Adding Identity Management and Access Control to your Application
Download as PPTX, PDF3 likes3,126 views
This document discusses adding identity management and access control to applications using FIWARE. It introduces the FIWARE Identity Manager for user authentication and the OAuth 2.0 protocol. It also discusses three levels of authorization: 1) authenticating users with FIWARE accounts, 2) basic authorization of HTTP requests, and 3) advanced authorization using XACML policies. Code examples and documentation links are provided to help integrate these security features.
Adding Identity Management and Access Control to your Application
- 1. Adding Identity Management and Access Control to your Application Joaquin Salvachua // Ălvaro Alonso UPM â DIT Security Chapter. FIWARE [email protected], @jsalvachua [email protected], @larsonalonso
- 3. Identity Manager 3 Account
- 4. Oauth 2.0 Login with
- 5. FIWARE Account (Identity Manager) Demo 5
- 6. OAuth 2.0 6
- 7. Oauth 2.0 Message Flow redirect access-code Web App Account request access-token access-token 7 OAuth Library Request user info using access-token
- 8. Oauth 2.0 Libraries âą http://oauth.net/2/ â PHP, Cocoa, iOS, Java, Ruby, Javascript, Python. âą Example using Node.js â https://github.com/ging/oauth2-example-client 8
- 9. Oauth 2.0 Demo 9
- 10. Web Applications and GEs 10 Generic Enabler Account Request + access-token Oauth2 flows access-token OK + user info (roles) Web App OAuth Library access_token
- 11. Web Applications and GEs GET https://GE_URL HTTP/1.1 Host: GE_hostname X-Auth-Token: access_token 11
- 12. Securing your back-end Oauth2 flows access_token 12 Web App Back-end Apps Account Request + access-token Oauth Library Proxy access-token OK + user info (roles)
- 13. Securing your back-end âą Level 1: Authentication â Check if a user has a FIWARE account âą Level 2: Basic Authorization â Checks if a user has permissions to access a resource â HTTP verb + resource path âą Level 3: Advanced Authorization â Custom XACML policies
- 14. Level 1: Authentication Oauth2 flows access_token 14 Web App Back-end Apps Account Request + access-token Oauth Library Proxy access-token OK + user info (roles)
- 15. Level 2: Basic Authorization Oauth2 flows access_token 15 Web App Back-end Apps Account Request + access-token Oauth Library Proxy access-token + verb + path OK + user info AC GE
- 16. Level 3: Advanced Authorization Oauth2 flows access_token 16 Web App Back-end Apps Account Request + access-token Oauth Library Proxy extension XACML policy OK + user info AC GE
- 17. FIWARE Proxy Demo 17
- 18. Documentation âą FIWARE Account: â Source Code: https://github.com/ging/fi-ware- idm â Documentation: https://github.com/ging/fi-ware- idm/wiki âą FIWARE Access Control â http://catalogue.fi-ware.org/enablers/access-control- tha-implementation/documentation âą FIWARE OAuth2 Demo: â https://github.com/ging/oauth2-example-client âą FIWARE Proxy: â https://github.com/ging/fi-ware-pep-proxy 18
- 19. Adding Identity Management and Access Control to your Application Ălvaro Alonso UPM â DIT Security Chapter. FIWARE [email protected], @larsonalonso