Home

This Wiki contains the documentation of the OWASP Application Gateway (OAG). If you think that we missed something please add an issue on GitHub.

Table of Contents

Table of Contents

Table of Contents

• Wiki Home
  • Terms to understand
  • Configuration
    • Login Providers
    • Routes
    • Security Profiles
    • Session Behaviour
    • Tracing / Log Correlation
    • User Mapping
    • Key Management and Jwt-Signing algorithm
  • Custom code extensions
    • Logging
    • Tracing / Log Correlation
    • JwtSigner, JwkStore, KeyGenerator
    • Key Rotation
  • OAG API / endpoints
    • JWKS JWT signing public keys of OAG
    • JWT validation with Spring Security
  • Integrating with OAG
    • Identity validation
  • [How To's]
    • Deploy OAG on Azure
    • OAG URLs and whitelisting required
    • Setup OAG for Development
    • Create new release

There is also a Swagger documentation of all OAG endpoint available online: https://app.swaggerhub.com/apis-docs/gianlucafrei/OAG/0.4#/