Cloud APIM - Otoroshi Biscuit Studio

The Otoroshi Biscuit Studio is set of Otoroshi plugins to use Biscuit Tokens into your Gateway.

Reference Documentation

The Otoroshi Biscuit Studio documentation is available here : https://cloud-apim.github.io/otoroshi-biscuit-studio/docs/overview

Installation

Follow this guide in order to get Otoroshi with the Biscuit Studio Extension.

Download Otoroshi

curl -L -o otoroshi.jar 'https://github.com/MAIF/otoroshi/releases/download/v17.11.0/otoroshi.jar'

Download the Biscuit Studio extension

You can download the latest release of otoroshi-biscuit-studio from https://github.com/cloud-apim/otoroshi-biscuit-studio/releases/latest

curl -L -o biscuit-studio-extension.jar 'https://github.com/cloud-apim/otoroshi-biscuit-studio/releases/download/1.7.0/otoroshi-biscuit-studio-1.7.0.jar'

Run Otoroshi with the Biscuit Studio Extension

java -cp "./biscuit-studio-extension.jar:./otoroshi.jar" -Dotoroshi.adminLogin=admin -Dotoroshi.adminPassword=password -Dotoroshi.storage=file play.core.server.ProdServerStart

Open http://otoroshi.oto.tools:8080/ in your browser

Default Otoroshi UI credentials : admin / password

Entities

• KeyPairs
• Verifiers
• Attenuators
• RBAC Policies
• Remote Facts Loader
• Forges

Plugins

• Verifier plugin
• Attenuator plugin
• Client Credentials plugin
• Biscuit to User plugin
• User to Biscuit plugin
• Biscuit to ApiKey Bridge Plugin
• Public Keys exposition

Biscuit Studio API Reference

API Reference

Funding

This project was funded by the French Government under the France 2030 plan, operated by Cap Digital and Bpifrance, and is supported by the European Union – NextGenerationEU.