List of public endpoints

This section provides a list of public endpoints.

  • /secp/v1/handshake/init
  • /secp/v1/handshake/finish
  • /secp/v1/message-exchange
  • /actuator/health

Depending on whether payload encryption is enforced for all applications the Security Proxy should also expose the following endpoints:

  • All the Token Server URIs
  • URIs exposed through the configured resource gateways

When payload encryption is enforced for all mobile applications the Security Proxy does not have to expose any other endpoints than the public endpoints listed at the top of this section.