vapi metadata authentication service: get

Retrieves authentication information about the service element corresponding to service_id.

Request:

HTTP request

GET https://{server}/rest/com/vmware/vapi/metadata/authentication/service/id:{service_id}

Path Parameters

Name Type Description
Required
service_id string Identifier of the service element.

Response:

HTTP Status Code: 200

Representations:

{
    "value"{
        "operations"[
            {
                "key""obj-103",
                "value"{
                    "schemes"[
                        {
                            "scheme""string",
                            "scheme_type""SESSIONLESS",
                            "session_manager""string"
                        },
                        {
                            "scheme""string",
                            "scheme_type""SESSIONLESS",
                            "session_manager""string"
                        }
                    ]
                }
            }
        ],
        "schemes"[
            {
                "scheme""string",
                "scheme_type""SESSIONLESS",
                "session_manager""string"
            },
            {
                "scheme""string",
                "scheme_type""SESSIONLESS",
                "session_manager""string"
            }
        ]
    }
}
<?xml version="1.0" ?>
<ns0:Get-Result xmlns:ns0="http://vmware.com/vapi/metadata/authentication/service" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
  <value>
    <schemes-array>
      <array-item>
        <scheme_type>SESSIONLESS</scheme_type>
        <scheme>string</scheme>
        <session_manager>string</session_manager>
      </array-item>
      <array-item>
        <scheme_type>SESSIONLESS</scheme_type>
        <scheme>string</scheme>
        <session_manager>string</session_manager>
      </array-item>
    </schemes-array>
    <operations-array>
      <array-item>
        <value>
          <schemes-array>
            <array-item>
              <scheme_type>SESSIONLESS</scheme_type>
              <scheme>string</scheme>
              <session_manager>string</session_manager>
            </array-item>
            <array-item>
              <scheme_type>SESSIONLESS</scheme_type>
              <scheme>string</scheme>
              <session_manager>string</session_manager>
            </array-item>
          </schemes-array>
        </value>
        <key>obj-103</key>
      </array-item>
    </operations-array>
  </value>
</ns0:Get-Result>

Response Type:

Name Type Description
bold = required
value service_info The vapi.metadata.authentication.service_info instance that corresponds to service_id.
value.schemes authentication_info[] List of authentication schemes to be used for all the operation elements contained in this service element. The authentication scheme specified on the package element corresponding to this service element is ignored.

value.schemes[].scheme_type string The type of the authentication scheme.

Provides enumeration values for the set of valid authentication scheme types. Value is one of:
SESSIONLESS: Indicates that the scheme is a session less authentication scheme, the user is authenticated on every operation. There is no explicit session establishment.
SESSION_AWARE: Indicates that the scheme is a session aware authentication scheme. It requires an explicit login before executing a operation and logout when a session terminates. A service might choose to have a session aware scheme if it wants to associate some state corresponding to the user until the user logs out or if it wants to mitigate the cost of authenticating the user on every operation.

value.schemes[].session_manager string In a session aware authentication scheme, a session manager is required that supports create, delete and keepAlive operations. The fully qualified service name of the session manager is provided in vapi.metadata.authentication.authentication_info.session_manager field. This service is responsible for handling sessions.

Optional. It is only relevant when scheme_type has value SESSION_AWARE. This field is optional and it is only relevant when the value of scheme_type is SESSION_AWARE.

value.schemes[].scheme string String identifier of the authentication scheme.

Following are the supported authentication schemes by the infrastructure:

  • The identifier com.vmware.vapi.std.security.saml_hok_token for SAML holder of key token based authentication mechanism.
  • The identifier com.vmware.vapi.std.security.bearer_token for SAML bearer token based authentication mechanism.
  • The identifier com.vmware.vapi.std.security.session_id for session based authentication mechanism.
  • The identifier com.vmware.vapi.std.security.user_pass for username and password based authentication mechanism.

value.operations list Information about all operation elements contained in this service element that contain authentication information. The key in the key/value pairs is the identifier of the operation element and the value in the key/value pairs is the authentication information for the operation element.

For an explanation of containment of authentication information within operation elements, see vapi.metadata.authentication.service.operation.

When clients pass a value of this structure as a parameter, the key in the field key/value pairs must be an identifier for the resource type: com.vmware.vapi.operation. When operations return a value of this structure as a result, the key in the field key/value pairs will be an identifier for the resource type: com.vmware.vapi.operation.List of {"key": string, "value": operation_info}

value.operations[].key string
value.operations[].value operation_info
value.operations[].value.schemes authentication_info[] List of authentication schemes used by an operation element. The authentication scheme specified on the service element corresponding to this operation element is ignored.

value.operations[].value.schemes[].scheme_type string The type of the authentication scheme.

Provides enumeration values for the set of valid authentication scheme types. Value is one of:
SESSIONLESS: Indicates that the scheme is a session less authentication scheme, the user is authenticated on every operation. There is no explicit session establishment.
SESSION_AWARE: Indicates that the scheme is a session aware authentication scheme. It requires an explicit login before executing a operation and logout when a session terminates. A service might choose to have a session aware scheme if it wants to associate some state corresponding to the user until the user logs out or if it wants to mitigate the cost of authenticating the user on every operation.

value.operations[].value.schemes[].session_manager string In a session aware authentication scheme, a session manager is required that supports create, delete and keepAlive operations. The fully qualified service name of the session manager is provided in vapi.metadata.authentication.authentication_info.session_manager field. This service is responsible for handling sessions.

Optional. It is only relevant when scheme_type has value SESSION_AWARE. This field is optional and it is only relevant when the value of scheme_type is SESSION_AWARE.

value.operations[].value.schemes[].scheme string String identifier of the authentication scheme.

Following are the supported authentication schemes by the infrastructure:

  • The identifier com.vmware.vapi.std.security.saml_hok_token for SAML holder of key token based authentication mechanism.
  • The identifier com.vmware.vapi.std.security.bearer_token for SAML bearer token based authentication mechanism.
  • The identifier com.vmware.vapi.std.security.session_id for session based authentication mechanism.
  • The identifier com.vmware.vapi.std.security.user_pass for username and password based authentication mechanism.

Errors:

HTTP Status Code Type Description
404 not_found if the service element associated with service_id does not have any authentication information.