{"type":"doc","content":[{"type":"panel","attrs":{"panelType":"info"},"content":[{"type":"paragraph","content":[{"text":"Responsibility","type":"text","marks":[{"type":"strong"}]},{"text":": enaio Consulting","type":"text"}]}]},{"type":"paragraph","content":[{"text":"Open and edit the gateway-prod.yml from the service manager config folder as shown in the following code sections. Please visit the official ","type":"text"},{"text":"enaio Documentation","type":"text","marks":[{"type":"link","attrs":{"href":"https://help.optimal-systems.com/enaio/v1110/admin/administrator/de/services/e_tsk_services-gateway.htm"}}]},{"text":" for details about konfiguration settings.","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"OAuth","type":"text"}]},{"type":"paragraph","content":[{"text":"Replace <<>>, <<>> and <<>> according to your situation.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"spring.security.oauth2.resourceserver.jwt.user-name-attribute","type":"text"},{"type":"hardBreak"},{"text":"The Entra ID user object is mapped to an enaio user by the specified Entra ID property. The available Entra ID properties depend on the URL used for the issuer-uri configuration. Depending on the creation of the enaio Ueer object, the corresponding Entra ID property must be used for the mapping! ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"spring.security.oauth2.client.issuer-uri","type":"text"},{"type":"hardBreak"},{"text":"By following the instructions for creating the apps, ","type":"text"},{"text":"https://sts.windows.net/","type":"text","marks":[{"type":"link","attrs":{"href":"https://sts.windows.net/"}}]},{"text":"... must be used. If the configuration differs, the value for issuer-uri can be determined by obtaining an access token for the enaio Gateway app. The iss property of the token determines the url to be used. ","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"<<>>","type":"text"},{"type":"hardBreak"},{"text":"Replace with the Id of your created enaioGatewayApp.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"<<>>","type":"text"},{"type":"hardBreak"},{"text":"Replace with the Secret of your created enaioGatewayApp.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"<<>>","type":"text"},{"type":"hardBreak"},{"text":"Replace with your Microsoft Tenant ID.","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"gateway-prod.yml excerpt (oauth)","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"yml"},"content":[{"text":"spring:\n security:\n oauth2:\n resourceserver:\n jwt:\n issuer-uri: https://sts.windows.net/<<>>/ #fallback if login.microsoftonline.com not working, issuer-uri can be extracted from iss-attribute of the enaio gateway app access token\n #issuer-uri: https://login.microsoftonline.com/<<>>/v2.0 \n client: \n registration:\n azure:\n provider: azure\n client-id: <<>>\n client-secret: <<>>\n scope: openid\n provider:\n azure:\n issuer-uri: ${spring.security.oauth2.resourceserver.jwt.issuer-uri}\n\ngateway:\n oauth2:\n user-name-attribute: upn, oid #for issuer-uri sts.windows.net, available properties: upn, unique_name, name, oid\n #user-name-attribute: name, oid #for issuer-uri login.microsoftonline.com, available properties: name, oid\n endpoints:\n exposed: '/colab/**,/msteamsactions/**'","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Routing","type":"text"}]},{"type":"paragraph","content":[{"text":"In order to address the dynamics service you need to setup suitable routes in the configuration. The following configuration can be used as a guide for project customizing.","type":"text"}]},{"type":"paragraph","content":[{"text":"gateway-prod.yml excerpt (route examples)","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"yml"},"content":[{"text":"spring:\n cloud:\n gateway:\n routes:\n\n #Address Dynamics Service Root as External Service\n - id: dynamics-service\n uri: http://localhost:7336/dynamics-service\n predicates:\n - Path=/dynamics-service/**\n #- Path=/dynamics-service-custom/** #used path differs from service path\n filters:\n #- RewritePath=/dynamics-service/?(?.*), /dynamics-service/$\\{segment} #not requiered since id NOT equals predicates.path\n #- RewritePath=/dynamics-service-custom/?