Virtuoso Authentication Layer
VAL can be configured by manipulating the triples in a set of pre-defined private graphs (see also Named Graphs Used Throughout VAL). Typically there will be user Interfaces which hide these details from the user but it is good to know the details anyway.
/sparql endpoint of http://my.openlinksw.com can be enhanced with social sharing controls:
VAL allows to somehow customize the
authenicate.vsp page (see also Adding VAL Support to a VSP-based Application).
Logos displayed on the authentication page can easily be customized per application realm. By default VAL uses the Virtuoso logo as the right image and details about the identity provider on the left.
In order to set the left and right logos for the default realm one can simply insert corresponding triples into the VAL config graph:
There are two modes to how the request access dialog is to be presented: 1. the user needs to press a button to show it (the default), or 2. the dialog is shown automatically as soon as access has been denied for an authenticated person.
This setting is tied to the application realm which means that it does not apply to any other realm.
In order to make the dialog shown automatically in the default realm one sets the following property:
In order to restore the default one simply deletes the configuration:
The The VAL ACL Rule and Group System uses a set of named graphs to store rules, groups, and restrictions. By default VAL uses one graph per application realm and ACL resource type. It uses the default hostname (
HOST in the example below) of the Virtuoso instance.
Example: The default graph which stores the rules in the default realm is the following:
On firsts usage of the API to create a rule, group, or restriction this graph will be created and made private. It will then be stored in the VAL configuration using the oplacl:hasRuleDocument property:
It is possible to customize these graphs (ideally before the API creates them) which might be desireable for manual ACL resource creation via SPARQL Insert. Since VAL will honor the setting above one can simply add the required triples into the VAL config graph.
Example: Given that one wants to change the rule, group, and restriction graphs for the default application realm, the following will do:
VAL will honor this settings and store and read all rules, groups, and restrictions from the configured graphs.