd24gcmVhc29uIgp9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:RaiseError/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no matching"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="the given error code is not handled"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Find the appropriate error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </L7p:HandleErrors> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isCached}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${givenErrorCode}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="c3RhdHVzJHtzdGF0dXN9ZGVzY3JpcHRpb24ke2Vycm9yLm1zZ30="/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="cacheValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheName}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${givenErrorCode}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="100"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="300"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="cacheValue"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="cache the error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="or not to cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthcGlQcmVmaXh9JHtnaXZlbkVycm9yQ29kZX0="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/authentication/OTK User Attribute Look Up Extension 07854a0de3db8f5849ecb6be3985becc POLICY OTK User Attribute Look Up Extension Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target policy is 'OTK User Attribute Look Up'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== Overwrite other variables that have default values in the targe policy and update the 'Export' assertion"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== This policy is also referenced wherever user attributes have to be looked up from an LDAP configuration"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Lookup the user from a list of known administrators"/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${given_username}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="admin|pmadmin|administrator"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="YWRtaW4="/> <L7p:VariableToSet stringValue="current.user.role"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Admin users"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Roles are configured here"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom}"/> <L7p:Expression2 stringValue="path=/userinfo"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="path=/userinfo"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to validate that the MAS User Authentication occurred successfully"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Im5hbWUiOiJEYXJ0aCIsCiAiZmFtaWx5X25hbWUiOiJWYWRlciIsCiAibmlja25hbWUiOiJNYXN0ZXItb2YtdGhlLWRhcmstZm9yY2UiLAogInByZWZlcnJlZF91c2VybmFtZSI6IiR7Z2l2ZW5fdXNlcm5hbWV9Ig=="/> <L7p:VariableToSet stringValue="userinfo.profile"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to validate that the MAS User Authentication occurred successfully"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ImVtYWlsIjoiZGFydGgudmFkZXJAZGVhdGhzdGFyLnNwYWNlIg=="/> <L7p:VariableToSet stringValue="userinfo.email"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to validate that the MAS User Authentication occurred successfully"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="InBob25lX251bWJlciI6IisxLTU1NS0xMjMtMTIzNCI="/> <L7p:VariableToSet stringValue="userinfo.phone"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to validate that the MAS User Authentication occurred successfully"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ImFkZHJlc3MiOnsKICAgInJlZ2lvbiI6ICJTcGFjZSIsCiAgICJjb3VudHJ5IjogIk5PTkUifQ=="/> <L7p:VariableToSet stringValue="userinfo.address"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// can be overwritten with any additional information"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="PHVzZXJpbmZvPgogPHByb2ZpbGU+PCFbQ0RBVEFbJHt1c2VyaW5mby5wcm9maWxlfV1dPjwvcHJvZmlsZT4KIDxlbWFpbD48IVtDREFUQVske3VzZXJpbmZvLmVtYWlsfV1dPjwvZW1haWw+CiA8cGhvbmU+PCFbQ0RBVEFbJHt1c2VyaW5mby5waG9uZX1dXT48L3Bob25lPgogPGFkZHJlc3M+PCFbQ0RBVEFbJHt1c2VyaW5mby5hZGRyZXNzfV1dPjwvYWRkcmVzcz4KPC91c2VyaW5mbz4="/> <L7p:VariableToSet stringValue="current.user.attributes"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// handle a call from '/userinfo' as an example"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom}"/> <L7p:Expression2 stringValue="path=/generateOTP"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="path=/generateOTP"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="c2FtcGxlQGV4YW1wbGUuY29t"/> <L7p:VariableToSet stringValue="email"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="KzEtMTIzLTU1NS01NTU1"/> <L7p:VariableToSet stringValue="mobile"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// can be overwritten with any additional information"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="PHVzZXJpbmZvPgogPGVtYWlsPjwhW0NEQVRBWyR7ZW1haWx9XV0+PC9lbWFpbD4KIDxtb2JpbGU+PCFbQ0RBVEFbJHttb2JpbGV9XV0+PC9tb2JpbGU+CjwvdXNlcmluZm8+"/> <L7p:VariableToSet stringValue="current.user.attributes"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// handle a call from '/generateOTP' as an example for a MAG service"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// export more variables if required"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="current.user.attributes"/> <L7p:item stringValue="current.user.role"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client GET 07854a0de3db8f5849ecb6be3985bf14 POLICY OTK Manager Client GET Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy get a client - client_id. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${operation}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="get|getKey|getAll"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="unknown operation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7a1b5256-aaf9-4d2b-9171-6d65d92397cd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${queryOffset}"/> <L7p:Expression2 stringValue="0"/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="queryOffset"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="offset handling"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="format"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="format"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="org"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="org"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="registered_by"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="registered_by"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="queryOffset"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="queryOffset"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="filterStatus"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="filterStatus"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="environment"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="environment"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="master"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="master"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/${operation}?client_ident=${client_ident}&amp;client_key=${client_key}&amp;format=${format}&amp;name=${name}&amp;org=${org}&amp;registered_by=${registered_by}&amp;queryOffset=${queryOffset}&amp;filterStatus=${filterStatus}&amp;environment=${environment}&amp;master=${master}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=PASSWORD 07854a0de3db8f5849ecb6be3985bf1c POLICY OTK grant_type=PASSWORD Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${username}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${password}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for required variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="b560d25b-98a1-47bb-ac4a-84bd9329da21"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Authentication"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acrValuesRequested"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authHeader"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authIdToken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="authSession"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="clientId"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookie"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cookiename"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="oauth_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="oauth_verifier"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="password"/> <L7p:value stringValue="${password}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="prompt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="provider"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="state"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="username"/> <L7p:value stringValue="${username}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnVzZXJuYW1lfQ=="/> <L7p:VariableToSet stringValue="owner"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSJ9"/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=BEARER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJtYWMiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIsCiAgIm1hY19rZXkiOiIke21hY19zZWNyZXR9IiwKICAibWFjX2FsZ29yaXRobSI6ImhtYWMtc2hhLTEiCn0="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYWNfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=MAC"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK Configured Grant Types 07854a0de3db8f5849ecb6be3985beed POLICY OTK Configured Grant Types Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth 2.0 Grant Types"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="cGFzc3dvcmQ="/> <L7p:VariableToSet stringValue="grant_type_password"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="cmVmcmVzaF90b2tlbg=="/> <L7p:VariableToSet stringValue="grant_type_refresh_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXV0aG9yaXphdGlvbl9jb2Rl"/> <L7p:VariableToSet stringValue="grant_type_authorization_code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2NyZWRlbnRpYWxz"/> <L7p:VariableToSet stringValue="grant_type_client_credentials"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="=== OAuth 2.0 Grant Type Extensions"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dXJuOmlldGY6cGFyYW1zOm9hdXRoOmdyYW50LXR5cGU6and0LWJlYXJlcg=="/> <L7p:VariableToSet stringValue="grant_type_jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dXJuOmlldGY6cGFyYW1zOm9hdXRoOmdyYW50LXR5cGU6c2FtbDItYmVhcmVy"/> <L7p:VariableToSet stringValue="grant_type_saml"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="== Customizable grant type(s) as of here"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="grant_type_custom"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="1ce51cc0-9f8d-4f74-ac46-81e8e9191b8a"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/#OTK Storage Configuration 07854a0de3db8f5849ecb6be3985beb8 POLICY #OTK Storage Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK Storage Configuration&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression ENV_PARAM_NAME="ENV.OTKStorageConfiguration.dbsystem"/> <L7p:Expression><![CDATA[mysql]]></L7p:Expression> <L7p:VariableToSet stringValue="ENV.dbsystem"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtFTlYuZGJzeXN0ZW19"/> <L7p:VariableToSet stringValue="dbsystem"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK Storage Configuration 07854a0de3db8f5849ecb6be3985beea POLICY OTK Storage Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="These endpoints should point to the appropriate servers."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="If the URL points to 'localhost' or '127.0.0.1' a routing assertion is not involved."/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Token DB"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="This will usually be at localhost. Configure a hostname if /oauth/tokenstore is used on a remote gateway"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aHR0cHM6Ly9sb2NhbGhvc3Q6ODQ0Mw=="/> <L7p:VariableToSet stringValue="host_oauth_tokenstore_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Client DB"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="This will usually be at localhost. Configure a hostname if /oauth/clientstore is used on a remote gateway"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aHR0cHM6Ly9sb2NhbGhvc3Q6ODQ0Mw=="/> <L7p:VariableToSet stringValue="host_oauth_clientstore_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Session DB"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="This will usually be at localhost. Configure a hostname if /oauth/session is used on a remote gateway"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aHR0cHM6Ly9sb2NhbGhvc3Q6ODQ0Mw=="/> <L7p:VariableToSet stringValue="host_oauth_session_server"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="NOTE: If the dbsystem is Cassandra separate_schemas should be set to true"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Databasesystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="'mysql', 'cassandra', or 'oracle'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="bXlzcWw="/> <L7p:VariableToSet stringValue="dbsystem"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set to true if you are using mysql/oracle and separate schemas for otk and mag"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="separate_schemas"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Max number of allowed Tokens per resource_owner and client (app)"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Only positive integers accepted"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MQ=="/> <L7p:VariableToSet stringValue="max_oauth_token_count"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Behaviour when max Token count has been reached"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Options for max_oauth_token_behaviour are: 'error' or 'cycle'"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y3ljbGU="/> <L7p:VariableToSet stringValue="max_oauth_token_behaviour"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="86188f26-e5fd-4045-88c9-245e319218eb"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/#OTK openid registration_endpoint 07854a0de3db8f5849ecb6be3985bea5 POLICY #OTK openid registration_endpoint Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid registration_endpoint&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid registration_endpoint 07854a0de3db8f5849ecb6be3985bede POLICY OTK openid registration_endpoint Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke29pZGNfcmVnaXN0ZXJfcGF0aH0="/> <L7p:VariableToSet stringValue="registration_endpoint"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// RECOMMENDED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="c621cdf2-e002-4a3c-90cc-9e35ad1c751e"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${registration_endpoint}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="registration_endpoint"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK SCOPE Issuing DEPRECATED 07854a0de3db8f5849ecb6be3985bef9 POLICY OTK SCOPE Issuing DEPRECATED Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy will validate SCOPE. It will reject all non-registered but reguested SCOPE values."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="If only non-registered SCOPE values are requested the policy will fail."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="If no SCOPE was registered and no SCOPE was requested SCOPE will be set to 'oob'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*************************************************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Input variables: scope.registered, scope.requested"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Output variables: scope.granted"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="*************************************************"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY29wZS5yZXF1ZXN0ZWR9"/> <L7p:VariableToSet stringValue="remember_requested_scope"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope.registered}"/> <L7p:Expression2 stringValue="oob"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope.registered}"/> <L7p:Expression2 stringValue="oob"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="b29i"/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="case: 01"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValueReference="inline"><![CDATA[No SCOPE registered --> grant none --> oob; registered: oob; requested: none | scopea; grant: oob;]]></L7p:value> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope.requested}"/> <L7p:Expression2 stringValue="oob"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="b29i"/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="case: 02"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValueReference="inline"><![CDATA[SCOPE registered but none requested --> grant none --> oob, otherwise a client could spoof all possible SCOPEs; registered: scopea scopeb; requested: none; grant: oob;]]></L7p:value> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${scope.registered}"/> <L7p:Expression2 stringValue="${scope.requested}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${scope.requested}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY29wZS5yZWdpc3RlcmVkfQ=="/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="case: 03"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValueReference="inline"><![CDATA[SCOPE registered is the same as SCOPE requested --> grant requested SCOPE; registered: scopea scopeb scopec; requested: scopea scopeb scopec; grant: scopea scopeb scopec;]]></L7p:value> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="scope.requested"/> <L7p:OutputVariable stringValue="requestedScope"/> <L7p:SplitPattern stringValue="[ ]"/> </L7p:Split> <L7p:Split> <L7p:IgnoreEmptyValues booleanValue="true"/> <L7p:InputVariable stringValue="scope.registered"/> <L7p:OutputVariable stringValue="registeredScope"/> <L7p:SplitPattern stringValue="[ ]"/> </L7p:Split> <L7p:ForEachLoop L7p:Usage="Required" iterationLimit="100" loopVariable="requestedScope" variablePrefix="verifyScope"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${registeredScope}"/> <L7p:Expression2 stringValue="${verifyScope.current}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${verifyScope.current}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope.requested"/> <L7p:PatternContainsVariables booleanValue="true"/> <L7p:Regex stringValue="^${verifyScope.current}|(\s)${verifyScope.current}(\s)|${verifyScope.current}$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$1$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:OneOrMore> </L7p:ForEachLoop> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope.requested"/> <L7p:Regex stringValue="(\w+)"/> <L7p:Replacement stringValue="found"/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="An invalid SCOPE was given. Given: '${remember_requested_scope}', registered: '${scope.registered}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE1"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="case: 05"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="If SCOPE.requested is empty now because it did not include any registered values at all fail the request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY29wZS5yZXF1ZXN0ZWR9"/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="case: 04, 05"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValueReference="inline"><![CDATA[SCOPE registered is a subset of SCOPE requested --> grant registered SCOPE; registered: scopea; requested: scopea scopeb; grant: scopea;]]></L7p:value> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Do not grant non-registered SCOPEs"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// remove [ ] at beginning and end of line"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope.granted"/> <L7p:Regex stringValue="^\s{0,1000}|\s{0,1000}$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// remove mulitple subsequent [ ]"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope.granted"/> <L7p:Regex stringValue="\s{2,1000}"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=" "/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid grant_types_supported 07854a0de3db8f5849ecb6be3985bee0 POLICY OTK openid grant_types_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ImF1dGhvcml6YXRpb25fY29kZSIsICJpbXBsaWNpdCIsICJyZWZyZXNoX3Rva2VuIg=="/> <L7p:VariableToSet stringValue="grant_types_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="ad8005a4-8c54-4f38-ac65-5973ec067877"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_types_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="grant_types_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager dates clients 07854a0de3db8f5849ecb6be3985bef1 POLICY oauth manager dates clients Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${count}"/> <L7p:Expression2 stringValue="0"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="0"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:MsgVarPrefix stringValue="xsltFindDates"/> <L7p:OtherTargetMessageVariable stringValue="findDates"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:ns="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text" omit-xml-declaration="yes"/> <xsl:template match="/"> <xsl:for-each select="(//ns:rexpiration|//ns:expiration|//ns:created)[text()!='0']"> <xsl:value-of select="text()"/><xsl:text>;</xsl:text> </xsl:for-each> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmaW5kRGF0ZXMubWFpbnBhcnR9"/> <L7p:VariableToSet stringValue="inputDates"/> </L7p:SetVariable> <L7p:Split> <L7p:InputVariable stringValue="inputDates"/> <L7p:OutputVariable stringValue="dates"/> <L7p:SplitPattern stringValue=";"/> <L7p:SplitPatternRegEx booleanValue="false"/> </L7p:Split> <L7p:ForEachLoop L7p:Usage="Required" iterationLimit="10000" loopVariable="dates" variablePrefix="date"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkYXRlLmN1cnJlbnR9"/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateFormat stringValue="&lt;Timestamp&gt;"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="current"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="toBeReturned"/> <L7p:PatternContainsVariables booleanValue="true"/> <L7p:Regex stringValue="[&gt;]${date.current}[&lt;]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&gt;${current.yyyy-MM-dd HH:mm:ss}&lt;"/> <L7p:Target target="OTHER"/> </L7p:Regex> </L7p:ForEachLoop> </wsp:All> <L7p:TrueAssertion/> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="toBeReturned"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid token_endpoint_auth_methods_supported 07854a0de3db8f5849ecb6be3985bed8 POLICY OTK openid token_endpoint_auth_methods_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ImNsaWVudF9zZWNyZXRfYmFzaWMiLCAiY2xpZW50X3NlY3JldF9wb3N0IiwgImNsaWVudF9zZWNyZXRfand0IiwgInByaXZhdGVfa2V5X2p3dCI="/> <L7p:VariableToSet stringValue="token_endpoint_auth_methods_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="065e0c70-d98e-41cc-885b-9e708ca40015"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_methods_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="token_endpoint_auth_methods_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Validate Grant Type 07854a0de3db8f5849ecb6be3985bef8 POLICY OTK Validate Grant Type Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This list contains the supported grant_types accepted at the /token endpoint."/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="57d4baf4-144b-4ab0-829f-4276bd4517b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Configured Grant Types"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_jwt}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_jwt}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_password}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_password}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_refresh_token}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_refresh_token}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_authorization_code}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_authorization_code}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_client_credentials}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_client_credentials}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Expression2 stringValue="${grant_type_saml}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${grant_type_saml}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== CUSTOM"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// see if the incoming ${grant_type} variable is in the ${grant_type_custom} list"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="grant_type_custom"/> <L7p:PatternContainsVariables booleanValue="true"/> <L7p:Regex stringValue="\b${grant_type}{1,128}\b"/> <L7p:RegexName stringValue="Check if custom grant type"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE5"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid response_types_supported 07854a0de3db8f5849ecb6be3985bed7 POLICY OTK openid response_types_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ImNvZGUiLCAidG9rZW4gaWRfdG9rZW4iLCAidG9rZW4iLCAiY29kZSBpZF90b2tlbiIsICJpZF90b2tlbiIsICJjb2RlIHRva2VuIiwgImNvZGUgaWRfdG9rZW4gdG9rZW4i"/> <L7p:VariableToSet stringValue="response_types_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="c824aafd-4ba0-4550-a2f3-2b252e245997"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_types_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="response_types_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK Token Lifetime Configuration 07854a0de3db8f5849ecb6be3985beee POLICY OTK Token Lifetime Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Configure the lifetimes as desired."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Only 'consumer_key' and 'client_id' values can be '0'."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The maximum TTL for Cassandra is 20 years"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="--- These values are used at 'OTK Generate OAuth Token'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="---"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="OAuth 1.0 lifetime for token"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="minutes"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="forever"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="oauth_v1_consumer_key_lifetime_m"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="seconds"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="24 hours"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ODY0MDA="/> <L7p:VariableToSet stringValue="oauth_v1_access_token_lifetime_s"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="seconds"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="5 minutes"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="oauth_v1_request_token_lifetime_s"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="---"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="OAuth 2.0 token lifetime"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="seconds"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="5 minutes"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="oauth2_auth_code_lifetime_sec"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="seconds"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="1 hour"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzYwMA=="/> <L7p:VariableToSet stringValue="oauth2_access_token_lifetime_sec"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="seconds"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="NjA0ODAw"/> <L7p:VariableToSet stringValue="oauth2_refresh_token_lifetime_sec"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="minutes"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="forever"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="oauth2_client_id_lifetime_m"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="The value below is used with MAG on the API /connect/client/initialize"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="client_id's issued via that endpoint have a limited lifetime"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="minutes"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="7 days"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTAwODA="/> <L7p:VariableToSet stringValue="oauth2_client_id_lifetime_SDK_m"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="---"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="OpenID Connect id_token lifetime"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This value represents a 'session' lifetime. As long as this token is valid it can be used with the jwt-bearer oauth grant_type"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This valus is used at 'OTK Generate id_token - HS256'"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="seconds"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="24 hours"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ODY0MDA="/> <L7p:VariableToSet stringValue="id_token_lifetime_s"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="054614dc-2c7c-479b-831c-118634c567dd"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=CODE 07854a0de3db8f5849ecb6be3985bf24 POLICY OTK response_type=CODE Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="05c70797-52f1-4af0-8af9-1fd2c0cca374"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Generate OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="ac"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="art"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="at"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cid"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ock"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ot"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rft"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="urt"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="openid"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHM+CiAgPG5vbmNlPjwhW0NEQVRBWyR7bm9uY2V9XV0+PC9ub25jZT4KICA8c2FsdD48IVtDREFUQVske3NhbHR9XV0+PC9zYWx0PgogIDx0aGlyZF9wYXJ0eV9zc29fdG9rZW4+PCFbQ0RBVEFbJHt0aGlyZF9wYXJ0eV9zc29fdG9rZW59XV0+PC90aGlyZF9wYXJ0eV9zc29fdG9rZW4+CiAgPHRoaXJkX3BhcnR5X3Nzb190b2tlbl90eXBlPjwhW0NEQVRBWyR7dGhpcmRfcGFydHlfc3NvX3Rva2VuX3R5cGV9XV0+PC90aGlyZF9wYXJ0eV9zc29fdG9rZW5fdHlwZT4KICA8ZXhwZWN0ZWRfbWFnX2lkZW50aWZpZXI+PCFbQ0RBVEFbJHtleHBlY3RlZC1tYWctaWRlbnRpZmllcn1dXT48L2V4cGVjdGVkX21hZ19pZGVudGlmaWVyPgogIDxhdXRoVGltZT48IVtDREFUQVske2F1dGhUaW1lfV1dPjwvYXV0aFRpbWU+CiAgPGFjcj48IVtDREFUQVske2Fjcn1dXT48L2Fjcj4KICA8bWF4X2FnZT48IVtDREFUQVske21heF9hZ2V9XV0+PC9tYXhfYWdlPgo8L3M+"/> <L7p:VariableToSet stringValue="sessionValue"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="381d887a-6240-4d34-b4ae-7348714298df"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session - Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="openIDConnectCache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheMaxSize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="dbAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="value"/> <L7p:value stringValue="${sessionValue}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Only do something if openid is a granted SCOPE value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="================="/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code will be set if session store failed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check success"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="115 indicates that 'openid' was not part of SCOPE which is fine"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue="115"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="115"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="either empty or 115 which is fine"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="91b9aa9b-fbe4-4944-8629-04c5695d122f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Storage (temporary token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="callback"/> <L7p:value stringValue="${redirect_uri}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client"/> <L7p:value stringValue="${client}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${genExpiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${resource_owner}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${genToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_secret"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_mode}"/> <L7p:Expression2 stringValue="form_post"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="form_post"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICA8Zm9ybSBtZXRob2Q9InBvc3QiIGFjdGlvbj0iJHtyZWRpcmVjdF91cml9Ij4KICAgIDxpbnB1dCB0eXBlPSJoaWRkZW4iIG5hbWU9ImNvZGUiCiAgICAgdmFsdWU9IiR7Z2VuVG9rZW59Ii8+"/> <L7p:VariableToSet stringValue="formResp"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="form_post"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${redirect_uri}"/> <L7p:Expression2 stringValue="?"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="?"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9JmNvZGU9JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Invalid token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZWRpcmVjdF91cml9P2NvZGU9JHtnZW5Ub2tlbn0="/> <L7p:VariableToSet stringValue="location"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="modifyc the location header for the response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// different response depending on response_mode"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Access was granted: response_type=code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Storage (temporary token) 07854a0de3db8f5849ecb6be3985bf31 POLICY OTK Token Storage (temporary token) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGVtcG9yYXJ5"/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="517aebd3-6ce1-4e8e-bce1-fb7d065c34e1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="callback"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="callback"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW49JHt0b2tlbn0mZXhwaXJhdGlvbj0ke2V4cGlyYXRpb259JmNhbGxiYWNrPSR7Y2FsbGJhY2t9JmNsaWVudF9rZXk9JHtjbGllbnRfa2V5fSZjbGllbnQ9JHtjbGllbnR9JmNsaWVudF9uYW1lPSR7Y2xpZW50X25hbWV9JnNjb3BlPSR7c2NvcGV9JmN1c3RvbT0ke2N1c3RvbX0="/> <L7p:VariableToSet stringValue="forMessage"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resource_owner}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmb3JNZXNzYWdlfSZyZXNvdXJjZV9vd25lcj0ke3Jlc291cmNlX293bmVyfQ=="/> <L7p:VariableToSet stringValue="forMessage"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmb3JNZXNzYWdlfSZzZWNyZXQ9JHt0b2tlbl9zZWNyZXR9"/> <L7p:VariableToSet stringValue="forMessage"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmb3JNZXNzYWdlfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/store"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/pof/OTK Fail Message to HTML 07854a0de3db8f5849ecb6be3985bf22 POLICY OTK Fail Message to HTML Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment takes the error created via OTK Fail with error message."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment is used at /auth/oauth/v2/authorize to turn a JSON error message into HTML"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5tc2d9"/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="jsonMsg"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error_description"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error_description"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGRpdiBpZD0iYXV0aFNydkVyciI+IDxwPjxiPmVycm9yOiA8L2I+JHtlcnJvci5yZXN1bHR9PGJyLz48Yj5lcnJvcl9kZXNjcmlwdGlvbjogPC9iPiR7ZXJyb3JfZGVzY3JpcHRpb24ucmVzdWx0fTwvcD4gPC9kaXY+"/> <L7p:VariableToSet stringValue="errorDetail"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="errorContent"/> <L7p:Regex stringValue="&lt;!--oauth_content_placeholder--&gt;"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="${errorDetail}"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvckNvbnRlbnR9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid claim_types_supported 07854a0de3db8f5849ecb6be3985bed9 POLICY OTK openid claim_types_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="OpenID Supported Claim Types"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Overwrite within: #OTK openid claim_types_supported"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Im5vcm1hbCI="/> <L7p:VariableToSet stringValue="claim_types_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="4d2069b4-a98e-4787-984c-94299e5a7ec4"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${claim_types_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="claim_types_supported"/> <L7p:item stringValue="discovery.endpoint.enabled"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/#OTK openid subject_types_supported 07854a0de3db8f5849ecb6be3985bead POLICY #OTK openid subject_types_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Target Configuration Policy: &quot;OTK openid subject_types_supported&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Set custom values for Context Variables below ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Add any new Context Variables or extensions below ==="/> </L7p:CommentAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid subject_types_supported 07854a0de3db8f5849ecb6be3985bed5 POLICY OTK openid subject_types_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="InBhaXJ3aXNlIg=="/> <L7p:VariableToSet stringValue="subject_types_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="96fcb6bc-b333-4694-9312-cba8b3295a8c"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${subject_types_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="subject_types_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/#OTK Generate JWT OAuth Token 07854a0de3db8f5849ecb6be3985bec1 POLICY #OTK Generate JWT OAuth Token Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: #OTK Generate JWT OAuth Token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Target policy: OTK Generate JWT OAuth Token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Enable the below assertions to generate JWT based access_token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Variable 'custom' includes session information and preferred user"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateFormat stringValue="&lt;Second Timestamp&gt;"/> <L7p:DateOffsetExpression stringValue="${lifetime}"/> <L7p:Enabled booleanValue="false"/> <L7p:VariableToSet stringValue="exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtleHAuc2Vjb25kc30="/> <L7p:Enabled booleanValue="false"/> <L7p:VariableToSet stringValue="at_jwt_exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXN0b21fZGF0YX0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:Enabled booleanValue="false"/> <L7p:VariableToSet stringValue="custom_json"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Below 'All Assertion' includes preferred user into the JWT payload if scope includes 'openid'"/> </L7p:CommentAssertion> <wsp:OneOrMore L7p:Enabled="false" wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Disable the 'All Assertion' below if preferred user need not be included in payload"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom_json.mainpart}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaseInsensitive booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="scope"/> <L7p:Regex stringValue="openid"/> <L7p:RegexName stringValue="Proceed if openid in scope"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Extract preferred owner"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="username"/> <L7p:OtherTargetMessageVariable stringValue="custom_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="owner"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJpc3MiOiAiJHtpc3N9IiwKICAiaWF0Ijoke2dhdGV3YXkudGltZS5zZWNvbmRzfSwKICAiYXVkIjoiJHthdWR9IiwKICAiZXhwIjoke2F0X2p3dF9leHB9LAogICJqdGkiOiIke2p0aX0iLAogICJ0b2tlbl9kZXRhaWxzIjogewogICAgInNjb3BlIjoiJHtzY29wZX0iLAogICAgImV4cGlyZXNfaW4iOiR7bGlmZXRpbWV9LAogICAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICAgInByZWZlcnJlZF91c2VybmFtZSI6IiR7b3duZXIucmVzdWx0fSIKICB9Cn0="/> <L7p:VariableToSet stringValue="payload"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// payload will include preferred_owner in this branch"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJpc3MiOiAiJHtpc3N9IiwKICAiaWF0Ijoke2dhdGV3YXkudGltZS5zZWNvbmRzfSwKICAiYXVkIjoiJHthdWR9IiwKICAiZXhwIjoke2F0X2p3dF9leHB9LAogICJqdGkiOiIke2p0aX0iLAogICJ0b2tlbl9kZXRhaWxzIjogewogICAgInNjb3BlIjoiJHtzY29wZX0iLAogICAgImV4cGlyZXNfaW4iOiR7bGlmZXRpbWV9LAogICAgInRva2VuX3R5cGUiOiJCZWFyZXIiCiAgfQp9"/> <L7p:VariableToSet stringValue="payload"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:EncodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// add header 'kid'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Enabled booleanValue="false"/> <L7p:EncryptionSourceType intValue="2"/> <L7p:HeaderAction stringValue="Merge to Generated Header"/> <L7p:KeyAlias stringValue="ssl"/> <L7p:KeyGoid goidValue="00000000000000000000000000000002"/> <L7p:SignPayload booleanValue="true"/> <L7p:SignatureAlgorithm stringValue="RS256"/> <L7p:SignatureSourceType intValue="1"/> <L7p:SourceHeaders stringValue="${kid_header}"/> <L7p:SourceVariable stringValue="${payload}"/> <L7p:TargetVariable stringValue="at_jwt"/> </L7p:EncodeJsonWebToken> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdF9qd3QuY29tcGFjdH0="/> <L7p:Enabled booleanValue="false"/> <L7p:VariableToSet stringValue="at_jwt"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/#OTK Replay Attack Protection 07854a0de3db8f5849ecb6be3985beb9 POLICY #OTK Replay Attack Protection Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: #OTK Replay Attack Protection"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Protect against replay attack using either cache or database."