Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add system api resource and access control for DCR for sub organization in tenant perspective #6277

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
+56 −0
Open

Add system api resource and access control for DCR for sub organization in tenant perspective #6277

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 14 additions & 0 deletions ...rg.wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -768,6 +768,20 @@
description="Delete OAuth2 applications in the organization"/>
</Scopes>
</APIResource>
<APIResource name="OAuth DCR API" identifier="/o/api/identity/oauth2/dcr/v1.1/register"
requiresAuthorization="true"
description="API representation of the OAuth DCR (Dynamic Client Registration) API" type="ORGANIZATION">
<Scopes>
<Scope displayName="View DCR" name="internal_org_dcr_view"
description="View OAuth2 applications in the organization"/>
<Scope displayName="Create DCR" name="internal_org_dcr_create"
description="Create new OAuth2 applications in the organization"/>
<Scope displayName="Update DCR" name="internal_org_dcr_update"
description="Update OAuth2 applications in the organization"/>
<Scope displayName="Delete DCR" name="internal_org_dcr_delete"
description="Delete OAuth2 applications in the organization"/>
</Scopes>
</APIResource>
<APIResource name="OAuth2.0 Scope Management API" identifier="/api/identity/oauth2/v1.0/scopes"
requiresAuthorization="true"
description="API representation of the OAuth2.0 Scope Management API" type="TENANT">
Expand Down
14 changes: 14 additions & 0 deletions ...wso2.carbon.identity.api.resource.mgt.server.feature/resources/system-api-resource.xml.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -777,6 +777,20 @@
description="Delete OAuth2 applications in the organization"/>
</Scopes>
</APIResource>
<APIResource name="OAuth DCR API" identifier="/o/api/identity/oauth2/dcr/v1.1/register"
requiresAuthorization="true"
description="API representation of the OAuth DCR (Dynamic Client Registration) API" type="ORGANIZATION">
<Scopes>
<Scope displayName="View DCR" name="internal_org_dcr_view"
description="View OAuth2 applications in the organization"/>
<Scope displayName="Create DCR" name="internal_org_dcr_create"
description="Create new OAuth2 applications in the organization"/>
<Scope displayName="Update DCR" name="internal_org_dcr_update"
description="Update OAuth2 applications in the organization"/>
<Scope displayName="Delete DCR" name="internal_org_dcr_delete"
description="Delete OAuth2 applications in the organization"/>
</Scopes>
</APIResource>
<APIResource name="OAuth2.0 Scope Management API" identifier="/api/identity/oauth2/v1.0/scopes"
requiresAuthorization="true"
description="API representation of the OAuth2.0 Scope Management API" type="TENANT">
Expand Down
14 changes: 14 additions & 0 deletions ...ore/org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -238,6 +238,20 @@
<Resource context="(.*)/.well-known/openid-configuration(.*)" secured="false" http-method="all"/>
<Resource context="/.well-known/webfinger(.*)" secured="false" http-method="all"/>

<!-- OAuth DCR API in Tenant Perspective -->
<Resource context="(.*)/t/(.*)/o/(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="POST">
<Scopes>internal_org_dcr_create</Scopes>
</Resource>
<Resource context="(.*)/t/(.*)/o/(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="DELETE">
<Scopes>internal_org_dcr_delete</Scopes>
</Resource>
<Resource context="(.*)/t/(.*)/o/(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="PUT">
<Scopes>internal_org_dcr_update</Scopes>
</Resource>
<Resource context="(.*)/t/(.*)/o/(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="GET">
<Scopes>internal_org_dcr_view</Scopes>
</Resource>

<!-- OAuth DCR API -->
<Resource context="(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="POST">
<Scopes>internal_dcr_create</Scopes>
Expand Down
14 changes: 14 additions & 0 deletions .../org.wso2.carbon.identity.core.server.feature/resources/resource-access-control-v2.xml.j2
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -260,6 +260,20 @@
<Resource context="(.*)/.well-known/openid-configuration(.*)" secured="false" http-method="all"/>
<Resource context="/.well-known/webfinger(.*)" secured="false" http-method="all"/>

<!-- OAuth DCR API in Tenant Perspective -->
<Resource context="(.*)/t/(.*)/o/(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="POST">
<Scopes>internal_org_dcr_create</Scopes>
</Resource>
<Resource context="(.*)/t/(.*)/o/(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="DELETE">
<Scopes>internal_org_dcr_delete</Scopes>
</Resource>
<Resource context="(.*)/t/(.*)/o/(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="PUT">
<Scopes>internal_org_dcr_update</Scopes>
</Resource>
<Resource context="(.*)/t/(.*)/o/(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="GET">
<Scopes>internal_org_dcr_view</Scopes>
</Resource>

<!-- OAuth DCR API -->
<Resource context="(.*)/api/identity/oauth2/dcr/(.*)" secured="true" http-method="POST">
<Scopes>internal_dcr_create</Scopes>
Expand Down
Loading