Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Info
titleRequirements

Logging in with the JWT Authentication Provider is only supported when using the Blueriq Gateway Service as a backend for frontend.

Setup

To login using JWT a fully configure Blueriq Gateway Service is required.

...

The default Material theme based on Angular supports JWT authentication out-of-the-box, but it may require customizations depending on the desired usage. By default, the theme communicates the visited URL (the URL that the user intended to open before being redirected to the login page) as part of the redirect URL. The default theme can be changed as desired to support this use-case, if needed.

2. How does it work



4. How to configure

The authorization provider needs to be configured in the application.properties and a blueriq.security.auth-providers-chain, see configure JWT authentication provider for more information.

...

Optionally when running the Client in front of an Reverse proxy the path of the login location can be overridden in the application.properties of the Runtime, otherwise it will default to /login.

blueriq.security.jwt.login-path=/auth/login


5. REST API

Blueriq Runtime exposes an endpoint to authenticate with JWT. The endpoint can be used as described in the algorithm at section 5.2.

5.1. Login Endpoint

GET /api/v2/jwt/login

Description

Login endpoint that returns the URL required for calling the login endpoint on the Blueriq Gateway Service.

Parameters





redirect_uristringRedirection URI to which the response will be sent.true

5.2. Algorithm

The algorithm that can be used in order to login is the the following:

...