sdnr/wt/oauth-provider/oauth-core/src/test/resources/aaa-app-config.test.xml

   1 <?xml version="1.0" ?>
   2
   3
   4 <shiro-configuration xmlns="urn:opendaylight:aaa:app:config">
   5
   6
   7     <main>
   8         <pair-key>tokenAuthRealm</pair-key>
   9         <pair-value>org.onap.ccsdk.features.sdnr.wt.oauthprovider.OAuth2Realm</pair-value>
  10     </main>
  11
  12     <main>
  13         <pair-key>securityManager.realms</pair-key>
  14         <pair-value>$tokenAuthRealm</pair-value>
  15     </main>
  16
  17     <main>
  18         <pair-key>anyroles</pair-key>
  19         <pair-value>org.opendaylight.aaa.shiro.filters.AnyRoleHttpAuthenticationFilter</pair-value>
  20     </main>
  21     <main>
  22         <pair-key>authcBearer</pair-key>
  23         <pair-value>org.opendaylight.aaa.shiro.filters.ODLHttpAuthenticationFilter2</pair-value>
  24     </main>
  25
  26     <main>
  27         <pair-key>accountingListener</pair-key>
  28         <pair-value>org.opendaylight.aaa.shiro.filters.AuthenticationListener</pair-value>
  29     </main>
  30     <main>
  31         <pair-key>securityManager.authenticator.authenticationListeners</pair-key>
  32         <pair-value>$accountingListener</pair-value>
  33     </main>
  34
  35     <main>
  36         <pair-key>dynamicAuthorization</pair-key>
  37         <pair-value>org.opendaylight.aaa.shiro.realm.MDSALDynamicAuthorizationFilter</pair-value>
  38     </main>
  39
  40     <urls>
  41         <pair-key>/**/operations/cluster-admin**</pair-key>
  42         <pair-value>dynamicAuthorization</pair-value>
  43     </urls>
  44     <urls>
  45         <pair-key>/**/v1/**</pair-key>
  46         <pair-value>authcBearer, roles[admin]</pair-value>
  47     </urls>
  48     <urls>
  49         <pair-key>/**/config/aaa*/**</pair-key>
  50         <pair-value>authcBearer, roles[admin]</pair-value>
  51     </urls>
  52      <urls>
  53         <pair-key>/oauth/**</pair-key>
  54         <pair-value>anon</pair-value>
  55     </urls>
  56     <urls>
  57         <pair-key>/odlux/**</pair-key>
  58         <pair-value>anon</pair-value>
  59     </urls>
  60     <urls>
  61         <pair-key>/apidoc/**</pair-key>
  62         <pair-value>authcBasic, roles[admin]</pair-value>
  63     </urls>
  64      <urls>
  65         <pair-key>/test123/**</pair-key>
  66         <pair-value>authcBasic</pair-value>
  67     </urls>
  68     <urls>
  69         <pair-key>/rests/**</pair-key>
  70         <pair-value>authcBearer, anyroles["admin,provision"]</pair-value>
  71     </urls>
  72     <urls>
  73         <pair-key>/**</pair-key>
  74         <pair-value>authcBearer, anyroles["admin,provision"]</pair-value>
  75     </urls>
  76 </shiro-configuration>
  77