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Using Cache is better for performance especially if it is just a signle node "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** However in case of multi-node cluster, database might be required"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="====================================="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Configure cache lifetime to be used for caching assertions below."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Recommended that cache lifetime is not too big"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="For JWTs, your cache lifetime needs to be greater than the JWT's expiry"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="cache_lifetime"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initiailize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cache_lifetime}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// request is a replay"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzA3"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Existing"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHZhbHVlcyB4bWxucz0iaHR0cDovL25zLmw3dGVjaC5jb20vMjAxMi8xMS9vdGstY2xpZW50c3RvcmUiPgogIDxpZD48IVtDREFUQVske2lkZW50aWZpZXJ9XV0+PC9pZD4KICA8ZXhwaXJhdGlvbj48IVtDREFUQVske2V4cH1dXT48L2V4cGlyYXRpb24+CjwvdmFsdWVzPg=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="${cacheId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${identifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cache_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="New"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// add entry"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Replay protection could not be applied for identifier '${identifier}'. Original error_code: '${error.code}'!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// replay attack protection could not be applied"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzA4"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// failed to apply replay attack protection"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Action"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Use cache to keep track of entry"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Replay Attack Protection 07854a0de3db8f5849ecb6be3985bf02 POLICY OTK Replay Attack Protection Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: OTK Replay Attack Protection"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Protect against replay attack using either cache or database."/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheId}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="default"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZGVmYXVsdFJlcGxheQ=="/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set cacheId to default if not provided"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Include> <L7p:PolicyGuid stringValue="525a25e0-9217-4677-b369-69b4e660ec3c"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/Token Server/#OTK Client Export 07854a0de3db8f5849ecb6be3985bec8 POLICY #OTK Client Export Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target Policy: &quot;auth/oauth/v2/client/export&quot;"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== set &quot;enableClientExport&quot; to true to enable client export"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="enableClientExport"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Revoke Key 07854a0de3db8f5849ecb6be3985bf42 POLICY OTK Client Revoke Key Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes a client. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="338a6974-8d3a-4ee9-9c40-a7069681799a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Revoke Key"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Revoke Key"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="DELETE"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/revoke?client_ident=${client_ident}&amp;client_key=${client_key}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/OTK Security Header Extension 07854a0de3db8f5849ecb6be3985bece POLICY OTK Security Header Extension Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="These HTTP headers will always be added to a response from all services"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Authorization Server and OAuth Manager Security Header Extension policies will override values set here for their respective services"/> </L7p:CommentAssertion> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTPS only"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Inform the browser to only accept SSL connections"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Content-Security-Policy"/> <L7p:HeaderValue stringValue="default-src 'self'; script-src *.googleapis.com 'unsafe-inline'; img-src * data:; style-src 'unsafe-inline'; font-src * data:;"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTPS only"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Inform the browser to only accept SSL connections"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="X-Content-Type-Options"/> <L7p:HeaderValue stringValue="nosniff"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTPS only"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Inform the browser to only accept SSL connections"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="X-XSS-Protection"/> <L7p:HeaderValue stringValue="1"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HTTPS only"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Inform the browser to only accept SSL connections"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Enabled booleanValue="false"/> <L7p:HeaderName stringValue="Strict-Transport-Security"/> <L7p:HeaderValue stringValue="max-age=31536000; includeSubDomains"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ClickJacking"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Do not allow overlapping of frames"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Enabled booleanValue="false"/> <L7p:HeaderName stringValue="X-Frame-Options"/> <L7p:HeaderValue stringValue="Deny"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/session/OTK Session-Get 07854a0de3db8f5849ecb6be3985bf48 POLICY OTK Session-Get Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy gets a session. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check for required parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_session_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z2V0"/> <L7p:VariableToSet stringValue="operation"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a2364b62-7ea8-4a77-a610-3ece64aec8ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session DB"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session NoSQL"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheKey"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheKey"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheId}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==cacheId"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheAge}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==cacheAge"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheId"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheId"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheAge"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheAge"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_session_server}/oauth/session/get?cacheKey=${cacheKey}&amp;cacheId=${cacheId}&amp;cacheAge=${cacheAge}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/authentication/OTK User Attribute Look Up 07854a0de3db8f5849ecb6be3985bf52 POLICY OTK User Attribute Look Up Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy is referenced wherever user attributes have to be looked up from an LDAP configuration"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy uses a given username to retrieve attributes from an IDP"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The default IDP can be overwritten in 'OTK User Attribute Look Up Extension'"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default IDP: Internal Identity Provider (IIP)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aWlw"/> <L7p:VariableToSet stringValue="current.user.idp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default: user"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dXNlcg=="/> <L7p:VariableToSet stringValue="current.user.role"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// should be set to an internal, known by the IDP only, value"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.user.id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// can be overwritten with any additional information"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.user.attributes"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="7168deac-ae96-4ac3-97f5-3c81621321f9"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Require OAuth 2 Token 07854a0de3db8f5849ecb6be3985bf0d POLICY OTK Require OAuth 2 Token Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Include this policy in a service policy to authorize api access based on an oauth 2.0 access token"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error msg"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="3ec61a3a-f7ee-4541-b47d-c83534ca51ff"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Access Token Retrieval"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="find"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="find the access_token, fails if not found"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="allow_header"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="allow_query"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_header"/> <L7p:value stringValue="${request.http.header.authorization}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="auth_param_token"/> <L7p:value stringValue="${request.http.parameters.access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_access_token"/> <L7p:value stringValue="${given_access_token}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code is provided from previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="find the access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthY2Nlc3NfdG9rZW59"/> <L7p:VariableToSet stringValue="uuid_token"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="uuid"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decoding to get jti (uuid_token) from jwt"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:SourcePayload stringValue="${access_token}"/> <L7p:TargetVariablePrefix stringValue="jwt_token"/> <L7p:ValidationType stringValue="None"/> </L7p:DecodeJsonWebToken> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3RfdG9rZW4ucGF5bG9hZH0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="jwt_token.payload"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpressionV2> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract JWT ID (&quot;jti&quot;) from payload"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Expression stringValue="jti"/> <L7p:OtherTargetMessageVariable stringValue="jwt_token.payload"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jwt_jti"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqd3RfanRpLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="uuid_token"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extract jti for uuid_token if it's a jwt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to validate the access_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${auth_scheme}"/> <L7p:Expression2 stringValue="Bearer"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="Bearer"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The cacheKey is a combination of access_token, required SCOPE, and the SCOPE-fail-flag"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CacheKey"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The key used for caching the token validation result"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHthY2Nlc3NfdG9rZW59JHtzY29wZV9mYWlsfSR7c2NvcGVfcmVxdWlyZWR9"/> <L7p:VariableToSet stringValue="cacheKey"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="accessTokenValidation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAcceptableAge"/> <L7p:value stringValue="${cache_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cache_lifetime}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// From Cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set local"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to validate access token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="uuid"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="UUID"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate if access_token is UUID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="14db913e-ab30-49d9-a762-962c0798f2a1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Validate JWT OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${query_db}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${jwt_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Query DB or Not"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="JWT"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate if access_token is JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate either JWT or UUID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5182a003-cb58-4b5f-939f-5af9e8e5ec73"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OAuth 2 Token Validation - BEARER"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="It implicitly also uses 'scope_required' and 'scope_fail' and 'access_token'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="tokenValues"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate Locally"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope_required"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope_required"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="uuid"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="access_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="access_token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/token?access_token=${access_token}&amp;isonetime=${onetime}&amp;auth_scheme=Bearer&amp;scope_required=${scope_required}&amp;scope_fail=${scope_fail}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="x-ca-err"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// UUID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="14db913e-ab30-49d9-a762-962c0798f2a1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Validate JWT OAuth Token"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:EncodeDecode> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Validate against DB using JTI (jwt_id)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:SourceVariableName stringValue="jwt_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="access_token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${query_db}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="5182a003-cb58-4b5f-939f-5af9e8e5ec73"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OAuth 2 Token Validation - BEARER"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="It implicitly also uses 'scope_required' and 'scope_fail' and 'access_token'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="tokenValues"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/token?access_token=${access_token}&amp;isonetime=${onetime}&amp;auth_scheme=Bearer&amp;scope_required=${scope_required}&amp;scope_fail=${scope_fail}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="x-ca-err"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Make remote validation call to query database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Query DB or Not"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="UUID or JWT"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${query_db}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate remotely"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate locally or remotely"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientId"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_key/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:expiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudElkLnJlc3VsdH0jQCMke3hwYXRoT3duZXIucmVzdWx0fSNAIyR7eHBhdGhTY29wZS5yZXN1bHR9I0AjJHt4cGF0aEV4cGlyYXRpb24ucmVzdWx0fSNAIyR7eHBhdGhDdXN0b20ucmVzdWx0fQ=="/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${onetime}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="accessTokenValidation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cache_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="caching"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="only if it is not a one time access_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="collect validation response data"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// New validation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error.code to '000' if we do not have one (which should not be the case)"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtlcnJvci5jb2RlfQ=="/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="accessTokenValidation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${cacheKey}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${cache_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="validation error. Set cache content for invalid token to ''"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="Create response variables"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="may contain an error.code"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="resp.details"/> <L7p:OtherTargetMessageVariable stringValue="resp"/> <L7p:Regex stringValue="(.{1,256})#@#(.{1,128})#@#(.{1,4000})#@#([0-9]{10})#@#(.*)"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${auth_scheme}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:HeaderName stringValue="WWW-Authenticate"/> <L7p:HeaderValue stringValue="${auth_scheme} error=&quot;Invalid request&quot;"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Add WWW-Authenticate header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="'resp' contains an error code, created during validation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${resp}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="validation error. Set cache content for invalid token to ''"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if there is valid content. Respond with an error otherwise"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmRldGFpbHNbMV19"/> <L7p:VariableToSet stringValue="session.client_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmRldGFpbHNbMl19"/> <L7p:VariableToSet stringValue="session.subscriber_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmRldGFpbHNbM119"/> <L7p:VariableToSet stringValue="session.scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmRldGFpbHNbNF19"/> <L7p:VariableToSet stringValue="session.expires_at"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmRldGFpbHNbNV19"/> <L7p:VariableToSet stringValue="session.custom"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="BEARER token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${auth_scheme}"/> <L7p:Expression2 stringValue="MAC"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="MAC"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0Lmh0dHAubWV0aG9kfQ=="/> <L7p:VariableToSet stringValue="request_http_method"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0LnVybH0="/> <L7p:VariableToSet stringValue="request_url"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Caching is not possible for MAC token profile"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="set local"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to validate access token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c48ee8b2-20d0-4320-b836-694e55942c45"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OAuth 2 Token Validation - MAC"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="http_method"/> <L7p:value stringValue="${request_http_method}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="tokenValues"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="url"/> <L7p:value stringValue="${request_url}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="validate locally"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="request_url"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="request_url"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXV0aF9zY2hlbWU9TUFDJmh0dHBfbWV0aG9kPSR7cmVxdWVzdF9odHRwX21ldGhvZH0mdXJsPSR7cmVxdWVzdF91cmx9Jmlzb25ldGltZT0ke29uZXRpbWV9"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/token"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:CustomizeValue stringValue="${auth_header}"/> <L7p:Name stringValue="authorization"/> <L7p:UsesCustomizedValue booleanValue="true"/> </L7p:item> </L7p:Rules> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="validate remotely"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${auth_scheme}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AddHeader> <L7p:HeaderName stringValue="WWW-Authenticate"/> <L7p:HeaderValue stringValue="${auth_scheme} error=&quot;Invalid request&quot;"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Add WWW-Authenticate header"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error code provided by previous assertions"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientId"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_key/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:expiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudElkLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="session.client_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aE93bmVyLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="session.subscriber_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNjb3BlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="session.scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEV4cGlyYXRpb24ucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="session.expires_at"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEN1c3RvbS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="session.custom"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="create response variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="MAC token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="something unknown happened"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="000"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="error. Something unexpected happened"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK OVP Configuration 07854a0de3db8f5849ecb6be3985beeb POLICY OTK OVP Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This endpoint should point to the server that holds all OAuth validation endpoints."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Usually those endpoints are found within the folder 'SecureZone - OVP'."/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="aHR0cHM6Ly9sb2NhbGhvc3Q6ODQ0Mw=="/> <L7p:VariableToSet stringValue="host_oauth_ovp_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// false will issue new refresh tokens, true will reuse old ones"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="reuse_refresh_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// false will issue new expiration dates, true will reuse original expiration"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="reuse_refresh_expiration"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="0e4fe6ce-efcb-4fbb-82b9-cadf06785eec"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid userinfo_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985bedd POLICY OTK openid userinfo_signing_alg_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="IlJTMjU2IiwgIkhTMjU2Ig=="/> <L7p:VariableToSet stringValue="userinfo_signing_alg_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="84e6715c-6f6f-4686-b8c4-881ef9b0884c"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${userinfo_signing_alg_values_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="userinfo_signing_alg_values_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Client JWT Validation 07854a0de3db8f5849ecb6be3985bf03 POLICY OTK Client JWT Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Client JWT is validated using auth method, alg used during client registration, after which its payload content is verified"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create json to extract values afterwards"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtjbGllbnRfa2V5X2N1c3RvbX0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="custom_json"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpressionV2> <L7p:Expression stringValue="openid_registration.response.token_endpoint_auth_method"/> <L7p:OtherTargetMessageVariable stringValue="custom_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="auth_method"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:EvaluateJsonPathExpressionV2> <L7p:Expression stringValue="openid_registration.response.token_endpoint_auth_signing_alg"/> <L7p:OtherTargetMessageVariable stringValue="custom_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="auth_signing_alg"/> </L7p:EvaluateJsonPathExpressionV2> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoX21ldGhvZC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client_auth_method"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoX3NpZ25pbmdfYWxnLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="client_auth_signing_alg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_jwks"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_jwks_uri"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_auth_method}"/> <L7p:Expression2 stringValue="private_key_jwt"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:JSONSchema> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check if secret is a JSON object"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:JsonSchemaVersion jsonSchemaVersion="DRAFT_V4"/> <L7p:OtherTargetMessageVariable stringValue="client_secret"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[{ "$schema": "http://json-schema.org/draft-04/schema#", "title": "Client Registration Message Validation", "description": "Verify that input is a JSON message", "type": "object" }]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> </L7p:JSONSchema> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="client_secret"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[&lt;&gt;&amp;]|\\&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="client_jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwks"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client_secret contains a jwk"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="client_jwks_uri"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwks_uri"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client_secret contains a jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set jwks/jwks_uri from secret if needed"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="Set token endpoint to validate audience of JWT"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set token endpoint url"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtvYXV0aDJfc2VydmVyX2hvc3RuYW1lfToke29hdXRoMl9zZXJ2ZXJfcG9ydH0ke29hdXRoMl90b2tlbl9wYXRofQ=="/> <L7p:VariableToSet stringValue="token_endpoint"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${oauth2_server_url_prefix}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set token endpoint url"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtvYXV0aDJfc2VydmVyX2hvc3RuYW1lfToke29hdXRoMl9zZXJ2ZXJfcG9ydH0vJHtvYXV0aDJfc2VydmVyX3VybF9wcmVmaXh9JHtvYXV0aDJfdG9rZW5fcGF0aH0="/> <L7p:VariableToSet stringValue="token_endpoint"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Extract variables from client_key_custom"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_auth_method}"/> <L7p:Expression2 stringValue="client_secret_jwt"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_secret_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate jwt signature using client_secret, fails if invalid"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FailUnverifiedSignature booleanValue="true"/> <L7p:SignatureSecret stringValue="${client_secret}"/> <L7p:SourcePayload stringValue="${client_assertion}"/> <L7p:TargetVariablePrefix stringValue="client_jwt"/> <L7p:ValidationType stringValue="Using Secret"/> </L7p:DecodeJsonWebToken> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// auth_method = &quot;client_secret_jwt&quot;"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_auth_method}"/> <L7p:Expression2 stringValue="private_key_jwt"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// just decode to get &quot;kid&quot;, no validation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:SourcePayload stringValue="${client_assertion}"/> <L7p:TargetVariablePrefix stringValue="decoded_jwt"/> <L7p:ValidationType stringValue="None"/> </L7p:DecodeJsonWebToken> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkX2p3dC5oZWFkZXIua2lkfQ=="/> <L7p:VariableToSet stringValue="jwt_kid"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_jwks}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate jwt signature using jwks, fails if invalid"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FailUnverifiedSignature booleanValue="true"/> <L7p:KeyId stringValue="${jwt_kid}"/> <L7p:KeyType stringValue="JSON Web Key Set"/> <L7p:PrivateKeySource stringValue="${client_jwks}"/> <L7p:SourcePayload stringValue="${client_assertion}"/> <L7p:TargetVariablePrefix stringValue="client_jwt"/> <L7p:ValidationType stringValue="Using Recipient Key From Context Variable"/> </L7p:DecodeJsonWebToken> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwks"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_jwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_credential_jwt_cache_lifetime}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTgwMA=="/> <L7p:VariableToSet stringValue="client_credential_jwt_cache_lifetime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set cache lifetime if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4307aff3-11a3-4762-a4f6-23ad85342339"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Look Up"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="clientJwks"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxAcceptableAge"/> <L7p:value stringValue="30"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${client_credential_jwt_cache_lifetime}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${resp.mainpart}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwtKid"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:jwt_kid/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathJwks"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:jwks/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${xpathJwtKid.result}"/> <L7p:Expression2 stringValue="${jwt_kid}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${jwt_kid}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEp3a3MucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="cache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// valid cache"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:ProtectedServiceUrl stringValue="${client_jwks_uri}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzA2"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="jwks"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="route"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// make request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// cache or make get request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate jwt signature using jwks, fails if invalid"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:FailUnverifiedSignature booleanValue="true"/> <L7p:KeyId stringValue="${jwt_kid}"/> <L7p:KeyType stringValue="JSON Web Key Set"/> <L7p:PrivateKeySource stringValue="${jwks}"/> <L7p:SourcePayload stringValue="${client_assertion}"/> <L7p:TargetVariablePrefix stringValue="client_jwt"/> <L7p:ValidationType stringValue="Using Recipient Key From Context Variable"/> </L7p:DecodeJsonWebToken> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz4KPHZhbHVlcyB4bWxucz0iaHR0cDovL25zLmw3dGVjaC5jb20vMjAxMi8xMS9vdGstY2xpZW50c3RvcmUiPgogIDxqd3Rfa2lkPjwhW0NEQVRBWyR7and0X2tpZH1dXT48L2p3dF9raWQ+CiAgPGp3a3M+PCFbQ0RBVEFbJHtqd2tzfV1dPjwvandrcz4gCjwvdmFsdWVzPg=="/> <L7p:ContentType stringValue="text/xml; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a27e83e3-e95d-4efd-8d89-69a110bd3899"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Cache Store"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// [clientJwks]"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheID"/> <L7p:value stringValue="clientJwks"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="doNotCacheSoapFaults"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntries"/> <L7p:value stringValue="10000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntryAge"/> <L7p:value stringValue="${client_credential_jwt_cache_lifetime}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="maxEntrySize"/> <L7p:value stringValue="100000"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="msg"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="store in cache"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="build response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate using jwks or jwks_uri"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// auth_method = &quot;private_key_jwt&quot;"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client_secret_jwt or private_key_jwt"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f18143b8-4ba9-42c6-819e-8073cba3039a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client JWT Values"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// extracts jwt values for validation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="jwt_header"/> <L7p:value stringValue="${client_jwt.header}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt_payload"/> <L7p:value stringValue="${client_jwt.payload}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// token_endpoint_auth_signing_alg is not provided during registration"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_auth_signing_alg}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate if token_endpoint_auth_method is provided "/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_auth_method}"/> <L7p:Expression2 stringValue="private_key_jwt"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="private_key_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check against RS256 for private_key_jwt auth method"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt_alg}"/> <L7p:Expression2 stringValue="RS256"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="RS256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="private_key_jwt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// token_endpoint_auth_signing_alg is not provided during registration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// token_endpoint_auth_signing_alg is not provided during registration"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_auth_signing_alg}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// validate if token_endpoint_auth_method is provided "/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_auth_method}"/> <L7p:Expression2 stringValue="client_secret_jwt"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="client_secret_jwt"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check against HS256 for client_secret_jwt auth method"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt_alg}"/> <L7p:Expression2 stringValue="HS256"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="HS256"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_secret_jwt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// token_endpoint_auth_signing_alg is not provided during registration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// token_endpoint_auth_signing_alg is provided, check if it matches the alg specified in the request header"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwt_alg}"/> <L7p:Expression2 stringValue="${client_auth_signing_alg}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${client_auth_signing_alg}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate token_endpoint_auth_signing_alg"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// issuer MUST be equal to client_id"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${iss}"/> <L7p:Expression2 stringValue="${client_id}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${client_id}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// subject MUST be equal to client_id"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${sub}"/> <L7p:Expression2 stringValue="${client_id}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${client_id}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// audience MUST contain server's token enpoint"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${aud}"/> <L7p:Expression2 stringValue="${token_endpoint}"/> <L7p:MultivaluedComparison multivaluedComparison="ANY"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="${token_endpoint}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check expiry"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${exp}"/> <L7p:Expression2 stringValue="${gateway.time.seconds}"/> <L7p:Operator operator="GT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="${gateway.time.seconds}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Token should only be used once. If it is replayed, return error ==="/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Spec recommends that the client JWT should not have expiry dates too far in the future"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Narrower window of valid JWT reduces the risk of replay attack"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="48c6eaa6-bace-49d2-8aac-013c748301fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Replay Attack Protection"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="clientJwtReplay"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="exp"/> <L7p:value stringValue="${exp}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="identifier"/> <L7p:value stringValue="${jti}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=CLIENT_CREDENTIALS 07854a0de3db8f5849ecb6be3985bf1d POLICY OTK grant_type=CLIENT_CREDENTIALS Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_type}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_name}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${scope}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for required variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_type}"/> <L7p:Expression2 stringValue="confidential"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="confidential"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Client could not be granted. Must be confidential client!