apimanager.war index.html API Proxy APIProxy com.ibm.apimgmt.security.util.APIProxy targetContextPath /v1 APIProxy /proxy/* Login Orchestration Servlet LoginServlet com.ibm.apimgmt.security.login.servlet.LoginServlet LoginServlet /login SAML Sign On SamlSignOnServlet com.ibm.apimgmt.security.util.SAMLSignOn SamlSignOnServlet /saml/signon UAA Sign On UAASignOnServlet com.ibm.apimgmt.security.uaa.servlet.UAASignOn UAASignOnServlet /uaa/signon Openid Sign On OpenidSignOn com.ibm.apimgmt.security.openid.servlet.OpenidSignOn OpenidSignOn /openid/signon UAA Redirect UAARedirectServlet com.ibm.apimgmt.security.uaa.servlet.UAARedirect UAARedirectServlet /uaa/redirect All Authenticated User * Everything Private By Default Everything /* * CONFIDENTIAL Auth free access to registration and password reset. Registration /saml/signon /uaa/signon /openid/signon /uaa/redirect CONFIDENTIAL Auth free access to non sensitive stuff non-sensitive /apim/* /bower_components/* /config/* /fonts/* /images/* /scripts/* /spec-files/* /styles/* /templates/* /views/* /webapibuilder/* CONFIDENTIAL 403 /login.jsp?failure=true 404 /404.html 408 /login.jsp?messageNLSKey=sessionExpiredDetail&result=failure FORM /login /login.jsp?failure=true no-cache com.ibm.wsci.omniapps.filters.CacheFilter Cache-Control no-cache, no-store, must-revalidate weekly-cache com.ibm.wsci.omniapps.filters.CacheFilter Cache-Control max-age=604800, public quick-cache com.ibm.wsci.omniapps.filters.CacheFilter Cache-Control max-age=1, public no-cache /* weekly-cache /rest/messages/nls/* *.js *.css *.png *.jpg *.gif *.woff *.ttf quick-cache /rest/secureconnectors/configFile/* CSRF-Filter com.ibm.apim.sessions.CsrfFilter CSRF-Filter /proxy/*