...
For the purposes of automating testing, we have agreed one option is to use a query parameter with the name _umaauthn to convey a token string that enables login of an RO or RqP. Any RqP credentials provided in the form of "token strings" below can be used in this fashion.
It is assumed that the C is claims-unaware and will be using the redirect claim profile to redirect the RqP to the AS for login as the sole claims-gathering process.
The "Alice" user can be used as both an RO and an RqP, and the "Bob" user can be used as an RqP. The different RqPs can be used with the same client to test policies that discriminate between RqPs using the same client. Clients "A" and "B" can be easily used to test policies that discriminate between the same RqP using different clients.
| Solution:role | Config data URL | Token strings | Static client RqP method and credentials | C credentials | Supports dynamic client registration? | Other details |
|---|---|---|---|---|---|---|
| OX:AS | https://seed.gluu.org/.well-known/uma-configuration | Alice: Bob: | RSOAuth Client A: | RS: yes C: yes | ||
| CI:AS | https://demo.nuveam.com/.well-known/uma-configuration | Alice: Bob: | Client A: Client B: | RS: yes C: yes | ||
| RH:AS | Alice: Bob: | Client A: Client B: | RS: yes C: yes | |||
| ZX:AS | https://zxidp.org/.well-known/uma-configuration | (Need new info) test:test or HTTPS client cert or SAML IdP https://zxidp.org/idp with test:test | Client A: Client B: | RS: yes C: yes | https://zxidp.org/umainfo.html |
...
| Solution:role | API info | SDK avail? | Login URL and RO creds | Protected resource URL(s) info | Client SDK/library info | Expects dynamic client registration at AS? | Other details |
|---|---|---|---|---|---|---|---|
| OX:RS | Java | https://seed.gluu.org/oxuma-rs/ | https://seed.gluu.org/oxuma-rs/ws/phone CRUD: Scopes: | ||||
| CI:RS | https://nuvepds.appspot.com/about/api | Python and Java | https://nuvepds.appspot.com (sign in with your social profile) | https://nuvepds.appspot.com/about/api | Optional | ||
| RH:RS | Uses "pbryan" (http-json-resource) | https://xenosmilus.umdc.umu.se:8777/login.html (user:alice, password:krall) | Base URL for alice's resources: https://xenosmilus.umdc.umu.se:8777/json/alice | Available in Python and Java (sample at https://nuvepdsclient.appspot.com/) – where? | Supports webfinger. Supports acct and http identifier urls. | ||
| ZX:RS | https://zxidp.org/umainfo.html | libzxid (C/C++, PHP, Perl, Java, Apache httpd module) | https://zxidp.org/idpuma?o=umalogin (test:test) | https://zxidp.org/idpuma?o=umaprotected | ? | ? |
Solution information: C role
...