work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-118- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-119- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-120- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-121- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-122- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-123- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-124- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-125- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-126- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-127- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-128- description = "The password used verify the authenticity of the trust store.

\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-129- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java:130: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-131- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-132- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-133- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-134- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-135- displayName = "Connect/Read Timeout [s]", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-136- description = "The connection and read timeout in seconds. A timeout value of zero is interpreted as 60 seconds.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-137- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-138- exampleValues = {5, 10, 0}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-139- minValue = 0, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-140- defaultValue = 10 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-141- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-142- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-143- private int connectTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-144- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-145- description = "

When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.

\n

If the correlation ID is not defined, the correlation ID header is not included in sent requests.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-146- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-147- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-148- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-149- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-150- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-151- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-152- private String correlationIdHeaderName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-153- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-154- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-155- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-156- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-157- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-158- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-159- @StringProperty(description = "Username for the HTTP proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-160- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-161- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java:162: @StringProperty(description = "Password for the HTTP proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-163- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-164- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-165- @PluginListProperty(description = "A list of cookies to expect and send back to the client.", minElements = 1, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-166- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-167- private List cookies; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-168- private CloseableHttpClient httpClient; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-169- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-170- public SamlAccessCookieIdentityPropagator( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-171- String issuer, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-172- String subjectTemplate, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-173- String subjectConfirmationMethod, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-174- String nameIdFormat, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-175- AssertionAttributeSpec spProvidedId, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-176- List attributes, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-177- int assertionValidityMillis, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-178- int assertionNotBeforeSkewMillis, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-179- String xmlSignatureAlgorithm, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-180- String xmlSignatureDigestMethod, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-181- File keystoreFile, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-182- String keystorePassword, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-183- public static final String XML_SIGNATURE_DIGEST_METHOD = "xmlSignatureDigestMethod"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-184- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-185- description = "JKS Keystore file name containing the certificate and key used to sign the SAML2 Assertion.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-186- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-187- exampleValues = "instances/test/saml/samlKeystore.jks", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-188- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-189- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-190- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-191- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-192- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-193- private File keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-194- private static final String KEYSTORE_FILE_FIELD = "keystoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java:195: @StringProperty(description = "The password used open the keystore.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-196- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-197- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-198- private static final String KEYSTORE_PASSWORD_FIELD = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-199- @StringProperty(description = "The alias of the key used to sign the Assertion.", optional = false, exampleValues = "medusaCert") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-200- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-201- private String signingKeyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-202- private static final String SIGNING_KEY_ALIAS_FIELD = "signingKeyAlias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-203- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-204- description = "The password used to retrieve the key from the keystore. This password can be the same as the keystore password.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-205- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java:206: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-207- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-208- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-209- private String signingKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-210- private static final String SIGNING_KEY_PASSWORD_FIELD = "signingKeyPassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-211- @StringListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-212- description = "

If set, adds the given audiences to an AudienceRestriction element. This is usually not required. Each element of this list is included in the AudienceRestriction as a separate Audience.

e.g. If this list contains the Strings: {\"https://1.airlock.com\",\"https://2.airlock.com\"} the resulting condition contains:
<saml:Conditions ...>
<saml:AudienceRestriction>
<saml:Audience>https://1.airlock.com</saml:Audience>
<saml:Audience>https://2.airlock.com</saml:Audience>
</saml:AudienceRestriction>
</saml:Conditions>
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-213- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-214- exampleElements = "https://sp.airlock.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-215- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-216- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-217- private List audienceRestrictions; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-218- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-219- description = "If enabled, a SubjectConfirmation element is added to the Assertion. This should only be disabled if the receiver doesn't support this element.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-220- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-221- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-222- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-223- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-224- private boolean enableSubjectConfirmation; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-225- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-226- description = "If enabled, an AuthnStatement element is added to the Assertion. This should only be disabled if the receiver doesn't support this element.", -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-38- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-39- displayName = "Keystore File", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-40- description = "Keystore file name containing the certificate and key used to sign the JWT.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-41- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-42- exampleValues = {"keystore.jks", "/keys/keystore.p12"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-43- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-44- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-45- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-47- private File keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-48- public static final String KEYSTORE_FILE_DISPLAY_NAME = "Keystore File"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-49- public static final String KEYSTORE_FILE_FIELD = "keystoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java:50: @StringProperty(displayName = "Keystore Password", description = "The password used to open the keystore.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-51- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-52- public static final String KEYSTORE_PASSWORD_DISPLAY_NAME = "Keystore Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-53- public static final String KEYSTORE_PASSWORD_FIELD = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-54- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-55- displayName = "Signing Key Alias", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-56- description = "The alias of the key used to sign the JWT. This field can be omitted if the keystore only contains one private key entry.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-57- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-58- exampleValues = "alias" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-59- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-60- private String signingKeyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-61- public static final String SIGNINGKEY_ALIAS_DISPLAY_NAME = "Signing Key Alias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-62- public static final String SIGNINGKEY_ALIAS_FIELD = "signingKeyAlias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-63- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-64- displayName = "Signing Key Password", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-65- description = "The password used to retrieve the key from the keystore. This password can be the same as the keystore password.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-66- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java:67: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-68- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-69- private String signingKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-70- public static final String SIGNINGKEY_PASSWORD_DISPLAY_NAME = "Signing Key Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-71- public static final String SIGNINGKEY_PASSWORD_FIELD = "signingKeyPassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-72- private PrivateKeyJwtSigner signer; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-73- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-74- protected PrivateKeyJwtSignatureConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-75- PrivateKeyJwtSignatureConfig.Algorithm algorithm, File keystoreFile, String keystorePassword, String signingKeyAlias, String signingKeyPassword work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-76- ) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-77- this.algorithm = algorithm; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-78- this.keystoreFile = keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-79- this.keystorePassword = keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-80- this.signingKeyAlias = signingKeyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-81- this.signingKeyPassword = signingKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-82- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-83- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-84- protected abstract boolean isIncludeKid(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-85- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-86- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/signature/PrivateKeyJwtSignatureConfig.java-87- static void validatePrivateKeyAndCertificate( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-35- public static final String RESOURCE_MAPPINGS = "Resource Mappings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-36- public static final String INTEGRATION = "Integration"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-37- public static final String ACCOUNT_LINKING_AND_REGISTRATION = "Account Linking and Registration"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-38- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-39- description = "Client ID identifying Airlock IAM at the authorization / token and resource endpoint of the OAuth 2.0 provider.
Only alphanumeric characters and '-_.' are allowed.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-40- exampleValues = {"example-app", "crypticyButUniqueAppId01953utjhu91823rih"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-41- displayName = "Client ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-42- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-43- validationRegex = "[a-zA-Z0-9-_.]+" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-44- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-45- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-46- private String clientId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java:47: @StringProperty(description = "Client secret used to verify the client.", isSensitive = true, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-48- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-49- private String clientSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-50- @PluginProperty(description = "HTTP method to use for Access Token requests.", optional = true, defaultValue = OAuth2PostRequestBuilderConfig.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-51- @GroupProperty(groupIdentifier = "Access Token Request") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-52- private OAuth2RequestBuilderConfig accessTokenRequestMethod; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-53- @PluginProperty(description = "Custom OAuth 2.0 client logging behaviour for integration or error diagnostics.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-54- @GroupProperty(groupIdentifier = "Integration") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-55- private OAuth2LoggingSettings loggingSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-56- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-57- description = "If enabled, this provider will solely function as an alternative authentication method for the accounts of the Loginapp's user store. Meaning that users having an IAM account and an account link to a provider account can authenticate using this provider. Account links can be created by
  • Users using the self-service
  • The automated registration
  • Auto-link feature
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-58- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-59- displayName = "Enable Account Linking", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-60- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-61- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-62- @GroupProperty(groupIdentifier = "Account Linking and Registration") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-63- @PluginPropertyLicenseRestriction(moduleAffiliation = {"OAuthAccountLinking", "OAuthSocialRegistration"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-64- private boolean enableAccountLinking; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-65- public static final String ENABLE_ACCOUNT_LINKING_FIELD = "enableAccountLinking"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-66- public static final String ENABLE_ACCOUNT_LINKING_DISPLAY_NAME = "Enable Account Linking"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/OAuth2ClientSettingsBase.java-67- @StringProperty( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-30- description = "Retrieves, caches and provides an access token.\n\tWhen this provider is used for the first time, an access token is obtained from the token endpoint using the client credentials grant and then cached. \n\tFor subsequent requests, the token is retrieved from the cache until it expires.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-31- displayName = "OAuth2 Access Token String Value Provider" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-32-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-33-public final class OAuth2AccessTokenStringValueProviderConfig implements StringValueProviderConfig, ClientCredentialsGrantTokenProvider { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-34- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-35- description = "Client ID identifying Airlock IAM at the authorization / token and resource endpoint of the OAuth 2.0 provider.
Only alphanumeric characters and '-_.' are allowed.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-36- exampleValues = {"example-app", "crypticyButUniqueAppId01953utjhu91823rih"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-37- displayName = "Client ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-38- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-39- validationRegex = "[a-zA-Z0-9-_.]+" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-40- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-41- private String clientId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java:42: @StringProperty(description = "Client secret used to verify the client.", isSensitive = true, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-43- private String clientSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-44- @PluginProperty(description = "HTTP method to use for Access Token requests.", optional = true, defaultValue = OAuth2PostRequestBuilderConfig.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-45- private OAuth2RequestBuilderConfig accessTokenRequestMethod; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-46- @PluginProperty(description = "HTTP client used for token endpoint requests.", displayName = "HTTP Client", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-47- private HttpClientConfig httpClient; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-48- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-49- description = "Specifies how the client secret is included in requests to the token endpoint.

RFC 6749 suggests to use the HTTP Basic authentication scheme ('OAuth 2.0 Basic Auth Client Secret').", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-50- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-51- defaultValue = OAuth2BasicAuthClientSecretConfig.class, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-52- displayName = "Token Endpoint Authentication" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-53- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-54- private OAuth2TokenRequestClientSecretProcessor tokenEndpointAuthentication; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-55- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-56- description = "Token endpoint URL to get Access Tokens.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-57- exampleValues = { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-58- "https://airlock.com/auth/rest/oauth2/authorization-servers/asId/token", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-59- "https://accounts.google.com/o/oauth2/token", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-60- "https://login.live.com/oauth20_token.srf", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-61- "https://login.microsoftonline.com/tenantid/oauth2/v2.0/token" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/valueprovider/OAuth2AccessTokenStringValueProviderConfig.java-62- }, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-7-import com.airlock.iam.plugin.api.annotation.license.PluginLicenseRestriction; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-8-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-9-import com.google.common.annotations.VisibleForTesting; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-10-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-11-import org.apache.commons.lang3.StringUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-12- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-13-@Plugin(description = "OpenID Connect ID Token signature validation plugin for HS256 signatures.", displayName = "OIDC HS256 Signature Validator") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-14-@PluginLicenseRestriction(moduleAffiliation = "OAuthClient") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-15-public class OpenIDConnectHS256SignatureValidator implements OpenIDConnectIdTokenSignatureValidator { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-16- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-17- description = "Static key to use in place of the client secret. Must be at least 32 characters long. If left blank, the client secret is used as signature key and SHOULD be manually verified to be at least 32 characters long.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-18- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java:19: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-20- minLength = 32 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-21- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-22- private String staticKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-23- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-24- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-25- public boolean validateIdTokenSignature(IdToken idToken, OAuth2ClientSideCredentials clientCredentials) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-26- String signatureKey = this.getKey(clientCredentials); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-27- return idToken.validateHS256Signature(signatureKey); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-28- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-30- private String getKey(OAuth2ClientSideCredentials clientCredentials) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-31- return StringUtils.isNotBlank(this.staticKey) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-32- ? this.staticKey work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-33- : clientCredentials.clientSecret().orElseThrow(() -> new IllegalArgumentException("Client secret missing. Unable to validate signature.")); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-34- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-35- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-36- @VisibleForTesting work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-37- void setStaticKey(String staticKey) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-38- this.staticKey = staticKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/oauth2/application/configuration/client/OpenIDConnectHS256SignatureValidator.java-39- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-22-import com.airlock.iam.plugin.api.valuereader.PasswordPropertyValueReader; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-23-import com.airlock.iam.plugin.api.valuereader.StringPropertyValueReader; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-24-import com.airlock.iam.plugin.framework.misc.processor.PasswordPropertyProcessor; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-25-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-26-import java.util.regex.Pattern; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-27-import org.apache.commons.codec.binary.Base64; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-28-import org.apache.commons.lang3.StringUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-30-@Plugin(description = "Loginapp security settings.", displayName = "Security Settings", typeShortName = "SecuritySettings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-31-public final class SecurityConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-32- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-33- description = "

The encryption key (encoded in base64) is required to encrypt sensitive data in cookies or in REST responses.

The openssl tool can be used to generate a random base64 string with 256 bits (32 bytes): openssl rand -base64 32

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java:34: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-35- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-36- displayName = "Encryption Key (Base64 Encoded)" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-37- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-38- private String encryptionKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-39- public static final String ENCRYPTION_KEY_PROPERTY_NAME = "encryptionKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-40- public static final String ENCRYPTION_KEY_PROPERTY_DISPLAY_NAME = "Encryption Key (Base64 Encoded)"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-41- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-42- description = "

The HMAC Key (encoded in base64) is required to sign sensitive data stored in cookies or REST responses.

The openssl tool can be used to generate a random base64 string with 512 bits (64 bytes): openssl rand -base64 64

Security Recommendation: Use an HMAC key length of 512 bit or greater for optimal security with the used HS512 algorithm.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java:43: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-44- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-45- displayName = "HMAC Key (Base64 Encoded)" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-47- private String hmacKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-48- public static final String HMAC_KEY_PROPERTY_NAME = "hmacKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-49- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-50- description = "The settings to allow cross-domain REST calls.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-51- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-52- defaultValue = CorsSettings.class, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-53- displayName = "CORS Settings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-54- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-55- private CorsSettings corsSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-56- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-57- description = "

If enabled, REST endpoints are protected against CSRF attacks.

With this protection, the REST API only accepts requests that contain the custom header X-Same-Domain with an arbitrary non-empty value. In cross-origin resource sharing (CORS), such requests are not considered simple requests and thus must always be preceded by a preflight request, which prevents cross-site request forgery (CSRF) attacks.

Security warning: Disabling this feature may allow CSRF attacks. Only do so if the REST client is unable to comply with the aforementioned restrictions.

To be RFC-compliant, the endpoint\n/<loginapp-uri>/rest/public/tech-client-registration/oauth2/<as-identifier>/register\nnever requires the X-Same-Domain header.

\n

Requests to this endpoint are guaranteed to be non-simple, because of the enforced non-simple content\ntype application/json

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-58- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-59- displayName = "CSRF Protection", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-60- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-61- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-62- private boolean csrfProtection; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-63- @IntegerProperty( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-1-package com.airlock.iam.login.app.misc.oauth2.introspection.config; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-4-import com.airlock.iam.plugin.api.annotation.license.PluginLicenseRestriction; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-5-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-6-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-7- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-8-@Plugin(description = "A combination of a username and password that shall be allowed for this endpoint.") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-9-@PluginLicenseRestriction(moduleAffiliation = "OAuthServer") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-10-public class AllowedUsernamePasswordCombination { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-11- @StringProperty(description = "The username.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-12- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java:13: @StringProperty(description = "The user's password.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-14- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-15- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-16- public String getUsername() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-17- return this.username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-18- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-19- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-20- public String getPassword() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-21- return this.password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-22- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-23- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-24- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-25- public static AllowedUsernamePasswordCombination.AllowedUsernamePasswordCombinationBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-26- return new AllowedUsernamePasswordCombination.AllowedUsernamePasswordCombinationBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-27- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-28- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-29- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-30- public AllowedUsernamePasswordCombination(String username, String password) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-31- this.username = username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-32- this.password = password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-33- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-119- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-120- private List alwaysGrantedScopes; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-121- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-122- description = "

Overrides the default Proof Key for Code Exchange (PKCE, see RFC 7636)\nconfiguration of the Authorization Code Flow/Grant for this particular client.

\n

This allows to either disable PKCE enforcement for this client if enforced by default or to enforce PKCE for this\nclient if not enforced by default.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-123- displayName = "PKCE Code Challenge Method", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-124- defaultValue = "DEFAULT", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-125- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-126- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-127- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-128- private PkceCodeChallengeMethodClientOverride pkceCodeChallengeMethodOverride; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-129- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-130- description = "The client secret, used for authentication.
\nRequired, for example, if the client secret is used for token endpoint authentication using a post parameter or basic authentication.
\nTo generate a secure secret, the openssl utility can be used, e.g. openssl rand -base64 32.\nIf using an HMAC signature for ID tokens, the client secret length must suffice for the signature algorithm (e.g., 32 bytes for HS256).\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java:131: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-132- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-133- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-134- @GroupProperty(groupIdentifier = "Authentication Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-135- private String clientSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-136- public static final String STATIC_CLIENT_SECRET_PROPERTY = "clientSecret"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-137- @PluginListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-138- description = "The information about the certificates of a client. The information of the certificate used in the TLS handshake must be defined here for the request to be successfully authenticated.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-139- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-140- minElements = 1 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-141- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-142- @GroupProperty(groupIdentifier = "Authentication Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-143- private List clientCertificates; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-144- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-145- description = "

A JSON Web Key Set (JWKS) containing the keys that can be used by the client for authentication to the\nauthorization server, e.g. when accessing the token endpoint (if configured to use\nprivate_key_jwt).

