api/me.ahoo.wow.api.wire/DevelopmentHeaders

DevelopmentHeaders

The identity headers of a development caller, which stand in for an identity provider: the host's development callers read the caller from them in a development profile (wow.dev-profiles), with CoSec off and no CallerResolver of the application's, and a client's development credential writes a caller as them. Any client sets them, so a host reads them in a development profile alone, never in a deployment.

USER: the caller's subject. Without it, the request is the anonymous caller of the default tenant, and the other identity headers are ignored but APP.
OWNER: the owner of its scope, an owner-level caller; without it, a tenant-level caller.
ROLES: its roles, comma-separated, the caller attribute ROLES_ATTRIBUTE.
TENANT: its tenant; the host's default tenant (wow.tenant.default) without it.
APP: the application it calls in, its standard attribute app (Caller.APP).

Properties

APP

const val APP: String

The header naming the application the caller calls in.

OWNER

const val OWNER: String

The header naming the owner of the caller's scope.

ROLES

const val ROLES: String

The header listing the caller's roles, comma-separated.

ROLES_ATTRIBUTE

const val ROLES_ATTRIBUTE: String

The caller attribute listing its roles, which ROLES gives, as CoSec's resolver names it.

TENANT

const val TENANT: String

The header naming the caller's tenant.

USER

const val USER: String

The header naming the caller's subject.

Functions

@JvmStatic

fun of(caller: Caller): Map<String, String>

caller as these headers: its subject, tenant, owner, roles (the attribute ROLES_ATTRIBUTE) and application (Caller.app). A caller without a subject is the anonymous caller of the host's default tenant, written with its application alone. The space, a cross-scope grant and every other attribute have no header: the host's development callers have none of them.