GitHub-Spring
/
spring-authorization-server
mirror of https://github.com/spring-projects/spring-authorization-server.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Browse Source

Update How-to: Implement Multitenancy 

Issue gh-663
pull/1623/head
Joe Grandja 2 years ago
parent
320176a67b
commit
54cfdb9782
1 changed files with 15 additions and 17 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 32
      docs/modules/ROOT/pages/guides/how-to-multitenancy.adoc

32
docs/modules/ROOT/pages/guides/how-to-multitenancy.adoc
Unescape View File

@ -7,28 +7,12 @@
This guide shows how to customize Spring Authorization Server to support multiple issuers per host in a multi-tenant hosting configuration. This guide shows how to customize Spring Authorization Server to support multiple issuers per host in a multi-tenant hosting configuration.
The purpose of this guide is to demonstrate a general pattern for building multi-tenant capable components for Spring Authorization Server, which can also be applied to other components to suit your needs. The purpose of this guide is to demonstrate a general pattern for building multi-tenant capable components for Spring Authorization Server, which can also be applied to other components to suit your needs.
* xref:guides/how-to-multitenancy.adoc#multi-tenant-enable-multiple-issuers[Enable multiple issuers]
* xref:guides/how-to-multitenancy.adoc#multi-tenant-define-tenant-identifier[Define the tenant identifier] * xref:guides/how-to-multitenancy.adoc#multi-tenant-define-tenant-identifier[Define the tenant identifier]
* xref:guides/how-to-multitenancy.adoc#multi-tenant-enable-multiple-issuers[Enable multiple issuers]
* xref:guides/how-to-multitenancy.adoc#multi-tenant-create-component-registry[Create a component registry] * xref:guides/how-to-multitenancy.adoc#multi-tenant-create-component-registry[Create a component registry]
* xref:guides/how-to-multitenancy.adoc#multi-tenant-create-components[Create multi-tenant components] * xref:guides/how-to-multitenancy.adoc#multi-tenant-create-components[Create multi-tenant components]
* xref:guides/how-to-multitenancy.adoc#multi-tenant-add-tenants-dynamically[Add tenants dynamically] * xref:guides/how-to-multitenancy.adoc#multi-tenant-add-tenants-dynamically[Add tenants dynamically]
[[multi-tenant-enable-multiple-issuers]]
== Enable multiple issuers
Support for using multiple issuers per host is disabled by default.
To enable, add the following configuration:
.AuthorizationServerSettingsConfig
[source,java]
----
include::{examples-dir}/main/java/sample/multitenancy/AuthorizationServerSettingsConfig.java[]
----
<1> Set to `true` to allow usage of multiple issuers per host.
WARNING: Do not allow for any arbitrary issuer to be used. An allowlist of approved issuers should be enforced.
[[multi-tenant-define-tenant-identifier]] [[multi-tenant-define-tenant-identifier]]
== Define the tenant identifier == Define the tenant identifier
@ -53,6 +37,20 @@ NOTE: The base URL of the xref:protocol-endpoints.adoc[Protocol Endpoints] is th
Essentially, an issuer identifier with a path component represents the _"tenant identifier"_. Essentially, an issuer identifier with a path component represents the _"tenant identifier"_.
[[multi-tenant-enable-multiple-issuers]]
== Enable multiple issuers
Support for using multiple issuers per host is disabled by default.
To enable, add the following configuration:
.AuthorizationServerSettingsConfig
[source,java]
----
include::{examples-dir}/main/java/sample/multitenancy/AuthorizationServerSettingsConfig.java[]
----
<1> Set to `true` to allow usage of multiple issuers per host.
[[multi-tenant-create-component-registry]] [[multi-tenant-create-component-registry]]
== Create a component registry == Create a component registry

Write Preview
Loading…
Cancel
Save