Skip to content

Commit 9cf591f

Browse files
committed
rename Configuration.md
1 parent 17dfd17 commit 9cf591f

9 files changed

+13
-13
lines changed

docs/Authentication.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
1-
This page describes how to authenticate requests to the COMS API. The [Authentication Modes](Configuration.md#authentication-modes) must be enabled in the COMS configuration.
1+
This page describes how to authenticate requests to the COMS API. The [Authentication Modes](Config.md#authentication-modes) must be enabled in the COMS configuration.
22

33
**Note:** The BC Gov Hosted COMS service only allows OIDC Authentication using JWT's issued by the [Pathfinder SSO `standard` keycloak realm](https://github.com/bcgov/sso-keycloak/wiki#standard-service)).
44

55
## OIDC Authentication
66

7-
With [OIDC mode](Configuration.md#oidc-keycloak) enabled, requests to the COMS API can be authenticated using a **User ID token** (JWT) issued by an OIDC authentication realm. The JWT should be added in an Authorization header (type `Bearer` token).
7+
With [OIDC mode](Config.md#oidc-keycloak) enabled, requests to the COMS API can be authenticated using a **User ID token** (JWT) issued by an OIDC authentication realm. The JWT should be added in an Authorization header (type `Bearer` token).
88

99
COMS will only accept JWT's issued by one OIDC realm (specified in the COMS config). JWT's are typically issued to an application and saved to a user's browser when he/she signs-in to a website through the [Authorization Code Flow](https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowAuth). Both the website (client app) and the instance of COMS must be [configured to use the same OIDC authentication realm](https://github.com/bcgov/common-object-management-service/blob/master/app/README.md#keycloak-variables) in order for the JWT to be valid.
1010

@@ -31,12 +31,12 @@ COMS uses the redirect flow by default because it avoids unnecessary network hop
3131

3232
## Basic Auth
3333

34-
If [Basic Auth Mode](Configuration.md#basic-auth) is enabled in your COMS instance, requests to the COMS API can be authenticated using an HTTP Authorization header (type `Basic`) containing the username and password configured in COMS.
34+
If [Basic Auth Mode](Config.md#basic-auth) is enabled in your COMS instance, requests to the COMS API can be authenticated using an HTTP Authorization header (type `Basic`) containing the username and password configured in COMS.
3535

3636
This mode offers more direct access for a 'service account' authorized in the scope of the application rather than for a specific user and by-passes the COMS object/bucket permission model.
3737

3838
Basic Auth mode is not available on the BC Gov hosted COMS service.
3939

4040
## Unauthenticated Mode
4141

42-
[Unauthenticated Mode](Configuration.md#unauthenticated-auth) configuration is generally recommended when you expect to run COMS in a highly secured network environment and do not have concerns about access control to objects as you have another application handling that already.
42+
[Unauthenticated Mode](Config.md#unauthenticated-auth) configuration is generally recommended when you expect to run COMS in a highly secured network environment and do not have concerns about access control to objects as you have another application handling that already.

docs/Buckets.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11

22
### Configuring Buckets
33

4-
- COMS is [configured with a 'default' bucket](Configuration.md#object-storage). Various object management endpoints will use this bucket if no `bucketId` parameter is provided. (**Note:** the default bucket fall-back behaviour is not available in the BC Gov Hosted COMS service.)
4+
- COMS is [configured with a 'default' bucket](Config.md#object-storage). Various object management endpoints will use this bucket if no `bucketId` parameter is provided. (**Note:** the default bucket fall-back behaviour is not available in the BC Gov Hosted COMS service.)
55

66
- Additional buckets can be added to the COMS system using the [createBucket](https://coms.api.gov.bc.ca/api/v1/docs#tag/Bucket/operation/createBucket) endpoint.
77

File renamed without changes.

docs/Hosted-Service-Onboarding.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ Some important aspects of the hosted service to consider:
1919

2020
### Privacy Controls
2121

22-
- The stricter [Privacy Controls](Configuration.md#privacy-controls) setting is enabled in the Hosted service (requires `READ` permission on bucket or object to discover or access the file and related data). This removes the abiility to search for objects that you don't have permissions for.
22+
- The stricter [Privacy Controls](Config.md#privacy-controls) setting is enabled in the Hosted service (requires `READ` permission on bucket or object to discover or access the file and related data). This removes the abiility to search for objects that you don't have permissions for.
2323