\n

For this client to authenticate using private_key_jwt, either this property or at least one\npublic key must be configured. However, both may not be configured at the same time, i.e. if a public key\nis configured, then this property must not be set.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-146- displayName = "JWKS Settings", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-147- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-148- notCombinableWith = "publicKeys" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-149- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-150- @GroupProperty(groupIdentifier = "Authentication Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-151- private JwksSignatureVerifierSettings jwksSettings; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-3-import com.airlock.iam.common.infrastructure.credential.CredentialExtractor; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-4-import com.airlock.iam.core.application.configuration.waf.AirlockGatewayConfig; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-5-import com.airlock.iam.login.app.misc.configuration.oneshot.OneShotTargetApplicationConfig; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-6-import com.airlock.iam.login.app.misc.oneshot.impl.StaticUsernamePasswordExtractor; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-7-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-8-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-9-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-10- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-11-@Plugin(description = "This plugin provides a username/password credential for testing purposes.", displayName = "Static Username Password Extractor") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-12-public class StaticUsernamePasswordExtractorConfig implements OneShotTargetApplicationConfig.CredentialExtractorFactory { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-13- @StringProperty(description = "The username for the test.", optional = true, defaultValue = "test") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-14- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java:15: @StringProperty(description = "The password for the test.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-16- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-17- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-18- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-19- public CredentialExtractor newExtractor(AirlockGatewayConfig wafConfig) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-20- return new StaticUsernamePasswordExtractor(this.username, this.password); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-21- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-22- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-23- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-24- public static StaticUsernamePasswordExtractorConfig.StaticUsernamePasswordExtractorConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-25- return new StaticUsernamePasswordExtractorConfig.StaticUsernamePasswordExtractorConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-26- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-27- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-28- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-29- public StaticUsernamePasswordExtractorConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-30- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-31- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-32- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-33- public StaticUsernamePasswordExtractorConfig(String username, String password) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-34- this.username = username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oneshot/impl/StaticUsernamePasswordExtractorConfig.java-35- this.password = password; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-82- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-83- exampleValues = {"trustedIssuers.p12", "truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-84- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-85- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-86- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-87- @GroupProperty(groupIdentifier = "Verification") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-88- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-89- private static final String TRUST_STORE_PATH_DISPLAY_NAME = "Trust Store Path"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-90- static final String TRUSTSTORE_FILE_FIELD = "trustStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-91- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-92- description = "The password used verify the authenticity of the trust store.

\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t

    \t\t
  • JKS: the keystore can be opened and used but the integrity of the keystore is not checked.
  • \t\t
  • PKCS12: an error occurs.
  • \t

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-93- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java:94: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-95- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-96- @GroupProperty(groupIdentifier = "Verification") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-97- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-98- static final String TRUSTSTORE_PASSWORD_FIELD = "trustStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-99- @PluginListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-100- description = "A list of certificate status checkers used to check the revocation status of the HTTP signature verification certificate. If more than one checker is configured, all of them are consulted and the certificate is considered revoked if at least one of them tells so.

Security warning: The revocation status is only checked for the leaf certificate. Issuer certificates are not checked for revocation. If revocation checks for issuer certificates are required, these must be performed by the administrative process that manages the IAM truststore, see property 'Trust Store Path'.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-101- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-102- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-103- @GroupProperty(groupIdentifier = "Verification") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-104- private List certificateStatusCheckers; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-105- @PluginProperty(description = "The client credential extractor.", defaultValue = ClientCertificateExtractor.class, optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-106- @GroupProperty(groupIdentifier = "Verification") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-107- private OneShotTargetApplicationConfig.CredentialExtractorFactory credentialExtractor; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-108- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-109- displayName = "HTTP Signature Algorithm Verifier", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-110- description = "Verifies the signature algorithms being used. If not configured, all algorithms are allowed and therefore all supported algorithms that can be used with the certificate's key material will pass the signature verification.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-111- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-112- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-113- @GroupProperty(groupIdentifier = "Verification") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-114- private HttpSignatureAlgorithmVerifierConfig httpSignatureAlgorithmVerifier; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-19-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-20- displayName = "Custom CAPTCHA", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-21- description = "Requires a user to solve a custom CAPTCHA challenge.
\nIntended for use with a CAPTCHA Server that is API-compatible with reCAPTCHA. For reCAPTCHA and hCAPTCHA the according plugins should be used instead.
\nThis plugin configuration does not affect the Loginapp UI. You will need to adapt it with design kit customization." work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-22-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-23-@Groups(groupSequence = {"Basic Settings", "Proxy Settings"}, openGroups = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-24-public final class CustomCaptchaConfig implements CaptchaProviderConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-25- static final String PROXY_SETTINGS = "Proxy Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-26- @StringProperty(description = "

The site key can be assumed to be public knowledge and identifies the associated CAPTCHA account.

", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-27- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-28- private String siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-29- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-30- description = "

The secret is used to validate the CAPTCHA challenge response on the custom CAPTCHA server.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java:31: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-32- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-33- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-34- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-35- private String secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-36- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-37- description = "URL of the CAPTCHA service to use. The CAPTCHA validation will be performed against a CAPTCHA server with this URL. The server API must match the reCAPTCHA API.

For example, the API request for reCAPTCHA is 'https://google.com/recaptcha/api/siteverify' as POST method with the 'secret' and the user 'response' token as POST parameters.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-38- displayName = "CAPTCHA Service URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-39- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-40- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-41- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-42- private String captchaServiceUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-43- private static final String CAPTCHA_SERVICE_URL_FIELD = "captchaServiceUrl"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-44- private static final String CAPTCHA_SERVICE_URL_DISPLAY_NAME = "CAPTCHA Service URL"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-45- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-46- description = "Whether a CAPTCHA solution is always required. By default, solving a CAPTCHA in a step will cause subsequent steps with CAPTCHA to skip CAPTCHA verification. When this setting is enabled, the user is always required to solve the CAPTCHA for this step, irrespective of whether a CAPTCHA has previously been solved. Later CAPTCHA verifications are also not influenced by the step using this CAPTCHA, i.e. solving the CAPTCHA in this step has no effect on later CAPTCHA verifications. When this setting is disabled, no CAPTCHA is required if a CAPTCHA was resolved in a preceding step, unless the preceding Custom Captcha Step had this setting activated.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-47- displayName = "Enforce CAPTCHA for step", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-48- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-49- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-50- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-51- @GroupProperty(groupIdentifier = "Basic Settings") -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-60- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-61- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be used.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-62- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-63- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-64- exampleValues = "https://proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-65- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-66- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-67- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-68- private static final String FIELD_PROXY_URI = "proxyUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-69- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-70- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-71- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java:72: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-73- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-74- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-75- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-76- @ConfigurationValidator work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-77- static void checkCaptchaServiceUrl(PluginConfiguration config, ConfigurationEnvironment env, ConfigurationContext context, Environment validationEnvironment) throws ConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-78- UriPropertyValidator.uriPropertyValidator("captchaServiceUrl", "CAPTCHA Service URL", config, env, context) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-79- .validateIsUri() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-80- .validateHasNoQuery() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-81- .validateHasNoFragment(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-82- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-83- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-84- public String getSiteKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-85- return this.siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-86- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-87- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-88- public String getSecretKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-89- return this.secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-90- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-91- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-92- public String getCaptchaServiceUrl() { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-14-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-15-@Groups(groupSequence = {"Basic Settings", "Proxy Settings"}, openGroups = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-16-public final class HCaptchaConfig implements CaptchaProviderConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-17- static final String PROXY_SETTINGS = "Proxy Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-18- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-19- description = "

The site key can be assumed to be public knowledge and identifies the associated hCAPTCHA account.

The site key can be found on the hCAPTCHA profile page.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-20- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-21- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-22- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-23- private String siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-24- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-25- description = "

The secret key is used to validate the CAPTCHA challenge response on the hCAPTCHA server. While a leaked secret key doesn't impact the security or validity of this CAPTCHA method, its misuse can infer costs as it is used for quota calculations at the CAPTCHA provider (similar to an API key).

The secret key can be found on the hCAPTCHA profile page.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java:26: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-27- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-28- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-29- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-30- private String secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-31- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-32- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be used.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-33- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-34- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-35- exampleValues = "https://proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-36- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-37- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-38- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-39- private static final String FIELD_PROXY_URI = "proxyUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-40- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true, exampleValues = "proxyLogin") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-41- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-42- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java:43: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-44- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-45- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-46- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-47- public String getSiteKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-48- return this.siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-49- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-50- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-51- public String getSecretKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-52- return this.secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-53- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-54- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-55- @Nullable work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-56- public String getProxyUri() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-57- return this.proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-58- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-59- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-60- @Nullable work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-61- public String getProxyLoginUser() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-62- return this.proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-63- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-14-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-15-@Groups(groupSequence = {"Basic Settings", "Proxy Settings"}, openGroups = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-16-public final class ReCaptchaConfig implements CaptchaProviderConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-17- static final String PROXY_SETTINGS = "Proxy Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-18- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-19- description = "

The site key can be assumed to be public knowledge and identifies the associated reCAPTCHA account.

The site key can be found on the reCAPTCHA admin page.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-20- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-21- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-22- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-23- private String siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-24- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-25- description = "

The secret is used to validate the CAPTCHA challenge response on the reCAPTCHA server. While a leaked secret key doesn't impact the security or validity of this CAPTCHA method, its misuse can infer costs as it is used for quota calculations at the CAPTCHA provider (similar to an API key).

The secret key can be found on the reCaptcha admin page.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java:26: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-27- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-28- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-29- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-30- private String secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-31- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-32- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be used.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-33- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-34- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-35- exampleValues = "https://proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-36- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-37- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-38- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-39- private static final String FIELD_PROXY_URI = "proxyUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-40- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-41- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-42- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java:43: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-44- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-45- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-46- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-47- public String getSiteKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-48- return this.siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-49- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-50- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-51- public String getSecretKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-52- return this.secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-53- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-54- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-55- @Nullable work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-56- public String getProxyUri() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-57- return this.proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-58- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-59- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-60- @Nullable work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-61- public String getProxyLoginUser() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-62- return this.proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-63- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-23- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-24- minLength = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-25- maxLength = 30, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-26- validationRegex = "[a-zA-Z0-9_]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-27- defaultValue = "AL_LoginFromNewDevice" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-28- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-29- private String cookieName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-30- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-31- description = "

The key used to encrypt the cookie. Must be 32 Bytes encoded as Base64 String.

One can, for example, generate a random base64 string with 256 bits (32 bytes) using OpenSSL as follows: openssl rand -base64 32

If this value is changed, all previously used devices are forgotten.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-32- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-33- minLength = 44, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-34- maxLength = 44, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java:35: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-36- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-37- private String key; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-38- public static final String KEY_FIELD = "key"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-39- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-40- description = "Time period during which previous logins are considered. If a user's most recent login on a device is older than the configured validity period, the device is treated as new for that user.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-41- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-42- defaultValue = "365d", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-43- exampleValues = {"10d", "8h", "2d 12h"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-44- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-45- private String validity; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-46- private static final String VALIDITY_FIELD = "validity"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-47- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-48- public String getCookieName() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-49- return this.cookieName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-50- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-51- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-52- public String getKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-53- return this.key; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-54- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-55- -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-43- static final String TRUST_AND_KEYSTORE_SETTINGS = "Trust and Keystore Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-44- private static final ELogger LOG = ELoggerFactory.getLogger(FuturaeServerConfig.class); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-45- private static final NoRetryPolicyConfig NO_RETRY_POLICY = createNoRetryPolicy(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-46- private static final String CSP_DESCRIPTION = "

Note: When using a custom URL and a CSP, add exceptions for img-src and connect-src directives with the configured URL to it.

"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-47- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-48- description = "The service ID of the client.

The value is of the form 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-49- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-50- displayName = "Service ID" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-51- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-52- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-53- private String serviceId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-54- public static final String SERVICE_ID_DISPLAY_NAME = "Service ID"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:55: @StringProperty(description = "The API key for the Futurae Auth API.", optional = false, isSensitive = true, displayName = "Auth API Key") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-56- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-57- private String authApiKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-58- public static final String AUTH_API_KEY_DISPLAY_NAME = "Auth API Key"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-59- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-60- description = "The API key for the Futurae Admin API.

The Admin API key is different than the Auth API key, which is used to access the Auth API.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-61- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:62: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-63- displayName = "Admin API Key" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-64- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-65- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-66- private String adminApiKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-67- public static final String ADMIN_API_KEY_DISPLAY_NAME = "Admin API Key"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-68- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-69- displayName = "Back-End Server URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-70- description = "The back-end URL of the Futurae server (without path or trailing slash).

This URL is used by the back-end of IAM to connect to the Futurae API.

Note: When using a custom URL and a CSP, add exceptions for img-src and connect-src directives with the configured URL to it.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-71- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-72- validationRegex = "https?:\\/\\/[^\\/]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-73- defaultValue = "https://api.futurae.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-74- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-75- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-76- private String backEndUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-77- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-78- displayName = "Front-End Server URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-79- description = "The front-end URL of the Futurae server (without path or trailing slash).

This URL is used by the browser of the end user to access the Futurae API via the internet.

Note: When using a custom URL and a CSP, add exceptions for img-src and connect-src directives with the configured URL to it.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-80- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-81- validationRegex = "https?:\\/\\/[^\\/]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-82- defaultValue = "https://api.futurae.com" -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-109- description = "Keystore file name containing trusted certificate issuers (and trusted certificates).\n

If this property is not defined the following certificate issuers are trusted:\n

    \n
  • The list of issuers known to the Java VM if the system property \"javax.net.ssl.trustStore\" is not defined.
  • \n
  • The list of issuers in a keystore referenced by system property \"javax.net.ssl.trustStore\" if defined in instance.properties using iam.java.opts
  • \n

\n

If this property is defined then the following certificate issuers are trusted:\n

    \n
  • The list of issuers in the referenced truststore file and no others.
  • \n

In any case, IAM will only establish an HTTPS connection to the Futurae server or its proxy if the server certificate issuer is trusted or the certificate itself is trusted according to the aforementioned definition of trust.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-110- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-111- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-112- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-113- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-114- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-115- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-116- @GroupProperty(groupIdentifier = "Trust and Keystore Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-117- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-118- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-119- description = "The password used to check the integrity of the truststore, or to unlock the truststore.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-120- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:121: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-122- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-123- @GroupProperty(groupIdentifier = "Trust and Keystore Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-124- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-125- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-126- description = "The keystore containing a client certificate (including a private key) for Airlock IAM. The client certificate is used to establish mutual SSL connections for HTTPS REST calls.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-127- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-128- exampleValues = {"keystore.jks", "/etc/airlock/keystore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-129- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-130- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-131- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-132- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-133- @GroupProperty(groupIdentifier = "Trust and Keystore Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-134- private File keyStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-135- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-136- description = "The password used to check the integrity of the keystore, or to unlock the keystore. Must be provided in case the keystore is configured.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-137- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:138: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-139- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-140- @GroupProperty(groupIdentifier = "Trust and Keystore Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-141- private String keyStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-142- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-143- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be utilized.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-144- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-145- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-146- exampleValues = "https://proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-147- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-148- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-149- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-150- private static final String FIELD_PROXY_URI = "proxyUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-151- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-152- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-153- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:154: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-155- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-156- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-157- private RestClient restClient; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-158- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-159- public FuturaeServerConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-160- String serviceId, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-161- String authApiKey, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-162- String adminApiKey, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-163- String backEndUrl, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-164- String frontEndUrl, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-165- int callTimeoutMs, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-166- int connectionPoolMaxSize, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-167- File trustStorePath, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-168- String trustStorePassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-169- File keyStorePath, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-170- String keyStorePassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-171- String proxyUri, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-172- String proxyLoginUser, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-173- String proxyLoginPassword work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-174- ) { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-98- private boolean lockUserOnFraud; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-99- public static final String LOCK_USER_ON_FRAUD_DISPLAY_NAME = "Lock User on Fraud"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-100- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-101- description = "

If enabled, Futurae users that have the bypass mode enabled will be allowed to authenticate /\nperform approval with IAM. Otherwise, any authentication or approval attempts for users with the bypass\nmode enabled will result in a failure.

