Details
- 
        Type:
Monitor
 - 
        Status: Closed
 - 
            Priority:
 Major
                
             - 
            Resolution: Done
 - 
            Affects Version/s: None
 - 
            Fix Version/s: 2021
 - 
            Component/s: FIWARE-TECH-HELP
 
- 
                        HD-Chapter:Security
 - 
                        HD-Enabler:Wilma
 
Description
Created question in FIWARE Q/A platform on 02-05-2017 at 05:05
Please, ANSWER this question AT http://stackoverflow.com/questions/43729844/can-i-change-the-app-azf-domain-in-access-token-provided-by-horizon
Question:
Can I change the 'app_azf_domain' in access token provided by Horizon?
Description:
I'm Testing FIWARE security GEris.
But I have a problem when I use PDP (AuthzForce) with PEP Proxy (Wilma).
Now, Wilma and AuthzForce are working well in separately. However, when I request resource to Wilma with an access token, Wilma retrieve the wrong PDP domain because of its 'app_azf_domain' made by Horizon.
This is my access token:
  {
          "organizations":
          [
          ],
          "displayName": "user0",
          "roles":
          [
              
,
              
,
{ "name": "Family", "id": "0a4839c502054c1189a27e40f3189a55" }          ],
          "app_id": "a8e7489b62fc4ed9b8b6ee28d3dd91c8",
          "email": "user0@test.com",
          "id": "user0",
          "app_azf_domain": "iiJ8_xICEeeHFQJCrBEABA"
      }
Here is the problem.
I don't have the iiJ8_xICEeeHFQJCrBEABA domain!
So, can I change the app_azf_domain or make domain named iiJ8_xICEeeHFQJCrBEABA?
Activity
| Field | Original Value | New Value | 
|---|---|---|
| Component/s | FIWARE-TECH-HELP [ 10278 ] | 
| HD-Enabler | Wilma [ 10890 ] | |
| Description | 
                                                                 Created question in FIWARE Q/A platform on 02-05-2017 at 05:05 {color: red}Please, ANSWER this question AT{color} http://stackoverflow.com/questions/43729844/can-i-change-the-app-azf-domain-in-access-token-provided-by-horizon +Question:+ Can I change the 'app_azf_domain' in access token provided by Horizon? +Description:+ I'm Testing FIWARE security GEris. But I have a problem when I use PDP (AuthzForce) with PEP Proxy (Wilma). Now, Wilma and AuthzForce are working well in separately. However, when I request resource to Wilma with an access token, Wilma retrieve the wrong PDP domain because of its 'app_azf_domain' made by Horizon. This is my access token: { "organizations": [ ], "displayName": "user0", "roles": [ { "name": "End user", "id": "bb42b0b3f680469cbba5b2fb4e8c39f7" }, { "name": "Global manager", "id": "17c87423eb514fc1a8a7f0fecaa543f9" }, { "name": "Family", "id": "0a4839c502054c1189a27e40f3189a55" } ], "app_id": "a8e7489b62fc4ed9b8b6ee28d3dd91c8", "email": "user0@test.com", "id": "user0", "app_azf_domain": "iiJ8_xICEeeHFQJCrBEABA" } Here is the problem. I don't have the iiJ8_xICEeeHFQJCrBEABA domain! So, can I change the app_azf_domain or make domain named iiJ8_xICEeeHFQJCrBEABA?  | 
                
                                                               Created question in FIWARE Q/A platform on 02-05-2017 at 05:05
 {color: red}Please, ANSWER this question AT{color} http://stackoverflow.com/questions/43729844/can-i-change-the-app-azf-domain-in-access-token-provided-by-horizon +Question:+ Can I change the 'app_azf_domain' in access token provided by Horizon? +Description:+ I'm Testing FIWARE security GEris. But I have a problem when I use PDP (AuthzForce) with PEP Proxy (Wilma). Now, Wilma and AuthzForce are working well in separately. However, when I request resource to Wilma with an access token, Wilma retrieve the wrong PDP domain because of its 'app_azf_domain' made by Horizon. This is my access token: { "organizations": [ ], "displayName": "user0", "roles": [ { "name": "End user", "id": "bb42b0b3f680469cbba5b2fb4e8c39f7" }, { "name": "Global manager", "id": "17c87423eb514fc1a8a7f0fecaa543f9" }, { "name": "Family", "id": "0a4839c502054c1189a27e40f3189a55" } ], "app_id": "a8e7489b62fc4ed9b8b6ee28d3dd91c8", "email": "user0@test.com", "id": "user0", "app_azf_domain": "iiJ8_xICEeeHFQJCrBEABA" } Here is the problem. I don't have the iiJ8_xICEeeHFQJCrBEABA domain! So, can I change the app_azf_domain or make domain named iiJ8_xICEeeHFQJCrBEABA?  | 
                
| HD-Chapter | Security [ 10841 ] | 
| Assignee | Alvaro Alonso [ aalonsog ] | 
| Status | Open [ 1 ] | In Progress [ 3 ] | 
| Status | In Progress [ 3 ] | Answered [ 10104 ] | 
| Resolution | Done [ 10000 ] | |
| Status | Answered [ 10104 ] | Closed [ 6 ] | 
| Fix Version/s | 2021 [ 12600 ] |