Skip to content

docs(OAuth feature): create documentation for UMA features#14238

Open
palaksrivastava2311 wants to merge 4 commits into
JanssenProject:mainfrom
palaksrivastava2311:main
Open

docs(OAuth feature): create documentation for UMA features#14238
palaksrivastava2311 wants to merge 4 commits into
JanssenProject:mainfrom
palaksrivastava2311:main

Conversation

@palaksrivastava2311

@palaksrivastava2311 palaksrivastava2311 commented Jun 8, 2026

Copy link
Copy Markdown

Prepare


Description

Target issue

closes #4860

Implementation Details


Test and Document the changes

  • Static code analysis has been run locally and issues have been fixed
  • Relevant unit and integration tests have been added/updated
  • [ x ] Relevant documentation has been updated if any (i.e. user guides, installation and configuration guides, technical design docs etc)

Please check the below before submitting your PR. The PR will not be merged if there are no commits that start with docs: to indicate documentation changes or if the below checklist is not selected.

  • I confirm that there is no impact on the docs due to the code changes in this PR.

Summary by CodeRabbit

  • Documentation
    • Added documentation for the UMA Claims Gathering Endpoint, including interactive flow details and configuration instructions.
    • Added documentation for the UMA RPT Endpoint with token lifetime settings and configuration guidance.

Added documentation for the UMA RPT Endpoint, including overview, server properties, and configuration instructions.

Signed-off-by: palaksrivastava2311 <palaksri8135@gmail.com>
Added documentation for the UMA Claims Gathering Endpoint, including overview, script details, and configuration steps.

Signed-off-by: palaksrivastava2311 <palaksri8135@gmail.com>
@mo-auto

mo-auto commented Jun 8, 2026

Copy link
Copy Markdown
Member

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@coderabbitai

coderabbitai Bot commented Jun 8, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

📝 Walkthrough

Walkthrough

This PR adds two new documentation files that describe UMA (User-Managed Access) flow endpoints for the Janssen authentication server. The Claims Gathering Endpoint documentation covers the interactive web flow for collecting user claims, including script configuration and feature flag setup. The RPT Endpoint documentation describes the Requesting Party Token endpoint, including configurable properties and TUI-based configuration instructions.

Changes

UMA Endpoint Documentation

Layer / File(s) Summary
UMA Claims Gathering Endpoint documentation
docs/script-catalog/uma_rpt_claims/uma-claims-gathering.md
Introduces documentation for the claims-gathering web/API flow, the Janssen interception script type ("UMA Claims Gathering (Web Flow)"), the umaClaimsGatheringEnabled feature flag, and step-by-step TUI instructions for enabling and configuring the script.
UMA RPT Endpoint documentation
docs/script-catalog/uma_rpt_claims/uma-rpt-endpoint.md
Introduces documentation for the UMA RPT endpoint, including overview, UMA 2.0 specification references, configurable properties (umaRptLifetime, umaRptAsJwt), and TUI/command-line configuration instructions.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Suggested labels

area-documentation, comp-docs, kind-feature

Suggested reviewers

  • manojs1978
  • yuriyz
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main change—creating documentation for UMA features—and is concise and clear.
Description check ✅ Passed The description follows the template with target issue (#4860) and indicates documentation has been updated. However, Implementation Details section is empty and code review checklist items are mostly unchecked.
Linked Issues check ✅ Passed The PR adds documentation for two UMA endpoints (RPT Endpoint and Claims Gathering Endpoint) with Janssen-specific configuration instructions and feature flags, addressing the main requirements of issue #4860.
Out of Scope Changes check ✅ Passed All changes are documentation files focused on UMA features as specified in the linked issue; no unrelated modifications are present.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@coderabbitai coderabbitai Bot added area-documentation Documentation needs to change as part of issue or PR kind-feature Issue or PR is a new feature request comp-docs Touching folder /docs labels Jun 8, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 4

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@docs/script-catalog/uma_rpt_claims/uma-claims-gathering.md`:
- Line 4: Summary: Replace the redundant phrase "API interface" with "API" in
the UMA Claims Gathering Endpoint description. Locate the sentence starting "The
UMA Claims Gathering Endpoint provides an interactive web flow or API
interface..." and edit it to read "...interactive web flow or API..." so that
"API interface" is shortened to "API" for clarity and concision.
- Line 3: Add a blank line immediately after each Markdown heading in this
document to satisfy MD022; specifically insert an empty line after "## Overview"
and after the other section headings in this file so every heading is followed
by a blank line.
- Line 1: The document titled "UMA Claims Gathering Endpoint Documentation" was
added in the wrong section; move or mirror this markdown into the repository
location specified by issue `#4860` (the auth-server UMA claims-gathering IA path)
so the issue can be closed; when moving, update the document
front-matter/heading and any internal links or table-of-contents references to
reflect the new location, and keep or remove the original copy in script-catalog
per repo conventions (or add a redirect note) to avoid broken links.

In `@docs/script-catalog/uma_rpt_claims/uma-rpt-endpoint.md`:
- Line 3: Add a blank line after each Markdown heading to satisfy markdownlint
MD022: insert an empty line immediately following the "## Overview" heading and
likewise after the other headings referenced (the headings at the other reported
locations) so every heading is followed by a single blank line.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 865de0b2-a980-44fe-816c-b04e31c627dc

📥 Commits

Reviewing files that changed from the base of the PR and between ed4c431 and 0448f17.