2424
### Additional features
2525

docs/Hosting-Considerations.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,6 @@ Feature Comparison:
1111
|   Database Custodians |   Us |   You
1212
|   Object Storage Custodians |   You |   You
1313
| &nbsp; Multi-bucket support | <ul><li>[x] </li></ul> | <ul><li>[x] </li></ul>
14-
| &nbsp; Strict [Privacy mode](Configuration.md#privacy-controls) | <ul><li>[x] </li></ul> | &nbsp; Configurable
15-
| &nbsp; [No-Auth mode](Configuration.md#unauthenticated)| <ul><li>[ ] </li></ul> | &nbsp; Configurable
14+
| &nbsp; Strict [Privacy mode](Config.md#privacy-controls) | <ul><li>[x] </li></ul> | &nbsp; Configurable
15+
| &nbsp; [No-Auth mode](Config.md#unauthenticated)| <ul><li>[ ] </li></ul> | &nbsp; Configurable
1616
| &nbsp; Custom configuration options | <ul><li>[ ] </li></ul> | <ul><li>[x] </li></ul>

docs/Metadata-Tag.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -82,4 +82,4 @@ The search endpoint also allows you to search objects with a specific key withou
8282

8383
These metadata and tag selectors can also be combined with other supported query parameters for [the search query endpoint](https://coms-dev.api.gov.bc.ca/api/v1/docs#tag/Object/operation/searchObjects).
8484

85-
Search results can also be scoped to a current user's permissions by enabling the COMS `PrivacyMask` [Privacy Configuration](Configuration#privacy-controls).
85+
Search results can also be scoped to a current user's permissions by enabling the COMS `PrivacyMask` [Privacy Configuration](Config#privacy-controls).

docs/Permissions.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -169,7 +169,7 @@ The above permission system will only be enforced if your instance of COMS is ru
169169
- Both `NOAUTH` and `BASICAUTH` modes will completely ignore permissions as they are not in scope of permission and security enforcement. This applies whether there is a backing database or not.
170170
- While running in `FULLAUTH` mode, if the client authenticates with a Basic authorization header, permissions are ignored as basic auth behaves as a system superuser and has "sudo" permissions to the COMS system. This applies whether there is a backing database or not.
171171

172-
For more specific information on COMS deployment modes and how they differ, please take a look at the COMS [Configuration guide](Configuration#authentication-modes).
172+
For more specific information on COMS deployment modes and how they differ, please take a look at the COMS [Configuration guide](Config#authentication-modes).
173173

174174
## Invite Links
175175

docs/Self-Hosting-COMS.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,9 @@ To compare with features with the BC Gov Hosted Service, see the [Hosting Consid
77
- Your application uses a custom OIDC realm or has custom integration requirements with other IDPs.
88
- You just need a user-friendly, REST-based S3 client 'wrapper'.
99
- You can configure COMS to suit your needs:
10-
- Refer to the different [Authentication Modes](Configuration#authentication-modes)
10+
- Refer to the different [Authentication Modes](Config#authentication-modes)
1111
- Use the default S3 bucket to use for all operations
12-
- Disable the strict [Privacy Controls](Configuration#privacy-controls) to make object metadata searchable
12+
- Disable the strict [Privacy Controls](Config#privacy-controls) to make object metadata searchable
1313
- You want to modify COMS source code before running (it's a REST API built with NodeJS and Express)
1414
- You want to be the custodians of the COMS database that contains user permissions and document metadata
1515

mkdocs.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ nav:
2626
- Overview: Architecture.md
2727
- Database: Architecture/#database-structure
2828
- Code Design: Architecture/#code-design
29-
- Configuration Options: Configuration.md
29+
- Configuration Options: Config.md
3030
- The Hosted Service:
3131
- Hosting Considerations: Hosting-Considerations.md
3232
- Hosted Service Architecture: Architecture-Hosted.md

0 commit comments

Comments
 (0)