Specifying deployment information

When processing an API call that uses bearer token authentication, Cloud API verifies that the tenant, project, and planet class specified in the JWT match the tenant, project, and planet class of this instance of PolicyCenter.

This check is accomplished using deployment IDs. A deployment ID is a string that specifies, for a given instance of PolicyCenter, the tenant, project, and planet class than the instance belongs to. Deployment IDs are formatted using GRN (Guidewire Resource Notation).

If you want bearer token authentication to work for a given instance of PolicyCenter, the instance's deployment ID must be specified prior to starting the instance. If the deployment ID is not specified, every call using bearer token authentication is returned with a null pointer exception.

For more information on deployment IDs, see the Cloud Console Guide in the Guidewire Cloud Platform Documentation set.

The "lower" wild card for planet classes

Within the context of Guidewire Resource Notation, there are several possible values for planet class. However, within the context of Cloud API JWTs, there are only three possible values: "prod", "preprod", and "lower". The token values of "prod" and "preprod" map to the GRN values of "prod" and "preprod". The token value of "lower" maps to all other GRN planet class values. Therefore:

• A JWT that specifies a planet class of "prod" will work with applications whose planet class is "prod".
• A JWT that specifies a planet class of "preprod" will work with applications whose planet class is "preprod".
• A JWT that specifies a planet class of "lower" will work with applications whose planet class is any value other than "prod" or "preprod".