application.yml

---

jdbc:
  username: "oidc_sync"
  password: "oidc_sync123*"
  url: "jdbc:mariadb://localhost:3306/test_oidc"
  driver_class_name: "org.mariadb.jdbc.Driver"
  platform: "org.eclipse.persistence.platform.database.MySQLPlatform"

rpc:
  perunUrl: "https://perun-dev.cesnet.cz/ba/rpc"
  perunUser: "user"
  perunPassword: "pass"

attributes:
  proxy_identifier: "urn:perun:facility:attribute-def:def:proxyIdentifiers"
  master_proxy_identifier: "urn:perun:facility:attribute-def:def:masterProxyIdentifier"
  is_test_sp: "urn:perun:facility:attribute-def:def:isTestSp"
  is_oidc: "urn:perun:facility:attribute-def:def:isOidc"
  managers_group_id: "urn:perun:facility:attribute-def:def:managersGroupId"
  client_id: "urn:perun:facility:attribute-def:def:OIDCClientID"
  client_secret: "urn:perun:facility:attribute-def:def:OIDCClientSecret"
  name: "urn:perun:facility:attribute-def:def:serviceName"
  description: "urn:perun:facility:attribute-def:def:serviceDescription"
  redirect_uris: "urn:perun:facility:attribute-def:def:OIDCRedirectURIs"
  privacy_policy: "urn:perun:facility:attribute-def:def:privacyPolicyURL"
  contacts:
    - "urn:perun:facility:attribute-def:def:administratorContact"
  scopes: "urn:perun:facility:attribute-def:def:requiredScopes"
  token_endpoint_authentication_method: "urn:perun:facility:attribute-def:def:OIDCTokenEndpointAuthenticationMethod"
  grant_types: "urn:perun:facility:attribute-def:def:OIDCGrantTypes"
  code_challenge_type: "urn:perun:facility:attribute-def:def:OIDCCodeChallengeType"
  introspection: "urn:perun:facility:attribute-def:def:OIDCAllowIntrospection"
  post_logout_redirect_uris: "urn:perun:facility:attribute-def:def:OIDCPostLogoutRedirectURIs"
  issue_refresh_tokens: "urn:perun:facility:attribute-def:def:OIDCIssueRefreshTokens"
  home_page_uris:
    - "urn:perun:facility:attribute-def:def:informationURL"
  token_timeouts: "urn:perun:facility:attribute-def:def:OIDCTokenTimeouts"
  reuse_refresh_tokens: "urn:perun:facility:attribute-def:def:OIDCReuseRefreshTokens"

conf:
  langs: ["en", "cs"]
  encryption_secret: "secret_goes_here"
  proxy_identifier_value: "https://login.cesnet.cz/proxy/"
  managers_group_vo_id: 1
  managers_group_parent_group_id: 1
  managers_group_parent_group_name: "Facility managers"
  probe_output_file_location: "/etc/mitreid/cesnet/sync_res.txt"


# All values are in seconds
tokens:
  authorization_code:
    access_token: 3600
    id_token: 3600
    refresh_token: 7200
  implicit:
    access_token: 14400
    id_token: 14400
  hybrid:
    access_token: 14400
    id_token: 14400
    refresh_token: 28800
  device:
    access_token: 3600
    id_token: 3600
    refresh_token: 7200
    device_code: 600

actions:
  to_oidc:
    create: TRUE
    update: TRUE
    delete: FALSE
  to_perun:
    create: TRUE
    update: TRUE
    delete: FALSE
  protected_client_ids:
    - "cid1"
    - "cid2"