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:AddHeader> <L7p:HeaderName stringValue="WWW-Authenticate"/> <L7p:HeaderValue stringValue="Basic error=&quot;Invalid or missing credentials&quot;"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check confidential clients"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY29wZX0="/> <L7p:VariableToSet stringValue="scope.requested"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="openid not permitted"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope"/> <L7p:Regex stringValue="\bopenid\b[ ]|\bopenid\b|[ ]\bopenid\b"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAic2NvcGUiOiIke3Njb3BlLmdyYW50ZWR9Igp9"/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=BEARER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJtYWMiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAic2NvcGUiOiIke3Njb3BlLmdyYW50ZWR9IiwKICAibWFjX2tleSI6IiR7bWFjX3NlY3JldH0iLAogICJtYWNfYWxnb3JpdGhtIjoiaG1hYy1zaGEtMSIKfQ=="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYWNfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=MAC"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token KID Configuration 07854a0de3db8f5849ecb6be3985bf3b POLICY OTK id_token KID Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: OTK id_token KID Configuration"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== It uses the default SSL key found on the gateway"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// the current 'kid'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZGVmYXVsdF9zc2xfa2V5"/> <L7p:VariableToSet stringValue="kid"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// the value for the JWT header"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="eyJraWQiOiIke2tpZH0ifQ=="/> <L7p:VariableToSet stringValue="kid_header"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="c53a0ded-2d52-493b-aa93-21a2cb60ce9f"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${kid}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${kid}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// the current 'kid'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZGVmYXVsdF9zc2xfa2V5"/> <L7p:VariableToSet stringValue="kid"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="If ${kid} is empty, set it to the default value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="kid"/> <L7p:item stringValue="kid_header"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/OTK Generate JWT OAuth Token 07854a0de3db8f5849ecb6be3985bee9 POLICY OTK Generate JWT OAuth Token Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: OTK Generate JWT OAuth Token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please add your implementation in #OTK Generate JWT OAuth Token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="at_jwt"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="at_jwt_exp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXN0b219"/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="custom_data"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1f484c5f-423e-4163-98fc-ee6e26c1379c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token KID Configuration"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// get the KID and the KID header"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="d00d4a19-e148-4650-bb05-71dd29807dc6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token configuration"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Use to get 'iss'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="8226a372-b963-4633-bbce-8af24928386a"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// maybe, the customer decides"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="The JWT based access_token can not be created!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTIy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Access Token Retrieval 07854a0de3db8f5849ecb6be3985bf2c POLICY OTK Access Token Retrieval Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Allow the auth-header OR parameters but NOT both if both are used"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="auth_scheme"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Initialising access_token_type to uuid"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dXVpZA=="/> <L7p:VariableToSet stringValue="access_token_type"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${allow_header}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${auth_param_token}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${given_access_token}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="schema_token"/> <L7p:OtherTargetMessageVariable stringValue="auth_header"/> <L7p:Regex stringValue="^\b([Bb][Ee][Aa][Rr][Ee][Rr]|MAC)\b\s([^,\s]*)"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY2hlbWFfdG9rZW5bMV19"/> <L7p:VariableToSet stringValue="auth_scheme"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzY2hlbWFfdG9rZW5bMl19"/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${auth_scheme}"/> <L7p:Expression2 stringValue="MAC"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="MAC"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="id"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="access_token"/> <L7p:Regex stringValue="id\s*=&quot;\s*([^&quot;]*)&quot;"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id[1]}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpZFsxXX0="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Get MAC access_token if MAC profile is used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="LOCATE IN HEADER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${allow_query}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${auth_header}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${auth_param_token}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${given_access_token}"/> <L7p:Expression2 stringValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="QmVhcmVy"/> <L7p:VariableToSet stringValue="auth_scheme"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoX3BhcmFtX3Rva2VufQ=="/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="LOCATE AS PARAMETER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${given_access_token}"/> <L7p:Expression2 stringValue="true"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${auth_header}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${auth_param_token}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="QmVhcmVy"/> <L7p:VariableToSet stringValue="auth_scheme"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnaXZlbl9hY2Nlc3NfdG9rZW59"/> <L7p:VariableToSet stringValue="access_token"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="USE GIVEN PARAMETER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="find"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token}"/> <L7p:Expression2 stringValue=" "/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue=" "/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="valid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTky"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check that access_token is not empty and has no space ( ' ') character"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// UUID, no '.' found"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${access_token}"/> <L7p:Expression2 stringValue="."/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="."/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// set the access_token_type to 'jwt'"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="and0"/> <L7p:VariableToSet stringValue="access_token_type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check if token is a JWT or UUID"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Create Public Key PIN 07854a0de3db8f5849ecb6be3985bf0c POLICY OTK Create Public Key PIN Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The policy should be used as an encapsulated assertion."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy geneates a base64 encoded hash value of the certificate found b the given name."/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:LookupTrustedCertificate> <L7p:AllowMultipleCertificates booleanValue="false"/> <L7p:TrustedCertificateName stringValue="${certName}"/> <L7p:VariableName stringValue="cert"/> </L7p:LookupTrustedCertificate> <L7p:EncodeDecode> <L7p:CharacterEncoding stringValueNull="null"/> <L7p:SourceVariableName stringValue="cert.subjectPublicKey"/> <L7p:TargetContentType stringValue="application/octet-stream"/> <L7p:TargetDataType variableDataType="message"/> <L7p:TargetVariableName stringValue="subjectPublicKey"/> <L7p:TransformType transformType="BASE64_DECODE"/> </L7p:EncodeDecode> <L7p:GenerateSecurityHash> <L7p:Algorithm stringValue="SHA-256"/> <L7p:Base64Data stringValue="JHtzdWJqZWN0UHVibGljS2V5fQ=="/> <L7p:LineBreak lineBreak="CR-LF"/> <L7p:TargetOutputVariable stringValue="subjectPublicKey"/> </L7p:GenerateSecurityHash> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzdWJqZWN0UHVibGljS2V5fQ=="/> <L7p:VariableToSet stringValue="subjectPublicKey"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="subjectPublicKey"/> <L7p:Regex stringValue="[+]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="-"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="subjectPublicKey"/> <L7p:Regex stringValue="[/]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="_"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTM2"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// create hash"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/session/OTK Session-Delete 07854a0de3db8f5849ecb6be3985bf49 POLICY OTK Session-Delete Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes a session. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheMaxEntries"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheMaxSize"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="check for required parameter"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_session_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZGVsZXRl"/> <L7p:VariableToSet stringValue="operation"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="a2364b62-7ea8-4a77-a610-3ece64aec8ba"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session DB"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session NoSQL"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheKey"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheKey"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheId}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheId"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==cacheId"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheAge}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="cacheAge"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="==cacheAge"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// default to empty if not set"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheId"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheId"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="cacheAge"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="cacheAge"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_session_server}/oauth/session/delete?cacheKey=${cacheKey}&amp;cacheId=${cacheId}&amp;cacheAge=${cacheAge}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Delete 07854a0de3db8f5849ecb6be3985bf40 POLICY OTK Client Delete Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy deletes a client. Either from the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cbe9a7d5-8e32-418a-b366-26494a1e765c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="DELETE"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/delete?client_ident=${client_ident}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=JWT 07854a0de3db8f5849ecb6be3985bf1e POLICY OTK grant_type=JWT Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="GRANT_TYPE=urn:ietf:params:oauth:grant-type:jwt-bearer"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This is an OAuth extension used to implement SSO using ID_TOKEN"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${assertion}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${client_id}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check for required variables"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="========== Validation of the ID_TOKEN (JWT) =========="/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="fea415cc-63d2-43a2-88e9-512f4e54957c"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="check_expiration"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${assertion}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathValidation"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:result[text()='valid']"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify session"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="The JWT (id_token) can only be used by user which is found within &quot;azp&quot; within the id_token."/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYWdpZGVudGlmaWVyfQ=="/> <L7p:VariableToSet stringValue="azpActual"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${azpActual}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[MAG]"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="issued to a device"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfaWR9"/> <L7p:VariableToSet stringValue="azpActual"/> </L7p:SetVariable> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="openid not permitted"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="only valid for mobile clients"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="scope.granted"/> <L7p:Regex stringValue="\bopenid\b[ ]|\bopenid\b|[ ]\bopenid\b"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[OTK]"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="issued to a client_id; also, remove 'openid' as a valid SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="either a client_id or a device in MAG"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAzpExpected"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:azp/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEF6cEV4cGVjdGVkLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="azpExpected"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${azpActual}"/> <L7p:Expression2 stringValue="${azpExpected}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${azpExpected}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:AddHeader> <L7p:HeaderName stringValue="WWW-Authenticate"/> <L7p:HeaderValue stringValue="Basic error=&quot;Invalid or missing credentials&quot;"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:FalseAssertion/> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify azp"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="azp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verifiy a valid user of this id_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFJlc291cmNlT3duZXIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="owner"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e74ab6a0-5263-41ac-ab5b-c2c6aa2eb1a5"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Associate access_token to a Device"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="at_token"/> <L7p:value stringValue="${at_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="magidentifier"/> <L7p:value stringValue="${magidentifier}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="owner"/> <L7p:value stringValue="${owner}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:CommentAssertion> <L7p:Comment stringValue="========== Create the response message =========="/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIKfQ=="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=BEARER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJtYWMiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIsCiAgIm1hY19rZXkiOiIke21hY19zZWNyZXR9IiwKICAibWFjX2FsZ29yaXRobSI6ImhtYWMtc2hhLTEiCn0="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYWNfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=MAC"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Authorization Server/OTK Authorization Server Website Template 07854a0de3db8f5849ecb6be3985bef7 POLICY OTK Authorization Server Website Template Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Used for the default OAuth 2.0 authorization server web UI"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="display_name"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The title of the authorization server web page"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="T0F1dGggMi4wIEF1dGhvcml6YXRpb24gU2VydmVy"/> <L7p:VariableToSet stringValue="authorization_server_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Logo"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The website's logo, png, base64 encoded"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aVZCT1J3MEtHZ29BQUFBTlNVaEVVZ0FBQUtjQUFBQWpDQU1BQUFERzZlb1FBQUFBR1hSRldIUlRiMlowZDJGeVpRQkJaRzlpWlNCSmJXRm5aVkpsWVdSNWNjbGxQQUFBQS9wcFZGaDBXRTFNT21OdmJTNWhaRzlpWlM1NGJYQUFBQUFBQUR3L2VIQmhZMnRsZENCaVpXZHBiajBpNzd1L0lpQnBaRDBpVnpWTk1FMXdRMlZvYVVoNmNtVlRlazVVWTNwcll6bGtJajgrSUR4NE9uaHRjRzFsZEdFZ2VHMXNibk02ZUQwaVlXUnZZbVU2Ym5NNmJXVjBZUzhpSUhnNmVHMXdkR3M5SWtGa2IySmxJRmhOVUNCRGIzSmxJRFV1TXkxak1ERXhJRFkyTGpFME5UWTJNU3dnTWpBeE1pOHdNaTh3TmkweE5EbzFOam95TnlBZ0lDQWdJQ0FnSWo0Z1BISmtaanBTUkVZZ2VHMXNibk02Y21SbVBTSm9kSFJ3T2k4dmQzZDNMbmN6TG05eVp5OHhPVGs1THpBeUx6SXlMWEprWmkxemVXNTBZWGd0Ym5NaklqNGdQSEprWmpwRVpYTmpjbWx3ZEdsdmJpQnlaR1k2WVdKdmRYUTlJaUlnZUcxc2JuTTZlRzF3VFUwOUltaDBkSEE2THk5dWN5NWhaRzlpWlM1amIyMHZlR0Z3THpFdU1DOXRiUzhpSUhodGJHNXpPbk4wVW1WbVBTSm9kSFJ3T2k4dmJuTXVZV1J2WW1VdVkyOXRMM2hoY0M4eExqQXZjMVI1Y0dVdlVtVnpiM1Z5WTJWU1pXWWpJaUI0Yld4dWN6cDRiWEE5SW1oMGRIQTZMeTl1Y3k1aFpHOWlaUzVqYjIwdmVHRndMekV1TUM4aUlIaHRiRzV6T21SalBTSm9kSFJ3T2k4dmNIVnliQzV2Y21jdlpHTXZaV3hsYldWdWRITXZNUzR4THlJZ2VHMXdUVTA2VDNKcFoybHVZV3hFYjJOMWJXVnVkRWxFUFNKMWRXbGtPalZFTWpBNE9USTBPVE5DUmtSQ01URTVNVFJCT0RVNU1FUXpNVFV3T0VNNElpQjRiWEJOVFRwRWIyTjFiV1Z1ZEVsRVBTSjRiWEF1Wkdsa09qYzJNRFE0UVVRNVJEYzNNVEV4UlRKQlJrTXhPVU00TWpNME1UZEZNRVpGSWlCNGJYQk5UVHBKYm5OMFlXNWpaVWxFUFNKNGJYQXVhV2xrT2pjMk1EUTRRVVE0UkRjM01URXhSVEpCUmtNeE9VTTRNak0wTVRkRk1FWkZJaUI0YlhBNlEzSmxZWFJ2Y2xSdmIydzlJa0ZrYjJKbElFbHNiSFZ6ZEhKaGRHOXlJRU5UTmlBb1YybHVaRzkzY3lraVBpQThlRzF3VFUwNlJHVnlhWFpsWkVaeWIyMGdjM1JTWldZNmFXNXpkR0Z1WTJWSlJEMGlkWFZwWkRwa1lqZzVNekV6TlMweU16azJMVFJqWlRndE9XTmtaQzAwTm1VME5tSmxPVFk1WldRaUlITjBVbVZtT21SdlkzVnRaVzUwU1VROUluaHRjQzVrYVdRNlFUSkNNelV4UkVFM04wUTBSVEl4TVVGQk1FWkRNalE0T0VReE56TkRNVE1pTHo0Z1BHUmpPblJwZEd4bFBpQThjbVJtT2tGc2RENGdQSEprWmpwc2FTQjRiV3c2YkdGdVp6MGllQzFrWldaaGRXeDBJajVEUVMxd2NtbHRZWEo1TFdodmNtbDZiMjUwWVd3OEwzSmtaanBzYVQ0Z1BDOXlaR1k2UVd4MFBpQThMMlJqT25ScGRHeGxQaUE4TDNKa1pqcEVaWE5qY21sd2RHbHZiajRnUEM5eVpHWTZVa1JHUGlBOEwzZzZlRzF3YldWMFlUNGdQRDk0Y0dGamEyVjBJR1Z1WkQwaWNpSS9QaFFEMng0QUFBTUFVRXhVUlYyeDNodVMwZHJ1MkUycDI1TE9qYkRicmRqdTEybTdZc3ZueVlURTVscTBVNXZTbDlYczA2clpwcWZYbzRiSWdhTFZubkcvYWl1WjFHNithSFRBYnFuVzd2UDUvVlN0M0szYXFlWHkrcnJndHFEVW5IL0ZlWjdUbWhTT3p6eXVxaENNemdTR3pEV2Uxc1hsd3oyaTJQYjcvYmZlczRqSmcrRHgzOWpzOTM3QjVkSHA5bnJEZEhqQ2NuYkJjQzZxbjdMYTd5V1cwNExHZkxMY3JwblJsV2U2WUpYUGtHVzVYbmE5NHcrTHpnbUl6Y1Brd1Y2MlZvakc1MHV0Um5LNzRyemh1ZDN3M1BUNjgxZXpUMks0VzVyUmxXMjlaazJ1UllQSGZ2NysvdjMrL2VuMTZNZm14RkN3U1B2OSs5SHF6OS93K05McjBQeisvUG44K0Z5MVZhWFdvZlQ2OUU2dlJrMnZSZmI3OWFEVW04L3B6Yi9pdlBENDhGV3lUbU80WE9iMDViN2l2RzY5WjFLeFN1djI2bjNFZC9qOCtNSGp2bUMzV1piUGtlUHk0dmY4OTFHd1NiUGRzTi94M3RmdDFkUHIwbXE4Wkl2TGh1cjE2VlN5VGIzaHVxbllwZTczN2JYZHNWMjJWdC93M2E3YXFsS3hTMU94UzhqbXh2Zjc5cVRXb0x2Z3VPajE1MCt2UndHRXk3ZmZ0TlByMGNybng4VGt3WTNNaUkvTWl0RHF6czdwek5qdDFvcktoZkQ0Ny9MNThwYlFrdXoyNjhibHhNam14ZWYwNXVUejRsZXpVUG44K2ZyOStsbTBVZGJzMUZ1MVZQMysvMnk5WnZ2OS9zem95czNveSszMzdYakNjYmpmdFpETmkzQythZHZ1K0pUT2p5aVgwL0w1OGRydDl3dUp6Zkg1OE56djJvWElmM3UvNU5idDFPWHo1STdNaWI3aHUxaXpVTS9wekozVG1jRGl2WS9KNkZheVRzbm54NjdhcTYvYnE1UEw2WG0rNUp6U21LallwSHpFZDViTTZnZUh6TmZzOTk3ditCeVN5OXZ2Mm0rNjRvdkszcUxTN0d5N2VlLzMvRXl1Um5LLzFCZVAwUFA2ODJPMDM5YnI5NEhHZS9YNzlZVEhmMnk4WmN6b3ladlA2MGFyYWFMVm5iM2Y4bFN4VEFPRnpFT2syV1cxNEdpMjRNTGp2OC9vOVVPc2VpcWN5bk8vYkZtMFV1WHo5aUNUMGlLVTBpQ1Z5OGprOU03bjlZbktoT3YxKyszMytpdXJtSzNYN3EvWTd4aVEwRW1yVXg2VHp1THk0UEg0L0Qycmhmbjgvcm5kOFhQQWJRQ0V5MHl1UlAvLy93UzlieEVBQUFFQWRGSk9VLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vLy8vL3dCVDl3Y2xBQUFHSlVsRVFWUjQyc1NZZDF4VFZ4VEhJd3BZUVlaYkZGdEV4RHFvcldJVlZ4SUtJVkZDeFpTOTkxQkJtWUtpS0lwN2IzRlgzTE5hZHgwZG4rN2F2ZmZleTlxWjMrbDlMM2tEOGtMOVE1cnpCem4zM1BYbHZuUE9IU29TSmVDWFovcTE4VE9iUSs1dE8vWlR3Ymc3ZlVSUVhpU0FVTmNJRDNjOU9VcFVnckx2bGNObW1YUjZld2VSZnRFUUhlU1MxMk95WXptN2pmL0EzRXdPZkxkOE8yd2sxY21SbkljNm1XM0Y3eDRveUt3b3gzRU82bU5XRkVYUWpmTWN4ZG56aGpLbTJlOHpKVkJQQjNGdTYyZTJKOStPVStEVVRYQU01Mk15c0Q2cXkzZDgxRVlxLzh5NHB1ZDM3TGgvakF4MHFrTTR1OG1jYzJRQVo5c3hWalI4amc3TCtIYWJ3aVRPSlE3aFBDZGhqaGVzbHdWTDNXOUZncTIzeURuNFZnYWVyTkhFdEZTL1JqTk51U0pLWGFQSUthV2tVZDBFNnd0K1ZsUEluVkova1ROYzFqOHNiS2Z5ZEJwZ1lrdWNZUWhWcm9ob01yN0llVWhhem84bDh3SEI5cEpvMml4eXVzcjZBdy9kWnM0Wm9VRktuTElvNmlxWmV6NW9sWjhrVzZqQStVQ3JjdHJ4VDVYRSthU2RObk9tMVZSZWRWc3kzNVl6bWRHTTBDUXpyU0E5UGMxaUswZ3ZHMkRsTEZ4WFc4RFVWY3dWazNOUHJlR3JTM0xWUjJXY0t4ZXBUL0NuRzcxNzdkcDRRL3RFbXFmWndKV3pjc3NzRHJ3eVYrMmtKMVZmaVROQUlSb1N2YTQxTkUrZ0VxY3pYM1ltNDJJdXI1NWhGbDdEc1J5T2N5L3JxZXRQcEVacEFqdHlaUzVsOVdlNGcwMTJqTURwUElVVk8yY1JwYjNKYlhYZWlMRDZaMElzSzY4d0V1VnlMVElLVk5lbDNjYzI5RmE4cjdRaFNaeEo0WUFwUEluY1VEbzhQeE9NeVkxUjlOYmhFWTRUd1lFYmtiS1pjUUxlbnZQUlNIUVJDSXFJeFRFcjV3VmdlK0JzaEVkVFo1Z1Nzb0VFRnd0bkpXTDN1bTJCRzhYTXdoc0pZK0o4VkhWU3VEZWpYT2dOWmJIeFQrMFVuQ0lhaGxSTzgyVmF5bXFPMDAxUC9ZRUJIQ2Y3RDFZampnd20vRUEwRlNpd2NBYkIyMENQQWpXL0Erd2dsb0ZlMW5qUHcxeWllc3lhNHdMRVUvSk9rcmxuVTA2RHJ3NjN5dGtldUtSV1h3VXE2b0Vxb3VoQ0lZNFNBUTNIeWJiYVM0QzJDcWduZXBuYjBqak9uRGowWUdNMFlMZ0wzK1FhK3c0ODUwbkFWNjFlQUJUdjFpRThuUjE2Wlp3aFRkT0RuR3oybnZ5TFoyZmI1WHhZcUtsaVdySTgzaWRKbk15WHRXL3h5MFpUMkxweG5HbkFXVllNaCtjbUU0YnM2Z2hVV3pqRlhEMlJQTmpmTGVVRzFSTVM2Rit5K2NzbHlDMnJ0MGEzbkpkODJBS3BPVm5GdElvV09IY0JMcXd1RWw0ODV6d2duUlduSTVBVzh0bGtlN3lGY3lIZ3hROVl3b0lrbTMzWUs2cHZKTTZucE9sTE1nV28yQVR0ZitaUDluV1hXNHFKRnBDamRqZzNBSXVJS29BRlBLY3hFdVVzSTUyR3J6NFFHWjd0ZkRaWjk2TUpRSkl3ZzU3V1I2QlU5YUhFK2JjMGZTK0JLVEpSdE5uNTdzemhjMUp3WHpRNWRhN250QmxFMWZBMEtISlNLcTVGMDd2UWxWamlLQnZCOFZRR0xGMEdMRHVpbC9iTllIZ1gwbnB2SDRyeGJNZEZXcHhxcE1RNVVKcCt1c0JVTG1WN3hUanFnQlR2QmNROGEyYUdEcWs1bkpZYURJUXByeWNsc2JzZ0czdS9OUzh0ajhPWGpUcDJzRWs3encwOGM3Qy9sZk1UNEhSakpNNW5yV1BaYlVVSDdGRU5sZDNjeE5tL2VsRmdXaW5haWhVNVBmZzhUMTRzait0NmN3Zm91VXlMelRmYTRhVEtGQ0J1aEZISTgydG5zdjRSTVdUdzBzV2F1T3QzalRYUFY1YXl3ajhhb3RIY3liY3hUUlVRSW9IK0tzeityT2lkRXRGd1JVNWFQOG5wZGZZVHM3WElHdWp4SjRvT2NubE5xMlUwMFZxdGdZeGFMZnVrbTdXOG8wOTJjVi9GLzJyNVk1L2g2V0p1UDYyRzYwSFNSNW1RVDRYYWVMNithR3VXSlVGcUpwM2t6bld5VE4vblZjdFVoMjZLVExzRm5xeE1aYzdiSTN1UmNZUnRubmw4UGxVK0ozOHZ1M1ljSGpqb2oyMzd4dDdsSjk2TFBLenRqRVBRbXB4UmtkQTFNQi9vVW1qL2Z0UmQ0UUwzamhqdnRYeXpDWHZRcXB5MG9kZHJYM1Naa1JUZHdqMnU1eWdiekRyWnpkMzFpbk1QejBpME11ZXQzTitIMXRtQTNod0grK0lvVG5xOHhRVVZuNVlFcFlGMWNScmdpUGVsNTBKc25rTCtiSTY1cEV4OFlpTHlkL2E1NElqM3VrRjltNFBlZUw0cDVobmFLZW9WNU85UnZjNGg3NS9idWpZaHZYNzhSOE13MllYRGRSZHhod09yMUZOU3NmOWF4N3pURXQxOXJuc25GdnFIdjI1Ny9MMGRmTTRjdmZqK1RPaE1YZHo0dDBTOVdwQXEwaTkxLzMvOTgxOEJCZ0JHcjBVdWNQVlQ1Z0FBQUFCSlJVNUVya0pnZ2c9PQ=="/> <L7p:VariableToSet stringValue="logo"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Css"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Style for authorization servers website"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="css"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Create success or error HTML content"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC9odG1sO2NoYXJzZXQ9VVRGLTg="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="You may change the design BUT NOT THE CONTENT!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="All variables and/or parameters that are used/referenced are REQUIRED!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="----"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="login_hint"/> <L7p:OtherTargetMessageVariable stringValue="other"/> <L7p:Regex stringValue="login_hint=([^;]{0,256})"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2dpbl9oaW50WzFdfQ=="/> <L7p:VariableToSet stringValue="login_hint"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="login_hint"/> <L7p:Regex stringValue="[&lt;&amp;]"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="login_hint"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// login_hint"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="HTML forms"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="All form parameters are required!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The referenced variables are available at the location where these forms are used"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${task}"/> <L7p:Expression2 stringValue="login"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="login"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="new.content"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="login"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${task}"/> <L7p:Expression2 stringValue="consent"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="consent"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="new.content"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${task}"/> <L7p:Expression2 stringValue="reset"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="reset"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHA+UGxlYXNlIGdvIGJhY2sgdG8gdGhlIGNsaWVudCBhbmQgcmVxdWVzdCBhY2Nlc3MgdG8gcmVzb3VyY2VzIGFnYWluPC9wPg=="/> <L7p:VariableToSet stringValue="new.content"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="wrong user"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${new.content}"/> <L7p:Expression2 stringValue="login"/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="login"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Task"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used with 'login', 'consent' or 'wrong user'?"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="PCFET0NUWVBFIGh0bWw+CjxodG1sPgo8aGVhZD4KPG1ldGEgaHR0cC1lcXVpdj0iQ29udGVudC1UeXBlIiBjb250ZW50PSJ0ZXh0L2h0bWw7IGNoYXJzZXQ9dXRmLTgiIC8+CjxtZXRhIGh0dHAtZXF1aXY9IlgtVUEtQ29tcGF0aWJsZSIKCWNvbnRlbnQ9IklFPTgsSUU9OSxJRT0xMCxJRT0xMSxjaHJvbWU9MSIgLz4KPHRpdGxlPiR7YXV0aG9yaXphdGlvbl9zZXJ2ZXJfbmFtZX08L3RpdGxlPgo8c3R5bGU+JHtjc3N9PC9zdHlsZT4KPGJvZHk+Cgk8ZGl2PgoKCQk8IS0tICBUb3Agb2YgdGhlIHdlYnNpdGUgLS0+CgkJPGRpdiBjbGFzcz0ibmF2YmFyIj4KCQkJPGRpdiBjbGFzcz0iY29udGFpbmVyLWZsdWlkIj4KCQkJCTxzcGFuIGNsYXNzPSJicmFuZCI+CiAgICAgICAgICAgICAgICAgICAJCTxpbWcgc3JjPSJkYXRhOmltYWdlL3BuZztiYXNlNjQsJHtsb2dvfSIgLz4KICAgICAgICAgICAgICAgIAk8L3NwYW4+CgkJCTwvZGl2PgoJCTwvZGl2PgoJCTxkaXYgY2xhc3M9ImNvbnRhaW5lci1mbHVpZCI+CgkJCTxkaXY+CgkJCQk8aDE+JHthdXRob3JpemF0aW9uX3NlcnZlcl9uYW1lfTwvaDE+CgoJCQkJPGRpdiBpZD0iZHluYW1pY0NvbnRlbnQiPiR7bmV3LmNvbnRlbnR9PC9kaXY+CgoJCQkJPCEtLSAgQm90dG9tIG9mIHRoZSB3ZWJzaXRlIC0tPgoJCQkJPGRpdiBjbGFzcz0icm93LWZsdWlkIHBvcnRhbC1mb290ZXIiPgoJCQkJCTxkaXYgY2xhc3M9InNwYW4xMiI+CgkJCQkJCTxwIGNsYXNzPSJwb3J0YWwtY29weXJpZ2h0Ij7CqSBDQSBUZWNobm9sb2dpZXMuIEFsbCByaWdodHMKCQkJCQkJCXJlc2VydmVkLjwvcD4KCQkJCQk8L2Rpdj4KCQkJCTwvZGl2PgoJCQk8L2Rpdj4KCQk8L2Rpdj4KCTwvZGl2Pgo8L2JvZHk+CjwvaHRtbD4="/> <L7p:VariableToSet stringValue="content"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="8d61c731-4a85-449c-a38c-3b9fa0a37e49"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.content}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="JSON"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The value of error.msg MUST be produced by OTK Fail with error message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtlcnJvci5jb250ZW50fQ=="/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="jsonMsg"/> </L7p:SetVariable> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error"/> </L7p:EvaluateJsonPathExpression> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="error_description"/> <L7p:OtherTargetMessageVariable stringValue="jsonMsg"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="error_description"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHA+PGI+ZXJyb3I6IDwvYj4ke2Vycm9yLnJlc3VsdH08YnIvPjxiPmVycm9yX2Rlc2NyaXB0aW9uOiA8L2I+JHtlcnJvcl9kZXNjcmlwdGlvbi5yZXN1bHR9PC9wPg=="/> <L7p:VariableToSet stringValue="errorDetail"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="8d61c731-4a85-449c-a38c-3b9fa0a37e49"/> </L7p:Include> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="By default the design of the error page is a copy of the success page"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="nothing provided"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> </L7p:TrueAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Key Update 07854a0de3db8f5849ecb6be3985bf44 POLICY OTK Client Key Update Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy updates a client_id. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleQ=="/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="description"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="org"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="variables"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="initialize variables that are not used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8982a1ae-c908-44d9-9c62-e4ef5a9f2148"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="callback"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="callback"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="environment"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="environment"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="created_by"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="created_by"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="key_custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="key_custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="service_ids"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="service_ids"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="account_plan_mapping_ids"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="account_plan_mapping_ids"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/update"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid jwks_uri 07854a0de3db8f5849ecb6be3985beda POLICY OTK openid jwks_uri Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X29hdXRoMl9hdXRoX3NlcnZlcn0ke2p3a3NfdXJpX3BhdGh9"/> <L7p:VariableToSet stringValue="jwks_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="6255702b-95c1-48f1-8d55-ea78aadd76a2"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${jwks_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="jwks_uri"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Customizations/grant_types/OTK grant_type=CUSTOM 07854a0de3db8f5849ecb6be3985bebc POLICY OTK grant_type=CUSTOM Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="== Target policy: /auth/oauth/v2/token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== this policy can be used to implement custom grant types"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== output: clientResponse, json structure containing issued token to client"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== See the policy: #OTK Configured Grant Types"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== Below is an example implementation. "/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="grantTypeCustom1"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== validate incoming parameters according to grant_type"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== use OTK Token Persist* to persist token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== configure clientResponse (below)"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJncmFudF90eXBlIjogIiR7Z3JhbnRfdHlwZX0iLAogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIKfQ=="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${grant_type}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:RightValue stringValue="grantTypeCustom2"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== validate incoming parameters according to grant_type"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== use OTK Token Persist* to persist token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="== configure clientResponse (below)"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJncmFudF90eXBlIjogIiR7Z3JhbnRfdHlwZX0iLAogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIKfQ=="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> </wsp:All> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK OAuth 2 Token Validation-BEARER 07854a0de3db8f5849ecb6be3985beff POLICY OTK OAuth 2 Token Validation-BEARER Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Validates OAuth 2.0 Bearer tokens only"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0b2tlblZhbHVlcy5tYWlucGFydH0="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="tokenValues"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:expiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathStatus"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:status/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKey"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOwner"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustom"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token does not exist (expired, revoked, replaced, unknown, ...). access_token='${access_token}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="extract values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${now.seconds}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LE"/> <L7p:RightValue stringValue="${xpathExpiration.