Athenz Yahoo Server OAuth2 access token implementation for Auth0
mvn clean package
ls ./target/athenz_auth_auth0-*.jar- add
athenz_auth_auth0-*.jarin Athenz server's classpath - overwrite existing system property
# ZMS server athenz.zms.authority_classes=com.yahoo.athenz.auth.oauth.OAuthCertBoundJwtAccessTokenAuthority # ZTS server athenz.zts.authority_classes=com.yahoo.athenz.auth.oauth.OAuthCertBoundJwtAccessTokenAuthority
- setup OAuthCertBoundJwtAccessTokenAuthority for Auth0 (Update the following
https://athenz-oauth-example.auth0.com/domain to your own domain)athenz.auth.oauth.jwt.authn_challenge_realm[email protected] athenz.auth.oauth.jwt.cert.exclude_role_certificates=false athenz.auth.oauth.jwt.cert.excluded_principals= # Auth0 does not support certificate bound access token currently athenz.auth.oauth.jwt.verify_cert_thumbprint=false athenz.auth.oauth.jwt.authorized_client_ids_path=conf/zms_server/authorized_client_ids.txt ### setting for Auth0 JWT validator athenz.auth.oauth.jwt.claim.iss=https://athenz-oauth-example.auth0.com/ athenz.auth.oauth.jwt.claim.aud=https://zms.athenz.io athenz.auth.oauth.jwt.claim.scope=openid https://zms.athenz.io/zms/v1 # full role name format: _domain_._sub_domain_:role._role_name_ ### setting for Auth0 JWT parser athenz.auth.oauth.jwt.parser_factory_class=com.yahoo.athenz.auth.oauth.auth0.Auth0JwtParserFactory athenz.auth.oauth.jwt.parser.jwks_url=https://athenz-oauth-example.auth0.com/.well-known/jwks.json athenz.auth.oauth.jwt.auth0.claim_client_id=https://athenz-oauth-example.auth0.com/client_id athenz.auth.oauth.jwt.auth0.claim_confirm=https://athenz-oauth-example.auth0.com/cnf # athenz.user_domain=user
mvn clover:instrument clover:aggregate clover:clover clover:check
open ./target/site/clover/index.html