JWT Authentication - Service Request IRIS

To enable authentication for Docker and J2EE, you must configure the JWT Token.

Prerequisites

Ensure that you meet the following prerequisites:

• If you want to enable authentication for the Docker stack, the Docker package must be up and running.
• If you want to enable authentication for the J2EE stack, the J2EE package must be up and running.

For more information about deployment, refer to Deployment Instructions.

Deployment Artefacts

Service Request IRF is available as a web archive (WAR) for the following stacks:

• Docker: ms-servicerequest-docker-iris.war
• J2EE: ms-servicerequest-j2ee-iris.war

Configuring the JWT Token

To configure the JWT token, follow these steps.

1. Set the claims that need to be extracted from the JWT payload and token validation parameters in the spring-jwt-iris-authenticator.xml file as follows. This file is located at path \WEB-INF\classes\.
   1. Set the value of issuer from JWT Token payload as Fabric, and public key in base 64 format in pkEncoded.

      Token Validation Parameters

      <beans:bean id="oidcProviderServer" class="com.temenos.security.oidc.common.OidcProviderServer">
          <beans:property name="issuer" value="Fabric" />
          <beans:property name="pkEncoded" value="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" />
          <beans:property name="pkCertEncoded" value="" />
          <beans:property name="pkCertFilePath" value="" />
          <beans:property name="pkJwksUri" value="" />
          <beans:property name="decryptingJwkEncoded" value="" />
          <beans:property name="principalClaim" value="sub" />
      </beans:bean>

   2. Set the list of claims that need to be extracted from JWT as follows.

      Claims

      <beans:bean id="requiredFields" class="com.temenos.irf.web.security.jwt.parser.RequiredFieldsExtractor">
          <beans:property name="claimsToExtract">
              <beans:map>
                  <beans:entry key="" value="" />
              </beans:map>
          </beans:property>
      </beans:bean>