Skip to content

OWASP-Application-Gateway

Documentation
Swagger
OWASP

Sidebar Navigation

Getting Started

Overview
Request handling
Glossary

Configuration

Overview
Configuration File
CSRF Protection
Login Providers
Routes
Security Profiles
Session Behaviour
Tracing, Correlation-Logging
User Mapping
Key management and JWT signer
Configure TLS and the certificate used by OAG

Custom code extensions

Overview
Logging
Tracing, Log correlation
JWT Signer and custom signature type
Key Rotation
CSRF Protection

OAG API endpoints

API Endpoints
Jwks Endpoint (public signing key)

Integrating with OAG

Overview
User identity validation
Token validation (Spring/Java)
URL Whitelisting / OAG provided URL

How To's

Deploy to Azure
Developer Setup
Update Documentation
Create a new Release

On this page

Overview

This section introduces the OAG API and endpoints provided for clients and / or administration.

Pager

Previous pageKey Rotation

Next pageJwks Endpoint (public signing key)

Open-source Apache 2 Licensed | Powered by a lot of love ❤️ (and code)

Copyright © OAG Contributors