Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-16502

Make OpenAMScopeValidator source available and mark its APIs as public

    Details

    • Type: Improvement
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Do
    • Affects Version/s: 6.5.2.3
    • Fix Version/s: None
    • Component/s: oauth2
    • Labels:
    • Rank:
      1|i01khb:
    • Sprint:
      AM Sustaining Sprint 78, AM Sustaining Sprint 79
    • Story Points:
      3
    • Support Ticket IDs:

      Description

      The default implementation of ScopeValidator is OpenAMScopeValidator. The source is not available in public, also it doesn't use public API (e.g Scripting Engine). 

      If customers want to customize the default implementation, they can't write an OpenAMScopeValidator equivalent, so they will be missing the current functionality if they try to do so. What I have seen is that customers somehow got hold of some version of OpenAMScopeValidator and customize that, which is not supported ...

      The OpenAMScopeValidator defines the variables for the OIDC claims script/OAuth2 modification script, so this would be beneficial for these customizations too (linked RFE around giving more access to these scripts).

      So the request is:

      • make OpenAMScopeValidator use public API
      • provide OpenAMScopeValidator source

       

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                anastasios.kampas Anastasios Kampas
              • Votes:
                1 Vote for this issue
                Watchers:
                10 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: