No reference to xs-security which is required to serve static resources

[katansapdevelop]

Issue description

You need to ensure that you have oauth2 redirect uris setup or you static content is not served

You get an error like this

It may seem trivial but its a key piece to make this function and something that can be easily overlooked as it it not added explicitly by the tooling.

I'd recommend this is either included here or perhaps the troubleshooting is updated to include a reference to this detail

Feedback Type (Optional)

content gaps

Page Title on SAP Help Portal (prefilled)

Resource Files

Page URL on SAP Help Portal (prefilled)

https://help.sap.com/docs/btp/sap-business-technology-platform/resource-files?q=xs-security

[PlamiIG]

Thank you for your feedback! We’ll look into it and come back to you if we have any questions.

[SarahErdmann]

Thank you for your feedback!

We reviewed and considered your proposal. However, we decided not to update Resource Files | SAP Help Portal.

The reason is that the xs-security.json file is a requirement for the xsuaa instance, but it is not a required resource for the application router. For the application router, a binding to an xsuaa instance is optional. Instead of xsuaa, you can also use the Identity Service (ias) with an ias configuration file or use the application router without any binding to an authentication service instance.

You can find information about the xs-security.json file for xsuaa and the OAuth 2.0 redirect URIs here:
• Application Security Descriptor Configuration Syntax | SAP Help Portal
• Configure Redirect URLs for Browser Logout | SAP Help Portal
• Listing Allowed Redirect URIs