Step 2 - Update an application with a webtier policy

PATCH {{stripeUrl}}/admin/v1/Apps/{{appid}}

This is an example request that shows what a properly escaped WebTier Policy looks like in the request payload.

Once you have constructed your Web Tier Policy, you need to escape it before uploading it to Oracle Identity Cloud Service. At this time, you need to manually do this using a JSON-escaping website such as:

https://www.freeformatter.com/javascript-escape.html

Copy the output from the website and use it in the request payload for the value attribute.

Request Body

{"schemas"=>["urn:ietf:params:scim:api:messages:2.0:PatchOp"], "Operations"=>[{"op"=>"replace", "path"=>"isWebTierPolicy", "value"=>true}, {"op"=>"replace", "path"=>"urn:ietf:params:scim:schemas:oracle:idcs:extension:webTierPolicy:App:webTierPolicyJson", "value"=>"{\r\n  \"cloudgatePolicy\": {\r\n    \"version\"              : \"2.6\",\r\n    \"requireSecureCookies\" : true,\r\n    \"webtierPolicy\"        : [\r\n      {\r\n        \"policyName\"       : \"default\",\r\n        \"resourceFilters\"  : [\r\n            {\r\n                \"comment\"   : \"Public Filter\",\r\n                \"type\"      : \"regex\",\r\n                \"filter\"    : \".*\",\r\n                \"method\"    : \"public\"\r\n            }\r\n        ]\r\n      }\r\n    ]\r\n  }\r\n}"}]}

HEADERS

KeyDatatypeRequiredDescription
Content-Typestring
Authorizationstring
Datestring
x-content-sha256string