Module | Rmobio::Auth |
In: |
auth.rb
|
Then construct the application domain pair, like: "cricket-wap-airtel". The filter then check the session attribute of "shared_session_auth", and compare with the application domain pair. If the session attribute doesn't match the application domain pair, it will call the getUserAccessAttribute from gateway. and store into the session. If the new accessAttribute match the app-domain pair, filter the chain. If no, redirect to auth application.
http://marge.mobiolabs.com/gateway/public/authorizationServices/getAccessAttributes?auth_identity=910000000000&domain=airtel
<?xml version="1.0" encoding="UTF-8"?>
<DomainAccessAttributes xmlns="http://mobio.net/ws/platform/schema/UserAccessAttributeService"> <authorizationId>910000000000</authorizationId> <domain>airtel</domain> <attribute>ROLE_USER</attribute> <attribute>Second Attribute</attribute> </DomainAccessAttributes>