The ADMIN or USER_ADMIN can use a certificate in profile mapper JavaScript code to select the certificate for a given HTTP request.
For example:
const response = http.get(`https://mydomain.com/api/users/rights?userid=${user.id}`)
.clientCertificate("example_client_certificate")
.header('Ft-Calling-App', 'MyProfileMapperGetCall')
.header('Accept', 'application/json')
.header('Authorization', `Bearer ${attributes.access_token}`)
.send();
const json = JSON.parse(response);
user.groups = json.rights;
The Fluid Topics server presents a Transport Layer Security (TLS) client certificate when connecting to the host.
For security reasons, it is necessary to define an allowlist of authorized external hosts. Without this list, this example does not work. Get in touch with a Fluid Topics representative for more information.