The path to the asset being accessed.

asset.path

Expression: asset.path

Where the request was for a Task in the organization’s shared project. 

Result: /ExampleOrg/shared/TestTask

The load balancer for the Snaplex JCC node or FeedMaster node.

When configuring an OAuth policy callback URL, you might want to reference the Snaplex load balancer set for your API Version or Proxy.

• snaplex.jccLoadbalancer

• snaplex.feedMasterLoadbalancer

Expression:

Result: 

The IP address of the client making the request as a string. Note that this can be an IPv4 or IPv6 address.

request.remoteAddr

Expression: request.remoteAddr

Where the request was made from the IP address 10.0.1.2

Result: 10.0.1.2

The identifier for the user making the request as a string.

request.remoteUser

Expression: request.remoteUser

Where the request was made by the user sally@example.com:

Result: sally@example.com

Checks if the user is in the given role.

request.isUserInRole(role)

Expression: request.isUserInRole('admin')

Where the request was made by a user that has the admin role.

Result: true

The HTTP method used for this request.

request.method

Expression: request.method == 'POST'

Where the request is a POST

Result: true

The full path of the request.

request.uri.path

Expression: request.uri.path

Result: /api/1/rest/feed/example/shared/HelloTask

The query parameters for this request.

request.uri.query

Expression: request.uri.query

Result: $name

An object that contains the headers from the request. The property names in the object correspond to the HTTP header names that were in the request and lookups are case-insensitive. The values of the properties are lists of strings where each element comes from one instance of a header.

request.headers

Expression: request.headers['Content-Type']

Where the request was made with the Content-Type header set to application/json

Result: ["application/json"]

An object that contains the internal properties associated with the request.

When configuring an OAuth policy scope, you might want to list the Snaplexes. You can use the following functions to do so:

• For JCC node in a Snaplex: snaplex.jccLoadbalancer

• For the FeedMaster node in a Snaplex: snaplex.feedMasterLoadbalancer

request.properties

Expression:

Result: 

An object that contains all existing roles.

• Policies that run before the Authorize by Role policy return an empty list.

• Policies that run after the Authorize by Role policy return the user roles in a list of strings returned from the expression request.roles.

Responses: [anonymous] or [admins, members]

request.roles

Expression: request.roles

Result: admins, members