\n

Warning: Enabling bypass mode effectively disables all Airlock 2FA second factor checks.\nBypass mode should not be used in production environments.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-102- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-103- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-104- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-105- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-106- private boolean allowFuturaeBypassMode; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-107- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-108- description = "The symmetric key to encrypt the authentication/transaction payloads. If left empty, the payloads are not encrypted.\n

\nThe encryption of payloads in requests to the Futurae API prevents that intermediate infrastructure such as\na reverse proxy is able to read or alter the confidential data therein.\nThe encryption key can be obtained from the Futurae Admin Dashboard.\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-109- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java:110: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-111- displayName = "Payload Encryption Key" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-112- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-113- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-114- private String payloadEncryptionKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-115- public static final String PAYLOAD_ENCRYPTION_KEY_DISPLAY_NAME = "Payload Encryption Key"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-116- private static final String PAYLOAD_ENCRYPTION_KEY_FIELD_NAME = "payloadEncryptionKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-117- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-118- description = "When a 'Payload Encryption Key' is configured, 'Unencrypted Payload for Hardware Tokens' should be enabled. This setting only applies when a hardware token is used for authentication or approval via Offline QR Code.
  • If the option is enabled, the payload is transmitted in plain text (unencrypted).
  • If the option is disabled, hardware tokens will not be available for authentication or approval via Offline QR Code, since Futurae does not support payload encryption for hardware tokens.
For security reasons, this exception must be explicitly configured.

Note: Enabling this property without configuring a 'Payload Encryption Key' has no effect, as the payload is transmitted unencrypted by default.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-119- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-120- defaultValue = "false", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-121- displayName = "Unencrypted Payload for Hardware Tokens" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-122- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-123- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-124- private boolean unencryptedPayloadForHWTokens; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-125- public static final String UNENCRYPTED_PAYLOAD_FOR_HARDWARE_TOKENS_DISPLAY_NAME = "Unencrypted Payload for Hardware Tokens"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-126- private static final String UNENCRYPTED_PAYLOAD_FOR_HARDWARE_TOKENS_FIELD_NAME = "unencryptedPayloadForHWTokens"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-127- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-128- description = "

If configured, a cooldown period is enabled during which a newly registered device cannot be used for certain operations.

By default, all Airlock 2FA steps are configured so that devices may not be used during the \"Cooldown Period\". Exceptions can be configured directly on the step by de-activating the \"Respect Cooldown Period\" property.

The duration must be specified in the format \"2d 4h 10m 5s\" (any part can be omitted).

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-129- exampleValues = {"10m", "12h", "2d"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-130- optional = true, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-1-package com.airlock.iam.core.application.configuration.basicauth; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-4-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-5-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-6- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-7-@Plugin(description = "Configures a HTTP Basic Authentication header containing username and password.", displayName = "Basic Auth Credentials") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-8-public class BasicAuthCredentialsConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-9- @StringProperty(description = "The username for HTTP Basic Authentication.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-10- private String userName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java:11: @StringProperty(description = "The password for HTTP Basic Authentication.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-12- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-13- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-14- public String getUsername() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-15- return this.userName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-16- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-17- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-18- public String getPassword() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-19- return this.password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-20- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-21- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-22- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-23- public static BasicAuthCredentialsConfig.BasicAuthCredentialsConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-24- return new BasicAuthCredentialsConfig.BasicAuthCredentialsConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-25- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-26- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-27- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-28- public BasicAuthCredentialsConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-29- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-30- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-31- @SuppressFBWarnings(justification = "generated code") -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-72- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-73- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = SwissphoneSmsGateway.SwissphoneSmsGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-74- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-75- private String portalListDistributionUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-76- @IntegerProperty(description = "The port of the portal list distribution server.", optional = true, defaultValue = 443, exampleValues = 443, minValue = 1) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-77- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SwissphoneSmsGateway.SwissphoneSmsGatewayTcpTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-78- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-79- private int portalListDistributionPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-80- @StringProperty(description = "Username used to access the IMASYS XML gateway functions.", optional = false, exampleValues = "user1234") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-81- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SwissphoneSmsGateway.SwissphoneSmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-82- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-83- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java:84: @StringProperty(description = "Password used to accesss to IMASYS XML gateway functions.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-85- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-86- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-87- @BooleanProperty(description = "Long SMS option is enabled.", optional = true, defaultValue = "false") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-88- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-89- private Boolean longSmsOptionEnabled; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-90- @EnumProperty(description = "The priority of the message.", optional = true, defaultValue = "high") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-91- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-92- private SwissphoneSmsGateway.PriorityEnumeration priority; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-93- private String portalListUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-94- private int portalListPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-95- private long lastUpdated; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-96- private int updateIntervalMinutes = 60; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-97- private final Object updateLock = new Object(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-98- private List portals = Collections.emptyList(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-99- private int portalIndex; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-100- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-101- public SwissphoneSmsGateway( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-102- String proxyHost, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-103- Integer proxyPort, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-104- String proxyLoginUser, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-19-import java.io.File; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-20-import org.apache.commons.lang3.StringUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-21- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-22-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-23- description = "SMS gateway implementation for Kannel gateways. Uses the Kannel's sendsms HTTP(s) interface to send SMS messages.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-24- displayName = "Kannel SMS Gateway" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-25-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-26-public class KannelSmsGateway extends SmsHttpGatewayBase { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-27- @StringProperty(description = "Username or account name used when calling Kannel's sendsms HTTP(S) interface.", optional = true, exampleValues = "fmuster") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-28- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = KannelSmsGateway.KannelSmsGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-29- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-30- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java:31: @StringProperty(description = "Password associated with the given username.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-32- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-33- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-34- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-35- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-36- displayName = "Service URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-37- description = "The URI of the Kannel sendsms HTTP(S) interface.
See note in plugin description when using SSL.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-38- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-39- exampleValues = "http://localhost:13010/cgi-bin/sendsms" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-40- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-41- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SmsGatewayTestlet.SmsGatewayTcpTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-42- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-43- private String serviceUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-44- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-45- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-46- public String sendSms(String originator, String phoneNr, String message, boolean isFlashMsg) throws SmsGatewayException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-47- this.validateGatewayInputBeforeSending(originator, phoneNr, message); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-48- HttpSmsGatewayWorkflow workflow = new HttpSmsGatewayWorkflow(this.getHttpClient()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-49- return workflow.executeToVerifiedMessage(new KannelSmsGatewaySendMessage(this, originator, phoneNr, message, isFlashMsg)); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-50- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-51- -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-78- exampleValues = {"success", "Message successfully submitted"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-79- matchAgainstWholeInput = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-80- useDotAll = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-81- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-82- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-83- private Pattern successfulResponsePattern; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-84- @BooleanProperty(description = "Set to true to truncate the + prefix of the recipient number.", optional = true, defaultValue = "false") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-85- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-86- private boolean truncatePlusSign; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-87- @StringProperty(description = "The username for HTTP Basic Authentication.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-88- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-89- private String basicAuthUsername; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java:90: @StringProperty(description = "The password for HTTP Basic Authentication.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-91- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-92- private String basicAuthPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-93- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-94- description = "The URL-encoding to use for GET requests to append parameters to the Service URI. POST requests ignore this property and always use UTF-8.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-95- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-96- defaultValue = "UTF-8", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-97- suggestedValues = {"UTF-8", "ISO-8859-1"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-98- displayName = "URL Encoding for GET requests" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-99- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-100- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-101- private String urlEncoding; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-102- private static final String URL_ENCODING_PROPERTY = "urlEncoding"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-103- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-104- @ConfigurationValidator work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-105- static void checkUriCharset(PluginConfiguration config, ConfigurationEnvironment env, ConfigurationContext context, Environment validationEnvironment) throws ConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-106- CharsetValidator.validateOptionalCharsetProperty("urlEncoding", config, env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-107- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-108- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-109- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/GenericHttpSmsGateway.java-110- public CloseableHttpClient createResource() throws FailureException { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-72- defaultValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-73- exampleValues = {1, 5}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-74- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-75- maxValue = 1000 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-76- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-77- private int numberOfSessions; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-78- @StringProperty(description = "IP address of the UCP SMS Gateway in dot-decimal notation.", optional = false, exampleValues = "194.298.234.64") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-79- private String serverIp; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-80- @IntegerProperty(description = "TCP port number of the UCP SMS Gateway.", optional = false, exampleValues = {1234, 5555}, minValue = 1, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-81- private int serverPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-82- @StringProperty(description = "Username for a registered UCP account.", optional = false, exampleValues = "MyUcpLoginname") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-83- private String accountUsername; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java:84: @StringProperty(description = "Password for a registered UCP account.", optional = false, isSensitive = true, exampleValues = "MyUcpPassword") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-85- private String accountPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-86- @StringProperty(description = "Short ID of of the UCP account.", optional = false, exampleValues = "123456") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-87- private String accountShortId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-88- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-89- description = "The number of milliseconds to wait between reconnection attempts.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-90- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-91- defaultValue = 5000, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-92- exampleValues = {1000, 5000}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-93- minValue = 500 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-94- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-95- private int connectionSleepBeforeRetry; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-96- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-97- description = "The TCP connection timeout in milliseconds.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-98- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-99- defaultValue = 15000, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-100- exampleValues = {5000, 10000}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-101- minValue = 1 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-102- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-103- private int connectionTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/ucp/UcpSmsGateway.java-104- @IntegerProperty( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-1-package com.airlock.iam.core.misc.impl.sms; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-4-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-5-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-6- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-7-@Plugin(description = "HTTP Parameter with a value that is static and also sensitive (e.g. password).", displayName = "Sensitive HTTP Parameter") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-8-public class StaticSensitiveHttpParameter implements HttpParameter { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-9- @StringProperty(description = "The name of the HTTP Parameter.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-10- private String name; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java:11: @StringProperty(description = "The sensitive value of the HTTP Parameter.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-12- private String value; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-13- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-14- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-15- public String getName() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-16- return this.name; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-17- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-18- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-19- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-20- public String getValue() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-21- return this.value; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-22- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-23- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-24- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-25- public static StaticSensitiveHttpParameter.StaticSensitiveHttpParameterBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-26- return new StaticSensitiveHttpParameter.StaticSensitiveHttpParameterBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-27- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-28- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-29- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-30- public StaticSensitiveHttpParameter() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/StaticSensitiveHttpParameter.java-31- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-20-import java.io.File; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-21-import org.apache.commons.lang3.StringUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-22- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-23-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-24- description = "

Legacy SMS gateway implementation for \"http://www.ecall.ch/\".
This plugin uses the HTTP(S) interface of eCall to send SMS messages.

Important: This plugin only supports the eCall HTTP SMS Gateway Version 1.x (using the \"/ecallurl/ecallurl.ASP\" endpoint). For ECall HTTP Gateway 2.0, please use the generic \"HTTP SMS Gateway\" using the following configuration:

  • HTTP Method: \"POST\"
  • Service URI: \"https://url.ecall.ch/Api/Sms\"
  • Message Parameter: \"Message\"
  • Recipient Parameter: \"Address\"
  • Originator Parameter: \"CallBack\" (or leave empty for the default originator of the associated account)
  • Flash Parameter: (if flash is required, otherwise leave empty)
    • Parameter Name: \"MsgType\"
    • Parameter Value: \"Flash\"
  • Attribute Value Pairs:
    • \"Username=xyz\" (replace with your technical user id)
    • \"Password=xyz\" (replace with your password)
  • Successful Response Pattern can be left empty. Every response with code 200 is a successful response.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-25- displayName = "eCall SMS Gateway (v1)" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-26-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-27-public class EcallSmsGateway extends SmsHttpGatewayBase { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-28- @StringProperty(description = "Username for a registered ECall account.", optional = false, exampleValues = "MyEcallLogin") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-29- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = EcallSmsGateway.EcallSmsGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-30- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-31- private String accountUsername; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java:32: @StringProperty(description = "Password for the registered Ecall account.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-33- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-34- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-35- private String accountPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-36- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-37- displayName = "Service URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-38- description = "The URI of the Ecall service.
See note in plug-in description when using SSL (HTTPS instead of HTTP).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-39- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-40- suggestedValues = {"https://www.ecall.ch/ecallurl/ecallurl.ASP", "http://www.ecall.ch/ecallurl/ecallurl.ASP"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-41- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-42- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SmsGatewayTestlet.SmsGatewayTcpTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-43- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-44- private String serviceUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-45- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-46- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-47- public String sendSms(String originator, String phoneNr, String message, boolean isFlashMsg) throws SmsGatewayException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-48- this.validateGatewayInputBeforeSending(originator, phoneNr, message); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-49- HttpSmsGatewayWorkflow workflow = new HttpSmsGatewayWorkflow(this.getHttpClient()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-50- return workflow.executeToVerifiedMessage(new EcallSmsGatewaySendMessage(this, originator, phoneNr, message, isFlashMsg)); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-51- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/EcallSmsGateway.java-52- -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-20-import java.io.File; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-21-import org.apache.commons.lang3.StringUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-22- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-23-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-24- description = "SMS gateway implementation for \"http://www.truesenses.com/\".
This plugin uses the HTTP(S) interface of TrueSenses to send SMS messages.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-25- displayName = "True Senses SMS Gateway" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-26-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-27-public class TrueSensesSmsGateway extends SmsHttpGatewayBase { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-28- @StringProperty(description = "Username for a registered TrueSenses account.", optional = false, exampleValues = "MyTruesensesLogin") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-29- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = TrueSensesSmsGateway.TrueSensesSmsGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-30- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-31- private String accountUsername; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java:32: @StringProperty(description = "Password for the registered TrueSenses account.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-33- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-34- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-35- private String accountPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-36- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-37- displayName = "Service URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-38- description = "The URI of the TrueSenses service.
See note in plug-in description when using SSL (HTTPS instead of HTTP).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-39- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-40- suggestedValues = "http://truesenses.com:80/cgi-bin/smsgateway.cgi" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-41- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-42- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SmsGatewayTestlet.SmsGatewayTcpTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-43- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-44- private String serviceUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-45- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-46- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-47- public String sendSms(String originator, String phoneNr, String message, boolean isFlashMsg) throws SmsGatewayException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-48- this.validateGatewayInputBeforeSending(originator, phoneNr, message); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-49- HttpSmsGatewayWorkflow workflow = new HttpSmsGatewayWorkflow(this.getHttpClient()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-50- return workflow.executeToVerifiedMessage(new TrueSensesSmsGatewaySendMessage(this, originator, phoneNr, message, isFlashMsg)); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-51- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/TrueSensesSmsGateway.java-52- -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-25- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-26- exampleValues = "https://messagingproxy.swisscom.ch:4300/rest/1.0.0/" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-27- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-28- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-29- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-30- private String serviceUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-31- @StringProperty(displayName = "Account ID", description = "The account id as provided by Swisscom (e.g. Short ID).", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-32- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-33- private String accountId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-34- @StringProperty(displayName = "System ID", description = "The system id as provided by Swisscom (e.g. Short ID).", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-35- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-36- private String systemId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java:37: @StringProperty(description = "The password as provided by Swisscom.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-38- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-39- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-40- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-41- description = "The TON (type of number) value to use for the source address.

Swisscom recommends the following setups:

  • Source TON = 1 (International)
  • Source NPI = 1 (ISDN)
  • Swisscom Large Account source address in international format without '+' or '00' in front (e.g. 41791112233)

  • Source TON = 5 (Alphanumeric number)
  • Source NPI = 0 (Unknown)
  • Swisscom Large Account source address as any text (e.g. Provider XY)
  • Please be aware that most operators abroad of Switzerland are blocking messages with alphanumeric sender addresses

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-42- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-43- defaultValue = "ALPHANUMERIC", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-44- displayName = "Source TON" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-45- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-46- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-47- private SmppTon sourceTon; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-48- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-49- description = "The NPI (numbering plan identification) value for the source address to assign it to a subscriber telephone number in a telecommunications network.

Swisscom recommends the following setups:

  • Source TON = 1 (International)
  • Source NPI = 1 (ISDN)
  • Swisscom Large Account source address in international format without '+' or '00' in front (e.g. 41791112233)

  • Source TON = 5 (Alphanumeric number)
  • Source NPI = 0 (Unknown)
  • Swisscom Large Account source address as any text (e.g. Provider XY)
  • Please be aware that most operators abroad of Switzerland are blocking messages with alphanumeric sender addresses

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-50- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-51- defaultValue = "UNKNOWN", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-52- displayName = "Source NPI" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-53- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-54- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-55- private SmppNpi sourceNpi; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-56- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwisscomRestSmsGateway.java-57- @Override -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-41- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-42- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-43- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-44- public static final String PROXY_HOST_FIELD = "proxyHost"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-45- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-46- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-47- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-48- public static final String PROXY_PORT_FIELD = "proxyPort"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-49- public static final ImmutableList PROXY_PROPERTIES = ImmutableList.of("proxyHost", "proxyPort"); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-50- @StringProperty(description = "Username for the http proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-51- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-52- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java:53: @StringProperty(description = "Password for the http proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-54- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-55- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-56- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-57- description = "

Only allow connections to servers whose certificate is trusted.\nSee documentation of property \"Trust Store Path\" for more information about what certificates are trusted.

