-
Notifications
You must be signed in to change notification settings - Fork 24
Implementation Details
YuriyZ edited this page Aug 12, 2019
·
3 revisions
When we call oxd /uma-rs-check-access what is happening between oxd and GS? which GS endpoint is called? where it is documented in UMA specs?
- match resource for given path and HTTP method (see https://docs.kantarainitiative.org/uma/wg/rec-oauth-uma-federated-authz-2.0.html#reg-api)
- introspects RPT (https://docs.kantarainitiative.org/uma/wg/rec-oauth-uma-federated-authz-2.0.html#introspection-endpoint)
- if we have right permission -> grant access
- if we don’t have permission in RPT -> register permission and return back ticket (https://docs.kantarainitiative.org/uma/wg/rec-oauth-uma-federated-authz-2.0.html#rfc.section.4.1)