Add comment in DynamicConfigModelV7

Signed-off-by: Ryan Liang <[email protected]>
peternied · Aug 23, 2023 · cb3406a · cb3406a
1 parent 15c8530
commit cb3406a
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/main/java/org/opensearch/security/securityconf/DynamicConfigModelV7.java b/src/main/java/org/opensearch/security/securityconf/DynamicConfigModelV7.java
@@ -375,6 +375,12 @@ private void buildAAA() {
             }
         }
 
+        /*
+         * If the OnBehalfOf (OBO) authentication is configured:
+         * Add the OBO authbackend in to the auth domains
+         * Challenge: false - no need to iterate through the auth domains again when OBO authentication failed
+         * order: -1 - prioritize the OBO authentication when it gets enabled
+         */
         Settings oboSettings = getDynamicOnBehalfOfSettings();
         if (oboSettings.get("signing_key") != null && oboSettings.get("encryption_key") != null) {
             final AuthDomain _ad = new AuthDomain(