\n

Security warning: Trusting all certificates allows connections to adversarial hosts.\nOnly disable this property for testing and integration setups.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-58- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-59- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-60- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-61- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-62- private boolean allowOnlyTrustedCerts; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-63- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-64- description = "

Enables hostname verification, i.e. the actual hostname must be the same as in the server certificate.

\n

Security warning: Not verifying the hostname may allow connections to adversarial hosts,\ne.g. if they employ DNS spoofing. Only disable this property for testing and integration setups.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-65- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-66- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-67- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-68- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-69- private boolean verifyServerHostname; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-70- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-71- description = "Keystore file name containing trusted certificate issuers (and trusted certificates).\n

If this property is not defined the following certificate issuers are trusted:\n

    \n
  • The list of issuers known to the Java VM if the system property \"javax.net.ssl.trustStore\" is not defined.
  • \n
  • The list of issuers in a keystore referenced by system property \"javax.net.ssl.trustStore\" if defined in instance.properties using iam.java.opts
  • \n

\n

If this property is defined then the following certificate issuers are trusted:\n

    \n
  • The list of issuers in the referenced truststore file and no others.
  • \n

This property is only relevant if the property \"Allow Only Trusted Certs\" is enabled.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-72- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-73- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-74- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-75- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-76- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-77- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-78- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-79- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-80- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-81- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-82- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-83- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-84- description = "The password used verify the authenticity of the trust store.

\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t

    \t\t
  • JKS: the keystore can be opened and used but the integrity of the keystore is not checked.
  • \t\t
  • PKCS12: an error occurs.
  • \t

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-85- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java:86: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-87- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-88- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-89- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-90- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-91- description = "The connection and read timeout in seconds.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-92- displayName = "Connect/Read Timeout [s]", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-93- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-94- exampleValues = {5, 10}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-95- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-96- defaultValue = 10 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-97- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-98- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-99- private int connectTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-100- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-101- description = "

When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.

\n

If the correlation ID is not defined, the correlation ID header is not included in sent requests.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-102- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-103- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-104- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-105- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-106- ) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-59- .put("608", "MultiModem iSMS is busy, can't accept this request") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-60- .put("609", "Timeout waiting for a TCP API request") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-61- .put("610", "Unknown Action Trigger") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-62- .put("611", "Error in broadcast trigger") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-63- .put("612", "System Error - Memory Allocation Failure") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-64- .put("613", "Invalid Modem Index") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-65- .put("614", "Invalid device model number") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-66- .build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-67- @StringProperty(description = "Username used to send an SMS over this gateway.", optional = false, exampleValues = "fmuster") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-68- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-69- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = SmsFinderGateway.SmsFinderGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-70- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java:71: @StringProperty(description = "Password used to send and SMS over this gateway.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-72- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-73- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-74- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-75- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-76- displayName = "Service URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-77- description = "URL of the Gateway's HTTP interface.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-78- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-79- exampleValues = "http://172.24.33.55:5000/sendmsg" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-80- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-81- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-82- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SmsFinderGateway.SmsFinderGatewayTcpTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-83- private String serviceUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-84- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-85- description = "Modem index to send SMS (available only for SF 400/800 models). If modem is not specified in the request, the send request will be distributed via all the available modems.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-86- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-87- minValue = 0, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-88- maxValue = 8, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-89- exampleValues = {0, 1} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-90- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-91- @GroupProperty(groupIdentifier = "Advanced Settings") -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-44- private static final ResourcePool POOL = new ResourcePool<>(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-45- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-46- description = "Host address with port of the SMPP SMS Gateway.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-47- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-48- exampleValues = {"194.298.234.64:8080", "smpp3.infobip.com:8888", "smpp2.infobip.com:8887"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-49- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-50- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-51- private String serverWithPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-52- private static final String SERVER_WITH_PORT_FIELD = "serverWithPort"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-53- @StringProperty(description = "Username or System ID of the registered SMPP account.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-54- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-55- private String accountUsername; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java:56: @StringProperty(description = "Password of the SMPP account.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-57- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-58- private String accountPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-59- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-60- description = "How to bind to the SMPP Gateway.
SMPP supports:
  • Transceiver: send and receive SMS
  • Transmitter: send SMS
  • Receiver: receive SMS
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-61- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-62- defaultValue = "TRANSCEIVER" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-63- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-64- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-65- private SmppBindType smppBindType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-66- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-67- description = "

The charset to encode messages. This parameter is specified by the SMSC Server and must correlate with the \"Data Coding Scheme\" below. Notice that some charsets use more bytes than others to encode (certain) characters and thus reduce the maximum size of the message.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-68- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-69- defaultValue = "ISO_8859_1" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-70- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-71- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-72- private SmppEncodingCharset messageEncodingCharset; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-73- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-74- description = "

The DCS or Data Coding Scheme indicates to the SMSC Server how the binary message shall be interpreted. A value of 0x00 (the default) leaves the decision to the server. Unless it is configurable on the server, a more specific DCS should be chosen based on the charset above.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-75- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-76- defaultValue = "DEFAULT" -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-169- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-170- private boolean useSsl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-171- private static final String USE_SSL_FIELD = "useSsl"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-172- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-173- description = "The path of the JKS trust store. Mandatory property if SSL is turned on.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-174- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-175- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-176- exampleValues = "directory/keystore.jks" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-177- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-178- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-179- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-180- private static final String TRUST_STORE_PATH_FIELD = "trustStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java:181: @StringProperty(description = "The password of the JKS trust store. Mandatory property if SSL is turned on.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-182- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-183- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-184- private static final String TRUST_STORE_PASSWORD_FIELD = "trustStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-185- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-186- @ConfigurationValidator work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-187- public static void checkSslConfig(PluginConfiguration conf, ConfigurationEnvironment env, ConfigurationContext context, Environment validationEnvironment) throws ConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-188- Boolean useSslConfig = BooleanPropertyValueReader.effectiveBooleanPropertyValue(conf, "useSsl", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-189- if (useSslConfig) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-190- if (StringUtils.isEmpty(FilePropertyValueReader.effectiveFilePropertyValue(conf, "trustStorePath", env, context))) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-191- throw new MandatoryPropertyMissingException("trustStorePath", conf, env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-192- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-193- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-194- if (!PasswordPropertyProcessor.isDefined(conf, "trustStorePassword", env, context)) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-195- throw new MandatoryPropertyMissingException("trustStorePassword", conf, env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-196- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-197- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-198- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-199- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-200- @ConfigurationValidator work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-201- public static void checkServerIpAndPort( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-33- private static final ELogger LOG = ELoggerFactory.getLogger(AspSmsGateway.class); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-34- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-35- description = "Userkey as provided in the ASPSMS portal.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-36- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-37- exampleValues = "myaspsmslogin" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-38- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-39- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = AspSmsGateway.AspSmsGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-40- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-41- private String accountUsername; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-42- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-43- description = "API Password as provided in the ASPSMS portal.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-44- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java:45: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-47- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-48- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-49- private String accountPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-50- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-51- displayName = "Service URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-52- description = "The URI of the ASPSMS service.
See note in plug-in description when using SSL (HTTPS instead of HTTP).

Use the plugin FailoverSmsGateway to use multiple ASPSMS URLs for increased availability.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-53- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-54- suggestedValues = {"https://xml3.aspsms.com/xmlsvr.asp", "https://xml4.aspsms.com/xmlsvr.asp"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-55- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-56- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SmsGatewayTestlet.SmsGatewayTcpTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-57- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-58- private String serviceUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-59- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-60- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-61- public String sendSms(String originator, String phoneNr, String message, boolean isFlashMsg) throws SmsGatewayException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-62- this.validateGatewayInputBeforeSending(originator, phoneNr, message); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-63- HttpSmsGatewayWorkflow workflow = new HttpSmsGatewayWorkflow(this.getHttpClient()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-64- return workflow.executeToVerifiedMessage(new AspSmsGatewaySendMessage(this, originator, phoneNr, message, isFlashMsg)); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-65- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-4-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-5-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-6- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-7-@Plugin(description = "A HTTP REST Request header with a sensitive header value.", displayName = "Sensitive Static REST Request Header") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-8-public class SensitiveStaticRestRequestHeaderConfig implements StaticRestRequestHeaderConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-9- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-10- description = "The header name of the HTTP REST Request header.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-11- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-12- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-13- exampleValues = {"App-ID", "App-Key"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-14- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-15- private String headerName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java:16: @StringProperty(description = "The header value of the HTTP REST Request header.", optional = false, isSensitive = true, exampleValues = "App-1") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-17- private String headerValue; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-18- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-19- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-20- public String getHeaderName() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-21- return this.headerName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-22- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-23- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-24- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-25- public String getHeaderValue() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-26- return this.headerValue; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-27- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-28- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-29- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-30- public static SensitiveStaticRestRequestHeaderConfig.SensitiveStaticRestRequestHeaderConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-31- return new SensitiveStaticRestRequestHeaderConfig.SensitiveStaticRestRequestHeaderConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-32- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-33- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-34- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-35- public SensitiveStaticRestRequestHeaderConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/SensitiveStaticRestRequestHeaderConfig.java-36- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-70- description = "The keystore containing the web server certificate. These certificates are trusted when establishing mutual SSL connections for HTTPS REST calls.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-71- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-72- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-73- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-74- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-75- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-76- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-77- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-78- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-79- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-80- description = "The password used to check the integrity of the truststore, or to unlock the truststore.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-81- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java:82: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-83- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-84- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-85- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-86- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-87- description = "The keystore containing a client certificate (including a private key) for Airlock IAM. The client certificate is used to establish mutual SSL connections for HTTPS REST calls.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-88- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-89- exampleValues = {"keystore.jks", "/etc/airlock/keystore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-90- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-91- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-92- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-93- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-94- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-95- private File keyStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-96- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-97- description = "The password used to check the integrity of the keystore, or to unlock the keystore. Must be provided in case the keystore is configured.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-98- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java:99: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-100- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-101- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-102- private String keyStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-103- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-104- description = "The credentials for HTTP Basic Authentication. If configured, the Basic Authentication header is sent along with each REST call. If not configured, no Basic Authentication header is sent.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-105- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-106- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-107- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-108- private BasicAuthCredentialsConfig basicAuthCredentials; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-109- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-110- description = "This property specifies how the entity is serialized to the output stream; if buffering is used or the entity is streamed in chunked encoding.

The options are:

  • BUFFERED: the entity will be buffered and the content length will be sent in the Content-Length header.
  • CHUNKED: chunked encoding will be used and the entity will be streamed.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-111- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-112- defaultValue = "CHUNKED" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-113- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-114- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-115- private RequestEntityProcessing requestEntityProcessing; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-116- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-117- displayName = "Connection Manager Timeout [ms]", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-118- description = "The timeout (in milliseconds) to wait for connection from the connection manager/pool (http.connection-manager.timeout). Setting this value to 0 disables the timeout and the thread would be blocked by waiting indefinitely for a new connection until one gets released back to the pool.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-119- optional = true, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-125- private int connectionManagerTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-126- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-127- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be utilized.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-128- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-129- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-130- exampleValues = "proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-131- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-132- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-133- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-134- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-135- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-136- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java:137: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-138- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-139- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-140- @PluginListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-141- displayName = "Static REST Request Headers", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-142- description = "A list of static request headers added to each request made with this REST Client.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-143- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-144- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-145- @GroupProperty(groupIdentifier = "Static Request Header Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-146- private List staticRestRequestHeaders; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-147- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-148- displayName = "Static REST Request Header Strategy", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-149- description = "This property specifies the behaviour when the request already contains a header for a configured header name. If no static request headers are configured, this property has no impact.

The options are:

  • OVERWRITE_EXISTING: if there is already a value for the configured header name it is overwritten with the configured value.
  • KEEP_ORIGINAL: the already existing header value is kept and the configured value is ignored.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-150- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-151- defaultValue = "OVERWRITE_EXISTING" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-152- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-153- @GroupProperty(groupIdentifier = "Static Request Header Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-154- private RestClientConfig.StaticHeaderStrategy staticRestRequestHeaderStrategy; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-155- private RestClient restClient; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-156- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/restclient/RestClientConfig.java-157- public RestClientConfig( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-20- private static final int DEFAULT_PROXY_PORT = 8080; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-21- private static final int SAMPLE_PROXY_PORT = 3182; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-22- private static final int DEFAULT_CONNECTION_TIMEOUT_SECS = 5; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-23- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-24- description = "Username used to fetch the CRL when a basic authentication is required the access the URL. Used in conjunction with property basic-auth-password.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-25- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-26- exampleValues = "johndoe" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-27- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-28- private String basicAuthUsername; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-29- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-30- description = "Password used to fetch the CRL when basic authentication is required to access the URL. Used in conjunction with property basic-auth-username.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-31- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java:32: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-33- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-34- private String basicAuthPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-35- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-36- description = "The http proxy host if connections to the specified URL must be made using a http proxy.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-37- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-38- exampleValues = {"gw.foo.bar", "192.168.12.13"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-39- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-40- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-41- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-42- description = "The http proxy port if connections to the specified URL must be made using a http proxy.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-43- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-44- exampleValues = {8080, 3182}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-45- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-46- maxValue = 65535 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-47- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-48- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-49- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-50- description = "The user for authentication at the http proxy server. Using a http proxy does not necessarily make this property necessary. This depends on the proxy configuration.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-51- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-52- exampleValues = {"felix", "jdoe"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-53- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-54- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-55- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-56- description = "The password for authentication at the http proxy server. Using a http proxy does not necessarily make this property necessary. This depends on the proxy configuration.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-57- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java:58: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-59- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-60- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-61- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-62- description = "

Only allow connections to servers whose certificate is trusted.\nSee documentation of property \"Trust Store Path\" for more information about what certificates are trusted.

\n

Security warning: Trusting all certificates allows connections to adversarial hosts.\nOnly disable this property for testing and integration setups.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-63- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-64- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-65- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-66- private boolean allowOnlyTrustedCerts; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-67- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-68- description = "

Enables hostname verification, i.e. the actual hostname must be the same as in the server certificate.

\n

Security warning: Not verifying the hostname may allow connections to adversarial hosts,\ne.g. if they employ DNS spoofing. Only disable this property for testing and integration setups.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-69- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-70- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-71- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-72- private boolean verifyServerHostname; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-73- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-74- description = "Keystore file name containing trusted certificate issuers (and trusted certificates).\n

If this property is not defined the following certificate issuers are trusted:\n

    \n
  • The list of issuers known to the Java VM if the system property \"javax.net.ssl.trustStore\" is not defined.
  • \n
  • The list of issuers in a keystore referenced by system property \"javax.net.ssl.trustStore\" if defined in instance.properties using iam.java.opts
  • \n

\n

If this property is defined then the following certificate issuers are trusted:\n

    \n
  • The list of issuers in the referenced truststore file and no others.
  • \n

This property is only relevant if the property \"Allow Only Trusted Certs\" is enabled.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-75- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-76- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-77- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-78- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-79- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-80- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-81- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-82- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-83- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-84- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-85- description = "The password used verify the authenticity of the trust store.

\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t

    \t\t
  • JKS: the keystore can be opened and used but the integrity of the keystore is not checked.
  • \t\t
  • PKCS12: an error occurs.
  • \t

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-86- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java:87: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-88- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-89- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-90- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-91- displayName = "Connect/Read Timeout [s]", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-92- description = "The connection and read timeout in seconds. A timeout value of zero is interpreted as 60 seconds.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-93- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-94- exampleValues = 5, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-95- minValue = 0, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-96- defaultValue = 5 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-97- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-98- private int connectTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-99- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-100- description = "

When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.

