#
# Copyright IBM Corp. 2024, 2025
#
kind: IdentifyAndAuthorize
apiVersion: api.webmethods.io/beta
metadata:
  name: identify_and_authorize
  version: 1.0
  namespace: sample
  tags:
    - identify_and_authorize
spec:
  enabled: true 
  triggerPolicyViolation: true
  identificationType:
    or:
      apiKey:
        applicationLookup: 'global' #Other values are 'registered' & 'anonymous'
      hostNameAddress:
        applicationLookup: 'registered'
      httpBasicAuth:
        applicationLookup: 'registered'
      ipAddressRange:
        applicationLookup: 'registered'
      jwt:
        applicationLookup: 'registered'
      kerberosToken:
        applicationLookup: 'registered'
        servicePrincipalName: ''
        servicePrincipalPassword: ''
      oAuth2Token:
      openIdConnect:
        applicationLookup: 'registered' 
      sslCertificate:
        applicationLookup: 'registered'
      payloadElement:
        applicationLookup: 'registered'
        payLoadIdentifier:
          - jPath: '$.a.b'
          - xpath: '$.a.b'
            namespaces:
            - prefix: ''
              URI: ''
          - regex: '$.a.b'
      httpHeaders:
        applicationLookup: 'registered'