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token has expired: expiration: ${xpathExpiration.result}, time_now: ${gateway.time.seconds}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="expiration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="44b1faa2-974d-4b1e-8753-89ee2dddb98e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK SCOPE Verification"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="any"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="fail"/> <L7p:value stringValue="${scope_fail}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.granted"/> <L7p:value stringValue="${xpathScope.result}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.required"/> <L7p:value stringValue="${scope_required}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token was not granted for required scope, required: ${scope_required}, granted: ${xpathScope.result}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="scope"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathStatus.result}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="ENABLED"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: Access token is disabled"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${onetime}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cf1c08ae-8f8e-48db-b01b-89eb891615a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Delete"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue="${access_token}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="refresh_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="temp_token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${result}"/> <L7p:Expression2 stringValue="1 token(s) deleted"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="1 token(s) deleted"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="WARNING: Access token may still be usable although it was marked as one-time access_token! access_token='${access_token}'"/> </L7p:AuditDetailAssertion> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="delete token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="onetime"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="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"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Update 07854a0de3db8f5849ecb6be3985bf15 POLICY OTK Manager Client Update Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy updates a client. Either on the local database or via an API"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50"/> <L7p:VariableToSet stringValue="persist_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="scope"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="callback"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="created_by"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="variables"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="initialize variables that are not used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="39cca824-a1b6-4e2a-a493-fd72f441dc9e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Manager Client NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="description"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="description"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="org"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="org"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_ident"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_ident"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2FsbGJhY2s9JHtjYWxsYmFja30mY2xpZW50X2lkZW50PSR7Y2xpZW50X2lkZW50fSZjbGllbnRfa2V5PSR7Y2xpZW50X2tleX0mZGVzY3JpcHRpb249JHtkZXNjcmlwdGlvbn0mZW52aXJvbm1lbnQ9JHtlbnZpcm9ubWVudH0mbmFtZT0ke2NsaWVudF9uYW1lfSZvcmc9JHtvcmd9JnBlcnNpc3RfdHlwZT0ke3BlcnNpc3RfdHlwZX0mc2NvcGU9JHtzY29wZX0mc2VjcmV0PSR7c2VjcmV0fSZzdGF0dXM9JHtjbGllbnRfc3RhdHVzfSZ0eXBlPSR7dHlwZX0mY3JlYXRlZF9ieT0ke2NyZWF0ZWRfYnl9JmNsaWVudF9jdXN0b209JHtjbGllbnRfY3VzdG9tfQ=="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_clientstore_server}/oauth/clientstore/update"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database access"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid token_endpoint_auth_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985bee4 POLICY OTK openid token_endpoint_auth_signing_alg_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="IlJTMjU2IiwgIkhTMjU2Ig=="/> <L7p:VariableToSet stringValue="token_endpoint_auth_signing_alg_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL, currently not supported"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="8bdb6695-2d8f-4944-8ae2-fdfb6c74183d"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_endpoint_auth_signing_alg_values_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="token_endpoint_auth_signing_alg_values_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/session/OTK Session Tracking 07854a0de3db8f5849ecb6be3985bf4a POLICY OTK Session Tracking Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be used to track certain session data associated with access_token"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Replaces the given JSON object for the given section"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Empty input: { &quot;otk&quot;: {}, &quot;portal&quot;: {}, &quot;mag&quot;: {}, &quot;customer&quot;: {} }"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwrite in error case"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${current_input}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyAib3RrIjoge30sICJwb3J0YWwiOiB7fSwgIm1hZyI6IHt9LCAiY3VzdG9tZXIiOiB7fSB9"/> <L7p:VariableToSet stringValue="current_input"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="input"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check, if we have an input"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50X2lucHV0fQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="current_input"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${otk}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="otk"/> <L7p:OtherTargetMessageVariable stringValue="current_input"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jotk"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqb3RrLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="otk"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="otk"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${mag}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="mag"/> <L7p:OtherTargetMessageVariable stringValue="current_input"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jmag"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqbWFnLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="mag"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="mag"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="mag"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${portal}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="portal"/> <L7p:OtherTargetMessageVariable stringValue="current_input"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jportal"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqcG9ydGFsLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="portal"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="portal"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="potal"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${clientkey}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:EvaluateJsonPathExpression> <L7p:Expression stringValue="clientkey"/> <L7p:OtherTargetMessageVariable stringValue="current_input"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="jclientkey"/> </L7p:EvaluateJsonPathExpression> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtqY2xpZW50a2V5LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="clientkey"/> </L7p:SetVariable> </wsp:All> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="clientkey"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="clientkey"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="ICB7CiAgICAib3RrIjogJHtvdGt9LAogICAgInBvcnRhbCI6ICR7cG9ydGFsfSwKICAgICJtYWciOiAke21hZ30sCiAgICAiY2xpZW50a2V5IjogJHtjbGllbnRrZXl9CiAgfQ=="/> <L7p:VariableToSet stringValue="session_output"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:JSONSchema> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check if the session_output is JSON"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:OtherTargetMessageVariable stringValue="session_output"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[{ "$schema": "http://json-schema.org/draft-04/schema#", "title": "SessionTracking", "description": "Verify that session_output is a JSON message", "type": "object" }]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> </L7p:JSONSchema> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="session_output"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[&lt;&gt;&amp;]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwrite in error case"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MTMz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="fail"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Authorization Server/OTK Authorization Server Configuration 07854a0de3db8f5849ecb6be3985bef6 POLICY OTK Authorization Server Configuration Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Configure all variables required for the OAuth 2.0 authorization server"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Used for redirecting to the next location"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="login_server"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The server that is handling login requests during response_type requests, i.e.: https://myserver.com:port"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX06JHtnYXRld2F5Lm90ay5wb3J0fQ=="/> <L7p:VariableToSet stringValue="host_login_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent_server"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The server that is handling consent requests during response_type requests, i.e.: https://myserver.com:port"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="aHR0cHM6Ly8ke2dhdGV3YXkuY2x1c3Rlci5ob3N0bmFtZX06JHtnYXRld2F5Lm90ay5wb3J0fQ=="/> <L7p:VariableToSet stringValue="host_consent_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="login_path"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Path of the URL that is receiving login requests"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="L2F1dGgvb2F1dGgvdjIvYXV0aG9yaXplL2xvZ2lu"/> <L7p:VariableToSet stringValue="path_login_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="consent_path"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Path of the URL that is receiving consent requests"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="L2F1dGgvb2F1dGgvdjIvYXV0aG9yaXplL2NvbnNlbnQ="/> <L7p:VariableToSet stringValue="path_consent_server"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Used at the default '/authorize/*' APIs."/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="session_lifetime"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used for internal session! During this period a request can be authorized"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MzAw"/> <L7p:VariableToSet stringValue="sessionIdCacheAge"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Used at the default '/authorize*' API"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Used to sign and encrypt a JWT identifying the current session"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="shared_secret"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to sign the session data. 1 char == 8 bit"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Y2Y4MGYwMmI5OTg1NDQ4MWE5YjJlNjYxMTQxODA5OTE="/> <L7p:VariableToSet stringValue="otk_session_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="shared_secret"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to encrypt the session data. 1 char == 8 bit"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="Y2Y4MGYwMmI5OTg1NDQ4MWE5YjJlNjYxMTQxODA5OTE="/> <L7p:VariableToSet stringValue="otk_session_secret_encryption"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="211dc792-9d5a-447d-b680-a93492b2fad0"/> </L7p:Include> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X2xvZ2luX3NlcnZlcn0ke3BhdGhfbG9naW5fc2VydmVyfQ=="/> <L7p:VariableToSet stringValue="location_login_server"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtob3N0X2NvbnNlbnRfc2VydmVyfSR7cGF0aF9jb25zZW50X3NlcnZlcn0="/> <L7p:VariableToSet stringValue="location_consent_server"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/authentication/OTK Client Authentication 07854a0de3db8f5849ecb6be3985bf51 POLICY OTK Client Authentication Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Allow the auth-header OR parameters but NOT both if both are used"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// overwritten in case of a provided secret"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${allow_basic}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${auth_header}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="^\b[Bb][Aa][Ss][Ii][Cc]\b\s.+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${auth_param_id}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="authheader"/> <L7p:OtherTargetMessageVariable stringValue="auth_header"/> <L7p:Regex stringValue="[ ](.{1,})$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoaGVhZGVyWzFdfQ=="/> <L7p:VariableToSet stringValue="authheader"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authheader"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorization"/> <L7p:TransformType transformType="BASE64_DECODE"/> </L7p:EncodeDecode> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="authorization"/> <L7p:OtherTargetMessageVariable stringValue="authorization"/> <L7p:Regex stringValue="^([^:]{1,255}):(.{1,})"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemF0aW9uWzFdfQ=="/> <L7p:VariableToSet stringValue="client_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemF0aW9uWzJdfQ=="/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="HEADER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${allow_query}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${auth_header}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoX3BhcmFtX2lkfQ=="/> <L7p:VariableToSet stringValue="client_id"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoX3BhcmFtX3NlY3JldH0="/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoX3BhcmFtX2NsaWVudF9hc3NlcnRpb25fdHlwZX0="/> <L7p:VariableToSet stringValue="client_assertion_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoX3BhcmFtX2NsaWVudF9hc3NlcnRpb259"/> <L7p:VariableToSet stringValue="client_assertion"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PARAMETER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Search Header and Parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Allow client credentials at one location only!"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:CommentAssertion> <L7p:Comment stringValue="=== "/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_id}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_assertion_type}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_assertion}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if client_id is not provided, then client_assertion flow is being used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_id}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_assertion_type}"/> <L7p:Expression2 stringValue="urn:ietf:params:oauth:client-assertion-type:jwt-bearer"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="urn:ietf:params:oauth:client-assertion-type:jwt-bearer"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:DecodeJsonWebToken> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// decoding to get client_id, no validation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:SourcePayload stringValue="${client_assertion}"/> <L7p:TargetVariablePrefix stringValue="client_jwt"/> <L7p:ValidationType stringValue="None"/> </L7p:DecodeJsonWebToken> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f18143b8-4ba9-42c6-819e-8073cba3039a"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client JWT Values"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// sets 'sub' (which should be client_id)"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="jwt_header"/> <L7p:value stringValue="${client_jwt.header}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt_payload"/> <L7p:value stringValue="${client_jwt.payload}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtzdWJ9"/> <L7p:VariableToSet stringValue="client_id"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_id}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// if client_id is not provided, extract client_id from client jwt if present"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> </wsp:OneOrMore> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// client_id needs to be set if client_assertion flow is being used"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation service"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isValidationLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${local_status}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="RU5BQkxFRA=="/> <L7p:VariableToSet stringValue="local_status"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="status"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set the default required status to 'ENABLED'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${local_expiration}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="local_expiration"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="expiration"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="if expiration is empty set it to 'true'"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_clientstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation service"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isValidationLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="Z2V0QWxs"/> <L7p:VariableToSet stringValue="operation"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="client_ident"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eG1s"/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhbF9jbGllbnRfbmFtZX0="/> <L7p:VariableToSet stringValue="name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="org"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="registered_by"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfaWR9"/> <L7p:VariableToSet stringValue="client_key"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhbF9lbnZpcm9ubWVudH0="/> <L7p:VariableToSet stringValue="environment"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="queryOffset"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtsb2NhbF9zdGF0dXN9"/> <L7p:VariableToSet stringValue="filterStatus"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="master"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2e7c73ef-afbf-47f8-89e0-8ba80095c2b3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="6af83b79-d346-4867-bbb1-aa9042d90893"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_assertion"/> <L7p:value stringValue="${client_assertion}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_assertion_type"/> <L7p:value stringValue="${client_assertion_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_info"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${local_client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_status"/> <L7p:value stringValue="${local_status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_type"/> <L7p:value stringValue="${local_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${local_environment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${local_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${local_scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="status"/> <L7p:value stringValue="${local_status}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation service"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isValidationLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${local_environment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue="${local_status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue="${local_client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="6af83b79-d346-4867-bbb1-aa9042d90893"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_assertion"/> <L7p:value stringValue="${client_assertion}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_assertion_type"/> <L7p:value stringValue="${client_assertion_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_id"/> <L7p:value stringValue="${client_id}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_info"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_name"/> <L7p:value stringValue="${local_client_name}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_secret"/> <L7p:value stringValue="${client_secret}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_status"/> <L7p:value stringValue="${local_status}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_type"/> <L7p:value stringValue="${local_type}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue="${local_environment}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="expiration"/> <L7p:value stringValue="${local_expiration}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope"/> <L7p:value stringValue="${local_scope}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="status"/> <L7p:value stringValue="${local_status}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="mixed"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isValidationLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_id"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_id"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="local_client_name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="local_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="local_environment"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="environment"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="local_expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="local_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="local_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="local_scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="auth_param_client_assertion_type"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_assertion_type"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="auth_param_client_assertion"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_assertion"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleT0ke2NsaWVudF9pZH0mY2xpZW50X3NlY3JldD0ke2NsaWVudF9zZWNyZXR9JmNsaWVudF9uYW1lPSR7Y2xpZW50X25hbWV9JmNsaWVudF90eXBlPSR7Y2xpZW50X3R5cGV9JmVudmlyb25tZW50PSR7ZW52aXJvbm1lbnR9JmV4cGlyYXRpb249JHtleHBpcmF0aW9ufSZzdGF0dXM9JHtsb2NhbF9zdGF0dXN9JnNjb3BlPSR7c2NvcGV9JmNsaWVudF9hc3NlcnRpb25fdHlwZT0ke2NsaWVudF9hc3NlcnRpb25fdHlwZX0mY2xpZW50X2Fzc2VydGlvbj0ke2NsaWVudF9hc3NlcnRpb259JnF1ZXJ5T2Zmc2V0PTA="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/v2/client"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check if the routing assertion was successful"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:result/text()='valid'"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientName"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_name"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScopeRegistered"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:scope"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathType"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_type"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKeyCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_key_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_custom"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientSecret"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_secret"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClient"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:client_ident"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudE5hbWUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="client_name"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNjb3BlUmVnaXN0ZXJlZC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="scope.registered"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFR5cGUucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="client_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudEtleUN1c3RvbS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client_key_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudEN1c3RvbS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="overwrite"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// looked up from the database if it was a public client"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHt4cGF0aENsaWVudFNlY3JldC5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="must be valid, no success response otherwise"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Look Up 07854a0de3db8f5849ecb6be3985bf4d POLICY OTK Cache Look Up Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="***** OTK Cache Look Up ********************"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="** Looks up a cache value from the cache identified by cacheID and maxEntryAge by key: cacheKey."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="**********************************************"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheID}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cacheKey}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxEntryAge}"/> <L7p:MultivaluedComparison multivaluedComparison="FAIL"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue="add"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="valid"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check for required fields"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="R0VU"/> <L7p:VariableToSet stringValue="cache.op"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="maxEntries"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="maxEntrySize"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="== SET"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// context variables for OTK Cache Handler"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:Include> <L7p:PolicyGuid stringValue="c7ffb033-cf81-44e1-8e89-0c25b1963b60"/> </L7p:Include> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Export 07854a0de3db8f5849ecb6be3985bf12 POLICY OTK Manager Client Export Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Builds the JSON returned when a user exports client information for SDK configuration"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjsgY2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtpbmNvbWluZ194bWwubWFpbnBhcnR9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="xmlClientInfo"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify that only one client_id gets exported"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="xmlClientInfo"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="count(/ns:values/ns:keys/ns:values/ns:value)=1"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Verify"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Verify that the requested client_key is included in the provided input message"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:VariablePrefix stringValue=""/> <L7p:XmlMsgSrc stringValue="xmlClientInfo"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_key/text()=$client_key"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAx"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> </wsp:All> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:LookupTrustedCertificate> <L7p:TrustedCertificateName stringValue="${oauth2_server_certificate}"/> <L7p:VariableName stringValue="certificate"/> </L7p:LookupTrustedCertificate> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Certificate lookup failed! attempted to look up ${oauth2_server_certificate}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTMy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="FAIL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Look up certificate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjZXJ0aWZpY2F0ZS5wZW19"/> <L7p:VariableToSet stringValue="certificate.pem"/> </L7p:SetVariable> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="certificate.pem"/> <L7p:Regex stringValue="\n(.)"/> <L7p:RegexName stringValue="Normalize Certificate"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="&quot;,&quot;$1"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="certificate.pem"/> <L7p:Regex stringValue="\r"/> <L7p:RegexName stringValue="Remove carriage return"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f0db12ba-404c-4674-a54e-571ed6d2f1bc"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG Variable Configuration"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="incoming"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="incoming-resp"/> <L7p:value stringValue="resp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="parent-element"/> <L7p:value stringValue="${parent_element}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="parent_element"/> <L7p:value stringValue="${parent_element}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="75c95854-92b4-4293-92e5-6d63b6d94812"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAS Variable Configuration"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:XslTransformation> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Escape quotes"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Escape quotes for xml to json transformation"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="xmlClientInfo"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:mag="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output indent="yes" method="xml"/> <xsl:template match="@*|node()"> <xsl:copy> <xsl:apply-templates select="@*|node()"/> </xsl:copy> </xsl:template> <xsl:template match="*[not(self::mag:client_custom)][not(self::mag:client_key_custom)]/text()"> <xsl:call-template name="replace"> <xsl:with-param name="pS" select="normalize-space(.)"/> </xsl:call-template> </xsl:template> <xsl:template name="replace"> <xsl:param name="pS"/> <xsl:param name="pTarget" select="'&quot;'"/> <xsl:param name="pReplacement" select="'\&quot;'"/> <xsl:if test="$pS"> <xsl:value-of select="substring-before(concat($pS,$pTarget), $pTarget)"/> <xsl:if test="contains($pS, $pTarget)"> <xsl:value-of select="$pReplacement"/> </xsl:if> <xsl:call-template name="replace"> <xsl:with-param name="pS" select="substring-after($pS, $pTarget)"/> <xsl:with-param name="pTarget" select="$pTarget"/> <xsl:with-param name="pReplacement" select="$pReplacement"/> </xsl:call-template> </xsl:if> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="xmlClientInfo"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:mag="http://ns.l7tech.com/2012/11/otk-clientstore" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text"/> <xsl:param name="certificate.pem"/> <xsl:param name="oauth2_server_hostname"/> <xsl:param name="oauth2_server_port"/> <xsl:param name="oauth2_server_url_prefix"/> <xsl:param name="oauth2_auth_path"/> <xsl:param name="oauth2_token_path"/> <xsl:param name="oauth2_token_revocation_path"/> <xsl:param name="usersession_logout_path"/> <xsl:param name="userinfo_path"/> <xsl:param name="usersession_status_path"/> <xsl:param name="mas_json"/> <xsl:param name="mag_json"/> <xsl:param name="export_custom"/> <xsl:param name="expose_client_secret"/> <xsl:strip-space elements="*"/> <xsl:template match="text()"> <xsl:value-of select="normalize-space()"/> </xsl:template> <xsl:strip-space elements="certificate.pem"/> <xsl:template match="/mag:values"> { "server": { "hostname": "<xsl:value-of select="$oauth2_server_hostname"/>", "port": <xsl:value-of select="$oauth2_server_port"/>, "prefix": "<xsl:value-of select="$oauth2_server_url_prefix"/>", "server_certs": [ [ "<xsl:value-of select="normalize-space($certificate.pem)"/>" ] ] }, "oauth": { "client": { "organization": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:organization"/>", "description": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:description"/>", "client_name": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:name"/>", "client_type": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:type"/>", "registered_by": "<xsl:value-of select="mag:clients/mag:values/mag:value/mag:registered_by"/>", "client_custom": <xsl:value-of select="mag:clients/mag:values/mag:value/mag:client_custom"/>, "client_ids": [ <xsl:for-each select="mag:keys/mag:values/mag:value"> { "client_id": "<xsl:value-of select="mag:client_key"/>", "client_secret":"<xsl:if test="$expose_client_secret = 'true'"><xsl:value-of select="mag:secret"/></xsl:if>", "scope": "<xsl:value-of select="mag:scope"/>", "redirect_uri": "<xsl:value-of select="mag:callback"/>", "environment": "<xsl:value-of select="mag:environment"/>", "status": "<xsl:value-of select="mag:status"/>", "registered_by": "<xsl:value-of select="mag:created_by"/>", "service_ids": "<xsl:value-of select="mag:serviceids"/>", "account_plan_mapping_ids": "<xsl:value-of select="mag:accountplanmappingids"/>", "client_key_custom": <xsl:value-of select="mag:client_key_custom"/> }<xsl:if test="position() != last()">,</xsl:if> </xsl:for-each> ] }, "system_endpoints": { "authorization_endpoint_path": "<xsl:value-of select="$oauth2_auth_path"/>", "token_endpoint_path": "<xsl:value-of select="$oauth2_token_path"/>", "token_revocation_endpoint_path": "<xsl:value-of select="$oauth2_token_revocation_path"/>", "usersession_logout_endpoint_path": "<xsl:value-of select="$usersession_logout_path"/>", "usersession_status_endpoint_path": "<xsl:value-of select="$usersession_status_path"/>" }, "oauth_protected_endpoints": { "userinfo_endpoint_path": "<xsl:value-of select="$userinfo_path"/>" } }<xsl:if test="$mas_json">,<xsl:value-of select="normalize-space($mas_json)" xml:space="preserve"/></xsl:if> <xsl:if test="$mag_json">,<xsl:value-of select="normalize-space($mag_json)" xml:space="preserve"/></xsl:if>, "custom": { <xsl:value-of select="$export_custom"/> } }</xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> <L7p:XsltVersion stringValue="1.0"/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4bWxDbGllbnRJbmZvLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwfQ=="/> <L7p:ContentType stringValue="application/json;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Refresh Token Validation 07854a0de3db8f5849ecb6be3985bf00 POLICY OTK Refresh Token Validation Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment works with the result of 'tokenstore/get?rtoken=...'"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overwritten in the case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathScope"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:rexpiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathClientKey"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:client_key/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathOwner"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathStatus"/> <L7p:XmlMsgSrc stringValue="tokenValues"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:status/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: refresh_token does not exist (expired, revoked, replaced, unknown, ...)."/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTEz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="token"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="lookup the token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${xpathClientKey.result}"/> <L7p:Expression2 stringValue="${client_key}"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="${client_key}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: unauthorized_client, error_description: the refresh_token was not issued to this client. Valid client: '${xpathClientKey.result}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE3"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check if the given client_key is the original receipient of the refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${xpathStatus.result}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="string"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="${token.status}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: refresh_token is not '${token.status}' as expected"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="OTkz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Status"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue=""/> <L7p:VariableToSet stringValue="now"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${now.seconds}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LE"/> <L7p:RightValue stringValue="${xpathExpiration.result}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: refresh_token has expired: expiration: ${xpathExpiration.result}, time_now: ${now.seconds}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTEz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Expiration"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check, if the token has expired"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${scope.requested}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="|oob"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFNjb3BlLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="requested SCOPE"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="either empty or 'oob'. Use the existing SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="error: invalid_request, error_description: refresh_token was not granted for the requested SCOPE. Valid: '${xpathScope.result}', requested: '${scope.requested}'"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTE1"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SCOPE"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aE93bmVyLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEV4cGlyYXRpb24ucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="rexpiration"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="PHZhbGlkYXRpb24geG1sbnM9Imh0dHA6Ly9ucy5sN3RlY2guY29tLzIwMTIvMTEvb3RrLW92cCI+CiAgIDxyZXN1bHQ+dmFsaWQ8L3Jlc3VsdD4KICAgPHNjb3BlPjwhW0NEQVRBWyR7c2NvcGUuZ3JhbnRlZH1dXT48L3Njb3BlPgogICA8cmVzb3VyY2Vfb3duZXI+PCFbQ0RBVEFbJHtyZXNvdXJjZV9vd25lcn1dXT48L3Jlc291cmNlX293bmVyPgogICA8cmV4cGlyYXRpb24+PCFbQ0RBVEFbJHt4cGF0aEV4cGlyYXRpb24ucmVzdWx0fV1dPjwvcmV4cGlyYXRpb24+CjwvdmFsaWRhdGlvbj4="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="resp"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dGV4dC94bWw7Y2hhcnNldD1VVEYtOA=="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/authentication/OTK User Authentication 07854a0de3db8f5849ecb6be3985bf55 POLICY OTK User Authentication Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Required changes can be implemented in policies in the 'Customizations' folder "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === The policies within that folder will have the same name as this policy but "/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === either prefixed with '#' or suffixed with 'Extensions'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Prefixed policies can be used to overwrite variables of this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === Suffixed policies can be used to extend functionality"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you find you cannot add your customizations using the policies in the 'Customizations' folder"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy authenticates a user within OTK."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Disable branches or implement other methods for authentication if required"/> </L7p:CommentAssertion> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="IMPORTANT: the following output variables have to be set!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- current.username: the username of the user that authenticated"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- current.user.role: by default either 'user' or 'admin'. Any user name configured within user role section of 'OTK User Attribute Look Up Extension' will be interpreted as 'admin'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- current.user.acr: the acr that was matched when authenticating the user. By default '0'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- current.user.authTime: the time when the user authenticated. By default 'now'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- salt: this value is used when generating id_token. It ALWAYS has to be the same value for the same user per IDP!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- Others, most likely not to be overwritten: error.code, third_party_sso_token, third_party_sso_token_type"/> </L7p:CommentAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="README"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Info about output parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="- the variable 'acrValuesRequested' contains the content requested by a client"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- extract the content and determine which acr-class should be associated with which branch"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- after successful authentication set the variable 'current.user.acr' to the value that was used"/> </L7p:CommentAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="README"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Info about acr handling"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Default branches:"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- Authorization Header: this extracts username and password from a HTTP Basic Authorization header. By default only used in the context of MAG"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- Internal: authenticates users against the internal identity provider. This branch should be updated if an LDAP (or simiar) is used"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- ID_TOKEN: authentication by validating an id_token that was issued by OTK. By default used with the parameters 'id_token_hint, prompt=none' at the endpint '.../authorize/login'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- Browser session-cookie: used if a user selecte to be rememered at the Authorization Server's login page"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- [MAG] Social Login: used with MAG if social login is used. By default used at the endpoint '.../authorize/login'"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="- SiteMinder: enabled and used if SiteMinder is used as IDP"/> </L7p:CommentAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="README"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Info about branches"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[MAG]"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set by SiteMinder branch if MAG is enabled"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="third_party_sso_token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[MAG]"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set by SiteMinder branch if MAG is enabled"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="third_party_sso_token_type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="user role"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="will be overridden if a user is identified as administrator"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dXNlcg=="/> <L7p:VariableToSet stringValue="current.user.role"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// initialize"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// may contain additional attributes to be exposed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.user.attributes"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="acr"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="default level of authentication context class"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.user.acr"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtnYXRld2F5LnRpbWUuc2Vjb25kc30="/> <L7p:VariableToSet stringValue="current.time"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnRpbWV9"/> <L7p:VariableToSet stringValue="current.user.authTime"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnRpbWV9"/> <L7p:VariableToSet stringValue="existingAuthTime"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authIdToken}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e3e6f2b3-011a-437f-9ff0-ac911591ebfc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="check_expiration"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${authIdToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_alg"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAuthTime"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns0:validation/ns0:auth_time/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns0"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEF1dGhUaW1lLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="existingAuthTime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Id Token Passed in"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authIdToken}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="32d58e80-53a2-49fd-935a-391b1755e9fd"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Lookup"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue="${clientId}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue="${username}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="sub"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="jwtValues"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:value/ns:jwt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="payloadB64"/> <L7p:OtherTargetMessageVariable stringValue="jwtValues.result"/> <L7p:Regex stringValue="[.]