Security Profiles

In TAG, a Security Profile is a runtime configuration of an HTTP Security scheme. A Security Profile can be associated with a TAG Route, to enforce Authentication and Authorization when proxying an HTTP Request to an underlying HTTP service.

A Security Profile offers the flexibility of configuring different aspects to the scheme. This allows a complete control of all the Authentication and Authorization that takes place. For instance, it is possible to change the Authorization header name and use multiple security schemes at the same time.

The TAG provides four distinct Security Profiles:

  • Basic Profile

  • OAuth 2.0 Profile

  • HTTP Signature Profile

  • Bearer Profile