...
"cat_idp": cat IdP entityIDidentifier (integer, required); e.g. 7088,
"country": country code (string, required); e.g. "RO",
"geo": [
"lat": latitude (float, required),
"lon": longitude (float, required),
] (required),
id: cat_id (string, required); e.g. "cat_7088",
name: the name of the organisation to be shown in the UI (string, required); e.g. SURF,
profiles: [
"authorization_endpoint": The authorization endpoint in case OAuth is used (string, optional, default=""); e.g. "https://example.com/oauth/authorize/",
"default": If this profile is the default profile (bool, optional, default=False); e.g. True,
"eapconfig_endpoint": The endpoint to obtain the EAP config (string, required); e.g. "https://example.com/api/eap-config/",
"id": The identifier of the profile (string, required); e.g. "letswifi_cat_1337",
"name": The name of the profile to be shown in the UI (string, required); e.g. "Demo Server",
"redirect": The redirect URI to show ot the user (string, optional, default=""); e.g. "https://example.com/instructions-eduroam",
"oauth": Whether or not OAuth is enabled. If missing, OAuth is not enabled (bool, optional when redirect is present, default=False); e.g. true,
"token_endpoint": The endpoint to get OAuth tokens from (string, optional, default=""); e.g. "https://example.com/oauth/token/",
] (required),
...
- Directly get the EAP config from the
eapconfig_endpoint
:eapconfig_endpoint
,name
,id
andoauth
(oauth set to False) MUST be present - Get the EAP config using tokens obtained through
authorization_endpoint
andtoken_endpoint
using OAuth:eapconfig_endpoint
,authorization_endpoint
,token_endpoint
,name
,id
andoauth
(oauth set to True) MUST be present - Forward the user to a "redirect" page:
id
,name
andredirect
must MUST be present
Based on the various presence and values of these attributes you can determine the flow as follows:
...