DevOps Handler

This Handler is designed to retrieve vhost configuration from the website itself, not from LL:NG configuration. Rules and headers are set in a rules.json file stored at the website root directory (ie http://website/rules.json). This file looks like:

{
  "rules": {
    "^/admin": "$uid eq 'admin'",
    "default": "accept"
  },
  "headers": {
    "Auth-User": "$uid"
  }
}

If this file is not found, the default rule “accept” is applied and just “Auth-User” header is sent (Auth-User => $uid).

No specific configuration is required except that:

• you have to choose this specific handler (directly by using VHOSTTYPE environment variable or in VHost options)

• you can set the loopback URL needed by the DevOps handler to get /rules.json or use RULES_URL parameter to set JSON file path (see SSO as a Service). Default to http://127.0.0.1:<server-port>

Attention

Note that DevOps handler will not compile rules.json if Safe Jail is not enabled.

See SSO as a Service for more.