Versions Compared

Old Version 3

changes.mady.by.user Sandor Molnar

Saved on

compared with

New Version 4

changes.mady.by.user Sandor Molnar

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • gateway_database_user - the username
  • gateway_database_password - the password

Database design

Image Added

As you can see, there are only 2 tables:

  • KNOX_TOKENS contains basic information about the generated token
  • KNOX_TOKEN_METADATA contains an arbitrary number of metadata information for the generated token. At the time of this document being written the following metadata exist:
    • passcode - this is the BASE-64 encoded value of the generated passcode token MAC. That is, the BASE-64 decoded value is a generated MAC.
    • userName - the logged-in user who generated the token
    • enabled - this is a boolean flag indicating that the given token is enabled or not (a disabled token cannot be used for authentication purposes)
    • comment - this is optional metadata, saved only if the user enters something in the Comment input field on the Token Generation page (see below)

Generating a token

Once you configured the knox.token.hash.key alias and optionally customized your token state service, you are all set to generate Knox tokens using the new Token Generation UI:

...