([^.]+)[.]"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtwYXlsb2FkQjY0WzFdfQ=="/> <L7p:VariableToSet stringValue="payloadB64"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="payloadB64"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="payload"/> <L7p:TransformType transformType="BASE64_DECODE"/> </L7p:EncodeDecode> <L7p:CustomAssertion> <L7p:base64SerializedValue>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</L7p:base64SerializedValue> </L7p:CustomAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkaWR0LmF1dGhfdGltZX0="/> <L7p:VariableToSet stringValue="existingAuthTime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Look-up"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// try to find id_token using client_id and resource_owner"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Existing id_token auth_time"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="reset"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// reset error.code to empty to prevent incorrect error code to be used below"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${username}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authHeader}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="authorization"/> <L7p:OtherTargetMessageVariable stringValue="authHeader"/> <L7p:Regex stringValue="[ ](.{1,128})$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemF0aW9uWzFdfQ=="/> <L7p:VariableToSet stringValue="authorization"/> </L7p:SetVariable> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="authorization"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="authorization"/> <L7p:TransformType transformType="BASE64_DECODE"/> </L7p:EncodeDecode> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="authorization"/> <L7p:OtherTargetMessageVariable stringValue="authorization"/> <L7p:Regex stringValue="^([^:]{1,64}):(.{1,64})"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemF0aW9uWzFdfQ=="/> <L7p:VariableToSet stringValue="username"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRob3JpemF0aW9uWzJdfQ=="/> <L7p:VariableToSet stringValue="password"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Authorization Header"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Extract username and password from http basic authorization header if it exists"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Include> <L7p:PolicyGuid stringValue="3c2ff9a8-0cd3-4166-848d-109da2405775"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${prompt}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:Regex stringValue="\blogin\b|\bconsent\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:Regex stringValue="\bnone\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="\blogin\b|\bconsent\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// no existing session was found; error=login_required"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${existingAuthTime}"/> <L7p:Expression2 stringValue="${current.time}"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="${current.time}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="auth_time"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// update auth_time to use existing"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtleGlzdGluZ0F1dGhUaW1lfQ=="/> <L7p:VariableToSet stringValue="current.user.authTime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="none"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// prompt contains none"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="prompt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check prompt value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Custom IDP or Siteminder"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${authIdToken}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoSWRUb2tlbn0="/> <L7p:VariableToSet stringValue="existing_jwt"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${username}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="id_token validation"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="'aud' can be ignored"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="e3e6f2b3-011a-437f-9ff0-ac911591ebfc"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK id_token Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="acr"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="azp"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="check_expiration"/> <L7p:value stringValue="true"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="jwt"/> <L7p:value stringValue="${authIdToken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="salt"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="shared_secret_alg"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns0:validation/ns0:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ns0"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwnerAcr"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns0:validation/ns0:acr/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns0"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwnerSalt"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns0:validation/ns0:salt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns0"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathAuthTime"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns0:validation/ns0:auth_time/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns0"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-tokenstore"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFJlc291cmNlT3duZXIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="current.username"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// does not contain none"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="prompt"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="\bnone\b"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEF1dGhUaW1lLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="current.user.authTime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="prompt"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// use existing auth_time from id_token if prompt value contains none"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to create a PPID within an id_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHt4cGF0aFJlc291cmNlT3duZXJTYWx0LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:CommentAssertion> <L7p:Comment stringValue="Setting 'acr' to the original value. May be be overwritten if the usage of the id_token shall be something different"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFJlc291cmNlT3duZXJBY3IucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="current.user.acr"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ddd9d3b1-ca24-4be7-8ad1-7f073b13ad6e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Attribute Look Up"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// look up user role"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${provider}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_username"/> <L7p:value stringValue="${current.username}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ID_TOKEN"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Default usage: authenticates a user based on a given id_token_hint in the context of OpenID Connect response_type flows"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${cookiename}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${username}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="authUserCookie"/> <L7p:OtherTargetMessageVariable stringValue="cookie"/> <L7p:PatternContainsVariables booleanValue="true"/> <L7p:Regex stringValue="${cookiename}=([a-zA-Z0-9-_/]{1,128})"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHthdXRoVXNlckNvb2tpZVsxXX0="/> <L7p:VariableToSet stringValue="user_session_key"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e5a0043-f2dc-4606-828b-f8aa97bccbf7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Session GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="cacheAge"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheId"/> <L7p:value stringValue="userSessionIDCacheV2"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="cacheKey"/> <L7p:value stringValue="${user_session_key}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="sessionValue"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:found/ns:value/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-session"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="sessionValue.result"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="decoded"/> <L7p:TransformType transformType="URL_DECODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtkZWNvZGVkfQ=="/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="userSession"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwner"/> <L7p:XmlMsgSrc stringValue="userSession"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathResourceOwnerSalt"/> <L7p:XmlMsgSrc stringValue="userSession"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/s/salt/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFJlc291cmNlT3duZXIucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="current.username"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to create a PPID within an id_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHt4cGF0aFJlc291cmNlT3duZXJTYWx0LnJlc3VsdH0="/> <L7p:VariableToSet stringValue="salt"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ddd9d3b1-ca24-4be7-8ad1-7f073b13ad6e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Attribute Look Up"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// look up user role"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${provider}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_username"/> <L7p:value stringValue="${current.username}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Browser Session-Cookie"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Disable this branch if cookies for the authorization server should not be supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Used to create a PPID within an id_token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="encas_social_login_successful"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f3776d1f-d2b5-41c5-8176-893d234a841e"/> <L7p:EncapsulatedAssertionConfigName stringValue="MAG User Authentication - Social Login"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${username}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${encas_social_login_successful}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="ddd9d3b1-ca24-4be7-8ad1-7f073b13ad6e"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK User Attribute Look Up"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// look up user role"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${provider}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="given_username"/> <L7p:value stringValue="${current.username}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="[MAG] Social Login"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Disable this branch if social login with MAG should not be supported"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="Failed to authenticate user!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.user.role"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Empty"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error.code is empty"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="authentication"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Empty"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${maxAge}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjdXJyZW50LnRpbWV9"/> <L7p:DataType variableDataType="dateTime"/> <L7p:DateOffsetExpression stringValue="-${maxAge}"/> <L7p:VariableToSet stringValue="validAuthTime"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt2YWxpZEF1dGhUaW1lLnNlY29uZHN9"/> <L7p:DataType variableDataType="int"/> <L7p:VariableToSet stringValue="validAuthTime"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${current.user.authTime}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="int"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="GT"/> <L7p:RightValue stringValue="${validAuthTime}"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtleGlzdGluZ0F1dGhUaW1lfQ=="/> <L7p:VariableToSet stringValue="current.user.authTime"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="auth_time: ${current.user.authTime} is outside valid window: ${validAuthTime}"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="current.user.role"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MjAy"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Empty"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error.code is empty"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Max Age"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check to see if auth_time falls within max_age"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="ERROR"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid id_token_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985bee3 POLICY OTK openid id_token_signing_alg_values_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="IlJTMjU2IiwgIkhTMjU2Ig=="/> <L7p:VariableToSet stringValue="id_token_signing_alg_values_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// REQUIRED"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="24690f8f-83e4-490c-8fdd-43adb3dd8d9d"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${id_token_signing_alg_values_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="id_token_signing_alg_values_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/pof/OTK setClientOptionalValues 07854a0de3db8f5849ecb6be3985bf23 POLICY OTK setClientOptionalValues Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Used at two positions within the clientstore policy"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_custom}"/> <L7p:Expression2 stringValue=""/> <L7p:ExpressionIsVariable booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="e30="/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_custom"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for an empty value, set default if found"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${description}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="V2hhdCBpcyB0aGUgYXBwIHVzZWQgZm9yPw=="/> <L7p:VariableToSet stringValue="description"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Description"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=REFRESH_TOKEN 07854a0de3db8f5849ecb6be3985bf19 POLICY OTK grant_type=REFRESH_TOKEN Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy handles the grant_type refresh_token"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="7e6564f9-c7b4-4a7f-b087-7d03226fcd17"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Variable Configuration"/> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK OVP Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${rtoken}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${client_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="success"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="MTAz"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="parameters"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for required parameters"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:All wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="9652da99-82ee-4823-a06b-2f2c55d05a72"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Client GET"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_ident"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="environment"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="filterStatus"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="format"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="master"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="name"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="operation"/> <L7p:value stringValue="getAll"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="org"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="registered_by"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:keys/ns:values/ns:value/ns:client_key_custom/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEN1c3RvbS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client_key_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfa2V5X2N1c3RvbX0="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="custom_key_json"/> </L7p:SetVariable> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathCustom"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:values/ns:clients/ns:values/ns:value/ns:client_custom/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-clientstore"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEN1c3RvbS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="client_custom"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtjbGllbnRfY3VzdG9tfQ=="/> <L7p:ContentType stringValue="application/json; charset=utf-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="custom_json"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom_key_json.mainpart}"/> <L7p:Expression2 stringValue="reuse_refresh_token"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="reuse_refresh_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EvaluateJsonPathExpressionV2> <L7p:Evaluator stringValue="JsonPath"/> <L7p:Expression stringValue="$..reuse_refresh_token"/> <L7p:OtherTargetMessageVariable stringValue="custom_key_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="reuseRefreshToken"/> </L7p:EvaluateJsonPathExpressionV2> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${reuseRefreshToken.result}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${reuseRefreshToken.result}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for valid bool value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXVzZVJlZnJlc2hUb2tlbi5yZXN1bHR9"/> <L7p:VariableToSet stringValue="reuse_refresh_token"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom_json.mainpart}"/> <L7p:Expression2 stringValue="reuse_refresh_token"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="reuse_refresh_token"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EvaluateJsonPathExpressionV2> <L7p:Evaluator stringValue="JsonPath"/> <L7p:Expression stringValue="$..reuse_refresh_token"/> <L7p:OtherTargetMessageVariable stringValue="custom_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="reuseRefreshToken"/> </L7p:EvaluateJsonPathExpressionV2> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${reuseRefreshToken.result}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${reuseRefreshToken.result}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for valid bool value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXVzZVJlZnJlc2hUb2tlbi5yZXN1bHR9"/> <L7p:VariableToSet stringValue="reuse_refresh_token"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="reuse_refresh_token"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom_key_json.mainpart}"/> <L7p:Expression2 stringValue="reuse_refresh_expiration"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="reuse_refresh_expiration"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EvaluateJsonPathExpressionV2> <L7p:Evaluator stringValue="JsonPath"/> <L7p:Expression stringValue="$..reuse_refresh_expiration"/> <L7p:OtherTargetMessageVariable stringValue="custom_key_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="reuseRefreshExpiration"/> </L7p:EvaluateJsonPathExpressionV2> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${reuseRefreshExpiration.result}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${reuseRefreshExpiration.result}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for valid bool value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXVzZVJlZnJlc2hFeHBpcmF0aW9uLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="reuse_refresh_expiration"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_key"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${custom_json.mainpart}"/> <L7p:Expression2 stringValue="reuse_refresh_expiration"/> <L7p:Operator operator="CONTAINS"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="CONTAINS"/> <L7p:RightValue stringValue="reuse_refresh_expiration"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EvaluateJsonPathExpressionV2> <L7p:Evaluator stringValue="JsonPath"/> <L7p:Expression stringValue="$..reuse_refresh_expiration"/> <L7p:OtherTargetMessageVariable stringValue="custom_json"/> <L7p:Target target="OTHER"/> <L7p:VariablePrefix stringValue="reuseRefreshExpiration"/> </L7p:EvaluateJsonPathExpressionV2> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${reuseRefreshExpiration.result}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${reuseRefreshExpiration.result}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check for valid bool value"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXVzZVJlZnJlc2hFeHBpcmF0aW9uLnJlc3VsdH0="/> <L7p:VariableToSet stringValue="reuse_refresh_expiration"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="client_id"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="reuse_refresh_expiration"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check client_id / client_key custom for reuse refresh token and expiration settings"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="initialize"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation service"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isValidationLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MA=="/> <L7p:VariableToSet stringValue="queryOffset"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation service"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isValidationLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="dG9rZW4="/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eG1s"/> <L7p:VariableToSet stringValue="format"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="1c2e888c-7f82-45f5-9bdf-9ef42fd65bd3"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL GET"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-sql"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="70e143f9-373f-4919-b104-620462f42e79"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Refresh Token Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.requested"/> <L7p:value stringValue="${scope.requested}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token.status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="tokenValues"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNvdXJjZV9vd25lcn0="/> <L7p:VariableToSet stringValue="owner"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_ovp_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Validation location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the validation service"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isValidationLocal"/> </L7p:SetVariable> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4fd884b8-46f4-4a47-bf4e-d232d6637cf2"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Get (token)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="queryOffset"/> <L7p:value stringValue="0"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="resource_owner"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="return_json"/> <L7p:value stringValue="false"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="rtoken"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token_status"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="70e143f9-373f-4919-b104-620462f42e79"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Refresh Token Validation"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue="${client_key}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="scope.requested"/> <L7p:value stringValue="${scope.requested}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="token.status"/> <L7p:value stringValue="ENABLED"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="tokenValues"/> <L7p:value stringValue="resp"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNvdXJjZV9vd25lcn0="/> <L7p:VariableToSet stringValue="owner"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="mixed"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isValidationLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="rtoken"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="rtoken"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope.requested"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope.requested"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always succeed"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="GET"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_ovp_server}/oauth/validation/validate/v2/refreshtoken?rtoken=${rtoken}&amp;client_key=${client_key}&amp;scope=${scope.requested}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathValidationResultOwner"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:resource_owner/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathValidationResultScope"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:scope/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:ResponseXpathAssertion> <L7p:VariablePrefix stringValue="xpathExpiration"/> <L7p:XmlMsgSrc stringValue="resp"/> <L7p:XpathExpression xpathExpressionValue="included"> <L7p:Expression stringValue="/ns:validation/ns:rexpiration/text()"/> <L7p:Namespaces mapValue="included"> <L7p:entry> <L7p:key stringValue="ns"/> <L7p:value stringValue="http://ns.l7tech.com/2012/11/otk-ovp"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="s"/> <L7p:value stringValue="http://schemas.xmlsoap.org/soap/envelope/"/> </L7p:entry> </L7p:Namespaces> <L7p:XpathVersion xpathVersion="XPATH_1_0"/> </L7p:XpathExpression> </L7p:ResponseXpathAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFZhbGlkYXRpb25SZXN1bHRPd25lci5yZXN1bHR9"/> <L7p:VariableToSet stringValue="owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aFZhbGlkYXRpb25SZXN1bHRTY29wZS5yZXN1bHR9"/> <L7p:VariableToSet stringValue="scope.granted"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4cGF0aEV4cGlyYXRpb24ucmVzdWx0fQ=="/> <L7p:VariableToSet stringValue="rexpiration"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="validate"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Validate and retrieve values"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="cf1c08ae-8f8e-48db-b01b-89eb891615a6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token Delete"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="delete"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="The refresh_token can be used once only"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="access_token"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="client_key"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="refresh_token"/> <L7p:value stringValue="${rtoken}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="temp_token"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// reuse old refresh token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${reuse_refresh_token}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// use newly issued refresh token"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtydG9rZW5fbmV3fQ=="/> <L7p:VariableToSet stringValue="rtoken"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if refresh token is to be reused"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// reuse old refresh expiration"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${reuse_refresh_expiration}"/> <L7p:Expression2 stringValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// use newly issued refresh expiration"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="JHtyZXhwaXJhdGlvbl9uZXd9"/> <L7p:VariableToSet stringValue="rexpiration"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if refresh expiration is to be reused"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${oauth2_token_type}"/> <L7p:Expression2 stringValue="BEARER"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="BEARER"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJCZWFyZXIiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIKfQ=="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=BEARER"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="ewogICJhY2Nlc3NfdG9rZW4iOiIke2F0X3Rva2VufSIsCiAgInRva2VuX3R5cGUiOiJtYWMiLAogICJleHBpcmVzX2luIjoke2F0X2xpZmV0aW1lfSwKICAicmVmcmVzaF90b2tlbiI6IiR7cnRva2VufSIsCiAgInNjb3BlIjoiJHtzY29wZS5ncmFudGVkfSIsCiAgIm1hY19rZXkiOiIke21hY19zZWNyZXR9IiwKICAibWFjX2FsZ29yaXRobSI6ImhtYWMtc2hhLTEiCn0="/> <L7p:VariableToSet stringValue="clientResponse"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHttYWNfc2VjcmV0fQ=="/> <L7p:VariableToSet stringValue="token_secret"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="token_type=MAC"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Create tokens"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Update (token status) 07854a0de3db8f5849ecb6be3985bf32 POLICY OTK Token Update (token status) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="resource_owner"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="verifier"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="expiration"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="42b930fc-438f-4aaa-a702-7c45efe216fb"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Update"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="PUT"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/update?resource_owner=${resource_owner}&amp;token=${token}&amp;status=${token_status}&amp;verifier=${verifier}&amp;expiration=${expiration}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/pof/OTK v2GenerateRequestMac 07854a0de3db8f5849ecb6be3985bf21 POLICY OTK v2GenerateRequestMac Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Generates request MAC using HMAC-SHA1 algorithm"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Inputs: timestamp_sec, nonce, http_method, url, ext, mac_key, mac_algorithm"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Outputs: mac"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="========== Validate inputs =========="/> </L7p:CommentAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${timestamp_sec}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="timestamp_sec"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="^0+"/> <L7p:RegexName stringValue="Timestamp must not have leading zeros"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="timestamp_sec"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="^-"/> <L7p:RegexName stringValue="Timestamp must be a positive number"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${nonce}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${http_method}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="http_method"/> <L7p:ProceedIfPatternMatches booleanValue="false"/> <L7p:Regex stringValue="[a-z]"/> <L7p:RegexName stringValue="HTTP method must be in upper case"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${url}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${mac_key}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${mac_algorithm}"/> <L7p:Expression2 stringValue="hmac-sha-1"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="hmac-sha-1"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="========== Break URL into parts (protocol, hostname+port, path) =========="/> </L7p:CommentAssertion> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="url_sub_string"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="url"/> <L7p:Regex stringValue="([a-z]*)://([^/]*)(.*)"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1cmxfc3ViX3N0cmluZ1szXX0="/> <L7p:VariableToSet stringValue="request_uri"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1cmxfc3ViX3N0cmluZ1syXX0="/> <L7p:VariableToSet stringValue="url_hostname_port"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="host"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="port"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:CaptureVar stringValue="url_hostname_port_sub_string"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="url_hostname_port"/> <L7p:Regex stringValue="([^:]*):([0-9]*)"/> <L7p:RegexName stringValue="get hostname and port number"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1cmxfaG9zdG5hbWVfcG9ydF9zdWJfc3RyaW5nWzFdfQ=="/> <L7p:VariableToSet stringValue="host"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1cmxfaG9zdG5hbWVfcG9ydF9zdWJfc3RyaW5nWzJdfQ=="/> <L7p:VariableToSet stringValue="port"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="port is specified"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt1cmxfaG9zdG5hbWVfcG9ydH0="/> <L7p:VariableToSet stringValue="host"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${url_sub_string[1]}"/> <L7p:Expression2 stringValue="http"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="http"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="ODA="/> <L7p:VariableToSet stringValue="port"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${url_sub_string[1]}"/> <L7p:Expression2 stringValue="https"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:RightValue stringValue="https"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDQz"/> <L7p:VariableToSet stringValue="port"/> </L7p:SetVariable> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Use default port"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="port is not specified"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Get hostname and port number"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Check if there are any uppercases in hostname"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:FindAll booleanValue="true"/> <L7p:OtherTargetMessageVariable stringValue="host"/> <L7p:Regex stringValue="[A-Z]"/> <L7p:RegexName stringValue="Check for uppercase"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:SetVariable> <L7p:Base64Expression stringValue="PGhvc3RuYW1lPiR7aG9zdH08L2hvc3RuYW1lPg=="/> <L7p:VariableToSet stringValue="xml"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt4bWx9"/> <L7p:ContentType stringValue="text/xml;charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="forXSL"/> </L7p:SetVariable> <L7p:XslTransformation> <L7p:Direction intValue="-1"/> <L7p:OtherTargetMessageVariable stringValue="forXSL"/> <L7p:ResourceInfo staticResourceInfo="included"> <L7p:Document stringValueReference="inline"><![CDATA[<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform"> <xsl:output method="text" omit-xml-declaration="yes"/> <xsl:variable name="lowercase" select="'abcdefghijklmnopqrstuvwxyz'"/> <xsl:variable name="uppercase" select="'ABCDEFGHIJKLMNOPQRSTUVWXYZ'"/> <xsl:template match="/hostname"> <xsl:value-of select="translate(., $uppercase, $lowercase)"/> </xsl:template> </xsl:stylesheet>]]></L7p:Document> </L7p:ResourceInfo> <L7p:Target target="OTHER"/> <L7p:TransformName stringValue=""/> </L7p:XslTransformation> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtmb3JYU0wubWFpbnBhcnR9"/> <L7p:VariableToSet stringValue="host"/> </L7p:SetVariable> </wsp:All> <L7p:TrueAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Change hostname to lowercase"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${request_uri}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${host}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:Expression1 stringValue="${port}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="request_uri"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="request_uri"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:LineBreak lineBreak="LF"/> <L7p:VariableToSet stringValue="empty_line"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHt0aW1lc3RhbXBfc2VjfQoke25vbmNlfQoke2h0dHBfbWV0aG9kfQoke3JlcXVlc3RfdXJpfQoke2hvc3R9CiR7cG9ydH0KJHtleHR9CiR7ZW1wdHlfbGluZX0="/> <L7p:VariableToSet stringValue="normalized_request"/> </L7p:SetVariable> <L7p:GenerateSecurityHash> <L7p:Base64Data stringValue="JHtub3JtYWxpemVkX3JlcXVlc3R9"/> <L7p:KeyText stringValue="${mac_key}"/> <L7p:LineBreak lineBreak="CR-LF"/> <L7p:TargetOutputVariable stringValue="mac"/> </L7p:GenerateSecurityHash> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="mac"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/authentication/OTK Require SSL-WithClientCertificate 07854a0de3db8f5849ecb6be3985bf53 POLICY OTK Require SSL-WithClientCertificate Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment should be used as an encapsulated assertion"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This fragment will require SSL and optionally a client certificate"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="The fragment will create an error message and an http status code"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="Thie policy should be used at the beginning of an API policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="When OTK/MAG gets installed this policy is used at endpoint the the /storage and /ovp folder"/> </L7p:CommentAssertion> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireClientCert}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SslAssertion> <L7p:RequireClientAuthentication booleanValue="true"/> </L7p:SslAssertion> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Mutual SSL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="requires SSL and a client certificate"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireClientCert}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SslAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="SSL"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="requires SSL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireClientCert}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="${apiPrefix}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${requireClientCert}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="203"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue="${apiPrefix}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="203"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="203"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="With with error code 203 or 204"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Require TLS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Delete 07854a0de3db8f5849ecb6be3985bf36 POLICY OTK Token Delete Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue=""/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="8e75b13e-317f-407a-b80a-2dbb21d099d7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Delete"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="access_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="access_token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="refresh_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="refresh_token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="temp_token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="temp_token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue=""/> <L7p:ContentType stringValue="text/plain; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="emptyMessage"/> </L7p:SetVariable> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="DELETE"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/delete?temp_token=${temp_token}&amp;token=${access_token}&amp;rtoken=${refresh_token}&amp;client_key=${client_key}"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="emptyMessage"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Storage (access_token refresh_token) 07854a0de3db8f5849ecb6be3985bf37 POLICY OTK Token Storage (access_token refresh_token) Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === *** THIS POLICY IS READ ONLY ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === If you have the need to customize this policy"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" === please contact CA APIM Support so we can improve customization capability"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue=" ============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This policy can be found and should be used as 'Encapsulated Assertion'!"