Control Center BL appsettings

This page lists all appsettings.json settings available for Control Center BL (Web API).

The appsettings.json file is located in the folder <AMT Environment>\AmtTools\ControlCenterWebApi\

The appsettings file is divided into the following sections.

AuthenticationType

The authentication type used to validate tokens received from the Control Center. The only valid option is "JWT" (JSON Web Token).

"AuthenticationType": "JWT",

JWT

The 'JWT' section contains settings needed to validate tokens received from the Control Center.

• Authority - The URL of the authorization server.
• Audience - The configured intended recipient of the access token.
• TokenValidationParameters:
  • NameClaimType - The claim type that will be used to identify the user. Commonly preferred_username is used as claim type.
    The claim type must be identical to the claim type set in the ControlCenter appsettings.
• RequireHttpsMetadata - If true, HTTPS is required for the authority. The default is true. Disable this setting only in development environments.

"JWT": {
  "Authority": "https://login.example.org/amt-applications/v2/auth",
  "Audience": "amt-controlcenter-api",
  "TokenValidationParameters": {
    "NameClaimType": "preferred_username"
  },
  "RequireHttpsMetadata": true
}

Logging

Sets the logging levels for the various ASP.NET Core components of the web application. These settings do not need to be adjusted in a normal situation.
The allowed log levels are, from most to least detailed: Trace, Debug, Information, Warning, Error, Critical and None.

"Logging": {
  "LogLevel": {
    "Default": "Information",
    "Microsoft": "Warning",
    "Microsoft.Hosting.Lifetime": "Information",
  }
},

AllowedHosts

In the AllowedHosts section, access to the web application can be restricted to specific hostnames.
The value is a semicolon-delimited list of host names without port numbers.
By default, all hostnames are allowed by the asterisk (*) wildcard.
Disallowed users receive an HTTP 400 error code (Bad Request).

"AllowedHosts": "*",