Security and authorization
←Transport and message encoding · Index↑ · APIs→
Authorization and transport security features described in the BCP-003 family and in IS-10 are used to secure and authorize this API.
The relevant documents can be found here:
- AMWA BCP-003-01 Secure Communication in NMOS Systems
- AMWA BCP-003-02 Authorization in NMOS Systems
- AMWA BCP-003-03 Certificate Provisioning in NMOS Systems
- AMWA IS-10 NMOS Authorization Specification
More specifically BCP-003-02 has a dedicated section for how JSON Web Tokens can be created for this API.
Note that the . character is specifically used as a delimiter in role paths included in the read/write claims, so it cannot be used inside object roles.