Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
languagejs
titleRate Limit Group Example
{
	"id":"f83bb6fd-4252-4526-8bd0-49d973a41603",
	"name":"MyMobileApplication",
	"description":"The best of our applications",
	"partner_id":"15ed2323-2913-4f09-b1c2-4694c7c50de5",
	"client_id":"1a32f78d-83dc-488b-9e22-50b02e9328d1",
	"client_secret":"f2add5d3-e67a-415f-8163-a751d7566047",
	"apikeys": [
		"1b119b37-e43b-46e3-9343-7cf26cec17ef"
	],
	"allowed_scopes": [
		"openid","email","profile"
	],
	"valid_grant_types": [
		"implicit","authorization_code","hybrid","client_credentials"
	],
	"developers": [
	],
	"accesstoken_type":"UUID",
	"allowed_uris": [
		"/redir1"
	],
	"allowed_logout_uris": [
		"/logoff1"
	],
	"accesstoken_valid_seconds":60,
	"refreshtoken_validity_seconds":60,
	"maximum_idtoken_expiration_minutes":12,
	"confidential": false,
	"refreshtoken_invalidate_on_use": false,
	"refreshtoken_issue_new_on_use": false,
	"subscriptions": {
		"c819724f-69e3-46bf-86d9-b15e59d1ffb0":"4841e9f5-2af5-4e42-ac1d-6b19be04c446"
	},
    "pending_subscriptions": [
        {
            "apiid": "73a02c77-c856-49fa-a1b0-be31ee8d808a",
            "subscriptionplan_id": "4841e9f5-2af5-4e42-ac1d-6b19be04c446",
            "comment_requestor": "Please grant me access",
            "comment_response": "Certainly, enjoy",
            "unread": false,
            "action_id": "xxxxxx",
            "approved": true,
            "rejected": false
        }
    ],
	"certificates": [
		{
			"subject": "C=IO,OU=Ceptor,CN=Person",
			"issuer": "C=IO,OU=Ceptor,CN=CA 1",
			"certificate": "MIIDVDCCAjygAwIBAgIHA9bbH0Y2ADANxxxxxxx ..... ==",
			"developer": null,
			"certificate.allow.expired": false,
			"certificate.skip.chain.checks": false
		}
	]
}

...

NameTypeDescription
idstringUnique ID of this application.
namestringName of this API Partner application
descriptionstringDescription of the API Partner application
partner_idstringUnique ID of the application this partner is linked to
client_idstringThe client ID that can authenticate this application
client_secretstringThe secret for the provided client id mentioned above
confidentialbooleanIf true, client is confidential and client_secret must always be used
refreshtoken_invalidate_on_usebooleanIf true, a refresh_token is invalidated when used, meaning it can be used only a single time
refreshtoken_issue_new_on_usebooleanIf true, a new refresh_token is issued when the old one is used

apikeys

array of stringsList of API keys that can be used to authenticate this application if allowed
allowed_scopesarray of stringsSpecifies which scopes the application is allowed to request.

valid_grant_types

array of stringsThe allowed grant types that this application is allowed to use

accesstoken_type

string

The type of OAuth2 access token can be either UUID, or JWT - if it is a UUID, it can be used as a key - e.g. a bearer token, which is presented during authentication.

If JWT, the access token is a signed JWT (JSON Web Token) containing information about the user

allowed_uris

array of stringsOAuth2 redirect URIs for the application

allowed_logout_uris

array of stringsOAuth2 Logout URIs which are allowed for this application

accesstoken_valid_seconds

numberIf set, overrides the time an issued OAuth2 access token is valid for

refreshtoken_validity_seconds

numberIf set, this is the number of seconds that an OAuth2 access token is valid for.

maximum_idtoken_expiration_minutes

numberIf set, this is the number of minutes that an issued ID token is valid for

subscriptions

array of JSON objectsList of JSON Objects with API unique ID as key and subscription plan unique ID as value.
developersarray of JSON ObjectsList of JSON objects with developers
  • id
stringThe UID of the developer
  • role
stringThe developer role for this application (OWNER, DEVELOPER, READ_ONLY)
certificatesarray of JSON ObjectsList of JSON objects with SSL/TLS client certificate information
  • subject
stringCertificate Subject DN
  • issuer
stringCertificate Issuer DN
  • certificate
stringcertificate, DER encoded and base64 encoded. Subject and Issuer MUST match the certificate.
  • developer
stringID of developer who added the certificate in developer portal, if any.
  • certificate.allow.expired
booleanTrue if expired certificate is allowed
  • certificate.skip.chain.checks
booleanTrue if certificate chain, revocation etc. check should be skipped and request trusted if client cert matches this cert.

pending_subscriptions

array of JSON objectsList of JSON objects with pending subscription requests
  • apiid
stringAPI ID
  • subscriptionplan_id
stringSubscription Plan ID
  • comment_requestor
stringComment made by the requestor when requesting the subscription
  • comment_response
stringComment made by the approver/rejector
  • unread
booleanTrue if unread by API Partner
  • action_id
stringID of corresponding Action created for this request
  • approved
booleanTrue, if request has been approved by administrator
  • rejected
booleanTrue, if request has been rejected by administrator

...