ORCAP is an acronym for
Oauth
Restricted
Content server
And
Proxy cache
It allows serving any files from disk and restricting acces to these files as an OAuth resource server.
Using the cache
profile it also acts as a proxy cache.
The point of ORCAP is to allow downloads only for people providing a valid OAuth 2 / OIDC token with a predefined scope. These features are not available in free versions of common web servers. Additional features from other file servers are not required.
Spring Webflux should allow sufficient performance as it also provides zero-copy file transfer.
Again, the demand for OAuth protected resources does not work together with regular proxy caches. Each proxy node needs enforce the same OAuth checks as the root node does.
- In production: We assume you run this app in a Docker container and mount all files for download in the
/content
directory. - In development: All files are served from your project folder under
./content
Other directories can be configured using environment variables.