The OAuth2 configuration in PAS for OpenEdge involves these files:

  • oeablSecurity.properties —Contains property settings for JWT and OAuth2 validation operations and client-principal object generation.
    Note:

    There is a hierarchy of oeablSecurity.properties files, which exist in the following locations:

    • oe_install_dir /servers/pasoe/conf/
    • instance-name /conf/
    • instance-name /ablapps/<abl-app-name>/conf/
    • instance-name /<web-app-name>/WEB-INF/

    See Enable ABL application authentication for more information.

  • oeablSecurityJWT.csv —Contains the resource server’s URL access controls for JWT and OAuth2 client access based on the token's claim (claim) field
  • oauth2ResSvcClients.cfg —A file containing OAuth2 client authorization information for client ID (client_id) field (not required for standard JWT token validation )