3.16.1 Enabling Script

TSAMOIDC_enable.sh updates tsam.war inside tsam_22c.ear to enable OIDC, requires zip and unzip, and looks for oidcAuth.properties via -oidcPropertiesFile. It prompts interactively for any missing required values (issuer, clientId, clientSecret, redirectUrl), hides clientSecret input, and defaults inactivityTimeout to 60 minutes when omitted.

Script Name: TSAMOIDC_enable.sh

Description: Enables OpenID Connect authentication for the TSAM EAR by updating tsam.war with OIDC configuration files and properties.

Usage:

./TSAMOIDC_enable.sh -oidcPropertiesFile <path to oidcAuth.properties>
  • Requires both zip and unzip on the PATH
  • Expects tsam_22c.ear in the same directory as the script by default
  • Creates a temporary workspace for unpacking/repacking the EAR and WAR
  • Requires an oidcAuth.properties file as input.
  • Missing required values are prompted for interactively.

Required Properties:

The following are the Required properties in oidcAuth.properties:

issuer

clientId

clientSecret

redirectUrl

Note:

If a required property is missing or blank, then the script prompts for it interactively. clientSecret input is hidden.

Optional Properties

The inactivityTimeout is the Optional property in oidcAuth.properties
  • inactivityTimeout is in minutes.
  • If omitted, then the script adds inactivityTimeout=60

Note:

If present, then inactivityTimeout must be a positive integer.

Example

issuer=https://idp.example.com/realms/tsam
  clientId=tsam-app
  clientSecret=<secret>
  redirectUrl=https://tsam.example.com:7002/tsam/faces/console/index.jspx
  inactivityTimeout=90