SAP-samples/ams-samples-node
Sample Node.js applications, a CAP bookshop and an Express shopping app, showing policy-based authorization through the Authorization Management Service on SAP BTP with policies written in DCL.
Two Node.js applications, a CAP bookshop and an Express shopping app, authenticate users through the SAP Cloud Identity ServicesCloud Identity ServicesIdentity Authentication and Identity Provisioning as one tenant: the login, the user store or the federation to a corporate identity provider, and the provisioning of users into whatever sits behind it.sap official, btp and then authorize them with the Authorization Management Service (AMS), written in the Data Control Language (DCL) policy language. Deployed policies are managed in the SCI administration cockpit; running locally, policies are edited in the IDE and assigned to mocked users. It needs a Node.js LTS release that is still in maintenance.
Facts
Where it sits
Who is behind it
In the atlas: maintains 222@SAP-samplesmaintainerf-blassContributes to this
In the atlas: contributes to 2@f-blassManuel FinkContributes to this
In the atlas: contributes to 3@finkmanAtSapMarievonSeggernContributes to this
In the atlas: contributes to 1@MarievonSeggernMatthias BühlContributes to this
In the atlas: contributes to 2@pianocktail4 contributors
What it declares
Every artifact
- Type
- Sample
- Origin
- By SAP
- Use as
- A reference
As a sample
- Form
- A reference application
Connections
Deciding who may read or change what, down to instance level
Download
README
quoted from SAP-samples/ams-samples-node under Apache-2.0, readAMS Sample Applications (Node.js)
The Node.js sample applications in this repository demonstrate policy based authorization with the Authorization Management Service (AMS) in applications that authenticate users via the SAP Cloud Identity Services (SCI). The focus of the samples is on the authorization via AMS but as the authentication is a necessary requirement, it is demonstrated as well.
Description
AMS is the component of SCI that can be enabled to implement and manage an application's authorization in a flexible policy-based language called Data Control Language (DCL). Besides standard authorization checks, it enables applications to provide instance-based authorization capabilities to customers, e.g. limiting a user's access to a slice of the data based on cross-cutting attributes such as company code or region.
When deployed, authorization policies are managed in the SCI administration cockpit. When running locally, e.g. during development or testing, policies are edited in the IDE and can be assigned to mocked users as demonstrated by the samples.
Requirements
- a Node.js LTS version that is at least in maintenance
How to obtain support
For bugs and issues of the sample applications themselves or questions about the content, please create an issue in this repository.
For formal feature requests, bug reports, security issues and support of the client libraries, please use the support channels mentioned in the README.md that comes with @sap/ams and @sap/ams-dev.
Contributing
If you wish to contribute code for the samples, offer fixes or improvements, please send a pull request. Due to legal reasons, contributors will be asked to accept a DCO when they create the first pull request to this project. This happens in an automated fashion during the submission process. SAP uses the standard DCO text of the Linux Foundation.
License
Copyright (c) 2025 SAP SE or an SAP affiliate company. All rights reserved. This project is licensed under the Apache Software License, version 2.0 except as noted otherwise in the LICENSE file.
Details
Sources
Sources are graph entities: the same page may back several entries, and an unreachable source flags every row that rests on it.
Compatibility and provenance
Contributors
History in the atlas
- First seen.
For your agent
- Ref
artifact:sap-samples-ams-samples-node- JSON
- /artifacts/sap-samples-ams-samples-node.json
- MCP
- Connecting an agent