backends.http.@authentication

authentication

This optional clause defines how Radiator authenticates to the HTTP service. Supported authentication methods include:

Basic authentication:

authentication basic {
    # Both username and password parameter support
    username "<username>";
    password "<password>";
}

Bearer token authentication:

authentication bearer {
    token "<api_token>";
}

ApiKey authentication:

authentication header {
    name "X-API-KEY";
    value "<api_key>";
}

Oauth2 authentication:

authentication oauth2 {
    device-url "https://login.microsoftonline.com/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX/oauth2/v2.0/devicecode";
    token-url "https://login.microsoftonline.com/XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX/oauth2/v2.0/token";
    client "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX";
    scope "user.read groupmember.read.all openid profile";
    secret "client-secret-from-provider";
    username "service-account@example.com";
    password "service-account-password";
    timeout 5s;
    resource "https://graph.microsoft.com";
}

The authentication oauth2 block has the following optional parameters:

• secret - Client secret used when the OAuth2 provider requires confidential client authentication.
• device-url - Device authorization endpoint used for device-code based OAuth2 flows.
• username - Username for providers that require resource-owner credentials or other username-based token requests.
• password - Password paired with username for resource-owner credential style token requests.
• timeout - Request timeout for OAuth2 authentication calls.
• resource - Target resource or audience requested from providers that require an explicit resource parameter.