From 21a867042e4e14688b8fabf0810725944886411c Mon Sep 17 00:00:00 2001 From: sjvans <30337871+sjvans@users.noreply.github.com> Date: Tue, 19 Sep 2023 14:44:21 +0200 Subject: [PATCH 1/4] Update authorization.md --- guides/authorization.md | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/guides/authorization.md b/guides/authorization.md index d64c2d657..5082d227e 100644 --- a/guides/authorization.md +++ b/guides/authorization.md @@ -112,11 +112,12 @@ For XSUAA or IAS authentication, the request user is attached with the pseudo ro Depending on the configured [authentication](#prerequisite-authentication) strategy, CAP derives a *default set* of user claims containing the user's name, tenant and attributes: -| CAP User Property | XSUAA JWT Property | IAS JWT Property | -|---------------------|----------------------------------|-------------------------| -| `$user` | `user_name` | `sub` | -| `$user.tenant` | `zid` | `zone_uuid` | -| `$user.` | `xs.user.attributes.` | All non-meta attributes | +| CAP User Property | XSUAA JWT Property | IAS JWT Property | +|---------------------|----------------------------------------------|-------------------------| +| `$user` | `user_name` | `sub` | +| `$user.id` | `user_id` for Java / `user_name` for Node.js | `scim_id` | +| `$user.tenant` | `zid` | `app_tid` | +| `$user.` | `xs.user.attributes.` | All non-meta attributes | ::: tip CAP does not make any assumptions on the presented claims given in the token. String values are copied as they are. From f1c1f2d012d91bb5ac93ccf5d4e08d9be36bfc6a Mon Sep 17 00:00:00 2001 From: sjvans <30337871+sjvans@users.noreply.github.com> Date: Thu, 9 Jan 2025 16:55:59 +0100 Subject: [PATCH 2/4] Update guides/security/authorization.md --- guides/security/authorization.md | 1 - 1 file changed, 1 deletion(-) diff --git a/guides/security/authorization.md b/guides/security/authorization.md index 521f7bf65..ea4a2172f 100644 --- a/guides/security/authorization.md +++ b/guides/security/authorization.md @@ -129,7 +129,6 @@ Depending on the configured [authentication](#prerequisite-authentication) strat | CAP User Property | XSUAA JWT Property | IAS JWT Property | |---------------------|----------------------------------------------|-------------------------| | `$user` | `user_name` | `sub` | -| `$user.id` | `user_id` for Java / `user_name` for Node.js | `scim_id` | | `$user.tenant` | `zid` | `app_tid` | | `$user.` | `xs.user.attributes.` | All non-meta attributes | From 0ceeff115c294d87e82b10e38c53917ebcf3f99e Mon Sep 17 00:00:00 2001 From: sjvans <30337871+sjvans@users.noreply.github.com> Date: Thu, 9 Jan 2025 16:57:00 +0100 Subject: [PATCH 3/4] Update guides/security/authorization.md --- guides/security/authorization.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/guides/security/authorization.md b/guides/security/authorization.md index ea4a2172f..f7c59be87 100644 --- a/guides/security/authorization.md +++ b/guides/security/authorization.md @@ -127,10 +127,10 @@ All technical clients that have access to the application's XSUAA or IAS service Depending on the configured [authentication](#prerequisite-authentication) strategy, CAP derives a *default set* of user claims containing the user's name, tenant and attributes: | CAP User Property | XSUAA JWT Property | IAS JWT Property | -|---------------------|----------------------------------------------|-------------------------| -| `$user` | `user_name` | `sub` | -| `$user.tenant` | `zid` | `app_tid` | -| `$user.` | `xs.user.attributes.` | All non-meta attributes | +|---------------------|----------------------------------|-------------------------| +| `$user` | `user_name` | `sub` | +| `$user.tenant` | `zid` | `app_tid` | +| `$user.` | `xs.user.attributes.` | All non-meta attributes | ::: tip CAP does not make any assumptions on the presented claims given in the token. String values are copied as they are. From d491a1725c96f5096496340a95e35a56ae60b5ae Mon Sep 17 00:00:00 2001 From: sjvans <30337871+sjvans@users.noreply.github.com> Date: Thu, 9 Jan 2025 16:57:27 +0100 Subject: [PATCH 4/4] Update guides/security/authorization.md --- guides/security/authorization.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/guides/security/authorization.md b/guides/security/authorization.md index f7c59be87..1d71930ec 100644 --- a/guides/security/authorization.md +++ b/guides/security/authorization.md @@ -126,7 +126,7 @@ All technical clients that have access to the application's XSUAA or IAS service Depending on the configured [authentication](#prerequisite-authentication) strategy, CAP derives a *default set* of user claims containing the user's name, tenant and attributes: -| CAP User Property | XSUAA JWT Property | IAS JWT Property | +| CAP User Property | XSUAA JWT Property | IAS JWT Property | |---------------------|----------------------------------|-------------------------| | `$user` | `user_name` | `sub` | | `$user.tenant` | `zid` | `app_tid` |