\n

If the correlation ID is not defined, the correlation ID header is not included in sent requests.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-101- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-102- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-103- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-104- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-105- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-106- private String correlationIdHeaderName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-107- private CloseableHttpClient httpClient; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-28- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-29-public abstract class JwtTicketVerifierSettings implements JwtSignatureVerifier { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-30- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-31- description = "Keystore that holds the certificate containing the public key for JWT signature verification. Alternatively, it can be a file containing a PEM encoded public key.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-32- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-33- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-34- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-35- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-36- exampleValues = {"keystore.p12", "/etc/airlock/keystore.jks", "public_key.pem"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-37- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-38- private File keystorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-39- private static final String KEY_STORE_NAME = "keystorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java:40: @StringProperty(description = "Password for the keystore.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-41- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-42- private static final String KEY_STORE_PASSWORD_NAME = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-43- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-44- description = "Alias for the X.509 certificate contained in the keystore that should be used for signature verification. This field can be omitted if the keystore only contains one X.509 certificate with a public key.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-45- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-46- displayName = "X.509 Certificate Alias" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-47- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-48- private String x509CertificateAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-49- private static final String CERTIFICATE_ALIAS_NAME = "x509CertificateAlias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-50- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-51- protected static void validateConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-52- PluginConfiguration pc, ConfigurationEnvironment env, ConfigurationContext context, SignatureAlgorithm signatureAlgorithm work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-53- ) throws PropertyConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-54- Optional publicKeyError = publicKeyValidation(pc, env, context, signatureAlgorithm); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-55- Optional keyStoreError = keyStoreValidation(pc, env, context, signatureAlgorithm); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-56- if (keyStoreError.isPresent() && publicKeyError.isPresent()) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-57- throw new PropertyConstraintViolationException( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-58- "x509CertificateAlias", pc, env, context, keyStoreError.get().getMessage(), keyStoreError.get().getCause().orElse(null) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-59- ); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-60- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-54- description = "Keystore file name containing trusted certificates of trusted OCSP responders.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-55- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-56- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-57- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-58- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-59- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-60- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-61- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-62- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-63- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-64- description = "The password used verify the authenticity of the trust store.\n

Depending on the keystore type, leaving this property empty (or undefined) has a different effect:\n\t

    \n\t\t
  • JKS: the keystore can be opened and used but the integrity of the keystore is not checked.
  • \n\t\t
  • PKCS12: an error occurs.
  • \n\t
\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-65- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java:66: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-67- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-68- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-69- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-70- description = "Request and response are cryptographically bound using a nonce to prevent replay attacks. IAM always sends a nonce\nwith the request and validates the nonce in the response. For OCSP servers that don't return the nonces, validation\ncan be disabled.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-71- defaultValue = "false", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-72- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-73- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-74- private boolean disableNonceValidation; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-75- private final OcspAccessLocationResolver locationResolver; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-76- private final OcspResponseValidator responseValidator; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-77- private final NonceGenerator nonceGenerator; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-78- private KeyStore keyStore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-79- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-80- public OcspCertificateStatusChecker() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-81- this.locationResolver = new CertificateAuthInfoBasedOcspAccessLocationResolver(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-82- this.responseValidator = new OcspResponseSignatureAndNonceValidator(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-83- this.nonceGenerator = new SecureRandomNonceGenerator(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-84- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-85- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/ocsp/OcspCertificateStatusChecker.java-86- public boolean isRevoked(X509Certificate certificate) { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-33-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-34-public class JwtTicketHmacSettings implements JwtSigner, JwtSignatureVerifier { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-35- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-36- description = "The HMAC algorithm. The configured secret must be long enough for the configured hash function (e.g. >= 512 bits for HS512).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-37- defaultValue = "HS512", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-38- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-39- displayName = "HMAC Algorithm" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-40- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-41- private JwsAlgorithmHmac hmacAlgorithm; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-42- private static final String HMAC_ALGORITHM_NAME = "hmacAlgorithm"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-43- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-44- description = "

The key for the HMAC function, encoded in base64.
The minimal required length depends on the configured algorithm and must be at least 256 bits. Configuration validation will fail if the secret is too short.

One can, for example, generate a random base64 string with 512 bits (64 bytes) using OpenSSL as follows: openssl rand -base64 64

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java:45: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-46- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-47- displayName = "HMAC Key (Base64 Encoded)" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-48- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-49- private String hmacKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-50- private static final String HMAC_KEY_PROPERTY_NAME = "hmacKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-51- private HmacJwtSigner ticketSigner; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-52- private JwtSignatureVerifier ticketVerifier; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-53- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-54- public JwtTicketHmacSettings(JwsAlgorithmHmac hmacAlgorithm, String hmacKey) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-55- this.hmacAlgorithm = hmacAlgorithm; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-56- this.hmacKey = hmacKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-57- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-58- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-59- @ConfigurationValidator work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-60- public static void ensureHmacAlgorithmAndKeyWork(PluginConfiguration pc, ConfigurationEnvironment env, ConfigurationContext context, Environment valenv) throws PropertyConstraintViolationException, PropertyTypeMismatchException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-61- if (valenv == Environment.CURRENT_VM) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-62- JwsAlgorithmHmac hmacAlgorithm = (JwsAlgorithmHmac)EnumPropertyValueReader.effectiveConfigEnum(pc, "hmacAlgorithm", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-63- String hmacKey = StringPropertyValueReader.effectiveStringConfigValue(pc, "hmacKey", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-64- Optional signerError = HmacJwtSigner.validate(hmacAlgorithm, hmacKey); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketHmacSettings.java-65- Optional verifierError = JwtSignatureVerifierImpl.validate(hmacAlgorithm, hmacKey); -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-111- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-112- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-113- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-114- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-115- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-116- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-117- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-118- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-119- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-120- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-121- description = "The password used verify the authenticity of the trust store.

\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t

    \t\t
  • In keystores like JKS, the keystore can be opened and used but the integrity of the keystore is not checked.
  • \t\t
  • In keystores like PKCS12, the keystore cannot be opened an an error occurs.
  • \t

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-122- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java:123: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-124- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-125- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-126- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-127- displayName = "Connect/Read Timeout [s]", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-128- description = "The connection and read timeout in seconds. A timeout value of zero is interpreted as 60 seconds.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-129- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-130- exampleValues = {5, 10, 0}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-131- minValue = 0, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-132- defaultValue = 10 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-133- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-134- private int connectTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-135- private static final String CONNECT_TIMEOUT_PROPERTY = "connectTimeout"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-136- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-137- description = "

When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.

\n

If the correlation ID is not defined, the correlation ID header is not included in sent requests.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-138- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-139- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-140- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-141- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-142- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-143- private String correlationIdHeaderName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-144- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-145- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-146- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-147- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-148- @StringProperty(description = "Username for the HTTP proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-149- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java:150: @StringProperty(description = "Password for the HTTP proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-151- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-152- @PluginListProperty(description = "A list of cookies to expect and send back to the client.", minElements = 1, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-153- private List cookies; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-154- @SuppressFBWarnings("UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-155- private HttpClient httpClient; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-156- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-157- public AccessCookieIdentityPropagator( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-158- String accessCookieSourceUrl, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-159- String httpParamUsername, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-160- List httpParams, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-161- String httpParamPassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-162- boolean allowOnlyTrustedCerts, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-163- boolean verifyServerHostname, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-164- String correlationIdHeaderName, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-165- File trustStorePath, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-166- String trustStoreType, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-167- String trustStorePassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-168- int connectTimeout, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-169- String proxyHost, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-170- Integer proxyPort, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-37- static final String CERTIFICATE_THUMBPRINTS = "Certificate Thumbprints"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-38- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-39- description = "Keystore that holds the private key for JWT token signing.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-40- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-41- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-42- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-43- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-44- exampleValues = {"keystore.p12", "/etc/airlock/keystore.jks"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-45- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-46- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-47- private File keystorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-48- static final String KEY_STORE_NAME = "keystorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java:49: @StringProperty(description = "Password for the keystore.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-50- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-51- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-52- private static final String KEY_STORE_PASSWORD_NAME = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-53- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-54- description = "Alias for the private key contained in the keystore that should be used for signing. This field can be omitted if the keystore only contains one EC private key with the configured password.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-55- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-56- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-57- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-58- private String privateKeyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-59- static final String PRIVATE_KEY_ALIAS_NAME = "privateKeyAlias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java:60: @StringProperty(description = "Password for the private key in the keystore.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-61- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-62- private String privateKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-63- static final String PRIVATE_KEY_PASSWORD_NAME = "privateKeyPassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-64- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-65- description = "If enabled, the KID of the public key used to sign a JWT is added to the JWT header. Consumers of the JWT can\nuse the KID to identify the public key that is verifying the signature.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-66- displayName = "Include KID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-67- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-68- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-69- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-70- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-71- private boolean includeKid; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-72- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-73- description = "Indicates whether the x5t#S256 header parameter containing a SHA-256 certificate thumbprint should be added to the JWT header.

The 'Private Key Alias' is used to find the X.509 certificate in the keystore to compute the thumbprint for. I.e., it is assumed that the alias identifies a private key with the corresponding certificate. If no 'Private Key Alias' is configured, the keystore is assumed to contain exactly one certificate.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-74- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-75- displayName = "Add x5t#S256 Header Parameter", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-76- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-77- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-78- @GroupProperty(groupIdentifier = "Certificate Thumbprints") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-79- private boolean addX5tS256HeaderParameter; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-80- static final String ADD_X5TS256_HEADER_PARAMETER_NAME = "addX5tS256HeaderParameter"; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-30- displayName = "JWT Ticket Direct AES Encryption Settings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-31-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-32-public class JwtTicketDirectAesEncryptionSettings implements JwtTicketEncrypter, JwtTicketDecrypter { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-33- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-34- description = "The algorithm used for direct encryption. The configured secret must match the length requirements for the configured direct encryption method, see property 'Encryption Key'.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-35- defaultValue = "A256GCM", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-36- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-37- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-38- private DirectEncryptionMethod directEncryptionMethod; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-39- public static final String DIRECT_ENCRYPTION_METHOD_NAME = "directEncryptionMethod"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-40- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-41- description = "

The key for the selected direct encryption method, encoded in base64. The minimal required length depends on the configured encryption method and must be chosen as follows:

  • A128GCM: 128 bits / 16 bytes
  • A192GCM: 192 bits / 24 bytes
  • A256GCM: 256 bits / 32 bytes
  • A128CBC_HS256: 256 bits / 32 bytes
  • A192CBC_HS384: 384 bits / 48 bytes
  • A256CBC_HS512: 512 bits / 64 bytes

One can, for example, generate a random base64 string with 256 bits (32 bytes) using OpenSSL as follows: openssl rand -base64 32

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java:42: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-43- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-44- displayName = "Encryption Key (Base64 Encoded)" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-45- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-46- private String encryptionKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-47- public static final String ENCRYPTION_KEY_PROPERTY_NAME = "encryptionKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-48- private JwtTicketDirectAesEncrypterDecrypter ticketEncryption; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-49- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-50- public JwtTicketDirectAesEncryptionSettings(DirectEncryptionMethod directEncryptionMethod, String encryptionKey) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-51- this.directEncryptionMethod = directEncryptionMethod; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-52- this.encryptionKey = encryptionKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-53- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-54- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-55- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-56- static void ensureEncryptionMethodAndKeyWork(PluginConfiguration pc, ConfigurationEnvironment env, ConfigurationContext context, Environment valenv) throws PropertyConstraintViolationException, PropertyTypeMismatchException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-57- if (valenv == Environment.CURRENT_VM) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-58- DirectEncryptionMethod encryptionMethod = (DirectEncryptionMethod)EnumPropertyValueReader.effectiveConfigEnum( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-59- pc, "directEncryptionMethod", env, context work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-60- ); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-61- String encryptionKey = StringPropertyValueReader.effectiveStringConfigValue(pc, "encryptionKey", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-62- Optional error = JwtTicketDirectAesEncrypterDecrypter.validate(encryptionMethod, encryptionKey); -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-156- description = "Number of Cronto device usages required before a user is asked again whether push notifications should be activated for this device. A value of \"1\" means that the user is asked upon every login.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-157- defaultValue = 3, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-158- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-159- maxValue = 100, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-160- exampleValues = {1, 3, 5, 10}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-161- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-162- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-163- @GroupProperty(groupIdentifier = "Push Notifications Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-164- private int pushNotificationsReminderPeriod; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-165- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-166- description = "The Cronto Service Code used to generate the Cronto challenges. If the value is empty the Service Code of IAM will be used. Normally there is no need to overwrite this property.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-167- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java:168: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-169- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-170- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-171- private String serviceCode; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-172- private CrontoEngineUtils crontoEngineUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-173- @PluginProperty(description = "Plugin responsible for sending Cronto push notifications.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-174- @GroupProperty(groupIdentifier = "Push Notifications Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-175- private CrontoPushNotificationSender pushNotificationSender; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-176- private static final String PUSH_NOTIFICATION_SENDER_FIELD = "pushNotificationSender"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-177- private CrontoSignSwissPushAppHandler pushAppHandler; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-178- private CrontoEngineTokenManager crontoEngineTokenManager; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-179- private TimeProvider timeProvider; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-180- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-181- public CrontoEngineHandler( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-182- TokenDataProvider tokenDataProvider, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-183- int defaultNumberOfActivations, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-184- Integer defaultLetterValidityTime, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-185- boolean selectableAsAuthMethod, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-186- boolean selectableAsNextAuthMethod, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-187- Boolean enableOnScreenActivation, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/crontoengine/CrontoEngineHandler.java-188- boolean enableOnScreenActivationWithLetter, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-14-import java.security.KeyStoreException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-15-import java.util.Optional; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-16- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-17-@Plugin(displayName = "Public/Private JWK Configuration", description = "Configuration for retrieving a public/private JWK, stored in a keystore.") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-18-public class JWKPairFromKeyStoreConfig implements JWKPairConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-19- @PluginProperty(description = "The Keystore containing the corresponding private/public keypair.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-20- private KeystoreConfig keyStore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-21- @StringProperty(description = "Entry name of the Public/Private Keypair in the keystore.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-22- private String keyPairAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-23- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-24- description = "Password for decrypting the private key configured above. Can be left empty if the private key was not encrypted.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-25- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java:26: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-27- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-28- private String privateKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-29- private JWK keyPair; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-30- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-31- public JWKPairFromKeyStoreConfig(KeystoreConfig keyStore, String keyPairAlias, String privateKeyPassword) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-32- this.keyStore = keyStore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-33- this.keyPairAlias = keyPairAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-34- this.privateKeyPassword = privateKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-35- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-36- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-37- @AfterConfigActivation work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-38- void loadKeys() throws InitializeException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-39- KeyStore loadedKeyStore = this.keyStore.loadKeystore(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-40- Optional optPrivateKeyPassword = Optional.ofNullable(this.privateKeyPassword); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-41- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-42- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-43- this.keyPair = loadKeyPair(loadedKeyStore, this.keyPairAlias, optPrivateKeyPassword); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-44- } catch (RuntimeException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-45- throw new InitializeException("Error while loading JWK key pair.", e); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/JWKPairFromKeyStoreConfig.java-46- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-65- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-66- exampleValues = {"certificate.p12", "/etc/airlock/certificate.p12"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-67- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-68- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-69- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-70- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-71- @GroupProperty(groupIdentifier = "iOS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-72- private File iOsAuthenticationCertificatePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-73- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-74- displayName = "iOS Authentication Certificate Password", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-75- description = "Password of the PKCS #12 client certificate used for the communication with the server when sending push notifications to Apple iOS devices.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-76- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java:77: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-78- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-79- @GroupProperty(groupIdentifier = "iOS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-80- private String iOsAuthenticationCertificatePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-81- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-82- description = "The bundle ID for sending notifications to iOS. Typically the same as used for creating the iOS authentication certificate.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-83- displayName = "iOS Bundle ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-84- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-85- suggestedValues = {"com.vasco.digipass.DIGIPASS", "com.cronto.crontosign.swiss"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-86- defaultValue = "com.vasco.digipass.DIGIPASS" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-87- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-88- @GroupProperty(groupIdentifier = "iOS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-89- private String iOsBundleId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-90- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-91- displayName = "Use iOS Sandbox Gateway", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-92- description = "Status of the gateway to be used. The sandbox gateway must be used for application development. This Boolean must be consistent with the issued PKCS #12 certificate.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-93- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-94- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-95- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-96- @GroupProperty(groupIdentifier = "iOS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cronto/pushnotification/CommonCrontoPushNotificationSender.java-97- private boolean iOsUseSandboxGateway; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-21-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-22-import java.util.Optional; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-23- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-24-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-25- displayName = "Storage Encryption Configuration", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-26- description = "

Defines how data is encrypted when stored on the database.

Beware that changing the configured secret may result in data loss.

" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-27-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-28-public class StorageEncryptionConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-29- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-30- displayName = "Secret (Base64-encoded)", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-31- description = "

A Base64-encoded secret. It must be exactly 768 bits (96 bytes or 128 Base64-encoded characters) long.

One can, for example, generate a random Base64 string with 768 bits (96 bytes) using openssl as follows: openssl rand -base64 96

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-32- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java:33: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-34- minLength = 128, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-35- maxLength = 128 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-36- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-37- private String secret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-38- public static final String SECRET_PROPERTY_NAME = "secret"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-39- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-40- public JwtSecret getJwtSecret() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-41- return JwtSecret.jwtSecret(this.secret); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-42- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-43- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-44- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-45- static void ensureHmacAlgorithmAndKeyWork(PluginConfiguration config, ConfigurationEnvironment env, ConfigurationContext context, Environment valenv) throws PropertyConstraintViolationException, PropertyTypeMismatchException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-46- if (!validationNotPossible(config, env, context, valenv)) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-47- JwtSecret jwtSecret = readJwtSecret(config, env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-48- String hmacKey = jwtSecret.getJwtKeys().hmacKey(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-49- Optional signerError = HmacJwtSigner.validate(JwsAlgorithmHmac.HS512, hmacKey); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-50- Optional verifierError = JwtSignatureVerifierImpl.validate(JwsAlgorithmHmac.HS512, hmacKey); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-51- if (signerError.isPresent() || verifierError.isPresent()) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-52- JwtSettingsValidationError error = signerError.orElseGet(verifierError::get); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-53- throw new PropertyConstraintViolationException("secret", config, env, context, error.getMessage(), error.getCause().orElse(null)); -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-15-import java.util.Objects; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-16-import org.apache.commons.lang3.StringUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-17- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-18-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-19- description = "Settings for OATH OTP (one time password) authentication.
It can be used to verify counter based HOTP (event-triggered, incrementing counter) or to verify time based TOTP (draft standard).
On the client side we tested it with 'Google Authenticator' which was available for Android, iPhone and Blackberry at the time this plugin has been developed.