(?.*), /dynamics-service/$\\{segment} #requiered if id NOT equals predicates.path\n\n #Address Dynamics Service Root as Micro Service\n - id: dynamics-service\n uri: lb://dynamics-service\n predicates:\n - Path=/dynamics-service/**\n #- Path=/dynamics-service-custom/** #used path differs from service path\n filters:\n #- RewritePath=/dynamics-service?(?.*), /dynamics-service/$\\{segment} #notrequiered since id NOT equals predicates.path\n #- RewritePath=/dynamics-service-custom/?(?.*), /dynamics-service/$\\{segment} #requiered if id NOT equals predicates.path\n\n #Address Dynamics Service Subfunction (Ping)\n - id: dynamics-service-ping\n uri: lb://dynamics-service\n predicates:\n - Path=/dynamics-service-ping/**\n filters:\n - RewritePath=/dynamics-service-ping?(?.*), /dynamics-service/ping\n \n #Address Dynamics Service Subfunction (sessionGUID)\n - id: dynamics-service-session \n uri: lb://dynamics-service\n predicates:\n - Path=/dynamics-service-session/**\n filters:\n - RewritePath=/dynamics-service-session?(?.*), /dynamics-service/sessionGUID\n\n #Dynamics Dynamics Service Subfunction (jSessionGUID)\n - id: dynamics-service-jsession\n uri: lb://dynamics-service\n predicates:\n - Path=/dynamics-service-jsession/**\n filters:\n - RewritePath=/dynamics-service-jsession?(?.*), /dynamics-service/jSessionGUID","type":"text"}]},{"type":"paragraph","content":[{"text":"Default configuration using version 2 of the 'Dynamics Service'.","type":"text"}]},{"type":"paragraph","content":[{"text":"gateway-prod.yml excerpt (Dynamics Service 2 routes)","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"yml"},"content":[{"text":"spring:\n cloud:\n gateway:\n routes:\n #Address root (as internal Micro Service)\n - id: dynamics-service\n uri: lb://dynamics-service\n predicates:\n - Path=/dynamics-service/**\n #Address root (as internal Micro Service)\n - id: dns\n uri: lb://dynamics-service\n predicates:\n - Path=/dns/** #used path differs from service path\n filters:\n - RewritePath=/dns/?(?.*), /dynamics-service/$\\{segment} #requiered since service id NOT equals predicates.path\n #Address sessionGUID (as internal Micro Service)\n - id: dns-session\n uri: lb://dynamics-service\n predicates:\n - Path=/dns-session/**\n filters:\n - RewritePath=/dns-session/?(?.*), /dynamics-service/sessionGUID\n #Address jSessionGUID (as internal Micro Service)\n - id: dns-jsession\n uri: lb://dynamics-service\n predicates:\n - Path=/dns-jsession/**\n filters:\n - RewritePath=/dns-jsession/?(?.*), /dynamics-service/jSessionGUID\n #Address Subfunction (as internal Micro Service)\n - id: dns-svc\n uri: lb://dynamics-service\n predicates:\n - Path=/dns-svc/**\n filters:\n - RewritePath=/dns-svc/?(?.*), /dynamics-service/dynamics2enaio/$\\{segment}","type":"text"}]},{"type":"paragraph","content":[{"text":"Default configuration using version 3 of the 'Dynamics Service'.","type":"text"}]},{"type":"paragraph","content":[{"text":"gateway-prod.yml excerpt (Dynamics Service 3 routes)","type":"text","marks":[{"type":"strong"}]}]},{"type":"codeBlock","attrs":{"language":"yml"},"content":[{"text":"spring:\n cloud:\n gateway:\n routes:\n #Address root (as External Service)\n - id: dns3\n uri: http://localhost:7337/dynamics-service\n predicates:\n - Path=/dns3/** #used path differs from service path\n filters:\n - RewritePath=/dns3/?(?.*), /dynamicsservice/$\\{segment}\n #Address enaiosessionguid (as External Service)\n - id: dns3-session\n uri: http://localhost:7337/dynamics-service\n predicates:\n - Path=/dns3-session/**\n filters:\n - RewritePath=/dns3-session/?(?.*), /dynamics-service/enaiosessionguid\n #Address enaiojsessionguid (as External Service)\n - id: dns3-jsession\n uri: http://localhost:7337/dynamics-service\n predicates:\n - Path=/dns3-jsession/**\n filters:\n - RewritePath=/dns3-jsession/?(?.*), /dynamics-service/enaiojsessionguid\n #Address Subfunction (as External Service)\n - id: dns3-svc\n uri: http://localhost:7337/dynamics-service\n predicates:\n - Path=/dns3-svc/**\n filters:\n - RewritePath=/dns3-svc/?(?.*), /dynamics-service/$\\{segment}","type":"text"}]},{"type":"paragraph"}],"version":1}

Browser not supported