Home

This Wiki contains the documentation of the OWASP Application Gateway (OAG). If you think that we missed something please add an issue on GitHub.

Table of Contents

• Wiki Home
  • Terms to understand
  • Configuration
    • Login Providers
    • Routes
    • Security Profiles
    • Session Behaviour
    • Tracing / Log Correlation
    • User Mapping
    • Key Management and Jwt-Signing algorithm
  • Custom code extensions
    • Logging
    • Tracing / Log Correlation
    • JwtSigner, JwkStore, KeyGenerator
    • Key Rotation
  • OAG API / endpoints
    • JWKS JWT signing public keys of OAG
    • JWT validation with Spring Security
  • Integrating with OAG
    • Identity validation
  • [How To's]
    • Change the TLS certificate used by OAG
    • Deploy OAG on Azure
    • OAG URLs and whitelisting required
    • Setup OAG for Development
    • Create new release

There is also a Swagger documentation of all OAG endpoints available online: https://app.swaggerhub.com/apis-docs/gianlucafrei/OAG/0.4#/