References:
HOTP RFC 4226 http://www.ietf.org/rfc/rfc4226.txt
TOTP RFC 6238 http://www.ietf.org/rfc/rfc6238.txt

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-20- displayName = "OATH OTP Settings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-21-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-22-@PluginLicenseRestriction(moduleAffiliation = {"MobileOTP", "OathOtp"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-23-@Groups(groupSequence = {"Basic Settings", "Administration Settings"}, openGroups = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-24-public class OathOtpSettings { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-25- public static final String ADMIN_ACTION_SETTINGS = "Administration Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-26- public static final String MOBILE_OTP = "MobileOTP"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java:27: @StringProperty(description = "The password to encrypt the shared secret of each users OATH OTP token.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-28- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-29- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-30- @PluginProperty(description = "Configure which persister is used to store token information.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-31- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-32- private CredentialPersister credentialPersister; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-33- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-34- description = "This property defines if we use time based one time passwords (TOTP), or HMAC based one time passwords (HOTP). HOTP uses an incrementing counter; each OTP is generated on the client by an explicit request, as pressing a button, which will increment the counter on client side. TOTP uses time slots instead of counters.

More formal:
hotp := truncate(secureHash(sharedSecret, counter))
totp := truncate(secureHash(sharedSecret, time_slot))

We implement HOTP as defined in RFC 4226
and for TOTP we follow the draft standard
http://www.ietf.org/id/draft-mraihi-totp-timebased-06.txt).

The default is TOTP.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-35- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-36- defaultValue = TotpChallengeHandler.class work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-37- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-38- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-39- private ChallengeHandler tokenType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-40- public static final String TOKEN_TYPE_PROPERTY_NAME = "tokenType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-41- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-42- description = "Defines the name of a context data property with the organization label.

The label is used together with the username as label of the OTP generator (usually, a mobile app can display multiple OTP generators).

Make sure the context data property is provided by the configured credential persister.

Note that spaces will be removed from the label (not allowed in some mobile clients).

If this property is not defined or the referenced context data value is empty, the default label is used (see separate configuration property).

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-43- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-44- displayName = "Token Label Context Property", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-45- exampleValues = {"company", "instance_id"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-47- @GroupProperty(groupIdentifier = "Basic Settings") -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-52- exampleValues = {"rediss://redis:6379", "redis://localhost:6379"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-53- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-54- displayName = "Redis URI" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-55- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-56- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-57- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SingleModeRedisStateRepositoryConfig.RedisTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-58- private String redisUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-59- static final String REDIS_URI_PROPERTY = "redisUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-60- static final String REDIS_URI_DISPLAY_NAME = "Redis URI"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-61- @StringProperty(description = "The username to login on Redis.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-62- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-63- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java:64: @StringProperty(description = "The password to login on Redis.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-65- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-66- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-67- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-68- description = "The minimum amount of idle Redis connections.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-69- displayName = "Minimum Idle Connections", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-70- defaultValue = 24, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-71- minValue = 0, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-72- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-73- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-74- @GroupProperty(groupIdentifier = "Performance Tuning") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-75- private Integer minimumIdleConnections; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-76- private static final String MINIMUM_IDLE_CONNECTIONS_PROPERTY = "minimumIdleConnections"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-77- private static final String MINIMUM_IDLE_CONNECTIONS_DISPLAY_NAME = "Minimum Idle Connections"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-78- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-79- description = "The maximum Redis connection pool size.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-80- displayName = "Maximum Pool Size", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-81- defaultValue = 64, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-82- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-83- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-84- ) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-129- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-130- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-131- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-132- displayName = "Trust Store Path" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-133- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-134- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-135- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-136- static final String TRUST_STORE_PATH_FIELD = "trustStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-137- static final String TRUST_STORE_PATH_DISPLAY_NAME = "Trust Store Path"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-138- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-139- description = "The password used to check the integrity of the trust store, or to unlock the trust store.

The password must be provided if a trust store is configured.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-140- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java:141: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-142- displayName = "Trust Store Password" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-143- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-144- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-145- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-146- private static final String TRUST_STORE_PASSWORD_FIELD = "trustStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-147- private static final String TRUST_STORE_PASSWORD_DISPLAY_NAME = "Trust Store Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-148- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-149- description = "

Enables hostname verification, i.e. the actual hostname must be the same as in the server certificate.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-150- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-151- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-152- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-153- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-154- private boolean verifyServerHostname; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-155- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-156- description = "The keystore containing a client certificate (including a private key) for Airlock IAM. The client certificate is used to establish a mutual SSL connection with Redis.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-157- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-158- exampleValues = {"keystore.jks", "/etc/airlock/keystore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-159- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-160- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-161- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-162- displayName = "Key Store Path" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-163- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-164- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-165- private File keyStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-166- private static final String KEY_STORE_PATH_FIELD = "keyStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-167- private static final String KEY_STORE_PATH_DISPLAY_NAME = "Key Store Path"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-168- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-169- description = "The password used to check the integrity of the keystore, or to unlock the keystore.

The password must be provided if a keystore is configured.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-170- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java:171: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-172- displayName = "Key Store Password" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-173- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-174- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-175- private String keyStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-176- private static final String KEY_STORE_PASSWORD_FIELD = "keyStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-177- private static final String KEY_STORE_PASSWORD_DISPLAY_NAME = "Key Store Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-178- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-179- public SingleModeRedisStateRepositoryConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-180- StateEncryptionConfig encryption, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-181- boolean legacyKeyFormat, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-182- String namespace, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-183- String redisUri, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-184- String username, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-185- String password, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-186- Integer minimumIdleConnections, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-187- Integer maximumPoolSize, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-188- Integer idleTimeoutInMs, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-189- Integer connectionTimeoutInMs, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-190- Integer responseTimeoutInMs, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-191- Integer pingConnectionIntervalInMs, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-62- "jdbc:postgresql://host:5432/iamdb" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-63- }, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-64- displayName = "URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-65- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-66- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-67- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-68- private String url; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-69- static final String URL_FIELD = "url"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-70- @StringProperty(description = "The username used to login on the database.", exampleValues = {"admin", "dba", "airlock"}, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-71- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-72- private String user; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-73- static final String USER_FIELD = "user"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java:74: @StringProperty(description = "The password used to login on the database.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-75- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-76- @TestletProperty(buttonToolTip = "Test database connection", testletClass = DbConnectionTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-77- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-78- static final String PASSWORD_FIELD = "password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-79- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-80- description = "

SQL statement to test the database connection. Only use this property if your connections aren't correctly tested for validity. A JDBC 4.0 driver is usually able to test the connection validity with an internal mechanism, without an explicit test statement.

For H2 databases, a statement involving a table name should be used.

This is database specific and should be set to a query that consumes the minimal amount of load on the server.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-81- suggestedValues = {"/* ping */ SELECT 1", "SELECT NOW()", "SELECT 1 FROM DUAL", "SELECT COUNT(*) FROM medusa_admin"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-82- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-83- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-84- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-85- private String connectionTestStatement; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-86- static final String CONNECTION_TEST_STATEMENT_FIELD = "connectionTestStatement"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-87- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-88- description = "

The SQL dialect to use. SQL dialects have minor – but important – differences: For example, Oracle does not support auto-increment, or MSSQL requires extra information for an insert statement with default values.

With the default setting (AUTOMATIC), the dialect is automatically determined based on the \"Driver Class\" of the JDBC driver. When using a non-standard \"Driver Class\", the SQL dialect of the underlying database cannot be determined automatically and must be set to the correct value here.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-89- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-90- defaultValue = "AUTOMATIC", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-91- displayName = "SQL Dialect" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-92- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-93- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-94- private SqlDataSource.SqlDialect sqlDialect; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-13-import com.airlock.iam.plugin.impl.PropertyExternalFileUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-14-import com.airlock.iam.security.util.crypto.Aes128GcmCipher; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-15-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-16- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-17-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-18- description = "

State encryption that uses AES/GCM with 128-bit keys to encrypt all values stored in the state repository.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-19- displayName = "AES 128 GCM State Encryption" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-20-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-21-public class Aes128GcmStateEncryptionConfig implements StateEncryptionConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-22- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-23- description = "Key used for encryption and decryption, 128 bit encoded in Base64.

A random Base64 string with 128 bits (16 bytes) can be generated e.g. using openssl as follows: openssl rand -base64 16

CAUTION: Once the key is set and has been used to encrypt the key must not be changed!. Data encrypted with a different key cannot be recovered.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-24- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java:25: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-26- minLength = 8 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-27- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-28- private String secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-29- public static final String SECRET_KEY_PROPERTY_NAME = "secretKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-30- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-31- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-32- static void validateEncryption(PluginConfiguration pc, ConfigurationEnvironment env, ConfigurationContext context, Environment valenv) throws PropertyConstraintViolationException, PropertyTypeMismatchException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-33- if (valenv != Environment.GENERAL || !PropertyExternalFileUtils.isStringInExternalFile(pc.getSimplePropertyConfigurationValue("secretKey", env, context)) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-34- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-35- { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-36- String secretKey = PasswordPropertyValueReader.effectivePasswordConfigValue(pc, "secretKey", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-37- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-38- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-39- new Aes128GcmCipher(secretKey).encrypt("Test"); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-40- } catch (Exception e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-41- throw new PropertyConstraintViolationException( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-42- "secretKey", pc, env, context, "Encryption not possible with the provided secret key: " + e.getMessage() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-43- ); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-44- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-45- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-25- @PluginProperty(description = "The underlying persister plugin used to load and store data.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-26- @SuppressFBWarnings("UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-27- private TokenListPersister tokenListPersister; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-28- @StringListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-29- description = "

Specifies a list of names of string context data properties that have to be stored encrypted on the database.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-30- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-31- exampleElements = {"firstname", "givenname", "phonenumber"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-32- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-33- private List encryptedContextProperties; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-34- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-35- description = "

Password used for the encryption and decryption.

If other persister plugins (e.g. a UserPersister plugin) also use encryption on data fields encrypted in this plugin, make sure they use the same password.

This property supports the extended string syntax, i.e. its value may be configured scrambled or in an external file (see example values).

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-36- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java:37: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-38- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-39- private String cipherPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-40- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-41- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-42- public TokenUserStructure getTokenUserStructure(String uid) throws NotFoundException, NotUniqueException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-43- TokenUserStructure tus = this.tokenListPersister.getTokenUserStructure(uid); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-44- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-45- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-46- this.decryptContextDataContainer(uid, tus.getContextDataContainer()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-47- return tus; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-48- } catch (DecryptionException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-49- throw new PersisterException("failed to decrypt values: " + e.getMessage(), e); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-50- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-51- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-52- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-53- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-54- public void makeTokenUserStructurePersistent(TokenUserStructure tokenUserStructure) throws NotFoundException, NotUniqueException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-55- TokenUserStructure tus = tokenUserStructure.cloneTokenUserStructure(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-56- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-57- try { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-30- private boolean encryptSerial; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-31- @BooleanProperty(description = "Set to TRUE if the credential data of the credential should be encrypted.", defaultValue = "true", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-32- private boolean encryptCredentialData; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-33- @StringListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-34- description = "

Specifies a list of names of string context data properties that have to be stored encrypted on the database.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-35- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-36- exampleElements = {"firstname", "givenname", "phonenumber"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-37- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-38- private List encryptedContextProperties; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-39- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-40- description = "

Password used for the encryption and decryption.

If other persister plugins (e.g. a UserPersister plugin) also use encryption on data fields encrypted in this plugin, make sure they use the same password.

This property supports the extended string syntax, i.e. its value may be configured scrambled or in an external file (see example values).

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-41- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java:42: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-43- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-44- private String cipherPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-45- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-46- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-47- public CredentialBean getPersistentCredentialByUsername(String username) throws NotUniqueException, NotFoundException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-48- CredentialBean cb = this.getCredentialPersister().getPersistentCredentialByUsername(username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-49- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-50- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-51- this.decryptSerial(cb.getCurrent(), username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-52- this.decryptSerial(cb.getNext(), username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-53- this.decryptTokenData(cb.getCurrent(), username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-54- this.decryptTokenData(cb.getNext(), username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-55- this.decryptContextDataContainer(username, cb.getContextDataContainer()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-56- return cb; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-57- } catch (DecryptionException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-58- throw new PersisterException("failed to decrypt values: " + e.getMessage(), e); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-59- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-60- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-61- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-62- @Override -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-33-public class CipherUserPersister extends CipherPersisterBase implements ExtendedUserPersister, UserIterator, LicenseUserCounter { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-34- @PluginProperty(description = "The underlying persister plugin used to load and store data.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-35- private ExtendedUserPersister userPersister; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-36- @StringListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-37- description = "

Specifies a list of names of string context data properties that have to be stored encrypted on the database.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-38- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-39- exampleElements = {"firstname", "givenname", "phonenumber"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-40- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-41- private List encryptedContextProperties; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-42- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-43- description = "

Password used for the encryption and decryption.

If other persister plugins (e.g. a CredentialPersister plugin) also use encryption on context data fields listed in this plugin, make sure they use the same password.

This property supports the extended string syntax, i.e. its value may be configured scrambled or in an external file (see example values).

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-44- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java:45: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-47- private String cipherPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-48- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-49- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-50- public void deleteUser(String username) throws NotFoundException, NotUniqueException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-51- this.userPersister.deleteUser(username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-52- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-53- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-54- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-55- public void insertUser(PersistentUser user) throws NotUniqueException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-56- Objects.requireNonNull(user); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-57- AuthUserBean u = AuthUserBeanImpl.clone(user); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-58- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-59- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-60- Map mutableContextData = new HashMap<>(u.getContextData()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-61- this.encryptContextDataContainer(u.getName(), mutableContextData); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-62- u.putAllContextData(mutableContextData); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-63- this.userPersister.insertUser(u); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-64- } catch (EncryptionException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-65- throw new PersisterException("failed to encrypt values: " + e.getMessage(), e); -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-71- private int smtpPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-72- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-73- displayName = "SMTP User", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-74- description = "The user to authenticate at the SMTP server. This property is optional. If not set or empty, no authentication is performed when connecting to the SMTP server.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-75- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-76- exampleValues = {"mail", "root", "userxyz"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-77- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-78- private String smtpUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-79- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-80- displayName = "SMTP Password", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-81- description = "The password to authenticate at the SMTP server. This property is optional. If not set or empty, no authentication is performed when connecting to the SMTP server.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-82- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java:83: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-84- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-85- private String smtpPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-86- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-87- description = "The from-address of the email being sent when handling an event.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-88- exampleValues = {"airlock@yourcompany.com", "authserver@intranet.net"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-89- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-90- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-91- private String fromAddress; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-92- private static final String FROM_ADDRESS_FIELD = "fromAddress"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-93- @StringListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-94- description = "The to-address of the email being sent when handling an event. Multiple addresses can be specified using a comma-separated list (no spaces!).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-95- exampleElements = {"airlock-admin@host.com", "alive@host.com", "bob@host.com"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-96- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-97- minElements = 1 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-98- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-99- private List toAddresses; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-100- private static final String TO_ADDRESSES_FIELD = "toAddresses"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-101- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-102- description = "The subject of the email being sent when handling an event.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/notification/MailNotificator.java-103- exampleValues = {"Airlock IAM Notification: Renew Matrix Card", "Notificator for Password Letters"}, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-1-package com.airlock.iam.core.misc.impl.authen; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-4-import com.airlock.iam.plugin.api.annotation.property.StringListProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-5-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-6-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-7-import java.util.List; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-8- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-9-@Plugin(description = "Basic information for statically configured users. Only username, password and roles are stored for these users.") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-10-public final class ConfiguredUserData { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-11- @StringProperty(description = "The name of the authenticated user.", optional = false, exampleValues = {"admin", "joe"}, minLength = 3) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-12- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java:13: @StringProperty(description = "Password for the user.", isSensitive = true, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-14- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-15- @StringListProperty(description = "Roles granted to the authenticated user.", optional = true, exampleElements = {"user", "admin", "manager"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-16- private List roles; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-17- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-18- public String getUsername() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-19- return this.username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-20- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-21- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-22- public String getPassword() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-23- return this.password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-24- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-25- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-26- public List getRoles() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-27- return this.roles; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-28- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-30- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-31- public static ConfiguredUserData.ConfiguredUserDataBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-32- return new ConfiguredUserData.ConfiguredUserDataBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/ConfiguredUserData.java-33- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-150- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-151- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-152- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-153- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-154- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-155- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-156- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-157- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-158- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-159- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-160- description = "The password used to verify the authenticity of the trust store.

