SampleSampleA worked example you read or clone. Evidence: it demonstrates, it never provides.See every one →What this type is →independently maintainedindependently maintainedPublished by one person or a small company outside SAP. Says nothing about quality; the readings say that.See every one →
bookshop-ams
CAP bookshop wired to the Authorization Management Service.
Facts
Last push
Where it sits
Lives in
Demonstrates
AuthorizationCAPAuthorizationDeciding who may read or change what, at service, entity and instance level — role checks, forwarded user context, and restrictions evaluated as query filters rather than after the fact.
Who is behind it
Gregor WolfGregor WolfMaintains this
In the atlas: maintains 17, contributes to 59, wrote 2@gregorwolfmaintainer
In the atlas: maintains 17, contributes to 59, wrote 2@gregorwolfmaintainer
Before choosing this
Signals
LicenceNo licenseNeither the package manifest nor the repository tree declares a licence
Without a licence the default is all rights reserved. Ask the maintainer, or check for terms stated elsewhere, before depending on it.
What it declares
Every artifact
- Type
- Sample
- Origin
- Independently maintained
As a sample
- Form
- does not say
Connections
Group by
NodeRelationBasis
Functional
AuthorizationAuthorizationDeciding who may read or change what, down to instance levelSAP and community, unassessed
demonstrates
authored
demonstrates Authorization
Deciding who may read or change what, down to instance level
Download
Architecture
as mta.yaml states it at b2fb468, readDownload
Cloud Identity ServicesIdentity Authentication and Identity Provisioning as one tenant: the login, the user store or the federation to a corporate identity provider, and the provisioning of users into whatever sits behind it.sap official, btp
bookshop-ams-srv → Cloud Identity ServicesStated in the descriptor, authentication, OpenID Connect, HTTP, outboundValidating the JWT a request carries against Identity Authentication: the module reads the OIDC configuration from the tenant's
.well-known endpoint and then its JWKS.bookshop-ams → bookshop-ams-srvStated in the descriptor, datamta.yaml, module bookshop-ams, requires srv-api
bookshop-ams → Cloud Identity ServicesStated in the descriptor, authentication, outbound, under a conditionLogging a user in against Identity Authentication: a route whose authenticationType is
ias redirects to the IAS login.If A route sets authenticationType to ias.SAPnot SAP's, or the project's ownauthenticationstated in the document
Bound, and not drawn
- bookshop-ams-srvhana
- bookshop-ams-ams-policies-deployerCloud Identity Services
- bookshop-ams-db-deployerhana
Documented, with no instance in the document
- @cap-js/hana requires SAP HANA Cloudbookshop-ams-srvconditionalThe database this is the service for: capire's standard database for production, reached with the credentials
cds watchorcds runfetch from the binding at runtime.Using SAP HANA Cloud for Production — capire, Prepare for ProductionThis configures deployment for SAP HANA. The configuration is added to a `[hybrid]` profile in your _package.json_.
Using SAP HANA Cloud for Production — capire, cds deployWith this information, `cds watch`/`run` can fetch the SAP HANA credentials at runtime, so that the server can connect to it.
Databases — capire, overview (the 2 is the page's footnote mark)in production, SAP HANA 2 is used by default
- @sap/xssec requires SAP Authorization and Trust Management servicebookshop-ams-srv
- @sap/approuter requires SAP Authorization and Trust Management servicebookshop-amsAuthenticating the user on the routes configured to require it: the router binds to it as the UAA server, or to Cloud Identity Services instead.@sap/approuter 23.0.0 — README, user authentication
The User Account and Authentication (UAA) server is responsible for user authentication.
- @sap/approuter requires SAP Destination servicebookshop-amsReading the destination a route forwards to, where that configuration is not written into the router's own environment.@sap/approuter 23.0.0 — README, destination configuration
Destination configuration can also be read from `destination service`.
- @sap/approuter requires SAP Connectivity servicebookshop-amsForwarding to an on-premise backend: the binding is required once a destination sets its ProxyType to on-premise.@sap/approuter 23.0.0 — README, destination ProxyType
if ProxyType set to `on-premise`, binding to SAP Cloud Platform connectivity service is required.
- @sap/approuter requires SAP HTML5 Application Repository service for SAP BTPbookshop-amsServing static content from the repository rather than from the router's own folder. Bound, both the files and the xs-app.json routes come from there.@sap/approuter 23.0.0 — README, Integration with HTML5 Application Repository
When the application router interacts with HTML5 Application Repository to serve HTML5 Applications, all static content and routes (xs-app.json) are retrieved from HTML5 Application Repository.
Bound in the descriptor, not joined to an entry
hana
README
quoted from gregorwolf/bookshop-ams, readgregorwolf/bookshop-ams/README.mdthe maintainer’s wordsOn GitHub
Getting Started
Welcome to your new project.
It contains these folders and files, following our recommended project layout:
| File or Folder | Purpose |
|---|---|
app/ | content for UI frontends goes here |
db/ | your domain models and data go here |
srv/ | your service models and code go here |
package.json | project metadata and configuration |
readme.md | this getting started guide |
Details
Sources
Sources are graph entities: the same page may back several entries, and an unreachable source flags every row that rests on it.
Compatibility and provenance
discovered viaGitHub API · gregorwolf
first seen in the atlas
ecosystem and domaincap, security-and-compliance
History in the atlas
- A sample's domain recorded what kind of thing it is, which artifact_type already says, so it sat under Learning while the capability it demonstrates sat elsewhere — filtering a domain for a worked example returned nothing. Domain now follows the single capability the sample demonstrates; a sample with no single subject stays in Learning.
- First seen.
For your agent
- Ref
artifact:gregorwolf-bookshop-ams- JSON
- /artifacts/gregorwolf-bookshop-ams.json
- MCP
- Connecting an agent