Forum Discussion

Daniel_W__13795's avatar
Daniel_W__13795
Icon for Nimbostratus rankNimbostratus
Jan 04, 2019

APM: OAUTH2 JWT Token with groups claim

Hello and happy new year 😉 We use APM as OAuth Authorization Server to create JWT token for apps. One of our customers wants to use the MicroProfile JWT(MP-JWT) for his application, that needs som...
BIG-IP Access Policy Manager (APM)
jwt
oauth 2.0
security
Rene_C_'s avatar
Rene_C_
Icon for Nimbostratus rankNimbostratus

Bump! Same question on my side, this is actually a mandatory feature.

 

Any possibility to do json arrays / lists in a claim?

 

Thanks!

 

Eric_Chen_12394's avatar
Eric_Chen_12394
Historic F5 Account
Feb 22, 2019

I believe this is possible (at least on <= 14.1) if you use an iRule event. Something like:

...
set mygroups [ ACCESS::session data get "session.mygroups" ]
append payload {,"mygroups":} "\[$mygroups\]"
...

This is adapted from the example at: https://devcentral.f5.com/wiki/iRules.ACCESS__oauth.ashx

In my AP I have a variable assign with an expression of:

return {"group1","group2"}