\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t

    \t\t
  • JKS: the keystore can be opened and used but the integrity of the keystore is not checked.
  • \t\t
  • PKCS12: an error occurs.
  • \t

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-161- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java:162: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-163- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-164- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-165- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-166- displayName = "Connect/Read Timeout [s]", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-167- description = "The connection and read timeout in seconds. A timeout value of zero is interpreted as 60 seconds.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-168- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-169- exampleValues = {5, 10, 0}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-170- minValue = 0, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-171- defaultValue = 10 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-172- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-173- private int connectTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-174- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-175- description = "

When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.

\n

If the correlation ID is not defined, the correlation ID header is not included in sent requests.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-176- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-177- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-178- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-179- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-180- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-181- private String correlationIdHeaderName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-182- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-183- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-184- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-185- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-186- @StringProperty(description = "Username for the HTTP proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-187- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java:188: @StringProperty(description = "Password for the HTTP proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-189- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-190- private HttpClient httpClient; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-191- private Pattern passwordPattern; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-192- private PasswordPolicy passwordPolicy; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-193- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-194- public HttpPasswordService( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-195- String passwordChangeUrl, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-196- String httpParamUsername, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-197- UserPersister userPersister, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-198- List userDataParams, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-199- List staticParams, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-200- String httpParamOldPassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-201- String httpParamNewPassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-202- int expectedResponseStatusCode, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-203- Pattern expectedResponseBodyPattern, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-204- boolean allowOnlyTrustedCerts, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-205- boolean verifyServerHostname, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-206- String correlationIdHeaderName, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-207- File trustStorePath, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-208- String trustStoreType, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-96- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-97- description = "To enable SSL connections, provide a JKS or PKCS12 keystore containing
  • Airlock IAM client certificate for authenticating towards the server
  • The trusted server certificate(s)
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-98- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-99- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-100- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-101- exampleValues = "keystore.jks" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-102- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-103- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-104- private File keystore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-105- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-106- description = "The password for the keystore and private key of the client certificate.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-107- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java:108: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-109- exampleValues = "secret" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-110- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-111- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-112- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-113- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-114- description = "Tells if all server certificates should be trusted.Note: Only enable this flag for testing.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-115- defaultValue = "false", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-116- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-117- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-118- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-119- private boolean trustAllServerCertificates; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-120- private SSLContext sslContext; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-121- private List.Endpoint> endpoints = Collections.emptyList(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-122- private int lastWorkingEndpointIndex; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-123- private Long firstEndpointFailedTimeStamp; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-124- private final List.ServiceEndpoint>> createdEndpoints = new LinkedList<>(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-125- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-126- protected FailoverServiceBase( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-127- List serviceEndpointUrls, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/FailoverServiceBase.java-128- Integer revertToFirstServerTimeout, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-45-public class TokenAuthenticator implements CredentialCheckAuthenticator, StealthSecondAuthenticationStep, OtpCheckAuthenticator { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-46- private static final ELogger LOG = ELoggerFactory.getLogger(TokenAuthenticator.class); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-47- @PluginProperty(description = "Plugin class name of the token verifier.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-48- private TokenVerifier tokenVerifier; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-49- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-50- description = "Defines a credential persister plugin. If this property is defined, the configured credential persister plugin is used to look up the username used in communication with the ACE-server (the \"ACE-user\") given the username presented to this plugin:
A credential bean is fetched with the username used with this plugin and the credential-data (string or binary) of the credential bean is used as ACE-user.

This property can be used if a mapping between the actual username and the ACE-username is used.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-51- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-52- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-53- private CredentialPersister credentialPersister; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-54- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-55- description = "If required, a PIN may be defined using this property. The specified PIN will be used together with the provided token code to authenticate the user. This may be useful if a PIN is associated to the token but you don't want the authenticating users to type it.

The PIN can be defined as a static value or its value may be retrieved from a context-value field of a persisted credential. Latter case requires that a credential persister is configured. Prepend the value with the @-character to use it as a reference to a context-data field.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-56- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java:57: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-58- exampleValues = {"1234", "secret", "@token_pin", "@securid_pin"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-59- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-60- private String pin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-61- @BooleanProperty(description = "If set to TRUE the password of the credential is used as token PIN.", optional = true, defaultValue = "false") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-62- private boolean usePasswordAsPin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-63- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-64- description = "If set to TRUE the password is used as token. This mode cannot be used in conjunction with the \"MetaAuthenticator\".", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-65- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-66- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-67- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-68- private boolean usePasswordAsToken; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-69- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-70- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-71- public AuthenticationResult authenticate(AuthenticationSession session, Credential credentials) throws AuthenticatorException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-72- return this.addAuthResultMetaData(this.authenticateInternal(session, credentials, false)); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-73- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-74- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-75- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-76- public AuthPluginContextValue authPluginClassContextValue() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-77- return LegacyAuthPluginContextValue.TOKEN_AUTHENTICATOR; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-102- private static final String ENABLE_SMIME_SIGN_FIELD = "enableSmimeSign"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-103- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-104- description = "The file name of the Java keystore used for SMIME operations. It must contain the private key and a certificate. This is only used if the SMIME is used.
Note: If the keystore file name is relative, it is loaded relative to the current directory of the JVM process.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-105- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-106- exampleValues = {"mykeystore.jks", "~/.keystore"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-107- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-108- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-109- assureReadable = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-110- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-111- @GroupProperty(groupIdentifier = "Signature Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-112- private File keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-113- private static final String KEYSTORE_FILE_FIELD = "keystoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java:114: @StringProperty(description = "The password used to read the keystore. This is only used if SMIME is used.
", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-115- @GroupProperty(groupIdentifier = "Signature Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-116- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-117- private static final String KEYSTORE_PASSWORD_FIELD = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-118- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-119- description = "The keystore alias of the private key used for SMIME signing. If the alias is not set, the first matching key is selected.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-120- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-121- exampleValues = {"signingKey", "mykey"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-122- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-123- @GroupProperty(groupIdentifier = "Signature Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-124- private String keyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-125- private static final String KEY_ALIAS_FIELD = "keyAlias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java:126: @StringProperty(description = "The password needed to access the private key used for SMIME signing.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-127- @GroupProperty(groupIdentifier = "Signature Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-128- private String keyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-129- private static final String KEY_PASSWORD_FIELD = "keyPassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-130- @BooleanProperty(description = "If set to TRUE, emails are sent encrypted using SMIME.", optional = true, defaultValue = "false") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-131- @GroupProperty(groupIdentifier = "Encryption Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-132- private boolean enableSmimeEncryption; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-133- private static final String ENABLE_SMIME_ENCRYPTION_FIELD = "enableSmimeEncryption"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-134- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-135- description = "The error message to be sent to those recipients that do not have a certificate, i.e., that can not decrypt the encrypted message.

Only needed when encryption is enabled.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-136- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-137- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-138- @GroupProperty(groupIdentifier = "Encryption Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-139- private String encryptionErrorMessage; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-140- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-141- description = "The encryption algorithm as provided by org.bouncycastle.mail.smime.SMIMEEnvelopedGenerator.

Only needed when encryption is enabled.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-142- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-143- defaultValue = "AES256_CBC", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-144- allowedValues = { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-145- "DES_EDE3_CBC", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-146- "RC2_CBC", -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-4-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-5-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-6- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-7-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-8- description = "

The SMTP authentication method using plain text authentication with username and password.

Technically, it supports the following authentication methods (in this order of preference): LOGIN, PLAIN, DIGEST-MD5, NTLM.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-9- displayName = "SMTP Authentication With Username/Password" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-10-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-11-public class SmtpAuthenticationUsernamePasswordConfig implements SmtpAuthenticationConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-12- @StringProperty(description = "The username used to authenticate at the mail server.", optional = false, exampleValues = {"mail", "userxyz"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-13- private String user; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java:14: @StringProperty(description = "The password used to authenticate at the mail server.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-15- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-16- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-17- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-18- public String getUsername() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-19- return this.user; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-20- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-21- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-22- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-23- public String getPassword() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-24- return this.password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-25- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-26- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-27- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-28- public static SmtpAuthenticationUsernamePasswordConfig.SmtpAuthenticationUsernamePasswordConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-29- return new SmtpAuthenticationUsernamePasswordConfig.SmtpAuthenticationUsernamePasswordConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-30- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-31- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-32- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-33- public SmtpAuthenticationUsernamePasswordConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-34- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-50- private static final String SECURE_CHANNEL_APPL = "SC"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-51- private static final int[] DEFAULT_SUCCESSFULL_CODES = new int[]{0}; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-52- private static final int[] GET_TOKEN_SUCCESSFULL_CODES = new int[]{100, 107}; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-53- private static final int SEQUENCE_NUMBER_THRESHOLD_REACHED_CODE = 1292; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-54- private static final int[] VALID_MESSAGE_SIGNATURE_CODES = new int[]{0, 1, -202, -203, 10001, 10002, 10003, 10004, 10005, 10006, 10007}; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-55- private static final Pattern NON_NUMBERS_PATTERN = Pattern.compile("[^0-9]+"); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-56- @PluginProperty(description = "Configuration Parameters for the VascoTokenVerifier.", optional = true, defaultValue = VascoRuntimeParameters.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-57- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-58- private VascoRuntimeParameters runtimeParameters; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-59- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-60- description = "

Password used for the encryption and decryption of the Vasco blob.

As long as this property is not configured, the Vasco blob is not encrypted. When set to a non-null value, the Vasco blobs are encrypted on the fly when accessed the next time. Once set, do not change this value. Otherwise, decryption of existing Vasco blobs will fail.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-61- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java:62: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-63- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-64- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-65- private String cipherPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-66- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-67- description = "Defines the crypto application index for the \"Secure Channel\" feature. This index is used when a new token is activated. If left empty, Airlock IAM will try to automatically detect the correct application (the first application with type \"Signature\" and the substring \"SC\" in the application name).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-68- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-69- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-70- exampleValues = 1 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-71- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-72- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-73- private Integer secureChannelCryptoApplicationIndex; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-74- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-75- description = "Defines the crypto application index for the \"OTP\" feature. This index is used when a new token is activated. If left empty, Airlock IAM will try to automatically detect the correct application (the first application with type \"RESPONSE_ONLY\").", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-76- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-77- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-78- exampleValues = 1 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-79- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-80- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-81- private Integer otpCryptoApplicationIndex; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-82- @BooleanProperty( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-5-import com.airlock.iam.security.util.crypto.DecryptionException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-6-import com.airlock.iam.security.util.crypto.EncryptionException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-7-import com.airlock.iam.security.util.crypto.PBEStringCipherHelper; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-8-import com.airlock.iam.security.util.crypto.StringCipher; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-9-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-10-import org.apache.commons.lang3.StringUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-11- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-12-@Plugin(description = "AES Encryption using a key that is derived from a passphrase.", displayName = "Password-based Encryption") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-13-public class PasswordBasedEncryption implements StringCipher { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-14- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-15- description = "Passphrase that is used to generate a key for encryption and decryption.

CAUTION: Once this is set and the cipher has been used to encrypt data with this passphrase, the passphrase should not be changed!. Otherwise those stored data would not be recoverable.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-16- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java:17: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-18- minLength = 8 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-19- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-20- private String encryptionPassphrase; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-21- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-22- private char[] getEncryptionPassword(String username) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-23- String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-24- if (username == null) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-25- password = this.encryptionPassphrase; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-26- } else { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-27- password = this.encryptionPassphrase + username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-28- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-30- return password.toCharArray(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-31- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-32- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-33- public String encrypt(String content, String userName) throws EncryptionException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-34- if (StringUtils.isBlank(content)) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-35- return content; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-36- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-37- -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-26- @StringProperty(description = "The type of Java keystore to use.", optional = true, defaultValue = "JKS", suggestedValues = {"JKS", "JCEKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-27- private String keystoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-28- private static final String KEYSTORE_TYPE_FIELD = "keystoreType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-29- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-30- description = "The file name of the Java keystore to load the key for the encryption.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-31- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-32- exampleValues = {"instances/common/keystore.jks", "/opt/airlock/keystore.jks", "instances/common/keystore.p12"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-33- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-34- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-35- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-36- private File keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-37- private static final String KEYSTORE_FILE_FIELD = "keystoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java:38: @StringProperty(description = "The password to read the keystore.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-39- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-40- private static final String KEYSTORE_PASSWORD_FIELD = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-41- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-42- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-43- public static void validateJavaKeystore( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-44- PluginConfiguration config, ConfigurationEnvironment env, ConfigurationContext context, Environment validationEnvironment work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-45- ) throws PropertyConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-46- if (Environment.CURRENT_VM.equals(validationEnvironment)) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-47- String keystoreTypeConfig = StringPropertyValueReader.effectiveStringConfigValue(config, "keystoreType", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-48- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-49- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-50- String keystoreFileConfig = FilePropertyValueReader.effectiveFilePropertyValue(config, "keystoreFile", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-51- String keystorePasswordConfig = PasswordPropertyValueReader.effectivePasswordConfigValue(config, "keystorePassword", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-52- KeyStoreUtils.createKeyStoreFromFile(new File(keystoreFileConfig), Optional.of(keystorePasswordConfig), keystoreTypeConfig); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-53- } catch (KeyStoreException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-54- throw new PropertyConfigurationException( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-55- config, env, context, "A keystore with type " + keystoreTypeConfig + " could not be loaded.", e, new String[]{"keystoreType"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-56- ); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-57- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-58- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-52- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-53- description = "Path to a file-based keystore.
This property only has to be set if the keystore is file-based. In any other case it should be left empty.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-54- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-55- exampleValues = "instances/auth/hsm/keystore.jks", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-56- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-57- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-58- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-59- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-60- private File keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-61- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-62- description = "The password used to read the keystore or HSM module. If the HSM is already authenticated in another way, then this can be empty.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-63- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java:64: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-65- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-66- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-67- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-68- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-69- public static void validatePkcs11Keystore( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-70- PluginConfiguration config, ConfigurationEnvironment env, ConfigurationContext context, Environment validationEnvironment work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-71- ) throws PropertyConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-72- if (Environment.CURRENT_VM.equals(validationEnvironment)) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-73- String securityProviderName = StringPropertyValueReader.effectiveStringConfigValue(config, "securityProviderName", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-74- String keystoreType = StringPropertyValueReader.effectiveStringConfigValue(config, "keystoreType", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-75- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-76- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-77- KeyStore.getInstance(keystoreType, securityProviderName); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-78- } catch (KeyStoreException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-79- String message = String.format("A keystore with type '%s' is not supported by provider '%s'.", keystoreType, securityProviderName); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-80- throw new PropertyConstraintViolationException("securityProviderName", config, env, context, message, e); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-81- } catch (NoSuchProviderException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-82- String message = "A java security provider with name " work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-83- + LogUtil.quote(securityProviderName) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-84- + " could not be found. Is the PKCS #11 security provider configured in this JVM and the config file readable? (Found the following security providers: " -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-31- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-32- description = "The private key used to decrypt the password. Notice that it has to be in PKCS#8 DER format (not 'openSSL format'). If the private key file is encrypted, the passphrase has to be set below.

Such a key can for example be generated using:
openssl genrsa -des3 -out newkey.pem
openssl pkcs8 -topk8 -in newkey.pem -out encryptedprivatekey.key -outform der
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-33- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-34- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-35- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-36- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-37- exampleValues = "privateKey.key" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-38- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-39- private File privateKeyFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-40- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-41- description = "Passphrase to protect the private key file. If no passphrase is configured, it is assumed that the private key file is not password-protected.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-42- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java:43: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-44- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-45- private String privateKeyPassphrase; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-46- private PublicKey publicKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-47- private PrivateKey privateKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-48- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-49- public RsaEncryption(File publicKeyFile, File privateKeyFile, String privateKeyPassphrase) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-50- this.publicKeyFile = publicKeyFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-51- this.privateKeyFile = privateKeyFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-52- this.privateKeyPassphrase = privateKeyPassphrase; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-53- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-54- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-55- @AfterConfigActivation work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-56- void preprocessCipherConfiguration() throws InitializeException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-57- this.privateKey = null; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-58- this.publicKey = null; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-59- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-60- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-61- byte[] privateKeyBytes = Files.toByteArray(this.privateKeyFile); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-62- if (this.privateKeyPassphrase != null) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-63- this.privateKey = RsaCipher.toPrivateKey(privateKeyBytes, this.privateKeyPassphrase); -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-26- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-27- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-28- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-29- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-30- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-31- private File keyStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-32- @EnumProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-33- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-34- private HttpClientConfig.TrustStoreType keyStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-35- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-36- description = "The password used to check the integrity of the keystore, or to unlock the keystore.

