6. Security

oauth2Resource

Allows only authorized HTTP requests to pass through. Unauthorized requests get a redirect to the authorization server as response.

Can be used in:

serviceProxy, api, stompProxy, swaggerProxy, if, registration, wsStompReassembler, interceptor, bean, internalProxy, transport and soapProxy


Attributes

NameRequiredDefaultDescriptionExample
publicURL false - - -
loginLocation false - location of the login dialog template (a directory containing the index.html file as well as possibly other resources). Required for older browsers to work. file:c:/work/login/
revalidateTokenAfter false -1
 time in seconds until a oauth2 access token is revalidatet with authorization server. This is disabled for values < 0 -
loginPath false /login/
 context path of the login dialog -

Other optional Child Elements


membrane