---
title: "UMA RS Protect Resources"
method: POST
path: "/uma-rs-protect"
tags: ["developers"]
---

# UMA RS Protect Resources

`POST /uma-rs-protect`

UMA RS Protect Resources. It's important to have a single HTTP method, mentioned only once within a given path in JSON, otherwise, the operation will fail.

## Headers

- `Authorization` string
- `AuthorizationOxdId` string

## Request body

- object
  - `oxd_id` string, required
  - `overwrite` boolean, required
  - `resources` RsResource[], required
    - `path` string, required
    - `conditions` Condition[], required
      - `httpMethods` string[], required
      - `scopes` string[], required
      - `scope_expression` string[], required
      - `ticketScopes` string[], required
    - `exp` integer — Resource expiration date in terms of number of seconds since January 1 1970 UTC
    - `iat` integer — Resource creation date in terms of number of seconds since January 1 1970 UTC

## Response `200`

OK

- object
  - `oxd_id` string, required

## Other responses

- `400` — Invalid parameters are provided to endpoint.
- `403` — Forbidden. Invalid access token provided in Authorization header.
- `500` — Internal error occured. Please check oxd-server.log file for details (usually located in /var/log/oxd-server/oxd-server.log).

---

[API](https://skmtc.net/gluufederation/apis/oxd-server.md) · [All operations](https://skmtc.net/gluufederation/apis/oxd-server/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/gluufederation/oxd-server/revisions/33ca9e18c54b/schema)