4.2.9 Authorization Properties

MicroTx supports authorization across participant services and coordinator by propagating the JWT token in every request.

Under tmmConfiguration.authorization, use the authTokenPropagationEnabled field to control this function. Configure your identity providers to auto-refresh the expired access tokens at the coordinator.

Property	Description
enabled	Set this to true to enforce RBAC rules on the MicroTx coordinator API access. The first step in authorization is to enforce RBAC controls at the MicroTx coordinator. Caution: You must set this field to true in production environments.
authTokenPropagationEnabled	Set this to true to enable token propagation to ensure secure communication between the participant services and MicroTx. MicroTx performs the following actions: The MicroTx libraries propagate the authorization headers in every outgoing call to the MicroTx coordinator. The coordinator uses the propagated access token from incoming requests for the authorization checks. The MicroTx coordinator encrypts and stores the access token and refresh token details in the transaction store. These tokens are appended in the callback API calls from the MicroTx coordinator to the MicroTx library that is present in the participant application. When you enable token propagation, you must provide the details for the encryption keys under the encryption property in the values.yaml file.