/> </L7p:CommentAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Storage Configuration"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="${custom}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="overwritten in case of an error"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue=""/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="ZmFsc2U="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="b2F1dGgycnRva2Vu"/> <L7p:VariableToSet stringValue="tokentype"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${host_oauth_tokenstore_server}"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item regex="included"> <L7p:Pattern stringValue="http[s]?://(localhost|127[.]0[.]0[.]1).+"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="DB location"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="Set the location to access the database"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="isLocal"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Negate booleanValue="true"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="517aebd3-6ce1-4e8e-bce1-fb7d065c34e1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token DB Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${dbsystem}"/> <L7p:Expression2 stringValue="cassandra"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="cassandra"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="00000000-0000-0000-0000-000000000000"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Token NoSQL Storage"/> <L7p:NoOpIfConfigMissing booleanValue="true"/> </L7p:Encapsulated> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="dbsystem"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="check the dbsystem for SQL or NoSQL"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="local"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isLocal}"/> <L7p:Expression2 stringValue="false"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_key"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_key"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="client_name"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="client_name"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="expiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="expiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="rexpiration"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="rexpiration"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="rtoken"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="rtoken"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="resource_owner"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="resource_owner"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="scope"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="scope"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_status"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_status"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="custom"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="custom"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${token_secret}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleT0ke2NsaWVudF9rZXl9JmNsaWVudD0ke2NsaWVudH0mY2xpZW50X25hbWU9JHtjbGllbnRfbmFtZX0mZXhwaXJhdGlvbj0ke2V4cGlyYXRpb259JnJleHBpcmF0aW9uPSR7cmV4cGlyYXRpb259JnJ0b2tlbj0ke3J0b2tlbn0mcmVzb3VyY2Vfb3duZXI9JHtyZXNvdXJjZV9vd25lcn0mc2NvcGU9JHtzY29wZX0mc3RhdHVzPSR7dG9rZW5fc3RhdHVzfSZ0b2tlbj0ke3Rva2VufSZjdXN0b209JHtjdXN0b219"/> <L7p:ContentType stringValue="application/x-www-form-urlencoded"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:EncodeDecode> <L7p:SourceVariableName stringValue="token_secret"/> <L7p:TargetDataType variableDataType="string"/> <L7p:TargetVariableName stringValue="token_secret"/> <L7p:TransformType transformType="URL_ENCODE"/> </L7p:EncodeDecode> <L7p:SetVariable> <L7p:Base64Expression stringValue="Y2xpZW50X2tleT0ke2NsaWVudF9rZXl9JmNsaWVudD0ke2NsaWVudH0mY2xpZW50X25hbWU9JHtjbGllbnRfbmFtZX0mZXhwaXJhdGlvbj0ke2V4cGlyYXRpb259JnJleHBpcmF0aW9uPSR7cmV4cGlyYXRpb259JnJ0b2tlbj0ke3J0b2tlbn0mcmVzb3VyY2Vfb3duZXI9JHtyZXNvdXJjZV9vd25lcn0mc2NvcGU9JHtzY29wZX0mc3RhdHVzPSR7dG9rZW5fc3RhdHVzfSZ0b2tlbj0ke3Rva2VufSZzZWNyZXQ9JHt0b2tlbl9zZWNyZXR9JmN1c3RvbT0ke2N1c3RvbX0="/> <L7p:ContentType stringValue="application/x-www-form-urlencoded; charset=UTF-8"/> <L7p:DataType variableDataType="message"/> <L7p:VariableToSet stringValue="message"/> </L7p:SetVariable> </wsp:All> </wsp:OneOrMore> <L7p:HttpRoutingAssertion> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="no-fail"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="always success"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:CurrentSecurityHeaderHandling intValue="3"/> <L7p:FailOnErrorStatus booleanValue="false"/> <L7p:HttpMethod httpMethod="POST"/> <L7p:PassThroughSoapFaults booleanValue="false"/> <L7p:ProtectedServiceUrl stringValue="${host_oauth_tokenstore_server}/oauth/tokenstore/store"/> <L7p:ProxyPassword stringValueNull="null"/> <L7p:ProxyUsername stringValueNull="null"/> <L7p:RequestHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestHeaderRules> <L7p:RequestMsgSrc stringValue="message"/> <L7p:RequestParamRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"/> </L7p:RequestParamRules> <L7p:ResponseHeaderRules httpPassthroughRuleSet="included"> <L7p:ForwardAll booleanValue="true"/> <L7p:Rules httpPassthroughRules="included"> <L7p:item httpPassthroughRule="included"> <L7p:Name stringValue="Set-Cookie"/> </L7p:item> </L7p:Rules> </L7p:ResponseHeaderRules> <L7p:ResponseMsgDest stringValue="resp"/> <L7p:SamlAssertionVersion intValue="2"/> </L7p:HttpRoutingAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLngtY2EtZXJyfQ=="/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${httpRouting.reasonCode}"/> <L7p:Expression2 stringValue="500"/> <L7p:Operator operator="LT"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="LT"/> <L7p:RightValue stringValue="500"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:AuditDetailAssertion> <L7p:Detail stringValue="routing failed!"/> </L7p:AuditDetailAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error code"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="set error code to 000"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="routing errors"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${error.code}"/> <L7p:Expression2 stringValue=""/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="capture"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="capture the last 3 digits"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="error.code"/> <L7p:Regex stringValue="(\d{0,16})(\d{3})$"/> <L7p:Replace booleanValue="true"/> <L7p:Replacement stringValue="$2"/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error.code"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLmh0dHAuaGVhZGVyLmNvbnRlbnQtdHlwZX0="/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXNwLm1haW5wYXJ0fQ=="/> <L7p:VariableToSet stringValue="result"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="remote"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="database"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${result}"/> <L7p:Expression2 stringValue="persisted"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="persisted"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> </wsp:All> </wsp:Policy> OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid response_modes_supported 07854a0de3db8f5849ecb6be3985bee5 POLICY OTK openid response_modes_supported Include <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="Policy Fragment: OTK openid response_modes_supported"/> </L7p:CommentAssertion> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Default Behavior"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="InF1ZXJ5IiwgImZyYWdtZW50IiwgImZvcm1fcG9zdCI="/> <L7p:VariableToSet stringValue="response_modes_supported"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONAL"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64Expression stringValue="dHJ1ZQ=="/> <L7p:VariableToSet stringValue="discovery.endpoint.enabled"/> </L7p:SetVariable> <L7p:Include> <L7p:PolicyGuid stringValue="8e4fd6f1-09ad-477b-b4a3-e5cac0c79fb2"/> </L7p:Include> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${response_modes_supported}"/> <L7p:Expression2 stringValue=""/> <L7p:Negate booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:Predicates predicates="included"> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:Negated booleanValue="true"/> <L7p:Operator operator="EMPTY"/> <L7p:RightValue stringValue=""/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:ExportVariables> <L7p:ExportedVars stringArrayValue="included"> <L7p:item stringValue="discovery.endpoint.enabled"/> <L7p:item stringValue="response_modes_supported"/> </L7p:ExportedVars> </L7p:ExportVariables> </wsp:All> </wsp:Policy> OTK Cache Look Up 07854a0de3db8f5849ecb6be3985bf7f ENCAPSULATED_ASSERTION OTK Cache Look Up 4307aff3-11a3-4762-a4f6-23ad85342339 1 cacheID string true 2 custom string true 3 maxEntryAge string true 4 cacheKey string true custom_data string error.code string resp message error.msg string customAssertions lookup16.gif true Looks Up an item associated with key: cacheKey in cache with ID: cacheID and returns it in values, if the item exists. false OTK Generate OAuth Token 07854a0de3db8f5849ecb6be3985bf80 ENCAPSULATED_ASSERTION OTK Generate OAuth Token 05c70797-52f1-4af0-8af9-1fd2c0cca374 1 ac boolean true 2 rft boolean true 3 cid boolean true 4 art boolean true 5 urt boolean true 6 at boolean true 7 ock boolean true 8 cidm boolean true 9 custom string true 10 ot boolean true lifetime string genSecret string custom_data string genToken string genExpiration string internalAssertions oauth.png true Configuration Exports variables that are used as OAuth token or OAuth client credentials. At least and at most one of the input parameters should be configured to 'true'. If 'true' is selected mutiple times the 'first one' wins. If none is selected with 'true' the assertion will fail. The lifetime in seconds. The value depends on configurations of 'OTK Token Lifetime Configuration' The expiration date in seconds (10-digits). The value depends on configurations of 'OTK Token Lifetime Configuration' OTK Analyze App Usage 07854a0de3db8f5849ecb6be3985bf81 ENCAPSULATED_ASSERTION OTK Analyze App Usage 8d625eb6-6dbc-4dd4-8d4d-0bbf26119280 1 other string true 2 client_ident string true 3 custom string true activeUsers string custom_data string error.code string installCount string customAssertions up-button.gif true Retrieves data such as installed number of client_id's for the given client and also the number of active access_token true OTK Manager Client GET 07854a0de3db8f5849ecb6be3985bf82 ENCAPSULATED_ASSERTION OTK Manager Client GET aa4558fd-f638-409b-bbd8-13aad70b1960 1 master string true 2 name string true 3 filterStatus string true 4 queryOffset string true 5 environment string true 6 client_key string true 7 custom string true 8 org string true 9 registered_by string true 10 client_ident string true 11 operation string true 12 format string true content-type string resp message error.code string custom_data string internalAssertions up-button.gif true Storage_Delegate Retrieves values about the given client (or client_id) using the input parameters. For use by OAuth Manager. Use 'get' to retrieve client values, 'getKey' for client_id values. 'getAll' is only valid in combination with 'Client ID' false OTK Client Authentication 07854a0de3db8f5849ecb6be3985bf83 ENCAPSULATED_ASSERTION OTK Client Authentication 5d937743-5828-4630-b317-a8dd9044e315 1 local_client_name string true 2 allow_basic boolean true 3 allow_query boolean true 4 local_environment string true 5 local_expiration string true 6 local_status string true 7 local_type string true 8 auth_param_id string true 9 auth_param_client_assertion string true 10 auth_param_client_assertion_type string true 11 auth_header string true 12 custom string true 13 local_scope string true 14 auth_param_secret string true client_custom string scope.registered string client string client_id string error.code string resp message client_name string client_secret string client_type string client_key_custom string custom_data string content-type string internalAssertions user16.png true This value can be used instead of 'Client ID/ Client Secret' and vice versa. In addition this value will only be respected if 'Allow authentication via HTTP Header' is set to 'true' Access_Control Authenticates an OAuth client by its client_id and client_secret. In addition, other required values can be configured as input parameters. The authentication will fail if any of the given parameters do not match attributes of that client. 'Client ID/ Client Secret' will only be respected if 'Allow authentication via Query Parameter' is set to 'true' false OTK Client Persist 07854a0de3db8f5849ecb6be3985bf84 ENCAPSULATED_ASSERTION OTK Client Persist 96e27167-a194-49c1-966e-fd11842804d8 1 persist_client boolean true 2 persist_client_key boolean true 3 client_custom string true 4 org string true 5 service_ids string true 6 custom string true 7 environment string true 8 client_status string true 9 persist_client_and_key boolean true 10 callback string true 11 scope string true 12 client_ident string true 13 registered_by string true 14 client_name string true 15 account_plan_mapping_ids string true 16 type string true 17 description string true 18 client_key string true 19 key_custom string true 20 client_secret string true 21 expiration string true custom_data string result string content-type string error.code string internalAssertions down-button.gif true Storage_Delegate Use it to persist a new client, a new client_id or both. If set to 'true' provide values for these REQUIRED parameters: Client Identifier (DB pk), Client ID, Client Secret, Expiration, Registered By, Status, and OPTIONAL: Redirect URI, Environment, Valid SCOPE, Client Key Custom values, Service IDs, Account Plan Mapping IDs If set to 'true' provide values for these REQUIRED parameters: Client Identifier (DB pk), Description, Client Name, Organization, Registered By, Client Type, and OPTIONAL: Client Custom values If set to 'true' provide values for REQUIRED parameters as specified for 'New Client' and 'New Client ID' OTK Manager Client Key Update 07854a0de3db8f5849ecb6be3985bf85 ENCAPSULATED_ASSERTION OTK Manager Client Key Update 5dc32f2b-bd22-4a80-af87-f55409432894 1 account_plan_mapping_ids string true 2 client_secret string true 3 client_status string true 4 created_by string true 5 environment string true 6 key_custom string true 7 custom string true 8 service_ids string true 9 client_key string true 10 callback string true 11 scope string true custom_data string content-type string error.code string result string internalAssertions down-button.gif true Storage_Delegate Updates a client_key configuration. For use by OAuth Manager. false OTK Session - Delete 07854a0de3db8f5849ecb6be3985bf86 ENCAPSULATED_ASSERTION OTK Session - Delete 7a6fba62-00a1-4d4c-a135-6c2d44bbf582 1 cacheKey string true 2 cacheAge string true 3 cacheId string true 4 custom string true content-type string error.code string custom_data string result string internalAssertions down-button.gif true Storage_Delegate Deletes a session from the session store database. false OTK Manager Client Persist 07854a0de3db8f5849ecb6be3985bf87 ENCAPSULATED_ASSERTION OTK Manager Client Persist 91d92cc0-8dc1-4595-b5da-5b649d7550a1 1 registered_by string true 2 custom string true 3 scope string true 4 client_ident string true 5 callback string true 6 client_custom string true 7 key_custom string true 8 persist_client boolean true 9 client_secret string true 10 environment string true 11 client_key string true 12 client_status string true 13 account_plan_mapping_ids string true 14 persist_client_and_key boolean true 15 expiration string true 16 org string true 17 client_name string true 18 persist_client_key boolean true 19 service_ids string true 20 type string true 21 description string true content-type string custom_data string error.code string result string internalAssertions down-button.gif true Storage_Delegate Use it to persist a new client, a new client_id or both. For use by OAuth Manager. If set to 'true' provide values for these REQUIRED parameters: Client Identifier (DB pk), Client ID, Client Secret, Expiration, Registered By, Status, and OPTIONAL: Redirect URI, Environment, Valid SCOPE, Client Key Custom values, Service IDs, Account Plan Mapping IDs If set to 'true' provide values for these REQUIRED parameters: Client Identifier (DB pk), Description, Client Name, Organization, Registered By, Client Type, and OPTIONAL: Client Custom values If set to 'true' provide values for REQUIRED parameters as specified for 'New Client' and 'New Client ID' false OTK Cookie Management 07854a0de3db8f5849ecb6be3985bf88 ENCAPSULATED_ASSERTION OTK Cookie Management 6f17a195-ef14-47b0-aefd-e3cd6c301d08 1 cookie string true 2 lifetime string true 3 cookieName string true 4 custom string true 5 task boolean true 6 cookieValue string true cookieContent string error.code string custom_data string cookieID string cookieValue string cookieName string setCookieDelete string setCookie string customAssertions cookie.png true cbfde866fe99777b5c6a346e80e23fbfae8ff7a2 Creates and validates signed cookies. false OTK Token Count 07854a0de3db8f5849ecb6be3985bf89 ENCAPSULATED_ASSERTION OTK Token Count e184d4f3-6eb2-4730-9172-3620bf6278d4 1 max_oauth_token_count string false 2 custom string true 3 resource_owner string false 4 client string false 5 max_oauth_token_behaviour string false 6 dbsystem string false content-type string error.code string custom_data string result string internalAssertions true Ensure OTK Token count is within configured limits false OTK Token Delete 07854a0de3db8f5849ecb6be3985bf8a ENCAPSULATED_ASSERTION OTK Token Delete cf1c08ae-8f8e-48db-b01b-89eb891615a6 1 custom string true 2 refresh_token string true 3 client_key string true 4 temp_token string true 5 access_token string true content-type string error.code string result string custom_data string internalAssertions down-button.gif true Storage_Delegate Deletes a token from the persistence layer. OTK PKCE Validation 07854a0de3db8f5849ecb6be3985bf8b ENCAPSULATED_ASSERTION OTK PKCE Validation d9166769-17ba-4808-8a66-fa9aabec86af 1 session string true 2 codeVerifier string true 3 custom string true custom_data string error.code string customAssertions validate.gif true Validates a given code_verifier against an exisiting value that was passed in at an original authorization request. The parameter 'Session value' needs to be a JSON structure with including the keys 'code_challenge' and 'code_challenge_method'. The assertion will either fail or proceed. false OTK Client Export 07854a0de3db8f5849ecb6be3985bf8c ENCAPSULATED_ASSERTION OTK Client Export 9a414c38-9598-4fd3-98eb-e9bbf1515d19 1 expose_client_secret string true 2 custom string true 3 incoming_xml message true 4 client_key string true content-type string error.code string resp string custom_data string internalAssertions up-button.gif true If set to 'true' the client_secret will be exported. Default = 'false' Configuration Exports an OAuth client_id configuration as JSON message. This xml MUST be the output of the assertion 'OTK Client GET' configured with parameter 'Operation to use = getAll' OTK openid subject_types_supported 07854a0de3db8f5849ecb6be3985bf8d ENCAPSULATED_ASSERTION OTK openid subject_types_supported e330e8ce-ca46-47f1-87d5-a2f0b54fd4ea 1 custom string true discovery.endpoint.enabled string custom_data string subject_types_supported string customAssertions oauth.png true Supported subject_types as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api false OTK Authorization Code Validation 07854a0de3db8f5849ecb6be3985bf8e ENCAPSULATED_ASSERTION OTK Authorization Code Validation 5a70e794-d2a3-4f99-8b9f-4a0e3eb18324 1 client_id string true 2 code string true 3 redirect_uri string true 4 custom string true error.code string session_output string custom_data string owner string scope.granted string internalAssertions validate.gif true Internal OAuth_Validation Validates a given OAuth authorization_code. OTK Replay Attack Protection 07854a0de3db8f5849ecb6be3985bf8f ENCAPSULATED_ASSERTION OTK Replay Attack Protection 48c6eaa6-bace-49d2-8aac-013c748301fd 1 exp string true 2 custom string true 3 identifier string true 4 cacheId string true error.code string internalAssertions xmlencryption.gif true Protect against replay attack using local cache on a single node or use database for multi-node cluster. false OTK openid userinfo_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985bf90 ENCAPSULATED_ASSERTION OTK openid userinfo_signing_alg_values_supported b1c63f23-ce1a-472f-acc4-4871688f3462 1 custom string true custom_data string discovery.endpoint.enabled string userinfo_signing_alg_values_supported string customAssertions oauth.png true Supported userinfo_signing_alog as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api false OTK id_token configuration 07854a0de3db8f5849ecb6be3985bf91 ENCAPSULATED_ASSERTION OTK id_token configuration d00d4a19-e148-4650-bb05-71dd29807dc6 1 custom string false id_token_signing_algorithm string iss string subject_type string custom_data string policyLogic ServerRegistry.gif true false OTK Manager Client Export 07854a0de3db8f5849ecb6be3985bf92 ENCAPSULATED_ASSERTION OTK Manager Client Export 85f8064b-3483-4448-add7-77f3e92127dd 1 incoming_xml message true 2 custom string true 3 expose_client_secret string true 4 client_key string true error.code string resp string content-type string custom_data string internalAssertions up-button.gif true If set to 'true' the client_secret will be exported. Default = 'false' Configuration Exports an OAuth client_id configuration as JSON message. For use by OAuth Manager. This xml MUST be the output of the assertion 'OTK Client GET' configured with parameter 'Operation to use = getAll' false OTK Client Revoke Key 07854a0de3db8f5849ecb6be3985bf93 ENCAPSULATED_ASSERTION OTK Client Revoke Key 4f9221f7-3f0a-413b-b113-ad3e23d8f89e 1 client_ident string true 2 client_key string true 3 custom string true result string content-type string custom_data string error.code string internalAssertions down-button.gif true Storage_Delegate Deletes a client_key (client_id/ oauth_consumer_key). OTK Token Storage (temporary token) 07854a0de3db8f5849ecb6be3985bf94 ENCAPSULATED_ASSERTION OTK Token Storage (temporary token) 91b9aa9b-fbe4-4944-8629-04c5695d122f 1 client_key string true 2 token string true 3 expiration string true 4 token_secret string true 5 client string true 6 custom string true 7 client_name string true 8 resource_owner string true 9 scope string true 10 callback string true custom_data string content-type string result string error.code string internalAssertions down-button.gif true Storage_Delegate Persists temporary token (authorization_code, request_token). Token Secret and Resource Owner are optional. false OTK Token Update (user to request_token) 07854a0de3db8f5849ecb6be3985bf95 ENCAPSULATED_ASSERTION OTK Token Update (user to request_token) b7c49f54-09a0-4c7d-8872-9524a96981b1 1 custom string true 2 token string true 3 resource_owner string true result string error.code string content-type string custom_data string internalAssertions down-button.gif true Storage_Delegate This is used with OAuth 1.0. It associates a user with a request_token. false API XSS Protection 07854a0de3db8f5849ecb6be3985bf96 ENCAPSULATED_ASSERTION API XSS Protection a3f4d9e9-c770-4361-a0c8-1dd722349778 1 custom string true 2 allinput string true content-type string custom_data string error.code string error.msg string status string xml RedYellowShield16.gif true Protect against xss false OTK openid claims_supported 07854a0de3db8f5849ecb6be3985bf97 ENCAPSULATED_ASSERTION OTK openid claims_supported 9cdbef02-b0c8-4ead-bb20-ac83263a007f 1 custom string true claims_supported string discovery.endpoint.enabled string custom_data string customAssertions oauth.png true Supported claims as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api false OTK Token Update (token status) 07854a0de3db8f5849ecb6be3985bf98 ENCAPSULATED_ASSERTION OTK Token Update (token status) b208b293-aef3-4bc2-9dc3-3e33215f8cff 1 token_status string true 2 token string true 3 custom string true error.code string content-type string result string custom_data string internalAssertions down-button.gif true Storage_Delegate Updates the token status. Valid status are 'ENABLED' and 'DISABLED'. OTK Token Get (temporary) 07854a0de3db8f5849ecb6be3985bf99 ENCAPSULATED_ASSERTION OTK Token Get (temporary) 0be824ec-c764-4371-a228-03cdf9b0e3ad 1 custom string true 2 resource_owner string true 3 verifier string true 4 return_json boolean true 5 client_key string true 6 token string true content-type string error.code string resp message custom_data string internalAssertions up-button.gif true Storage_Delegate Retrieves values about temporary tokens. OTK openid ui_locales_supported 07854a0de3db8f5849ecb6be3985bf9a ENCAPSULATED_ASSERTION OTK openid ui_locales_supported b9dab382-14f0-47b2-a079-72e2138f1b9a 1 custom string true discovery.endpoint.enabled string ui_locales_supported string custom_data string customAssertions oauth.png true Supported ui_locales as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api. Currently only 'en-US' is supported false OTK Manager Token Update (token status) 07854a0de3db8f5849ecb6be3985bf9b ENCAPSULATED_ASSERTION OTK Manager Token Update (token status) cb255195-d2fe-46fc-96d2-73a0c186f72a 1 token_status string true 2 custom string true 3 token string true custom_data string error.code string result string content-type string internalAssertions down-button.gif true Storage_Delegate Updates the token status. Valid status are 'ENABLED' and 'DISABLED'. false OTK openid token_endpoint_auth_methods_supported 07854a0de3db8f5849ecb6be3985bf9c ENCAPSULATED_ASSERTION OTK openid token_endpoint_auth_methods_supported 200ba76e-b322-4c68-8d09-c1775db3a125 1 custom string true custom_data string token_endpoint_auth_methods_supported string discovery.endpoint.enabled string customAssertions oauth.png true Supported token_endpoint_auth_methods as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api false OTK Create Public Key PIN 07854a0de3db8f5849ecb6be3985bf9d ENCAPSULATED_ASSERTION OTK Create Public Key PIN 98386082-1fbe-4b7c-8944-9d8e1143c4d5 1 certName string true 2 custom string true custom_data string subjectPublicKey message error.code string transportLayerSecurity ssl.gif true df2981bd6e1611fef8c001243a7ffa81a5d4b54c Create a Base64Url encoded string representing the sha256 hash of the public key of the certificate that is found in the trusted certificate store identified by the given name. false OTK Client JWT Validation 07854a0de3db8f5849ecb6be3985bf9e ENCAPSULATED_ASSERTION OTK Client JWT Validation 95cbe0f8-be1f-4b57-bb4d-41be17e84c05 1 client_assertion string true 2 client_id string true 3 custom string true 4 client_secret string true 5 client_key_custom string true error.code string custom_data string internalAssertions true Validates JWT as client credentials using auth_method and algorithm used to register the client false OTK grant_type=CLIENT_CREDENTIALS 07854a0de3db8f5849ecb6be3985bf9f ENCAPSULATED_ASSERTION OTK grant_type=CLIENT_CREDENTIALS 135ee0e3-3f97-43b1-b6c7-36df4ea47f86 1 at_token string true 2 scope string true 3 client_name string true 4 mac_secret string true 5 custom string true 6 client_type string true 7 at_lifetime string true custom_data string scope.granted string owner string token_secret string error.code string clientResponse string internalAssertions oauth.png true Internal OAuth_Validation Handles the OAuth grant_type=client_credentials. OTK OAuth 2 Token Validation - MAC 07854a0de3db8f5849ecb6be3985bfa0 ENCAPSULATED_ASSERTION OTK OAuth 2 Token Validation - MAC c48ee8b2-20d0-4320-b836-694e55942c45 1 url string true 2 access_token string false 3 custom string true 4 tokenValues message true 5 http_method string true 6 auth_header string false 7 scope_fail string false 8 onetime string false 9 scope_required string false content-type string error.code string custom_data string resp message internalAssertions validate.gif true Internal c08a08af82a37b3eaa30209bc5077f13eddc4bb5 OAuth_Validation Validates a given MAC token profile access_token. false OTK Client Delete 07854a0de3db8f5849ecb6be3985bfa1 ENCAPSULATED_ASSERTION OTK Client Delete 43a97ca8-1826-44e3-ae58-2ad218ff2a82 1 custom string true 2 client_ident string true content-type string custom_data string error.code string result string internalAssertions down-button.gif true Storage_Delegate Deletes a client registration including all its depending client_key's (client_id/ oauth_consumer_key). Nevertheless, client_key's that have been used MAY still be valid for a configured cache lifetime. OTK Token Storage (oauth_token) 07854a0de3db8f5849ecb6be3985bfa2 ENCAPSULATED_ASSERTION OTK Token Storage (oauth_token) 6169085d-2262-49dd-b64c-d2f988f2097a 1 custom string true 2 token string true 3 expiration string true 4 token_status string true 5 client_key string true 6 token_secret string true 7 client string true 8 temp_token string true error.code string result string custom_data string content-type string internalAssertions down-button.gif true Storage_Delegate Persist OAuth 1.0 token. The request_token will be exchanged for the oauth_token. false OTK setClientKeyOptionalValues 07854a0de3db8f5849ecb6be3985bfa3 ENCAPSULATED_ASSERTION OTK setClientKeyOptionalValues 4afe741a-3628-42a3-9d45-73a1d38d7020 1 environment string false 2 callback string false 3 key_custom string false 4 scope string false 5 custom string true environment string key_custom string callback string scope string custom_data string internalAssertions true Sets default values for inputs if they are empty false OTK id_token Validation 07854a0de3db8f5849ecb6be3985bfa4 ENCAPSULATED_ASSERTION OTK id_token Validation e3e6f2b3-011a-437f-9ff0-ac911591ebfc 1 azp string true 2 jwt string true 3 salt string true 4 resource_owner string true 5 shared_secret string true 6 shared_secret_alg string true 7 check_expiration string true 8 custom string true status string error.code string resp message content-type string custom_data string internalAssertions validate.gif true Validation Validates a given id_token. If 'check expiration' is set to 'false' the expiration date will only be exported but not validated. OTK Manager Client Revoke Key 07854a0de3db8f5849ecb6be3985bfa5 ENCAPSULATED_ASSERTION OTK Manager Client Revoke Key 61979ce3-676d-47ab-9ba2-37c1ec59124a 1 client_ident string true 2 custom string true 3 client_key string true content-type string error.code string custom_data string result string internalAssertions down-button.gif true Storage_Delegate Deletes a client_key (client_id/ oauth_consumer_key). For use by OAuth Manager. false OTK Client JWT Values 07854a0de3db8f5849ecb6be3985bfa6 ENCAPSULATED_ASSERTION OTK Client JWT Values f18143b8-4ba9-42c6-819e-8073cba3039a 1 jwt_header string true 2 jwt_payload string true 3 custom string true exp string jti string aud string iss string sub string jwt_alg string error.code string custom_data string internalAssertions ServerRegistry.gif true false OTK Manager Token Disable 07854a0de3db8f5849ecb6be3985bfa7 ENCAPSULATED_ASSERTION OTK Manager Token Disable c26cb94f-98ce-4582-aa8c-0508d24d7694 1 custom string true 2 client_key string true content-type string error.code string custom_data string result string internalAssertions down-button.gif true Storage_Delegate Disables tokens issued for given client_key (client_id/ oauth_consumer_key). For use by OAuth Manager. false OTK Require OAuth 2 Token 07854a0de3db8f5849ecb6be3985bfa8 ENCAPSULATED_ASSERTION OTK Require OAuth 2 Token 5c88f677-8517-4ec1-97ef-be8db907ec9b 1 given_access_token string true 2 scope_fail boolean true 3 onetime boolean true 4 custom string true 5 scope_required string true 6 cache_lifetime int true access_token_type string session.expires_at string content-type string error.msg string uuid_token string error.code string session.custom string session.subscriber_id string session.client_id string custom_data string status string access_token string session.scope string true The content-type of the 'error.msg' if it exists A JSON structure containing the used grant_type, the client_type and values specified in the custom field of the associated client_id Time in seconds for which the access_token will not be validated again. Use this value as a compromise between increasing performance and security. A typical value would be '30' If set to 'true' the access_token (and the associated refresh_token) will be invalidated after being used once. Default = 'false' The access_token of the request Validates an OAuth 2.0 access_token for a request. By default the request will fail if the given access_token has expired or does not match the given configuration. The SCOPE that was granted to the access_token The user who granted the access_token/ client false internalAssertions oauth.png Use this field if no access_token is received through the request message but was issued out-of-band If set to 'true' the assertion fails if the given SCOPE was granted for this access_token A space separated list of SCOPE values this access_token MUST have been granted for Access_Control The client_id for which the access_token was granted OTK Authorization Server Configuration 07854a0de3db8f5849ecb6be3985bfa9 ENCAPSULATED_ASSERTION OTK Authorization Server Configuration 74d99b1a-29c5-4017-90c5-397c00f43de0 1 custom string true otk_session_secret string otk_session_secret_encryption string location_login_server string custom_data string location_consent_server string sessionIdCacheAge string internalAssertions ServerRegistry.gif true Public This secret is used to sign the session JWT. It has to be configured on an external login-consent server if it should be integrated Configuration Provides all variables that are required to configure the authorization server true OTK openid token_endpoint_auth_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985bfaa ENCAPSULATED_ASSERTION OTK openid token_endpoint_auth_signing_alg_values_supported a7b09e54-d2fb-4ba1-84eb-fd7c993d2303 1 custom string true discovery.endpoint.enabled string custom_data string token_endpoint_auth_signing_alg_values_supported string customAssertions oauth.png true Supported token auth signing alg as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api. Currently none are supported false OTK OVP Configuration 07854a0de3db8f5849ecb6be3985bfab ENCAPSULATED_ASSERTION OTK OVP Configuration c5b340d4-93c1-4bc6-8d0b-9cba7aa553bf 1 custom string true reuse_refresh_expiration string reuse_refresh_token string custom_data string host_oauth_ovp_server string internalAssertions ServerRegistry.gif true Internal Storage_Access Exports the server location that implements the OVP (OAuth Validation Point) endpoints. false OTK Client GET 07854a0de3db8f5849ecb6be3985bfac ENCAPSULATED_ASSERTION OTK Client GET 9652da99-82ee-4823-a06b-2f2c55d05a72 1 client_key string true 2 custom string true 3 environment string true 4 org string true 5 master string true 6 name string true 7 operation string true 8 registered_by string true 9 queryOffset string true 10 client_ident string true 11 filterStatus string true 12 format string true custom_data string content-type string resp message error.code string internalAssertions up-button.gif true Storage_Delegate Retrieves values about the given client (or client_id) using the input parameters. Use 'get' to retrieve client values, 'getKey' for client_id values. 