Service Security Configuration: Difference between revisions

From Maria GDK Wiki
Jump to navigation Jump to search
No edit summary
No edit summary
 
Line 15: Line 15:
</source>
</source>


RequireAuthentication contols whether service security is enabled. Setting this value to false will disable service security, and access to the services will not require authentication.
''RequireAuthentication'' contols whether service security is enabled. Setting this value to false will disable service security, and access to the services will not require authentication.
 
''Deactivate security'' will deactivate security for the listed services.


Only users allow to change security policy should be allowed write access to settings.json.
Only users allow to change security policy should be allowed write access to settings.json.


[[Category:Security]]
[[Category:Security]]

Latest revision as of 14:45, 4 May 2023

Insert the following block in settings.json to enable service security (GDK > 4.4.0.318):

  "SecuritySettings": {
	"RequireAuthentication": true,
	"RequireAuthorization": true,		
    "AuthenticationServiceUrl": <OIDC authentication url>,
	"AuthorizationServiceUrl": <Authorization url, for future use>,
	"DeactivateSecurity": {
		"TPG.Hosts.AddInHosting.AddIns.CatalogServiceAddIn.CatalogServiceAddIn": true,
		"TPG.Hosts.AddInHosting.AddIns.DrawObjectServiceAddIn.DrawObjectServiceAddIn": true,
		"TPG.Hosts.AddInHosting.AddInUtilities.ManagementServiceHoster": true,
	}	
  }

RequireAuthentication contols whether service security is enabled. Setting this value to false will disable service security, and access to the services will not require authentication.

Deactivate security will deactivate security for the listed services.

Only users allow to change security policy should be allowed write access to settings.json.