spring-boot/me.ahoo.wow.spring.boot/CoSecProperties

CoSecProperties

CoSec's settings (wow-cosec), which the host's CoSec configuration reads from here alone, their one reader and their one default: they have metadata, and a key of wow.cosec that none of these is refuses the startup (ConfigurationKeys) instead of being ignored, so a mistyped Authorizer.enabled cannot leave the authorizer that allows all in place.

Constructors

CoSecProperties

constructor()

Types

class Authorizer

enum class CoSecMode : Enum<CoSecProperties.CoSecMode>

How CoSec runs in a service (wow.cosec.mode).

Principals

@InternalWowApi

class Principals

Callers by their CoSec roles or policies, comma-separated or as a list.

Properties

authorizer

var authorizer: CoSecProperties.Authorizer

CoSec's authorization of the commands.

crossScope

var crossScope: CoSecProperties.Principals

The callers that may act across scopes: by CoSec role or policy.

mode

var mode: CoSecProperties.CoSecMode?

How CoSec runs in this service, as defaults its own cosec.* keys override (CoSecModeEnvironmentPostProcessor): gateway, behind a CoSec gateway (cosec.pipeline.mode=gateway: the caller read from the CoSec-Identity the gateway verified, with its app and space, and no token verified here); disabled, CoSec off (cosec.enabled=false). Unset, CoSec's own defaults: CoSec decides the requests itself, the Manifest's routes its route map.

tenantLevel

var tenantLevel: CoSecProperties.Principals

The tenant-level callers, who read and write every aggregate of their tenant.