'getAll' is only valid in combination with 'Client ID' OTK CORS 07854a0de3db8f5849ecb6be3985bfad ENCAPSULATED_ASSERTION OTK CORS f23dc601-2246-4e5c-8c56-4e317a61736f 1 requireCORS string true 2 custom string true error.code string isPreflight string isCors string requireCORS string custom_data string customAssertions ServerRegistry.gif true Configure CORS as required, optional or to be ignored. By default OTK uses this assertion at protected API's. If set to 'ignore' CORS will not be handled. OTK sets the variable 'custom' to a JSON structure containing 'key=url_path_query' containing the API path and query components. Default: optional true OTK Manager Token Get (token) 07854a0de3db8f5849ecb6be3985bfae ENCAPSULATED_ASSERTION OTK Manager Token Get (token) 5eca3ff4-9f36-4498-9cb2-23952ffef469 1 resource_owner string true 2 rtoken string true 3 custom string true 4 token string true 5 return_json boolean true 6 token_status string true 7 client_key string true 8 queryOffset string true resp message dbsystem string content-type string error.code string custom_data string internalAssertions up-button.gif true Storage_Delegate Retrieves long living tokens from the token database. false OTK Manager Client Delete 07854a0de3db8f5849ecb6be3985bfaf ENCAPSULATED_ASSERTION OTK Manager Client Delete 0aeb48ac-e6f2-400d-8c88-25a2bb246267 1 custom string true 2 client_ident string true custom_data string content-type string result string error.code string internalAssertions down-button.gif true Storage_Delegate Deletes a client registration including all its depending client_key's (client_id/ oauth_consumer_key). Nevertheless, client_key's that have been used MAY still be valid for a configured cache lifetime. For use by OAuth Manager. false OTK openid display_values_supported 07854a0de3db8f5849ecb6be3985bfb0 ENCAPSULATED_ASSERTION OTK openid display_values_supported 0f6ee37f-f9cb-456b-8ea5-1901a9b4d289 1 custom string true display_values_supported string custom_data string discovery.endpoint.enabled string customAssertions oauth.png true Supported display values as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api. Currently only 'page' is supported false OTK openid jwks_uri 07854a0de3db8f5849ecb6be3985bfb1 ENCAPSULATED_ASSERTION OTK openid jwks_uri a0791506-8292-4254-a1d0-4ad968393441 1 custom string true 2 host_oauth2_auth_server string false 3 jwks_uri_path string false discovery.endpoint.enabled string jwks_uri string custom_data string customAssertions oauth.png true Supported JWKS_URI as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api. It required 'host_oauth2_auth_server' and 'jwks_uri_oauth' as input false OTK Refresh Token Validation 07854a0de3db8f5849ecb6be3985bfb2 ENCAPSULATED_ASSERTION OTK Refresh Token Validation 70e143f9-373f-4919-b104-620462f42e79 1 custom string true 2 token.status string true 3 client_key string true 4 tokenValues message true 5 scope.requested string true rexpiration string content-type string resource_owner string scope.granted string error.code string resp message custom_data string internalAssertions validate.gif true Internal OAuth_Validation Validates an OAuth refresh_token. false OTK Token Storage (access_token) 07854a0de3db8f5849ecb6be3985bfb3 ENCAPSULATED_ASSERTION OTK Token Storage (access_token) 47b375d9-e1bd-48a7-821a-2d78ba2615d6 1 scope string true 2 token string true 3 client_name string true 4 resource_owner string true 5 token_status string true 6 token_secret string true 7 client_key string true 8 custom string true 9 client string true 10 expiration string true result string custom_data string content-type string error.code string internalAssertions down-button.gif true Storage_Delegate Persists an OAuth 2.0 access_token. The token secret is optional. false OTK id_token Remove 07854a0de3db8f5849ecb6be3985bfb4 ENCAPSULATED_ASSERTION OTK id_token Remove 2280526a-84d5-45e0-8148-9b645e0fe1a0 1 azp string true 2 logout_apps string true 3 custom string true 4 jwt string true content-type string custom_data string error.code string resp message internalAssertions down-button.gif true Storage_Delegate Removes an id_token (jwt). Depending on the configuration the values will be removed via local database using using 'OTK id_token DB Remove' or via routing assertion to an endpoint that implements the database access. OTK openid jwks_endpoint Configuration 07854a0de3db8f5849ecb6be3985bfb5 ENCAPSULATED_ASSERTION OTK openid jwks_endpoint Configuration 4b61f2fa-8e0b-45ab-99d7-17267b7c2cc2 1 custom string true jwks string custom_data string customAssertions oauth.png true Supported Json Web Keys as specified in the context of OpenID Connect. Defined for the OpenID Connect JWKS api false OTK Require SSL (with Client Certificate) 07854a0de3db8f5849ecb6be3985bfb6 ENCAPSULATED_ASSERTION OTK Require SSL (with Client Certificate) 4cb14c95-0554-45c9-a8d5-637fe43886d1 1 custom string true 2 apiPrefix string true 3 requireClientCert boolean true error.msg string custom_data string error.code string content-type string status string internalAssertions ssl.gif true Access_Control Requires a request to use SSL and optionally present a client certificate. It is not authenticating the client, just requiring its certificate. Use this encapsulated assertion at the beginning of the API policy. Preced 'OTK FIP Client Authentication' with this assertion. OTK response_type=TOKEN ID_TOKEN 07854a0de3db8f5849ecb6be3985bfb7 ENCAPSULATED_ASSERTION OTK response_type=TOKEN ID_TOKEN 8c64215a-3f9d-4e7c-9209-7b204b9bab47 1 salt string true 2 third_party_sso_token string true 3 acr string true 4 redirect_uri string true 5 token_status string true 6 nonce string true 7 response_mode string true 8 resource_owner string true 9 client_name string true 10 third_party_sso_token_type string true 11 azp string true 12 client_key string true 13 authTime string true 14 custom string true 15 client string true 16 scope string true location string error.code string custom_data string content-type string formResp string resp Message internalAssertions oauth.png true Internal OAuth_Validation Handles the response_type 'TOKEN ID_TOKEN' defined for OpenID Connect. It also persists the generated access_token - id_token via the 'OTK Token Storage (access_token)' and 'OTK id_token Persist' assertions. false OTK response_type=CODE ID_TOKEN TOKEN 07854a0de3db8f5849ecb6be3985bfb8 ENCAPSULATED_ASSERTION OTK response_type=CODE ID_TOKEN TOKEN 89a4dee9-4506-48c9-90b2-b5e26284cbc6 1 azp string true 2 client_key string true 3 response_mode string true 4 token_status string true 5 client string true 6 client_name string true 7 redirect_uri string true 8 nonce string true 9 acr string true 10 authTime string true 11 third_party_sso_token_type string true 12 salt string true 13 expected-mag-identifier string true 14 max_age string true 15 scope string true 16 third_party_sso_token string true 17 resource_owner string true 18 custom string true location string formResp string content-type string error.code string custom_data string result string internalAssertions oauth.png true Internal OAuth_Validation Handles the response_type CODE ID_TOKEN TOKEN. It also persists the generated authorization_code via the 'OTK Token Storage (temporary token)' assertion, persists the generated access_token via the 'OTK Token Storage (access_token)' assertion, and persists the generated id_token via the 'OTK id_token Persist' assertion. false OTK Session GET 07854a0de3db8f5849ecb6be3985bfb9 ENCAPSULATED_ASSERTION OTK Session GET 8e5a0043-f2dc-4606-828b-f8aa97bccbf7 1 cacheAge string true 2 cacheId string true 3 custom string true 4 cacheKey string true resp message custom_data string content-type string error.code string internalAssertions up-button.gif true Storage_Delegate Retrieve session values from the database. The result has to be URL decoded. false OTK openid acr_values_supported 07854a0de3db8f5849ecb6be3985bfba ENCAPSULATED_ASSERTION OTK openid acr_values_supported 2474de01-4738-443d-9820-457f183103b5 1 custom string true acr_values_supported string discovery.endpoint.enabled string custom_data string customAssertions oauth.png true Supported acr values as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api false OTK Generate JWT OAuth Token 07854a0de3db8f5849ecb6be3985bfbb ENCAPSULATED_ASSERTION OTK Generate JWT OAuth Token 0bbc94ef-dd4b-4936-b056-69455b375d7d 1 scope string true 2 lifetime string true 3 aud string true 4 jti string true 5 custom string true custom_data string error.code string at_jwt_exp string at_jwt string internalAssertions oauth.png true This encapsulated assertion is used to generate JWT as OAuth Token. Customization to the default implementation can be done in the configuration policy #OTK Generate JWT OAuth Token false OTK openid response_types_supported 07854a0de3db8f5849ecb6be3985bfbc ENCAPSULATED_ASSERTION OTK openid response_types_supported df2e409a-ab62-452b-93b0-01437f067c41 1 custom string true discovery.endpoint.enabled string custom_data string response_types_supported string customAssertions oauth.png true Supported response_types as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery API false OTK Cache Store 07854a0de3db8f5849ecb6be3985bfbd ENCAPSULATED_ASSERTION OTK Cache Store a27e83e3-e95d-4efd-8d89-69a110bd3899 1 msg message true 2 cacheKey string true 3 custom string true 4 maxEntrySize string true 5 cacheID string true 6 maxEntryAge string true 7 maxEntries string true custom_data string error.code string error.msg string customAssertions true R0lGODlhEAAQAPcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP//AAAA//8A/wD/ /////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAAmQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBm AABmMwBmZgBmmQBmzABm/wCZAACZMwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/ MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNm ZjNmmTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/MzP/ZjP/ mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz/2ZmAGZmM2ZmZmZmmWZm zGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbMmWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb/ /5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkzM5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZ AJmZM5mZZpmZmZmZzJmZ/5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwA M8wAZswAmcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZM8yZ ZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8A mf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9mmf9mzP9m//+ZAP+ZM/+ZZv+Zmf+Z zP+Z///MAP/MM//MZv/Mmf/MzP/M////AP//M///Zv//mf//zP///yH5BAEAABAALAAAAAAQABAA AAhWAFGg+EewoEGDAgceXEgwYUOGCAX+UwixocOKBS9OlBjxIop+/PpRZPgxZMiRBwWCFIkS4amE Lyui4IeqDyqOJE/xexkT4syaN1tm1MlTaEagRjsWDAgAOw== Writes an item to cache with ID: cacheID with key: cacheKey. If the cache does not exist, one will be created. If the key exists, the existing item will be overwritten. false OTK Manager Token Revocation 07854a0de3db8f5849ecb6be3985bfbe ENCAPSULATED_ASSERTION OTK Manager Token Revocation 5504276c-0a38-4380-8ec8-c4a9a4367957 1 token string true 2 resource_owner string true 3 client_key string true 4 custom string true 5 rtoken string true custom_data string error.code string result string content-type string internalAssertions down-button.gif true Storage_Delegate Revokes a token or many, depending on the parameters used. false OTK Session - Store 07854a0de3db8f5849ecb6be3985bfbf ENCAPSULATED_ASSERTION OTK Session - Store 381d887a-6240-4d34-b4ae-7348714298df 1 cacheMaxSize string true 2 dbAge string true 3 custom string true 4 cacheKey string true 5 cacheMaxEntries string true 6 cacheAge string true 7 value string true 8 cacheId string true content-type string error.code string result string custom_data string internalAssertions down-button.gif true Storage_Delegate Creates a new session or updates a matching existing one. Use this for temporary values. OTK Token Update (setting verifier) 07854a0de3db8f5849ecb6be3985bfc0 ENCAPSULATED_ASSERTION OTK Token Update (setting verifier) b47077ba-eb41-4089-9502-5f6705a0c572 1 expiration string true 2 token string true 3 custom string true 4 verifier string true result string error.code string custom_data string content-type string internalAssertions down-button.gif true Storage_Delegate Used with OAuth 1.0. It adds a verifier to a token. OTK grant_type=AUTHORIZATION_CODE 07854a0de3db8f5849ecb6be3985bfc1 ENCAPSULATED_ASSERTION OTK grant_type=AUTHORIZATION_CODE 6af145d4-24ec-4711-bff9-92f9bcc29a6d 1 mac_secret string true 2 magidentifier string true 3 at_token string true 4 at_lifetime string true 5 custom string true 6 client_id string true 7 redirect_uri string true 8 rtoken string true 9 code string true 10 client_secret string true custom_data string error.code string scope.granted string owner string session_output string token_secret string clientResponse string jwt string internalAssertions oauth.png true Internal OAuth_Validation Handles the OAuth grant_type=authorization_code. OTK response_type=ID_TOKEN 07854a0de3db8f5849ecb6be3985bfc2 ENCAPSULATED_ASSERTION OTK response_type=ID_TOKEN 5a81f4b7-c42f-4fc6-94f4-ba38279b1e58 1 salt string true 2 authTime string true 3 azp string true 4 client_key string true 5 resource_owner string true 6 nonce string true 7 third_party_sso_token_type string true 8 redirect_uri string true 9 third_party_sso_token string true 10 acr string true 11 custom string true 12 client string true 13 client_name string true 14 scope string true 15 response_mode string true content-type string formResp string error.code string custom_data string location string result string internalAssertions oauth.png true 30a479f145e3b2ac72ff827279ae35ae3af30543 Handles the response_type 'ID_TOKEN' defined for OpenID Connect. It also persists the generated id_token via the 'OTK id_token Persist' assertion. false OTK Configured Grant Types 07854a0de3db8f5849ecb6be3985bfc3 ENCAPSULATED_ASSERTION OTK Configured Grant Types 57d4baf4-144b-4ab0-829f-4276bd4517b7 1 custom string true grant_type_custom string grant_type_refresh_token string grant_type_jwt string grant_type_client_credentials string grant_type_saml string grant_type_authorization_code string grant_type_password string custom_data string internalAssertions ServerRegistry.gif true Internal Configuration Exports variables of all grant types. false false OTK Token Lifetime Configuration 07854a0de3db8f5849ecb6be3985bfc4 ENCAPSULATED_ASSERTION OTK Token Lifetime Configuration eb420fe0-7400-448a-ac1f-984794796f45 1 custom string true oauth2_access_token_lifetime_sec string oauth2_refresh_token_lifetime_sec string oauth_v1_request_token_lifetime_s string oauth_v1_consumer_key_lifetime_m string custom_data string id_token_lifetime_s string oauth2_auth_code_lifetime_sec string oauth2_client_id_lifetime_SDK_m string oauth_v1_access_token_lifetime_s string oauth2_client_id_lifetime_m string internalAssertions ServerRegistry.gif true Configuration Exports variables with configured lifetimes for OAuth tokens and OAuth client credentials. The variable names end with an indicator for the time unit such as seconds (sec,s) or minutes (m) true OTK response_type=CODE TOKEN 07854a0de3db8f5849ecb6be3985bfc5 ENCAPSULATED_ASSERTION OTK response_type=CODE TOKEN a714e7a9-3d53-4c4e-9f50-b005d3f481a1 1 third_party_sso_token string true 2 scope string true 3 custom string true 4 client_key string true 5 client_name string true 6 max_age string true 7 third_party_sso_token_type string true 8 salt string true 9 nonce string true 10 response_mode string true 11 authTime string true 12 acr string true 13 client string true 14 redirect_uri string true 15 token_status string true 16 resource_owner string true 17 expected-mag-identifier string true content-type string custom_data string formResp string error.code string location string result string internalAssertions oauth.png true Internal OAuth_Validation Handles the response_type CODE TOKEN. It also persists the generated authorization_code via the 'OTK Token Storage (temporary token)' assertion and persists the generated access_token via the 'OTK Token Storage (access_token)' assertion. false OTK openid scopes_supported 07854a0de3db8f5849ecb6be3985bfc6 ENCAPSULATED_ASSERTION OTK openid scopes_supported a4d10367-78f8-4736-9701-a569f754b479 1 custom string true custom_data string discovery.endpoint.enabled string dynamic_registration_scope string scopes_supported string customAssertions oauth.png true Supported scopes_supported as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api false OTK Storage Configuration 07854a0de3db8f5849ecb6be3985bfc7 ENCAPSULATED_ASSERTION OTK Storage Configuration f8f696f5-fb39-4e16-a2c9-27ad7cd1b0f6 1 custom string true dbsystem string custom_data string separate_schemas string host_oauth_clientstore_server string max_oauth_token_behaviour string host_oauth_tokenstore_server string max_oauth_token_count string host_oauth_session_server string internalAssertions ServerRegistry.gif true Internal Configuration Exports variables that contain OTK configurations that are related to the persistence layer true false OTK Session Validation 07854a0de3db8f5849ecb6be3985bfc8 ENCAPSULATED_ASSERTION OTK Session Validation fea415cc-63d2-43a2-88e9-512f4e54957c 1 check_expiration string true 2 custom string true 3 jwt string true custom_data string error.code string resp message content-type string internalAssertions validate.gif true Internal Validation Validates a given id_token represented as a JWT. The id_token represents a user session. Optionally it can check the expiration date. OTK Authorization Request Validation 07854a0de3db8f5849ecb6be3985bfc9 ENCAPSULATED_ASSERTION OTK Authorization Request Validation 7206dd53-1b16-4c5a-83bd-d4702bc24c9a 1 redirect_uri string true 2 response_type string true 3 codeChallenge string true 4 nonce string true 5 response_mode string true 6 client_key string true 7 scope string true 8 custom string true 9 codeChallengeMethod string true error_redirect_uri string resp message content-type string custom_data string error.code string internalAssertions validate.gif true Internal Validation Validates the inital client request hitting the authorization endpoint. false OTK openid response_modes_supported 07854a0de3db8f5849ecb6be3985bfca ENCAPSULATED_ASSERTION OTK openid response_modes_supported ed1ec222-d3a0-4807-ae3b-5a7e4caceea7 1 custom string true response_modes_supported string custom_data string discovery.endpoint.enabled string customAssertions oauth.png false false OTK Token Disable 07854a0de3db8f5849ecb6be3985bfcb ENCAPSULATED_ASSERTION OTK Token Disable bccaec87-adc0-45bf-a183-85c6a507e166 1 client_key string true 2 custom string true custom_data string error.code string result string content-type string internalAssertions down-button.gif true Storage_Delegate Disables tokens issued for given client_key (client_id/ oauth_consumer_key). OTK Token Storage (access_token, refresh_token) 07854a0de3db8f5849ecb6be3985bfcc ENCAPSULATED_ASSERTION OTK Token Storage (access_token, refresh_token) 3913b558-43c2-4bea-94be-8f11d47a00b9 1 expiration string true 2 token_secret string true 3 client_name string true 4 rexpiration string true 5 custom string true 6 client string true 7 client_key string true 8 token_status string true 9 resource_owner string true 10 rtoken string true 11 scope string true 12 token string true content-type string custom_data string result string error.code string internalAssertions down-button.gif true Storage_Delegate Persists an OAuth 2.0 access_token and refresh_token. The token secret is optional. false OTK check response type supported 07854a0de3db8f5849ecb6be3985bfcd ENCAPSULATED_ASSERTION OTK check response type supported 469dc01f-7aa4-45b5-bac0-d1818e2ba81b 1 response_type string false 2 custom string true 3 response_types_supported string false if_response_type_supported string custom_data string internalAssertions ServerRegistry.gif true Check if a given response type is supported and return a boolean indicator. If it is supported return true, otherwise return false. false OTK User Attribute Look Up 07854a0de3db8f5849ecb6be3985bfce ENCAPSULATED_ASSERTION OTK User Attribute Look Up ddd9d3b1-ca24-4be7-8ad1-7f073b13ad6e 1 given_username string true 2 custom string true current.user.attributes string current.user.id string custom_data string current.user.idp string error.code string current.user.role string customAssertions userAttrs16.png true Look up attributes for a given username. false OTK openid discovery_endpoint DEBUG 07854a0de3db8f5849ecb6be3985bfcf ENCAPSULATED_ASSERTION OTK openid discovery_endpoint DEBUG 738e44e6-c24b-4f44-9c1a-0fe99f7d7f1d 1 custom string true debugOnSuccess string debugOnError string custom_data string customAssertions true Defined for openid discovery configuration endpoint for debug purpose. false OTK openid claim_types_supported 07854a0de3db8f5849ecb6be3985bfd0 ENCAPSULATED_ASSERTION OTK openid claim_types_supported 18c6b67a-2905-4145-bdc3-02a2cb375bf6 1 custom string true custom_data string discovery.endpoint.enabled string claim_types_supported string customAssertions oauth.png true Supported response_types as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api. Currently only 'normal' is supported false OTK OAuth 2 Token Validation - BEARER 07854a0de3db8f5849ecb6be3985bfd1 ENCAPSULATED_ASSERTION OTK OAuth 2 Token Validation - BEARER 5182a003-cb58-4b5f-939f-5af9e8e5ec73 1 onetime string false 2 scope_required string false 3 access_token string false 4 scope_fail string false 5 tokenValues message true 6 custom string true resp message error.code string content-type string custom_data string internalAssertions validate.gif true Internal 8cf8496aad6380a24f33889a72ad7bed6d4dfbba OAuth_Validation Validates a given Bearer token profile access_token. false OTK Fail with error message 07854a0de3db8f5849ecb6be3985bfd2 ENCAPSULATED_ASSERTION OTK Fail with error message 2522a36c-40ae-44d6-a002-e615b28c13b7 1 custom string true 2 givenErrorCode string true 3 apiPrefix string true custom_data string status string error.msg string content-type string error.code string internalAssertions Stop16.gif true A value associated with a certain error. If that value is unkown it will be replaced with '000' within the output variable 'error.code' A value combined with the given error code. If, for example, an API would be identifiedby the values '1234' and the given error code is '111' the exported variable 'error.code' would contain '1234111' Error_Handling This assertion returns an error message, http status and content-type value associated with the given 'Error code'. OTK id_token Persist 07854a0de3db8f5849ecb6be3985bfd3 ENCAPSULATED_ASSERTION OTK id_token Persist db7a90bf-e85d-42bd-93db-a2950dbc2a51 1 shared_secret_type string true 2 resource_owner string true 3 shared_secret string true 4 salt string true 5 custom string true 6 azp string true 7 iss string true 8 jwt string true 9 sub string true result string content-type string custom_data string error.code string internalAssertions down-button.gif true Storage_Delegate Registers an id_token for the user. Depending on the configuration the values will be persisted via local database using using 'OTK id_token DB Persist' or via routing assertion to an endpoint that implements the database access. OTK openid grant_types_supported 07854a0de3db8f5849ecb6be3985bfd4 ENCAPSULATED_ASSERTION OTK openid grant_types_supported 61081bea-be25-437e-bc4f-e5c7a7df98b0 1 custom string true grant_types_supported string discovery.endpoint.enabled string custom_data string customAssertions oauth.png true Supported grant_types as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api false OTK Manager Client Update 07854a0de3db8f5849ecb6be3985bfd5 ENCAPSULATED_ASSERTION OTK Manager Client Update 8d84f9eb-cae8-4e86-8427-46643b53ef2c 1 client_name string true 2 org string true 3 custom string true 4 client_ident string true 5 description string true 6 type string true 7 client_custom string true custom_data string content-type string result string error.code string internalAssertions down-button.gif true Storage_Delegate Updates a client configuration. For use by OAuth Manager. false OTK id_token Lookup 07854a0de3db8f5849ecb6be3985bfd6 ENCAPSULATED_ASSERTION OTK id_token Lookup 32d58e80-53a2-49fd-935a-391b1755e9fd 1 azp string true 2 jwt string true 3 custom string true 4 format string true 5 sub string true 6 resource_owner string true content-type string custom_data string error.code string resp message internalAssertions up-button.gif true Storage_Delegate Retrieves values for an id_token. Depending on the configuration the values will be looked up via local database using using 'OTK id_token DB Lookup' or via routing assertion to an endpoint that implements the database access. The following parameters are valid in combination: (resource_owner, azp), (sub, azp), (jwt). OTK Cache Flush 07854a0de3db8f5849ecb6be3985bfd7 ENCAPSULATED_ASSERTION OTK Cache Flush d8fde940-b8bd-441c-aa3c-2ed01456d45f 1 custom string true 2 maxEntryAge string true 3 cacheID string true custom_data string error.code string error.msg string customAssertions Delete16.gif true Empties cache with ID: cacheID, removing all contents. maxEntryAge is the value that the cache was first created with. false OTK grant_type=PASSWORD 07854a0de3db8f5849ecb6be3985bfd8 ENCAPSULATED_ASSERTION OTK grant_type=PASSWORD ce34e8f1-1b40-4630-bb06-3e20cee012d3 1 at_token string true 2 scope.granted string true 3 mac_secret string true 4 password string true 5 at_lifetime string true 6 rtoken string true 7 username string true 8 custom string true clientResponse string salt string third_party_sso_token_type string custom_data string error.code string owner string third_party_sso_token string token_secret string internalAssertions oauth.png true Internal OAuth_Validation Handles the OAuth grant_type=password. OTK grant_type=JWT 07854a0de3db8f5849ecb6be3985bfd9 ENCAPSULATED_ASSERTION OTK grant_type=JWT b84af7eb-5b02-4016-a674-e099799b581e 1 magidentifier string true 2 client_id string true 3 custom string true 4 mac_secret string true 5 at_lifetime string true 6 rtoken string true 7 scope.granted string true 8 assertion string true 9 at_token string true owner string scope.granted string clientResponse string custom_data string error.code string token_secret string internalAssertions oauth.png true Internal The JWT (id_token) that represents an authentcated user. This token MUST have been issued by OTK OAuth_Validation Handles the extension OAuth grant_type=jwt (urn:ietf:params:oauth:grant-type:jwt-bearer). It allows users to be authenticated using a JWT bearer token. OTK response_type=TOKEN 07854a0de3db8f5849ecb6be3985bfda ENCAPSULATED_ASSERTION OTK response_type=TOKEN a2339486-407a-4b14-9549-b3da60b051c0 1 response_mode string true 2 scope string true 3 client_name string true 4 redirect_uri string true 5 resource_owner string true 6 token_status string true 7 client_key string true 8 client string true 9 custom string true result string custom_data string content-type string location string error.code string formResp string internalAssertions oauth.png true Internal OAuth_Validation Handles the response_type TOKEN. It also persists the generated access_token via the 'OTK Token Storage (access_token)' assertion. false OTK openid id_token_signing_alg_values_supported 07854a0de3db8f5849ecb6be3985bfdb ENCAPSULATED_ASSERTION OTK openid id_token_signing_alg_values_supported 0274785d-e085-4ae4-afd6-1e5b6e076117 1 custom string true discovery.endpoint.enabled string custom_data string id_token_signing_alg_values_supported string customAssertions oauth.png true Supported id_token_signing_alog as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api false OTK Client Update 07854a0de3db8f5849ecb6be3985bfdc ENCAPSULATED_ASSERTION OTK Client Update 57ebc2eb-51ab-412e-a560-161a966a818d 1 client_custom string true 2 org string true 3 type string true 4 client_ident string true 5 description string true 6 custom string true 7 client_name string true result string custom_data string error.code string content-type string internalAssertions down-button.gif true Storage_Delegate Updates a client configuration. OTK Access Token Retrieval 07854a0de3db8f5849ecb6be3985bfdd ENCAPSULATED_ASSERTION OTK Access Token Retrieval 3ec61a3a-f7ee-4541-b47d-c83534ca51ff 1 given_access_token string true 2 allow_query boolean true 3 auth_param_token string true 4 auth_header string true 5 custom string true 6 allow_header boolean true auth_header string custom_data string auth_scheme string access_token string access_token_type string error.code string internalAssertions oauth.png true Internal OAuth_Validation Finds the OAuth 2.0 access_token within the http request header, as http request parameter or uses the given one. If will fail if a token is found at multiple locations. false OTK SCOPE Issuing DEPRECATED 07854a0de3db8f5849ecb6be3985bfde ENCAPSULATED_ASSERTION OTK SCOPE Issuing DEPRECATED b9453423-2907-4181-83ee-0677c9378cf9 1 custom string true 2 scope.requested string true 3 scope.registered string true custom_data string scope.granted string error.code string internalAssertions oauth.png true Validation (DEPRECATED USE CUSTOM ASSERTION) Validates the requested SCOPE against SCOPE's that were registered for the client. It only issues SCOPE's that are a subset of the registered ones. It will fail if none match. false OTK grant_type=SAML 07854a0de3db8f5849ecb6be3985bfdf ENCAPSULATED_ASSERTION OTK grant_type=SAML 086aff1f-e43b-4047-a183-8146cfa79100 1 at_lifetime string true 2 mac_secret string true 3 conditions string true 4 at_token string true 5 custom string true 6 scope string true 7 assertion string true 8 receipient string true token_secret string scope.granted string owner string error.code string clientResponse string custom_data string internalAssertions oauth.png true true Internal OAuth_Validation Handles the extension OAuth grant_type=SAML (urn:ietf:params:oauth:grant-type:saml2-bearer). It allows users to be authenticated using a bearer SAML token. OTK Client Key Update 07854a0de3db8f5849ecb6be3985bfe0 ENCAPSULATED_ASSERTION OTK Client Key Update c63f4b2c-692e-46e3-b306-ac6dc52e0cb5 1 client_status string true 2 created_by string true 3 service_ids string true 4 custom string true 5 account_plan_mapping_ids string true 6 callback string true 7 environment string true 8 key_custom string true 9 client_key string true 10 client_secret string true 11 scope string true content-type string result string custom_data string error.code string internalAssertions down-button.gif true Storage_Delegate Updates a client_key configuration. OTK grant_type=REFRESH_TOKEN 07854a0de3db8f5849ecb6be3985bfe1 ENCAPSULATED_ASSERTION OTK grant_type=REFRESH_TOKEN 06305a70-c79a-480b-8764-0e29998e6316 1 mac_secret string true 2 scope.requested string true 3 client_key string true 4 rexpiration_new string true 5 at_lifetime string true 6 custom string true 7 at_token string true 8 rtoken string true 9 rtoken_new string true custom_data string error.code string clientResponse string rtoken string scope.granted string rexpiration string token_secret string owner string internalAssertions oauth.png true Internal OAuth_Validation Handles the OAuth grant_type=refresh_token. Validates a given refresh_token and sets the resource_owner and the valid SCOPE. false OTK FIP Client Authentication 07854a0de3db8f5849ecb6be3985bfe2 ENCAPSULATED_ASSERTION OTK FIP Client Authentication 235c4605-3a50-45f9-b54c-4c4c661e96cc 1 custom string true 2 apiPrefix string true content-type string error.msg string status string custom_data string error.code string internalAssertions user16.png true Configure an API identifier if it should be combined with 'error.code'. Use it to identify a specific API. Access_Control Authenticates a client certificate against a configured IDP. Use this encas after 'OTK Require SSL (with Client Certificate)' if it is configured to require a client certificate true OTK Client Validation 07854a0de3db8f5849ecb6be3985bfe3 ENCAPSULATED_ASSERTION OTK Client Validation 6af83b79-d346-4867-bbb1-aa9042d90893 1 custom string true 2 client_info message true 3 client_secret string true 4 expiration string true 5 client_name string true 6 client_status string true 7 client_assertion_type string true 8 environment string true 9 scope string true 10 client_type string true 11 client_assertion string true 12 client_id string true status string custom_data string content-type string error.code string resp message internalAssertions validate.gif true Internal This value MUST be the output of the assertion 'OTK Client GET' configured with parameter 'Operation to use = getAll' OAuth_Validation Validates values for the given client_id. It will fail if the client_id is a 'master'key'. Other values will only be validated if they are given. false A message containing details about the client if the validation was successful. Default message format: xml OTK v2GenerateRequestMac 07854a0de3db8f5849ecb6be3985bfe4 ENCAPSULATED_ASSERTION OTK v2GenerateRequestMac ba969a40-56c5-407b-8056-d531b5a2cf59 1 custom string true 2 http_method string false 3 nonce string false 4 mac_algorithm string false 5 url string false 6 ext string false 7 timestamp_sec string false 8 mac_key string false custom_data string mac string internalAssertions true Generates request MAC using HMAC-SHA1 algorithm false OTK Token Get (token) 07854a0de3db8f5849ecb6be3985bfe5 ENCAPSULATED_ASSERTION OTK Token Get (token) 4fd884b8-46f4-4a47-bf4e-d232d6637cf2 1 return_json boolean true 2 token_status string true 3 client_key string true 4 token string true 5 custom string true 6 resource_owner string true 7 queryOffset string true 8 rtoken string true dbsystem string content-type string error.code string resp message custom_data string internalAssertions up-button.gif true Storage_Delegate Retrieves long living tokens from the token database. false OTK response_type=CODE ID_TOKEN 07854a0de3db8f5849ecb6be3985bfe6 ENCAPSULATED_ASSERTION OTK response_type=CODE ID_TOKEN 6457af11-b2f4-4484-918b-201cc493d60f 1 acr string true 2 nonce string true 3 client string true 4 response_mode string true 5 scope string true 6 third_party_sso_token_type string true 7 authTime string true 8 custom string true 9 redirect_uri string true 10 client_name string true 11 client_key string true 12 salt string true 13 azp string true 14 resource_owner string true 15 third_party_sso_token string true result string location string formResp string content-type string error.code string custom_data string internalAssertions oauth.png true daa80b72ba25b6d3e01c2b64f9eadb5152f0458b Handles the response_type 'CODE ID_TOKEN' defined for OpenID Connect. It also persists the generated authorization_code - id_token via the 'OTK Token Storage (temporary token)' and 'OTK id_token Persist' assertions. false OTK Validate JWT OAuth Token 07854a0de3db8f5849ecb6be3985bfe7 ENCAPSULATED_ASSERTION OTK Validate JWT OAuth Token 14db913e-ab30-49d9-a762-962c0798f2a1 1 custom string true 2 access_token string true custom_data string resp message jwt_id string query_db string error.code string internalAssertions oauth.png true This encapsulated assertion is used to validate JWT as OAuth Token. Customization to the default implementation can be done in the configuration policy #OTK Validate JWT OAuth Token false OTK openid service_documentation 07854a0de3db8f5849ecb6be3985bfe8 ENCAPSULATED_ASSERTION OTK openid service_documentation 8cf06600-1db0-4c5c-8f98-7f2e26f2b052 1 host_oauth2_auth_server string false 2 service_documentation_path string false 3 custom string true custom_data string discovery.endpoint.enabled string service_documentation string customAssertions oauth.png true Supported service documentation as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api. It requires 'host_oauth2_auth_server' and 'service_documentation_path' as input. false OTK response_type=CODE 07854a0de3db8f5849ecb6be3985bfe9 ENCAPSULATED_ASSERTION OTK response_type=CODE 1fdc1c56-2ebe-42df-97e4-5346561dc5f2 1 resource_owner string true 2 salt string true 3 client string true 4 client_name string true 5 response_mode string true 6 custom string true 7 third_party_sso_token string true 8 max_age string true 9 scope string true 10 expected-mag-identifier string true 11 acr string true 12 nonce string true 13 authTime string true 14 redirect_uri string true 15 client_key string true 16 third_party_sso_token_type string true result string custom_data string error.code string formResp string content-type string location string internalAssertions oauth.png true Internal OAuth_Validation Handles the response_type CODE. It also persists the generated authorization_code via the 'OTK Token Storage (temporary token)' assertion. false OTK Authorization Server Website Template 07854a0de3db8f5849ecb6be3985bfea ENCAPSULATED_ASSERTION OTK Authorization Server Website Template f22ad51b-f3a5-48e6-be1b-be6b6098d8e7 1 new.content string true 2 client_name string false 3 response_type string false 4 sessionID string false 5 scope string false 6 custom string true 7 error.content string true 8 other string true 9 resource_owner string false 10 sessionDataJWT string false 11 location_consent_server string false 12 location_login_server string false 13 response_mode string false 14 task string true content-type string error.msg string custom_data string content string internalAssertions ServerRegistry.gif true Public This variable contains the HTML page for error messages Configuration Provides variables used to generate the authorization servers website. It references 'resource_owner', 'scope', 'client_name' and 'sessionID', 'host_login_server', 'path_login_server', 'host_consent_server', 'path_consent_server' implicitly. true This variable contains the HTML page for success messages false OTK openid registration_endpoint 07854a0de3db8f5849ecb6be3985bfeb ENCAPSULATED_ASSERTION OTK openid registration_endpoint b072a003-0942-4a49-8256-714edd2eef2c 1 custom string true 2 host_oauth2_auth_server string false 3 oidc_register_path string false custom_data string discovery.endpoint.enabled string registration_endpoint string customAssertions oauth.png true Supported registration endpoint as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api. It required 'host_oauth2_auth_server' and 'oidc_register_path' as input. false OTK openid userinfo_endpoint 07854a0de3db8f5849ecb6be3985bfec ENCAPSULATED_ASSERTION OTK openid userinfo_endpoint f6b31f6f-fdd8-4bbb-8a3a-44c88d0d576d 1 host_oauth2_auth_server string false 2 userinfo_path string false 3 custom string true custom_data string userinfo_endpoint string discovery.endpoint.enabled string customAssertions oauth.png true Supported userinfo endpoint as specified in the context of OpenID Connect. Defined for the OpenID Connect Discovery api. It requires 'host_oauth2_auth_server' and 'userinfo_oauth' as input false OTK id_token Generation 07854a0de3db8f5849ecb6be3985bfed ENCAPSULATED_ASSERTION OTK id_token Generation ea0db7be-ce05-4daa-a5fb-ac1ea3e74d49 1 azp string true 2 code string true 3 custom string true 4 salt string true 5 nonce string true 6 acr string true 7 authTime string true 8 client_id string true 9 third_party_sso_token string true 10 access_token string true 11 third_party_sso_token_type string true 12 shared_secret string true 13 resource_owner string true jwt string alg string shared_secret string exp.seconds string generated_sso_token_type string custom_data string error.code string iss string sub string internalAssertions true R0lGODlhEAAQAPcAAAAAAAAAMwAAZgAAmQAAzAAA/wArAAArMwArZgArmQArzAAr/wBVAABVMwBV ZgBVmQBVzABV/wCAAACAMwCAZgCAmQCAzACA/wCqAACqMwCqZgCqmQCqzACq/wDVAADVMwDVZgDV mQDVzADV/wD/AAD/MwD/ZgD/mQD/zAD//zMAADMAMzMAZjMAmTMAzDMA/zMrADMrMzMrZjMrmTMr zDMr/zNVADNVMzNVZjNVmTNVzDNV/zOAADOAMzOAZjOAmTOAzDOA/zOqADOqMzOqZjOqmTOqzDOq /zPVADPVMzPVZjPVmTPVzDPV/zP/ADP/MzP/ZjP/mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2Yr AGYrM2YrZmYrmWYrzGYr/2ZVAGZVM2ZVZmZVmWZVzGZV/2aAAGaAM2aAZmaAmWaAzGaA/2aqAGaq M2aqZmaqmWaqzGaq/2bVAGbVM2bVZmbVmWbVzGbV/2b/AGb/M2b/Zmb/mWb/zGb//5kAAJkAM5kA ZpkAmZkAzJkA/5krAJkrM5krZpkrmZkrzJkr/5lVAJlVM5lVZplVmZlVzJlV/5mAAJmAM5mAZpmA mZmAzJmA/5mqAJmqM5mqZpmqmZmqzJmq/5nVAJnVM5nVZpnVmZnVzJnV/5n/AJn/M5n/Zpn/mZn/ zJn//8wAAMwAM8wAZswAmcwAzMwA/8wrAMwrM8wrZswrmcwrzMwr/8xVAMxVM8xVZsxVmcxVzMxV /8yAAMyAM8yAZsyAmcyAzMyA/8yqAMyqM8yqZsyqmcyqzMyq/8zVAMzVM8zVZszVmczVzMzV/8z/ AMz/M8z/Zsz/mcz/zMz///8AAP8AM/8AZv8Amf8AzP8A//8rAP8rM/8rZv8rmf8rzP8r//9VAP9V M/9VZv9Vmf9VzP9V//+AAP+AM/+AZv+Amf+AzP+A//+qAP+qM/+qZv+qmf+qzP+q///VAP/VM//V Zv/Vmf/VzP/V////AP//M///Zv//mf//zP///wAAAAAAAAAAAAAAACH5BAEAAPwALAAAAAAQABAA AAhsAPcJHEiwoMGDCAfqK9cuIcFyuuY5HMhOV8OJy9Z5m6cMobJMkjQJIzcs06RMyogNNKly37pv Ej9myiRwZkeBFRvWS0lz30mCu8hdLGiSIDtvyQ4Smzlw5NCCyk4Si2bOosOPk4Kxm8i168CAADs= Generates an id_token using a configured algorithm. false OTK Validate Grant Type 07854a0de3db8f5849ecb6be3985bfee ENCAPSULATED_ASSERTION OTK Validate Grant Type 81118d8f-69ab-430e-87fc-afa32e10b1ae 1 grant_type string true 2 custom string true grant_type string error.code string custom_data string internalAssertions oauth.png true Validation Validates a given grant_type against supported ones within this OTK configuration. false OTK setClientOptionalValues 07854a0de3db8f5849ecb6be3985bfef ENCAPSULATED_ASSERTION OTK setClientOptionalValues b418ebf0-da69-401d-a6c6-249758b4734c 1 client_custom string false 2 custom string true 3 description string false custom_data string client_custom string description string internalAssertions true Sets default values for inputs when they are empty false OTK Variable Configuration 07854a0de3db8f5849ecb6be3985bff0 ENCAPSULATED_ASSERTION OTK Variable Configuration 7e6564f9-c7b4-4a7f-b087-7d03226fcd17 1 custom string true enable_anonymous_client_export string host_oauth2_auth_server string jwks_uri_path string custom_data string client_credential_jwt_cache_lifetime string oauth2_version string location_website_template string oauth2_server_url_prefix string oauth2_server_port string usersession_logout_path string service_documentation_path string expose_client_secret string oauth2_token_type string oauth2_token_revocation_path string usersession_status_path string oauth2_auth_template_path string oauth2_auth_path string oauth2_server_certificate string userinfo_path string oauth2_server_hostname string export_custom string oidc_register_path string oauth2_token_path string location_website_template_resources string host_oauth2_auth_template_server string internalAssertions ServerRegistry.gif true Configuration Exports variables that are required to process OAuth requests. true false OTK HTTP Method Validation 07854a0de3db8f5849ecb6be3985bff1 ENCAPSULATED_ASSERTION OTK HTTP Method Validation 526dc788-4846-40cb-b36c-b014c50f1db0 1 custom string true 2 method string true content-type string custom_data string http_method_allowed string status string http_method_used string error.msg string internalAssertions validate.gif true Access_Control Validates the used HTTP method. A pipe separated list of accepted http methods false OTK User Authentication 07854a0de3db8f5849ecb6be3985bff2 ENCAPSULATED_ASSERTION OTK User Authentication b560d25b-98a1-47bb-ac4a-84bd9329da21 1 authIdToken string true 2 cookiename string true 3 provider string true 4 oauth_token string true 5 authHeader string true 6 password string true 7 acrValuesRequested string true 8 cookie string true 9 oauth_verifier string true 10 username string true 11 clientId string true 12 prompt string true 13 state string true 14 custom string true 15 maxAge string true current.user.attributes string current.user.acr string third_party_sso_token_type string current.user.authTime string error.code string custom_data string third_party_sso_token string current.user.role string current.username string salt string internalAssertions By default a SiteMinder SSO token (not the SMSESSION cookie) used to re-authenticate a user. This is for MAG installations only The name of the cookie that should be found in the value of 'Cookie-Header'. This value will only be respected if 'Username' is empty user16.png true Access_Control Authenticates users through different means. It authenticates users against the configured IDP true false This value will only be respected if 'Username' is empty OTK Session Tracking 07854a0de3db8f5849ecb6be3985bff3 ENCAPSULATED_ASSERTION OTK Session Tracking eb26257a-4bb5-4154-912b-788affb618a6 1 current_input string true 2 mag string true 3 portal string true 4 custom string true 5 otk string true 6 clientkey string true error.code string custom_data string otk string mag string clientkey string portal string session_output string internalAssertions ServerRegistry.gif true Internal Takes JSON object to place them in the custom content for oauth sessions OTK Cache Remove 07854a0de3db8f5849ecb6be3985bff4 ENCAPSULATED_ASSERTION OTK Cache Remove 5d92c1c2-f458-4dc4-a6a3-5959420eec62 1 custom string true 2 maxEntrySize string true 3 maxEntries string true 4 maxEntryAge string true 5 cacheKey string true 6 cacheID string true error.code string error.msg string custom_data string customAssertions Delete16.gif true Removes an item with key: cacheKey from cache with ID: cacheID false OTK SCOPE Verification 07854a0de3db8f5849ecb6be3985bff5 ENCAPSULATED_ASSERTION OTK SCOPE Verification 44b1faa2-974d-4b1e-8753-89ee2dddb98e 1 scope.granted string true 2 scope.required string true 3 any string true 4 custom string true 5 fail string true custom_data string error.code string internalAssertions oauth.png true A space separated list of granted/ valid SCOPE values Access_Control Verifies SCOPE and fails if the requested SCOPE does not match the granted one. A space separated list of required SCOPE values false OTK Token Revocation 07854a0de3db8f5849ecb6be3985bff6 ENCAPSULATED_ASSERTION OTK Token Revocation 280c8701-2641-413d-a3f5-107fa84e0ad0 1 rtoken string true 2 custom string true 3 client_key string true 4 resource_owner string true 5 token string true content-type string result string custom_data string error.code string internalAssertions down-button.gif true Storage_Delegate Revokes a token or many, depending on the parameters used. OTK id_token KID Configuration 07854a0de3db8f5849ecb6be3985bff7 ENCAPSULATED_ASSERTION OTK id_token KID Configuration 1f484c5f-423e-4163-98fc-ee6e26c1379c 1 custom string true kid string kid_header string custom_data string customAssertions ServerRegistry.gif true Support customized id token signing algorithm configuration false OTK/Shared-OAuth/Server/Internal/Documentation/apidocs-oauth-storage 07854a0de3db8f5849ecb6be3985bff8 SERVICE apidocs-oauth-storage true /apidocs/oauth/storage/* OTHER HEAD DELETE POST GET OPTIONS PUT PATCH false <wsp:Policy xmlns:wsp="http://schemas.xmlsoap.org/ws/2002/12/policy" xmlns:L7p="http://www.layer7tech.com/ws/policy"> <wsp:All wsp:Usage="Required"> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== *** THIS POLICY IS OVERWRITTEN DURING AN UPGRADE ***"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== Be aware that custom configuration made in this policy is overwritten during a solution kit upgrade."