📒 Files selected for processing (2)
  • docs/script-catalog/uma_rpt_claims/uma-claims-gathering.md
  • docs/script-catalog/uma_rpt_claims/uma-rpt-endpoint.md

@@ -0,0 +1,20 @@
# UMA Claims Gathering Endpoint Documentation

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major | 🏗️ Heavy lift

Document location does not match linked issue acceptance path.

Issue #4860 asks for this content under docs/janssen-server/auth-server/uma-features/claims-gathering-endpoint/, but this PR adds it under docs/script-catalog/uma_rpt_claims/. Please move or mirror it in the required path so the issue is actually closed with the expected IA.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/script-catalog/uma_rpt_claims/uma-claims-gathering.md` at line 1, The
document titled "UMA Claims Gathering Endpoint Documentation" was added in the
wrong section; move or mirror this markdown into the repository location
specified by issue `#4860` (the auth-server UMA claims-gathering IA path) so the
issue can be closed; when moving, update the document front-matter/heading and
any internal links or table-of-contents references to reflect the new location,
and keep or remove the original copy in script-catalog per repo conventions (or
add a redirect note) to avoid broken links.

@@ -0,0 +1,20 @@
# UMA Claims Gathering Endpoint Documentation

## Overview

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Fix heading spacing to satisfy markdownlint MD022.

Add blank lines after these headings to clear the reported lint warnings.

Also applies to: 8-8, 15-15

🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 3-3: Headings should be surrounded by blank lines
Expected: 1; Actual: 0; Below

(MD022, blanks-around-headings)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/script-catalog/uma_rpt_claims/uma-claims-gathering.md` at line 3, Add a
blank line immediately after each Markdown heading in this document to satisfy
MD022; specifically insert an empty line after "## Overview" and after the other
section headings in this file so every heading is followed by a blank line.

Source: Linters/SAST tools

# UMA Claims Gathering Endpoint Documentation

## Overview
The UMA Claims Gathering Endpoint provides an interactive web flow or API interface where the authorization server interacts with the requesting party to gather claims required by the relevant UMA scopes and policies.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Use “API” instead of “API interface”.

“API interface” is redundant; use “API”.

🧰 Tools
🪛 LanguageTool

[style] ~4-~4: This phrase is redundant (‘I’ stands for ‘interface’). Use simply “API”.
Context: ...int provides an interactive web flow or API interface where the authorization server interact...

(ACRONYM_TAUTOLOGY)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/script-catalog/uma_rpt_claims/uma-claims-gathering.md` at line 4,
Summary: Replace the redundant phrase "API interface" with "API" in the UMA
Claims Gathering Endpoint description. Locate the sentence starting "The UMA
Claims Gathering Endpoint provides an interactive web flow or API interface..."
and edit it to read "...interactive web flow or API..." so that "API interface"
is shortened to "API" for clarity and concision.

Source: Linters/SAST tools

@@ -0,0 +1,25 @@
# UMA RPT Endpoint Documentation

## Overview

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor | ⚡ Quick win

Fix heading spacing to satisfy markdownlint MD022.

Add blank lines after these headings to resolve the lint warnings.

Also applies to: 8-8, 18-18, 21-21

🧰 Tools
🪛 markdownlint-cli2 (0.22.1)

[warning] 3-3: Headings should be surrounded by blank lines
Expected: 1; Actual: 0; Below

(MD022, blanks-around-headings)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@docs/script-catalog/uma_rpt_claims/uma-rpt-endpoint.md` at line 3, Add a
blank line after each Markdown heading to satisfy markdownlint MD022: insert an
empty line immediately following the "## Overview" heading and likewise after
the other headings referenced (the headings at the other reported locations) so
every heading is followed by a single blank line.

Source: Linters/SAST tools

@ossdhaval ossdhaval left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@palaksrivastava2311 I have made a few review comments. I request you to address these comments for both the documents.

* **Recommended Value:** `false` (or set to `true` if JWT-based inspection is desired by the resource server).

## How to Configure via TUI / Command Line
Administrators can modify these configurations using the Janssen Text User Interface (TUI) or the command-line utility.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I suggest to provide links to TUI and CMD documentation.

## Janssen Server Properties & Configuration
The RPT Endpoint behavior is controlled via specific configuration keys within the Janssen Auth Server configuration properties.

* **Property Name:** `umaRptLifetime`

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It'll be better to link properties to it's listing. Like what we have done here. Reduces duplication of the information.

### Using Janssen TUI:
1. Launch the Janssen Text UI (`jans-cli` or `jans-tui`).
2. Navigate to **Auth Server Settings** > **UMA Configurations**.
3. Locate the `RPT Lifetime` or `RPT as JWT` fields to update your preferences.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@palaksrivastava2311 Could you please confirm that this path exists in TUI. TUI navigation has gone through some changes.

@ossdhaval

Copy link
Copy Markdown
Contributor

Hi @palaksrivastava2311

Thank you 🤝 for taking the time and submit this PR contribution.

I have reviewed the changes and have added comments that need changes. I also see valid AI review comments on this PR.

Once you have addressed the comments, we should be good to merge. 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area-documentation Documentation needs to change as part of issue or PR comp-docs Touching folder /docs kind-feature Issue or PR is a new feature request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

docs(OAuth feature): create documentation for UMA features

3 participants