Management API Reference for simple-role-decoder

Definition of a simple RoleDecoder that takes a single attribute and maps it directly to roles.

Provided Capabilities (1)

Name	Dynamic	Other provider points
org.wildfly.security.role-decoder	true	/subsystem=elytron/custom-role-decoder=* /subsystem=elytron/source-address-role-decoder=* /subsystem=elytron/aggregate-role-decoder=*

Attributes (1)

attribute - The name of the attribute from the identity to map directly to roles.

Type	STRING
Does the attribute allow expression?	true
Where is the attribute stored?	configuration
Access Type	read-write
Is restarted required?	all-services
Stability Level	default
Raw DMR model	`{ "type" : { "TYPE_MODEL_VALUE" : "STRING" }, "description" : "The name of the attribute from the identity to map directly to roles.", "expressions-allowed" : true, "required" : true, "nillable" : false, "min-length" : 1, "max-length" : 2147483647, "stability" : "default", "access-type" : "read-write", "storage" : "configuration", "restart-required" : "all-services", "capability-reference" : null }`

Operations (2)

add - Add operation for the RoleDecoder

Request Parameter	Type	Required	Expressions Allowed	Default value	Description
attribute	STRING	true	true		The name of the attribute from the identity to map directly to roles.

Raw DMR model


{
    "operation-name" : "add",
    "description" : "Add operation for the RoleDecoder",
    "request-properties" : {"attribute" : {
        "type" : {
            "TYPE_MODEL_VALUE" : "STRING"
        },
        "description" : "The name of the attribute from the identity to map directly to roles.",
        "expressions-allowed" : true,
        "required" : true,
        "nillable" : false,
        "min-length" : 1,
        "max-length" : 2147483647,
        "stability" : "default"
    }},
    "reply-properties" : {},
    "stability" : "default",
    "read-only" : false,
    "restart-required" : "resource-services",
    "runtime-only" : false
}

remove - Remove operation for the RoleDecoder

Raw DMR model


{
    "operation-name" : "remove",
    "description" : "Remove operation for the RoleDecoder",
    "request-properties" : {},
    "reply-properties" : {},
    "stability" : "default",
    "read-only" : false,
    "restart-required" : "resource-services",
    "runtime-only" : false
}

Galleon Features

Galleon features are to be used when creating Galleon feature-packs.

subsystem.elytron.simple-role-decoder

        
<feature spec="subsystem.elytron.simple-role-decoder">
  <param name="simple-role-decoder" value="{resource name}"/>
  <param name="attribute" value="{value}"/>
<feature/>