diff options
Diffstat (limited to '_posts/2013-05-03-authorization--authentication-configuration-opentox-serverclient--300.md')
-rw-r--r-- | _posts/2013-05-03-authorization--authentication-configuration-opentox-serverclient--300.md | 39 |
1 files changed, 39 insertions, 0 deletions
diff --git a/_posts/2013-05-03-authorization--authentication-configuration-opentox-serverclient--300.md b/_posts/2013-05-03-authorization--authentication-configuration-opentox-serverclient--300.md new file mode 100644 index 0000000..2a9fa0f --- /dev/null +++ b/_posts/2013-05-03-authorization--authentication-configuration-opentox-serverclient--300.md @@ -0,0 +1,39 @@ +--- +layout: post +title: "Authorization & Authentication Configuration (opentox (server/client) >= 3.0.0)" +description: "Authorization & Authentication Configuration for opentox-client opentox-server >= Version 3.0.0" +category: Installation +tags: [Configuration, Setup, Webservices] +--- +{% include JB/setup %} + +This page describes the newer Authorization & Authentication configuration for opentox webservices. Configuration has changed from a single YAML file to SERVICENAME.rb files for each service. Opentox webservices (algorithm, compound, dataset, feature, model, task, validation) do load `/home/USERNAME/.opentox/config/default.rb` on startup for default or global settings. After **default.rb** each service loads its own configuration file `/home/USERNAME/.opentox/config/SERVICENAME.rb`. This may also overwrite settings from **default.rb**. + +A&A How it works +---- +[Description](/Installation/2012/09/03/authorization--authentication-flow-and-configuration/) see paragraphs **A&A How it works** and **A&A Flow opentox-ruby gem** for Versions below 3.0.0 . + + +Configuration-file example +---- +Example A&A configuration for the dataset service. Configuration-file is **/home/USERNAME/.opentox/config/dataset.rb** + + $dataset = { :uri => "https://myserver.org/dataset" } + $aa = { + :uri => 'https://opensso.in-silico.ch', + :free_request => [:HEAD], + :authenticate_request => [], + :authorize_request => [:GET, :POST, :DELETE, :PUT], + :authorize_exceptions => { [:GET,:POST] => [$dataset[:uri], "#{$dataset[:uri]}/test/task_error", "#{$dataset[:uri]}/test/error_in_task"] } + } + +Configuration options +---- +* `$dataset = { :uri => "https://myserver.org/dataset" }` sets the URI to the dataset service itself. +* `$aa = { :uri => nil }` turns A&A off. +* `:uri => 'https://opensso.in-silico.ch'` set the OpenSSO server URI. +* `:free_request => [:HEAD]` define all free request methods. Set HEAD method as a free request method for internal control calls. +* `:authenticate_request => []` request methods that needs only Authentification. Request must have a valid subjectid, but no policy. +* `:authorize_request => [:GET, :POST, :DELETE, :PUT]` request methods with authorization controll +* `:authorize_exceptions => { [:GET,:POST] => [$dataset[:uri], "#{$dataset[:uri]}/test/task_error", "#{$dataset[:uri]}/test/error_in_task"] }` authorization exceptions defined as a Hash of request-methods-array keys mapped to URI-array values. In this case you are allowed to GET and POST to the base service URI to get a list of datasets or to POST a new dataset. + `"#{$dataset[:uri]}/test/error_in_task"` defines a URI used in a test call.
\ No newline at end of file |