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== However, the older version of the policy is kept in the history and can be referenced."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="=== After upgrade, manually merge customizations from the old version of the policy to the new version."/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="============================================"/> </L7p:CommentAssertion> <L7p:CommentAssertion> <L7p:Comment stringValue="This API returns API documentation in the requested format."/> </L7p:CommentAssertion> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="526dc788-4846-40cb-b36c-b014c50f1db0"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK HTTP Method Validation"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// OPTIONS to enable CORS"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="method"/> <L7p:value stringValue="GET|OPTIONS"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="NDAw"/> <L7p:VariableToSet stringValue="status"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="MDAw"/> <L7p:VariableToSet stringValue="error.code"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyAiZXJyb3IiOiJpbnZhbGlkX3JlcXVlc3QiLCAiZXJyb3JfZGVzY3JpcHRpb24iOiJUaGUgcmVxdWVzdCBmYWlsZWQgZHVlIHRvIGFuIHVua25vd24gcmVhc29uIiB9"/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:SetVariable> <L7p:Base64Expression stringValue="YXBwbGljYXRpb24vanNvbjtjaGFyc2V0PVVURi04"/> <L7p:VariableToSet stringValue="content-type"/> </L7p:SetVariable> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Initialize"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:CustomizeErrorResponse> <L7p:Content stringValue="${error.msg}"/> <L7p:ContentType stringValue="${content-type}"/> <L7p:ExtraHeaders nameValuePairArray="included"> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Pragma"/> <L7p:Value stringValue="no-cache"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="Cache-Control"/> <L7p:Value stringValue="no-store"/> </L7p:item> <L7p:item nameValuePair="included"> <L7p:Key stringValue="x-ca-err"/> <L7p:Value stringValue="${error.code}"/> </L7p:item> </L7p:ExtraHeaders> <L7p:HttpStatus stringValue="${status}"/> </L7p:CustomizeErrorResponse> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="4cb14c95-0554-45c9-a8d5-637fe43886d1"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Require SSL (with Client Certificate)"/> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireClientCert"/> <L7p:value stringValue="false"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Include> <L7p:PolicyGuid stringValue="9d625489-fd50-4ebf-be83-d898a93230d7"/> </L7p:Include> <wsp:OneOrMore wsp:Usage="Required"> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="f23dc601-2246-4e5c-8c56-4e317a61736f"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK CORS"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// optional"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="custom"/> <L7p:value stringValue="{&quot;url_path_query&quot;:&quot;${request.url.path}${request.url.query}&quot;, &quot;http_method_allowed&quot;: &quot;${http_method_allowed}&quot;}"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="requireCORS"/> <L7p:value stringValue="optional"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:Encapsulated> <L7p:EncapsulatedAssertionConfigGuid stringValue="2522a36c-40ae-44d6-a002-e615b28c13b7"/> <L7p:EncapsulatedAssertionConfigName stringValue="OTK Fail with error message"/> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// error code produced in previous assertion"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Parameters mapValue="included"> <L7p:entry> <L7p:key stringValue="apiPrefix"/> <L7p:value stringValue=""/> </L7p:entry> <L7p:entry> <L7p:key stringValue="givenErrorCode"/> <L7p:value stringValue="${error.code}"/> </L7p:entry> </L7p:Parameters> </L7p:Encapsulated> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="CORS"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="false"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:SetVariable> <L7p:Base64Expression stringValue="JHtyZXF1ZXN0LnVybC5wYXRofQ=="/> <L7p:VariableToSet stringValue="path"/> </L7p:SetVariable> <wsp:OneOrMore wsp:Usage="Required"> <wsp:All wsp:Usage="Required"> <L7p:Regex> <L7p:AutoTarget booleanValue="false"/> <L7p:OtherTargetMessageVariable stringValue="path"/> <L7p:Regex stringValue="/swagger$"/> <L7p:Replacement stringValue=""/> <L7p:Target target="OTHER"/> </L7p:Regex> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="200"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:Base64ResponseBody stringValue="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"/> <L7p:ResponseContentType stringValue="application/json; charset=UTF-8"/> </L7p:HardcodedResponse> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="swagger"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// check if this is a request for the swagger document."/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:SetVariable> <L7p:Base64Expression stringValue="eyJlcnJvciI6ImludmFsaWRfcmVxdWVzdCIsImVycm9yX2Rlc2NyaXB0aW9uIjoiVGhlIHJlcXVlc3RlZCByZXNvdXJjZSBpcyBub3QgYXZhaWxhYmxlIn0="/> <L7p:VariableToSet stringValue="error.msg"/> </L7p:SetVariable> <L7p:FalseAssertion/> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="error"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="response"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Request"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <wsp:All wsp:Usage="Required"> <L7p:ComparisonAssertion> <L7p:CaseSensitive booleanValue="false"/> <L7p:Expression1 stringValue="${isPreflight}"/> <L7p:MultivaluedComparison multivaluedComparison="FIRST"/> <L7p:Operator operatorNull="null"/> <L7p:Predicates predicates="included"> <L7p:item dataType="included"> <L7p:Type variableDataType="boolean"/> </L7p:item> <L7p:item binary="included"> <L7p:CaseSensitive booleanValue="false"/> <L7p:RightValue stringValue="true"/> </L7p:item> </L7p:Predicates> </L7p:ComparisonAssertion> <L7p:HardcodedResponse> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="204"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:ResponseContentType stringValue="text/plain; charset=UTF-8"/> <L7p:ResponseStatus stringValue="204"/> </L7p:HardcodedResponse> <L7p:AddHeader> <L7p:AssertionComment assertionComment="included"> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="Replace"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Override header to reflect actual allowed methods"/> </L7p:entry> </L7p:Properties> </L7p:AssertionComment> <L7p:HeaderName stringValue="Access-Control-Allow-Methods"/> <L7p:HeaderValue stringValue="GET"/> <L7p:RemoveExisting booleanValue="true"/> <L7p:Target target="RESPONSE"/> </L7p:AddHeader> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="IsPreflight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:All> <L7p:assertionComment> <L7p:Properties mapValue="included"> <L7p:entry> <L7p:key stringValue="LEFT.COMMENT"/> <L7p:value stringValue="PreFlight"/> </L7p:entry> <L7p:entry> <L7p:key stringValue="RIGHT.COMMENT"/> <L7p:value stringValue="// Check for CORS-Pre-Flight"/> </L7p:entry> </L7p:Properties> </L7p:assertionComment> </wsp:OneOrMore> </wsp:All> </wsp:Policy> name Default HTTP (8080) name Default HTTPS (8443) path OTK/ path OTK/Persistence-JDBC/ path OTK/Persistence-JDBC/session/ path OTK/Persistence-JDBC/maintenance/ path OTK/Persistence-JDBC/manager/ path OTK/Persistence-JDBC/manager/token/ path OTK/Persistence-JDBC/manager/client/ path OTK/Persistence-JDBC/token/ path OTK/Persistence-JDBC/client/ path OTK/Persistence-JDBC/id_token/ path OTK/Persistence-JDBC/maintenance/OTK Database Maintenance - token path OTK/Persistence-JDBC/client/OTK Client DB Persist path OTK/Persistence-JDBC/client/OTK Client DB GET Extension path OTK/Persistence-JDBC/manager/client/OTK Manager Client DB GET path OTK/Persistence-JDBC/id_token/OTK id_token DB Remove path OTK/Persistence-JDBC/token/OTK Token DB GET path OTK/Persistence-JDBC/token/OTK Token DB Count path OTK/Persistence-JDBC/maintenance/OTK Database Maintenance - Client path OTK/Persistence-JDBC/manager/client/OTK Manager Client Key DB Count path OTK/Persistence-JDBC/manager/token/OTK Manager Token DB Update path OTK/Persistence-JDBC/manager/token/OTK Manager Token DB Revocation path OTK/Persistence-JDBC/session/OTK Session DB path OTK/Persistence-JDBC/token/OTK Token DB Count Check path OTK/Persistence-JDBC/maintenance/OTK Database Maintenance - id_token path OTK/Persistence-JDBC/token/OTK Token DB Delete path OTK/Persistence-JDBC/token/OTK Token DB Disable path OTK/Persistence-JDBC/maintenance/OTK Database Maintenance - sessions path OTK/Persistence-JDBC/token/OTK Token DB Update path OTK/Persistence-JDBC/client/OTK Client DB Update path OTK/Persistence-JDBC/manager/client/OTK Manager Client DB Revoke Key path OTK/Persistence-JDBC/client/OTK Client DB Delete path OTK/Persistence-JDBC/token/OTK Token DB Revocation path OTK/Persistence-JDBC/client/OTK Client Key DB Count path OTK/Persistence-JDBC/client/OTK Client DB GET path OTK/Persistence-JDBC/id_token/OTK id_token DB Lookup path OTK/Persistence-JDBC/manager/client/OTK Manager Client DB Persist path OTK/Persistence-JDBC/manager/client/OTK Manager Client DB Update path OTK/Persistence-JDBC/manager/token/OTK Manager Token DB GET path OTK/Persistence-JDBC/manager/client/OTK Manager Client DB Delete path OTK/Persistence-JDBC/manager/token/OTK Manager Token DB Disable path OTK/Persistence-JDBC/id_token/OTK id_token DB Persist path OTK/Persistence-JDBC/client/OTK Client DB Revoke Key path OTK/Persistence-JDBC/token/OTK Token DB Storage name OTK Token DB Count Check name OTK id_token DB Remove name OTK Manager Client DB Persist name OTK Token DB Count name OTK Client DB Revoke Key name OTK Manager Client DB Revoke Key name OTK Token DB GET name OTK Manager Client Key DB Count name OTK Manager Client DB Update name OTK Manager Client DB Delete name OTK Manager Token DB Revocation name OTK id_token DB Persist name OTK Token DB Disable name OTK Manager Token DB Disable name OTK Client DB Persist name OTK Token DB Update name OTK id_token DB Lookup name OTK Session DB name OTK Token DB Storage name OTK Manager Token DB GET name OTK Client DB GET name OTK Client DB Update name OTK Manager Client DB GET name OTK Client DB Delete name OTK Token DB Delete name OTK Client Key DB Count name OTK Token DB Revocation name OTK Manager Token DB Update name OTK Database Maintenance - sessions name OTK Database Maintenance - token name OTK Database Maintenance - Client name OTK Database Maintenance - id_token path OTK/ path OTK/DMZ-OAuth2/ path OTK/DMZ-OAuth2/documentation/ path OTK/DMZ-OAuth2/Health/ path OTK/DMZ-OAuth2/TokenServer/ path OTK/DMZ-OAuth2/AuthorizationServer/ path OTK/DMZ-OAuth2/ResourceServer/ path OTK/DMZ-OAuth2/ResourceServer/demo/ path OTK/DMZ-OAuth2/Health/auth-oauth-health path OTK/DMZ-OAuth2/ResourceServer/demo/protected-resource path OTK/DMZ-OAuth2/AuthorizationServer/auth-oauth-v2-authorize path OTK/DMZ-OAuth2/AuthorizationServer/openid-client-register path OTK/DMZ-OAuth2/AuthorizationServer/jwks_uri path OTK/DMZ-OAuth2/AuthorizationServer/auth-oauth-v2-authorize-login path OTK/DMZ-OAuth2/TokenServer/auth-oauth-v2-token path OTK/DMZ-OAuth2/AuthorizationServer/auth-oauth-v2-authorize-consent path OTK/DMZ-OAuth2/AuthorizationServer/connect-session-logout path OTK/DMZ-OAuth2/AuthorizationServer/openid-client-register-configuration path OTK/DMZ-OAuth2/ResourceServer/connect-session-status path OTK/DMZ-OAuth2/TokenServer/auth-oauth-v2-token-revoke path OTK/DMZ-OAuth2/AuthorizationServer/openid-configuration path OTK/DMZ-OAuth2/documentation/apidocs-auth-oauth-v2 path OTK/DMZ-OAuth2/TokenServer/auth-oauth-v2-client-export path OTK/DMZ-OAuth2/ResourceServer/openid-connect-v1-userinfo path OTK/ path OTK/Internal-Tools/ path OTK/Internal-Tools/OAuthManager/ path OTK/Internal-Tools/OAuth2-TestClients/ path OTK/Internal-Tools/OAuth2-TestClients/configuration/ path OTK/Internal-Tools/OAuth2-TestClients/configuration/#OTK Client Context Variables path OTK/Internal-Tools/OAuth2-TestClients/configuration/OTK Client Context Variables path OTK/Internal-Tools/OAuth2-TestClients/configuration/v2GenerateAuthHeaderForClient name OTK Client Context Variables path OTK/Internal-Tools/OAuth2-TestClients/OpenIDConnectClient - ICP path OTK/Internal-Tools/OAuthManager/oauth-manager-clients path OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-ropc path OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-client_credentials path OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-Implicit path OTK/Internal-Tools/OAuthManager/oauth-manager-tokens path OTK/Internal-Tools/OAuth2-TestClients/OAuth2ClientHelper-REST-STS path OTK/Internal-Tools/OAuth2-TestClients/OpenIDConnectClient-BCP path OTK/Internal-Tools/OAuthManager/oauth-manager path OTK/Internal-Tools/OAuth2-TestClients/OAuth2Clients path OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-authorization_code path OTK/Internal-Tools/OAuth2-TestClients/OAuth2Client-SAML-Bearer path OTK/ path OTK/Internal-OAuthValidation/ path OTK/Internal-OAuthValidation/oauth-validation-validate-v2-idtoken path OTK/Internal-OAuthValidation/oauth-validation-validate-v2-token path OTK/Internal-OAuthValidation/oauth-validation-validate-v2-refreshtoken path OTK/Internal-OAuthValidation/oauth-validation-v2-client path OTK/Internal-OAuthValidation/oauth-validation-v2-revocation path OTK/ path OTK/Internal-Session/ path OTK/Internal-Session/oauth-session path OTK/ path OTK/Internal-TokenPersistenceLayer/ path OTK/Internal-TokenPersistenceLayer/oauth-tokenstore path OTK/ path OTK/Internal-Client/ path OTK/Internal-Client/oauth-clients path OTK/ path OTK/Shared-OAuth/ path OTK/Shared-OAuth/Policy Fragments/ path OTK/Shared-OAuth/Policy Fragments/caching/ path OTK/Shared-OAuth/Policy Fragments/response_types/ path OTK/Shared-OAuth/Policy Fragments/pof/ path OTK/Shared-OAuth/Policy Fragments/authentication/ path OTK/Shared-OAuth/Policy Fragments/grant_types/ path OTK/Shared-OAuth/Policy Fragments/manager/ path OTK/Shared-OAuth/Policy Fragments/manager/manage/ path OTK/Shared-OAuth/Policy Fragments/manager/manage/token/ path OTK/Shared-OAuth/Policy Fragments/manager/manage/client/ path OTK/Shared-OAuth/Policy Fragments/manage/ path OTK/Shared-OAuth/Policy Fragments/manage/session/ path OTK/Shared-OAuth/Policy Fragments/manage/id_token/ path OTK/Shared-OAuth/Policy Fragments/manage/analyse/ path OTK/Shared-OAuth/Policy Fragments/manage/token/ path OTK/Shared-OAuth/Policy Fragments/manage/client/ path OTK/Shared-OAuth/Policy Fragments/validation - verification/ path OTK/Shared-OAuth/Policy Fragments/configuration/ path OTK/Shared-OAuth/Policy Fragments/configuration/Authorization Server/ path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/ path OTK/Shared-OAuth/Policy Fragments/configuration/JWKs Endpoint/ path OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/ path OTK/Shared-OAuth/Server/ path OTK/Shared-OAuth/Server/Internal/ path OTK/Shared-OAuth/Server/Internal/Documentation/ path OTK/Shared-OAuth/Customizations/ path OTK/Shared-OAuth/Customizations/grant_types/ path OTK/Shared-OAuth/Customizations/Authorization Server/ path OTK/Shared-OAuth/Customizations/oauth manager/ path OTK/Shared-OAuth/Customizations/caching/ path OTK/Shared-OAuth/Customizations/authentication/ path OTK/Shared-OAuth/Customizations/JWKs Endpoint/ path OTK/Shared-OAuth/Customizations/Token Server/ path OTK/Shared-OAuth/Customizations/cors/ path OTK/Shared-OAuth/Customizations/Discovery Endpoint/ path OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/ path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/ path OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/ path OTK/Shared-OAuth/Customizations/id_token/ path OTK/Shared-OAuth/Policy Fragments/manager/manage/token/OTK Manager Token Get (token) path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK PKCE Validation path OTK/Shared-OAuth/Customizations/id_token/#OTK id_token KID Configuration path OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/#OTK openid userinfo_endpoint path OTK/Shared-OAuth/Customizations/caching/OTK Cache Look Up Customization path OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Persist path OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Export path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Session Validation path OTK/Shared-OAuth/Customizations/Authorization Server/#OTK Authorization Server Website Template path OTK/Shared-OAuth/Customizations/cors/OTK CORS extension path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Disable path OTK/Shared-OAuth/Customizations/#OTK Variable Configuration path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Revocation path OTK/Shared-OAuth/Customizations/caching/OTK Cache Store Customization path OTK/Shared-OAuth/Customizations/caching/OTK Caching Customization path OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Handler path OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Remove path OTK/Shared-OAuth/Policy Fragments/manager/manage/token/OTK Manager Token Disable path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid token_endpoint_auth_signing_alg_values_supported path OTK/Shared-OAuth/Policy Fragments/manager/manage/token/OTK Manager Token Update (token status) path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid display_values_supported path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid display_values_supported path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Authorization Code Validation path OTK/Shared-OAuth/Customizations/cors/#OTK CORS path OTK/Shared-OAuth/Policy Fragments/configuration/OTK CORS path OTK/Shared-OAuth/Customizations/Discovery Endpoint/#OTK openid discovery_endpoint DEBUG path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid discovery_endpoint DEBUG path OTK/Shared-OAuth/Customizations/authentication/#OTK SiteMinder Check Protected Resource path OTK/Shared-OAuth/Customizations/authentication/OTK User Authentication Extension path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid claim_types_supported path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Client JWT Values path OTK/Shared-OAuth/Customizations/grant_types/#OTK Configured Grant Types path OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=ID_TOKEN path OTK/Shared-OAuth/Customizations/oauth manager/#oauth manager website brand logo path OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager website brand logo path OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=CODE ID_TOKEN path OTK/Shared-OAuth/Customizations/id_token/#OTK id_token configuration path OTK/Shared-OAuth/Policy Fragments/configuration/OTK id_token configuration path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid response_modes_supported path OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Flush path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Client Validation path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Update (setting verifier) path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Storage (oauth_token) path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid grant_types_supported path OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/#OTK openid claims_supported path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid claims_supported path OTK/Shared-OAuth/Policy Fragments/configuration/OTK Generate OAuth Token path OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Remove path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK OAuth 2 Token Validation-MAC path OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Delete path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK id_token Validation-HS256 path OTK/Shared-OAuth/Customizations/Authorization Server/#OTK Authorization Server Configuration path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid userinfo_signing_alg_values_supported path OTK/Shared-OAuth/Customizations/id_token/OTK id_token Validation - CUSTOM path OTK/Shared-OAuth/Customizations/id_token/OTK id_token Validation - CUSTOM ISS path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK id_token Validation path OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Store path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid userinfo_endpoint path OTK/Shared-OAuth/Customizations/grant_types/OTK grant_type=SAML Authentication path OTK/Shared-OAuth/Policy Fragments/response_types/OTK check response type supported path OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Key Update path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid acr_values_supported path OTK/Shared-OAuth/Policy Fragments/validation - verification/API XSS Protection path OTK/Shared-OAuth/Customizations/#OTK Validate JWT OAuth Token path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid acr_values_supported path OTK/Shared-OAuth/Customizations/authentication/OTK Cookie Management Configuration path OTK/Shared-OAuth/Policy Fragments/authentication/OTK Cookie Management path OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Signing Algorithm-HS256 path OTK/Shared-OAuth/Customizations/id_token/OTK id_token Signing Algorithm - CUSTOM path OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Generation path OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=TOKEN ID_TOKEN path OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=CODE ID_TOKEN TOKEN path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Authorization Request Validation path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid service_documentation path OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=SAML path OTK/Shared-OAuth/Customizations/#OTK Token Lifetime Configuration path OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/#OTK openid scopes_supported path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid scopes_supported path OTK/Shared-OAuth/Customizations/authentication/OTK FIP Client Authentication Extension path OTK/Shared-OAuth/Policy Fragments/authentication/OTK FIP Client Authentication path OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Update path OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Revoke Key path OTK/Shared-OAuth/Customizations/#OTK OVP Configuration path OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client GET path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Get (temporary) path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Storage (access_token) path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK HTTP Method Validation path OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Persist path OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager set valid user path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid token_endpoint_auth_methods_supported path OTK/Shared-OAuth/Customizations/JWKs Endpoint/#OTK openid jwks_endpoint Configuration path OTK/Shared-OAuth/Policy Fragments/configuration/JWKs Endpoint/OTK openid jwks_endpoint Configuration path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Update (user to request_token) path OTK/Shared-OAuth/Customizations/Discovery Endpoint/OPTIONAL/#OTK openid ui_locales_supported path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid ui_locales_supported path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK SCOPE Verification path OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager dates tokens path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid service_documentation path OTK/Shared-OAuth/Policy Fragments/pof/OTK Token Count path OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=CODE TOKEN path OTK/Shared-OAuth/Policy Fragments/configuration/OTK Variable Configuration path OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/#OTK openid response_types_supported path OTK/Shared-OAuth/Policy Fragments/pof/OTK setClientKeyOptionalValues path OTK/Shared-OAuth/Customizations/oauth manager/#oauth manager config path OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager config path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Validate JWT OAuth Token path OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=AUTHORIZATION_CODE path OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager validate cookie path OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=TOKEN path OTK/Shared-OAuth/Policy Fragments/manager/manage/token/OTK Manager Token Revocation path OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Persist path OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/#OTK openid id_token_signing_alg_values_supported path OTK/Shared-OAuth/Policy Fragments/manage/session/OTK Session-Store path OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token Lookup path OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/#OTK openid jwks_uri path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Get (token) path OTK/Shared-OAuth/Policy Fragments/manage/analyse/OTK Analyze App Usage path OTK/Shared-OAuth/Customizations/#OTK Fail with error message path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Fail with error message path OTK/Shared-OAuth/Customizations/authentication/OTK User Attribute Look Up Extension path OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client GET path OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=PASSWORD path OTK/Shared-OAuth/Policy Fragments/configuration/OTK Configured Grant Types path OTK/Shared-OAuth/Customizations/#OTK Storage Configuration path OTK/Shared-OAuth/Policy Fragments/configuration/OTK Storage Configuration path OTK/Shared-OAuth/Customizations/Discovery Endpoint/RECOMMENDED/#OTK openid registration_endpoint path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid registration_endpoint path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK SCOPE Issuing DEPRECATED path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid grant_types_supported path OTK/Shared-OAuth/Policy Fragments/configuration/oauth manager/oauth manager dates clients path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid token_endpoint_auth_methods_supported path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Validate Grant Type path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid response_types_supported path OTK/Shared-OAuth/Policy Fragments/configuration/OTK Token Lifetime Configuration path OTK/Shared-OAuth/Policy Fragments/response_types/OTK response_type=CODE path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Storage (temporary token) path OTK/Shared-OAuth/Policy Fragments/pof/OTK Fail Message to HTML path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid claim_types_supported path OTK/Shared-OAuth/Customizations/Discovery Endpoint/REQUIRED/#OTK openid subject_types_supported path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid subject_types_supported path OTK/Shared-OAuth/Customizations/#OTK Generate JWT OAuth Token path OTK/Shared-OAuth/Customizations/#OTK Replay Attack Protection path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Replay Attack Protection path OTK/Shared-OAuth/Customizations/Token Server/#OTK Client Export path OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Revoke Key path OTK/Shared-OAuth/Customizations/OTK Security Header Extension path OTK/Shared-OAuth/Policy Fragments/manage/session/OTK Session-Get path OTK/Shared-OAuth/Policy Fragments/authentication/OTK User Attribute Look Up path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Require OAuth 2 Token path OTK/Shared-OAuth/Policy Fragments/configuration/OTK OVP Configuration path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid userinfo_signing_alg_values_supported path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Client JWT Validation path OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=CLIENT_CREDENTIALS path OTK/Shared-OAuth/Policy Fragments/manage/id_token/OTK id_token KID Configuration path OTK/Shared-OAuth/Policy Fragments/configuration/OTK Generate JWT OAuth Token path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Access Token Retrieval path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Create Public Key PIN path OTK/Shared-OAuth/Policy Fragments/manage/session/OTK Session-Delete path OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Delete path OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=JWT path OTK/Shared-OAuth/Policy Fragments/configuration/Authorization Server/OTK Authorization Server Website Template path OTK/Shared-OAuth/Policy Fragments/manage/client/OTK Client Key Update path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid jwks_uri path OTK/Shared-OAuth/Customizations/grant_types/OTK grant_type=CUSTOM path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK OAuth 2 Token Validation-BEARER path OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Update path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid token_endpoint_auth_signing_alg_values_supported path OTK/Shared-OAuth/Policy Fragments/manage/session/OTK Session Tracking path OTK/Shared-OAuth/Policy Fragments/configuration/Authorization Server/OTK Authorization Server Configuration path OTK/Shared-OAuth/Policy Fragments/authentication/OTK Client Authentication path OTK/Shared-OAuth/Policy Fragments/caching/OTK Cache Look Up path OTK/Shared-OAuth/Policy Fragments/manager/manage/client/OTK Manager Client Export path OTK/Shared-OAuth/Policy Fragments/validation - verification/OTK Refresh Token Validation path OTK/Shared-OAuth/Policy Fragments/authentication/OTK User Authentication path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid id_token_signing_alg_values_supported path OTK/Shared-OAuth/Policy Fragments/pof/OTK setClientOptionalValues path OTK/Shared-OAuth/Policy Fragments/grant_types/OTK grant_type=REFRESH_TOKEN path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Update (token status) path OTK/Shared-OAuth/Policy Fragments/pof/OTK v2GenerateRequestMac path OTK/Shared-OAuth/Policy Fragments/authentication/OTK Require SSL-WithClientCertificate path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Delete path OTK/Shared-OAuth/Policy Fragments/manage/token/OTK Token Storage (access_token refresh_token) path OTK/Shared-OAuth/Policy Fragments/configuration/Discovery Endpoint/OTK openid response_modes_supported name OTK Cache Look Up name OTK Generate OAuth Token name OTK Analyze App Usage name OTK Manager Client GET name OTK Client Authentication name OTK Client Persist name OTK Manager Client Key Update name OTK Session - Delete name OTK Manager Client Persist name OTK Cookie Management name OTK Token Count name OTK Token Delete name OTK PKCE Validation name OTK Client Export name OTK openid subject_types_supported name OTK Authorization Code Validation name OTK Replay Attack Protection name OTK openid userinfo_signing_alg_values_supported name OTK id_token configuration name OTK Manager Client Export name OTK Client Revoke Key name OTK Token Storage (temporary token) name OTK Token Update (user to request_token) name API XSS Protection name OTK openid claims_supported name OTK Token Update (token status) name OTK Token Get (temporary) name OTK openid ui_locales_supported name OTK Manager Token Update (token status) name OTK openid token_endpoint_auth_methods_supported name OTK Create Public Key PIN name OTK Client JWT Validation name OTK grant_type=CLIENT_CREDENTIALS name OTK OAuth 2 Token Validation - MAC name OTK Client Delete name OTK Token Storage (oauth_token) name OTK setClientKeyOptionalValues name OTK id_token Validation name OTK Manager Client Revoke Key name OTK Client JWT Values name OTK Manager Token Disable name OTK Require OAuth 2 Token name OTK Authorization Server Configuration name OTK openid token_endpoint_auth_signing_alg_values_supported name OTK OVP Configuration name OTK Client GET name OTK CORS name OTK Manager Token Get (token) name OTK Manager Client Delete name OTK openid display_values_supported name OTK openid jwks_uri name OTK Refresh Token Validation name OTK Token Storage (access_token) name OTK id_token Remove name OTK openid jwks_endpoint Configuration name OTK Require SSL (with Client Certificate) name OTK response_type=TOKEN ID_TOKEN name OTK response_type=CODE ID_TOKEN TOKEN name OTK Session GET name OTK openid acr_values_supported name OTK Generate JWT OAuth Token name OTK openid response_types_supported name OTK Cache Store name OTK Manager Token Revocation name OTK Session - Store name OTK Token Update (setting verifier) name OTK grant_type=AUTHORIZATION_CODE name OTK response_type=ID_TOKEN name OTK Configured Grant Types name OTK Token Lifetime Configuration name OTK response_type=CODE TOKEN name OTK openid scopes_supported name OTK Storage Configuration name OTK Session Validation name OTK Authorization Request Validation name OTK openid response_modes_supported name OTK Token Disable name OTK Token Storage (access_token, refresh_token) name OTK check response type supported name OTK User Attribute Look Up name OTK openid discovery_endpoint DEBUG name OTK openid claim_types_supported name OTK OAuth 2 Token Validation - BEARER name OTK Fail with error message name OTK id_token Persist name OTK openid grant_types_supported name OTK Manager Client Update name OTK id_token Lookup name OTK Cache Flush name OTK grant_type=PASSWORD name OTK grant_type=JWT name OTK response_type=TOKEN name OTK openid id_token_signing_alg_values_supported name OTK Client Update name OTK Access Token Retrieval name OTK SCOPE Issuing DEPRECATED name OTK grant_type=SAML name OTK Client Key Update name OTK grant_type=REFRESH_TOKEN name OTK FIP Client Authentication name OTK Client Validation name OTK v2GenerateRequestMac name OTK Token Get (token) name OTK response_type=CODE ID_TOKEN name OTK Validate JWT OAuth Token name OTK openid service_documentation name OTK response_type=CODE name OTK Authorization Server Website Template name OTK openid registration_endpoint name OTK openid userinfo_endpoint name OTK id_token Generation name OTK Validate Grant Type name OTK setClientOptionalValues name OTK Variable Configuration name OTK HTTP Method Validation name OTK User Authentication name OTK Session Tracking name OTK Cache Remove name OTK SCOPE Verification name OTK Token Revocation name OTK id_token KID Configuration path OTK/Shared-OAuth/Server/Internal/Documentation/apidocs-oauth-storage