A security realm definition capable of validating and extracting identities from security tokens.
| Attribute | Value |
|---|---|
| Type | OBJECT |
| Nillable | true |
| Expressions Allowed | false |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | all-services |
| Attribute | Value |
|---|---|
| Type | OBJECT |
| Nillable | true |
| Expressions Allowed | false |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | all-services |
| Attribute | Value |
|---|---|
| Default Value | username |
| Type | STRING |
| Nillable | true |
| Expressions Allowed | true |
| Storage | configuration |
| Access Type | read-write |
| Restart Required | all-services |
| Request Parameter | Type | Required | Expressions Allowed | Default value | Description |
|---|---|---|---|---|---|
| jwt | OBJECT | false | false | A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard. | |
| oauth2-introspection | OBJECT | false | false | A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validates them using an endpoint compliant with OAuth2 Token Introspection specification(RFC-7662). | |
| principal-claim | STRING | false | true | username | The name of the claim that should be used to obtain the principal's name. |