mp.security.providers.adoc Maven / Gradle / Ivy

Go to download
///////////////////////////////////////////////////////////////////////////////

    Copyright (c) 2018, 2023 Oracle and/or its affiliates.

    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
    You may obtain a copy of the License at

        http://www.apache.org/licenses/LICENSE-2.0

    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.

///////////////////////////////////////////////////////////////////////////////

:rootdir: {docdir}/../..
= Security Providers
:description: Helidon Security providers
:keywords: helidon, security

include::{rootdir}/includes/mp.adoc[]

== Implemented Security Providers

Helidon provides the following security providers for endpoint protection:

[cols="3,2,^1,6"]
|===
^|Provider ^|Type ^|Outbound supported ^|Description

|<> |Authentication |✅ |Open ID Connect supporting JWT, Scopes, Groups and OIDC code flow
|<> |Authentication |✅ |HTTP Basic Authentication support
|<> |Authentication |🚫 |HTTP Digest Authentication support
|<> |Authentication |✅ |Asserting a user based on a header value
|<> |Authentication |✅ |Protecting service to service communication through signatures
|<> |Role Mapping |🚫 |Retrieves roles from IDCS provider for authenticated user
|<> |Authorization |🚫 |Attribute based access control authorization policies
|===

The following providers are no longer evolved:
[cols="3,2,^1,6"]
|===
^|Provider ^|Type ^|Outbound supported ^|Description

|<> |Authentication |✅ |Authenticates a token from request against Google servers
|<> |Authentication |✅ |JWT tokens passed from frontend
|===

=== OIDC Provider [[OIDC-Provider]]
Open ID Connect security provider.

==== Setup
[source,xml]
.Maven dependency
----

    io.helidon.microprofile
    helidon-microprofile-oidc

----
include::{rootdir}/includes/security/providers/oidc.adoc[]

include::{rootdir}/includes/security/providers/http-basic-auth.adoc[]

include::{rootdir}/includes/security/providers/http-digest-auth.adoc[]

include::{rootdir}/includes/security/providers/header-assertion.adoc[]

include::{rootdir}/includes/security/providers/http-signatures.adoc[]

include::{rootdir}/includes/security/providers/idcs-role-mapper.adoc[]

include::{rootdir}/includes/security/providers/abac.adoc[]

include::{rootdir}/includes/security/providers/google-login.adoc[]

include::{rootdir}/includes/security/providers/jwt.adoc[]