6. Security

oauth2Resource

Allows only authorized HTTP requests to pass through. Unauthorized requests get a redirect to the authorization server as response.

Can be used in:

serviceProxy, api, stompProxy, swaggerProxy, if, registration, wsStompReassembler, interceptor, bean, internalProxy, transport and soapProxy

Attributes

NameRequiredDefaultDescriptionExample
publicURL false - - -
loginLocation false - location of the login dialog template (a directory containing the index.html file as well as possibly other resources). Required for older browsers to work.
file:c:/work/login/
revalidateTokenAfter false -1
time in seconds until a oauth2 access token is revalidatet with authorization server. This is disabled for values < 0
-
loginPath false /login/
context path of the login dialog
-

Child Elements

ElementsDescriptionCardinality
github 0..1
google 0..1
sessionManager 0..1

Other optional Child Elements

membrane