\tThe password must be provided if a key store is specified.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-37- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java:38: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-39- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-40- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-41- private String keyStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-42- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-43- description = "The password to access the private key in the keystore stored at the key store path, in case the private key is password protected.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-44- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java:45: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-47- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-48- private String privateKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-49- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-50- HttpClientWithClientAuthConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-51- int connectTimeout, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-52- int readTimeout, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-53- BasicAuthCredentialsConfig basicAuthCredentialsConfig, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-54- boolean preemptiveBasicAuth, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-55- String bearerToken, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-56- boolean verifyServerHostname, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-57- File trustStorePath, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-58- HttpClientConfig.TrustStoreType trustStoreType, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-59- String trustStorePassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-60- String proxyHost, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-61- Integer proxyPort, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-62- String proxyLoginUser, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-63- String proxyLoginPassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-64- String userAgent, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-65- String correlationIdHeaderName, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-73- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-74- private BasicAuthCredentialsConfig basicAuthCredentials; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-75- private static final String BASIC_AUTH_CREDENTIALS_FIELD = "basicAuthCredentials"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-76- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-77- description = "Whether the HTTP client should perform preemptive basic authentication. If set to true, the HTTP Client will automatically add the Authorization header to the HTTP request. If set to false, the HTTP client will only send the Authorization header when it receices an unauthorized response from the server. Setting this property only has an impact if the property Basic Auth Credentials is set.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-78- defaultValue = "false", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-79- displayName = "Preemptive Basic Auth", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-80- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-81- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-82- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-83- private boolean preemptiveBasicAuth; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-84- private static final String PREEMPTIVE_BASIC_AUTH_FIELD = "preemptiveBasicAuth"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java:85: @StringProperty(description = "The Bearer Token to send with each request.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-86- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-87- private String bearerToken; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-88- public static final String BEARER_TOKEN_FIELD_FIELD = "bearerToken"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-89- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-90- description = "

Enables hostname verification, i.e. the actual hostname must be the same as in the server certificate.

\n

Security warning: Not verifying the hostname may allow connections to adversarial hosts,\ne.g. if they employ DNS spoofing. Only disable this property for testing and integration setups.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-91- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-92- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-93- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-94- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-95- private boolean verifyServerHostname; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-96- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-97- description = "

Only allow connections to servers whose certificate is trusted.\nSee documentation of property \"Trust Store Path\" for more information about what certificates are trusted.

\n

Security warning: Trusting all certificates allows connections to adversarial hosts.\nOnly disable this property for testing and integration setups.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-98- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-99- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-100- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-101- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-102- private boolean allowOnlyTrustedCerts; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-103- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-104- description = "Keystore file name containing trusted certificate issuers (and trusted certificates).\n

If this property is not defined the following certificate issuers are trusted:\n

    \n
  • The list of issuers known to the Java VM if the system property \"javax.net.ssl.trustStore\" is not defined.
  • \n
  • The list of issuers in a keystore referenced by system property \"javax.net.ssl.trustStore\" if defined in instance.properties using iam.java.opts
  • \n

\n

If this property is defined then the following certificate issuers are trusted:\n

    \n
  • The list of issuers in the referenced truststore file and no others.
  • \n

This property is only relevant if the property \"Allow Only Trusted Certs\" is enabled.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-105- optional = true, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-107- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-108- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-109- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-110- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-111- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-112- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-113- @EnumProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-114- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-115- private HttpClientConfig.TrustStoreType trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-116- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-117- description = "The password used to check the integrity of the trust store, or to unlock the trust store.\n

The password must be provided if a trust store is specified.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-118- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java:119: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-120- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-121- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-122- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-123- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-124- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-125- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-126- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-127- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-128- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-129- @StringProperty(description = "Username for the HTTP proxy if proxy authentication is used.", optional = true, exampleValues = "proxyLogin") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-130- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-131- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java:132: @StringProperty(description = "Password for the HTTP proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-133- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-134- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-135- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-136- description = "A HTTP client sends a userAgent header with each request to identify the client software. If no value or an empty value is specified, \"Apache-HttpClient/4.1 (java 1.5)\" is used as user agent. This value allows to overwrite the default user agent.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-137- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-138- suggestedValues = { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-139- "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-140- "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:36.0) Gecko/20100101 Firefox/36.0", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-141- "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.76 Safari/537.36" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-142- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-143- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-144- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-145- private String userAgent; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-146- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-147- description = "

When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.

\n

If the correlation ID is not defined, the correlation ID header is not included in sent requests.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-148- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-149- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-150- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-151- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-152- ) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-5-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-6-import com.airlock.iam.plugin.api.annotation.lifecycle.AfterConfigActivation; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-7-import com.airlock.iam.plugin.api.annotation.property.BooleanProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-8-import com.airlock.iam.plugin.api.annotation.property.IntegerProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-9-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-10-import com.airlock.iam.security.util.crypto.DecryptionException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-11-import com.airlock.iam.security.util.crypto.PBEWithSHA1andAES; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-12-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-13- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-14-@Plugin(description = "Decodes the ticket produced by the AES256 Encryption Ticket Encoder plugin.") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-15-@SuppressFBWarnings("UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-16-public class AES256DecryptionTicketDecoder extends PlainBase64TicketDecoder { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java:17: @StringProperty(description = "Specifies the password used to decrypt the ticket.", minLength = 4, optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-18- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-19- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-20- description = "If integrity is essential, it is strongly recommended to forbid tickets which are not authenticated encrypted by GCM. Only for backward compatibility reasons we do not enforce incoming tickets to be encrypted in GCM mode. If this flag is set to false, this encoder also accepts tickets that were encrypted without authentication, using the CBC mode. That may be a threat if the ticket is exposed to an attacker.

If possible this flag should be enabled.

The AES256EncryptionTicketEncoder uses the GCM Mode by default.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-21- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-22- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-23- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-24- private boolean requireAuthenticatedEncryption; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-25- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-26- description = "Specifies the maximum number of PBKDF2 iterations allowed for decryption. Choose this maximum as small as possible. Allowing a large number of iterations may require a considerable amount of computing time when decoding the ticket.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-27- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-28- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-29- defaultValue = 32000, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-30- exampleValues = {16000, 32000} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-31- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-32- private int maxPBKDF2Iterations; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-33- private PBEWithSHA1andAES cipher; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-34- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-35- public AES256DecryptionTicketDecoder(String password, boolean requireAuthenticatedEncryption, int maxPBKDF2Iterations) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-36- this.password = password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-37- this.requireAuthenticatedEncryption = requireAuthenticatedEncryption; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-6-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-7-import com.airlock.iam.plugin.api.annotation.lifecycle.AfterConfigActivation; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-8-import com.airlock.iam.plugin.api.annotation.property.BooleanProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-9-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-10-import com.airlock.iam.security.util.crypto.EncryptionException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-11-import com.airlock.iam.security.util.crypto.PBEWithSHA1andAES; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-12-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-13- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-14-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-15- description = "Encodes the ticket and encrypts the contents with a password.

The key-value pairs are first encoded as described in KeyMultiValue, the expiry timestamp is added and then encrypted using a password based encryption scheme with salt. The resulting ticket value is the base-64 representation of the ciphertext.

" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-16-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-17-public class AES256EncryptionTicketEncoder extends PlainBase64TicketEncoder implements SecureTicketEncoder { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java:18: @StringProperty(description = "Specifies the password used to encrypt the ticket.", minLength = 4, optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-19- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-20- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-21- description = "By default, password based encryption now uses the GCM mode for authenticated encryption. If this flag is disabled, the legacy CBC mode is used. This mode does not provide authenticity and is only provided for backward compatibility for cases where the ticket is decrypted in an external system.

If possible this flag should be enabled.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-22- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-23- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-24- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-25- private boolean requireAuthenticatedEncryption; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-26- @SuppressFBWarnings("UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-27- private PBEWithSHA1andAES cipher; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-28- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-29- public AES256EncryptionTicketEncoder(String password, boolean requireAuthenticatedEncryption) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-30- this.password = password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-31- this.requireAuthenticatedEncryption = requireAuthenticatedEncryption; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-32- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-33- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-34- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-35- public byte[] encodeAsByteArray(Ticket ticket, String urlEncodingScheme) throws TicketEncodingException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-36- byte[] stringEncoded = super.encodeAsByteArray(ticket, urlEncodingScheme); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-37- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-38- try { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-18- @PluginProperty(description = "The password hash function.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-19- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-20- private PasswordHash hashFunction; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-21- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-22- description = "The configuration of the keystore. The keystore is used to load the secret key for the encryption and decryption of the hash.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-23- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-24- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-25- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-26- private KeystoreConfig keystore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-27- @StringProperty(description = "The alias of the secret symmetric key in the given keystore to encrypt the hash.", optional = false, exampleValues = "mykey") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-28- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-29- private String encryptionKeyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java:30: @StringProperty(description = "The password of the secret key to encrypt the hash.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-31- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-32- private String encryptionKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-33- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-34- description = "The cipher to encrypt the hash. A symmetric cipher is required.\nThe supported symmetric ciphers are:\n
    \n\t
  • AES/GCM/NoPadding
  • \n\t
  • AES/CBC/PKCS5Padding
  • \n\t
  • AES/ECB/PKCS5Padding (not recommended)
  • \n
\n\nCaution: Changing the cipher in productive setups means that existing hashes cannot be decrypted anymore. When changing the encryption cipher, make sure to configure the previous cipher in the Legacy Hash Functions.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-35- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-36- defaultValue = "AES/GCM/NoPadding", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-37- suggestedValues = {"AES/GCM/NoPadding", "AES/CBC/PKCS5Padding", "AES/ECB/PKCS5Padding"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-38- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-39- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-40- private String cipherTransformation; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-41- @SuppressFBWarnings("UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-42- private EncryptedPasswordHashLogic logic; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-43- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-44- public EncryptedPasswordHashConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-45- PasswordHash hashFunction, KeystoreConfig keystore, String encryptionKeyAlias, String encryptionKeyPassword, String cipherTransformation work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-46- ) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-47- this.hashFunction = hashFunction; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-48- this.keystore = keystore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-49- this.encryptionKeyAlias = encryptionKeyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-50- this.encryptionKeyPassword = encryptionKeyPassword; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-167- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-168- exampleValues = "CN=MedusaUser,CN=users,dc=exchangeserver,dc=company,dc=com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-169- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-170- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-171- @TestletProperty(buttonToolTip = "Test Bind DN", testletClass = LdapConnectionPool.LdapConnectionPoolBindTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-172- private String bindDn; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-173- public static final String BIND_DN_FIELD = "bindDn"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-174- private static final String BIND_DN_DISPLAY_NAME = "Service Account Username"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-175- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-176- description = "The password to bind to the LDAP server for searching and modifying users.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-177- displayName = "Service Account Password", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-178- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java:179: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-180- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-181- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-182- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-183- public static final String PASSWORD_FIELD = "password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-184- private static final String PASSWORD_DISPLAY_NAME = "Service Account Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-185- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-186- description = "Enable this property to allow anonymous binds. An anonymous bind allows users to connect to the Directory Server without supplying any username or password. This simplifies common search and read operations, like checking the directory for a phone number or email address, by not requiring users to authenticate to the directory first. However, there are risks with anonymous binds. If no authentication is enforced, sensitive data like user data might be accessible for unauthenticated or unauthorized users because the access to the Directory Server is not protected. Only set this property to true if it is absolutely necessary and you are aware of the resulting security implications.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-187- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-188- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-189- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-190- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-191- private boolean anonymousBind; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-192- static final String ANONYMOUS_BIND_FIELD = "anonymousBind"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-193- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-194- description = "

The type of connection security, one of NONE, START_TLS or SSL.

Notice: Most directories will refuse to perform a password change operation if the connection is not secured using SSL/TLS.

Notice: Microsoft disabled support for Server certificates using MD5 with KB2862973 (mandatory update in early 2014). Using any server certificate with an MD5 signature in its entire chain will result in a connection error. The same error will be raised when using a certificate using SHA-512 without having KB2973337 installed.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-195- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-196- defaultValue = "NONE" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-197- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-198- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-199- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = LdapConnectionPool.LdapConnectionPoolSSLTestlet.class) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-204- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-205- exampleValues = {"mykeystore.jks", "~/.keystore"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-206- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-207- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-208- assureReadable = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-209- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-210- @GroupProperty(groupIdentifier = "Client Certificate Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-211- private File keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-212- static final String KEYSTORE_FILE_FIELD = "keystoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-213- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-214- description = "The password used to read the keystore and the private key also. This is only used if SSL is enabled.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-215- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java:216: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-217- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-218- @GroupProperty(groupIdentifier = "Client Certificate Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-219- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-220- static final String KEYSTORE_PASSWORD_FIELD = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-221- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-222- description = "The alias of the private key for SSL client authentication. This is only used if SSL is enabled and if the server enforces SSL client authentication. If only the server certificate should be checked, please leave this property empty.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-223- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-224- exampleValues = "airlock" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-225- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-226- @GroupProperty(groupIdentifier = "Client Certificate Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-227- private String keyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-228- static final String KEY_ALIAS_FIELD = "keyAlias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-229- @BooleanProperty(description = "Tells if the server name should be checked against the name in the certificate.", defaultValue = "true", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-230- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-231- private boolean checkCertificateServerName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-232- static final String CHECK_CERTIFICATE_SERVER_NAME_FIELD = "checkCertificateServerName"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-233- @BooleanProperty(description = "Tells if the server certificate validity dates should be respected.", defaultValue = "true", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-234- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-235- private boolean checkCertificateValidity; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-236- private static final String CHECK_CERTIFICATE_VALIDITY_FIELD = "checkCertificateValidity"; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-247- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-248- exampleValues = {"mytruststore.jks", "~/.truststore"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-249- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-250- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-251- assureReadable = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-252- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-253- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-254- private File truststoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-255- static final String TRUSTSTORE_FILE_FIELD = "truststoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-256- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-257- description = "The password used to read the truststore. Can be left empty if the truststore does not require any password. This is only used if SSL is enabled.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-258- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java:259: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-260- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-261- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-262- private String truststorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-263- static final String TRUSTSTORE_PASSWORD_FIELD = "truststorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-264- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-265- description = "Specifies whether to operate in synchronous mode, in which at most one operation may be in progress at any time on a given connection.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-266- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-267- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-268- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-269- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-270- private boolean useSynchronousMode; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-271- @BooleanProperty(description = "Tells if automatic referral following should be enabled.", defaultValue = "false", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-272- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-273- private boolean followReferrals; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-274- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-275- description = "How long to wait for a connection to be established.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-276- exampleValues = {1000, 5000}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-277- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-278- defaultValue = 2000, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-279- minValue = 0, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-44- private int connectionTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-45- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-46- description = "

Maximum number of retries to send an access request before giving up.

If multiple RADIUS servers are configured (for failover), it makes sense to set this value to zero (no retries) for the first and to a value greater than zero for the failover server(s). A typical value is 2.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-47- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-48- defaultValue = 2, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-49- exampleValues = {0, 2, 5}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-50- minValue = 0 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-51- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-52- private int maxRetries; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-53- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-54- description = "The shared secret. It is used to encrypt the secret credentials (e.g. passwords) passed to the RADIUS server. It must be the same in this plugin and the RADIUS server.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-55- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java:56: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-57- exampleValues = {"secret", "ai38d7f3", "password"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-58- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-59- private String sharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-60- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-61- description = "If enabled, all servers must include a valid Message-Authenticator attribute in their responses, otherwise the messages will be discarded.\n

Note: even when disabled, received responses containing a Message-Authenticator will always be validated.\nAlso, requests from this radius client will always include the Message-Authenticator attribute.

\n

Warning: when disabled, this client is vulnerable to the BlastRADIUS attack.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-62- displayName = "Enforce Message-Authenticator", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-63- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-64- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-65- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-66- private boolean enforceMessageAuthenticator; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-67- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-68- @AfterConfigActivation work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-69- void normalizeRadiusConnectionSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-70- this.host = StringUtils.trimToEmpty(this.host); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-71- this.sharedSecret = StringUtils.trimToEmpty(this.sharedSecret); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-72- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-73- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-74- public int getMaxRetries() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-75- return this.maxRetries; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-76- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-131- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-132- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-133- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-134- private GatewayConfig gatewaySettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-135- @PluginProperty(description = "Configures handling of events in the Adminapp.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-136- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-137- private AdminappEventSettingsConfig eventSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-138- public static final String EVENT_SETTINGS_DISPLAY_NAME = "Event Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-139- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-140- description = "The service container secret is used to access the service container from the Adminapp. The shared secret will be used to encrypt the SSO ticket, sent from the Adminapp to the service container in order to authenticate the admin. The shared secret must be identical to the property Service Container Shared Secret within Service Container (Advanced Settings). When not configured, no Service Container link will be displayed in Adminapp.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-141- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-142- displayName = "Service Container Shared Secret", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java:143: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-144- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-145- @GroupProperty(groupIdentifier = "SSO Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-146- private String serviceContainerSharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-147- public static final String SERVICE_CONTAINER_SHARED_SECRET_DISPLAY_NAME = "Service Container Shared Secret"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-148- @PluginProperty(description = "Configuration of the Log Viewer.", optional = true, displayName = "Log Viewer") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-149- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-150- private LogViewer logViewer; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-151- public static final String LOG_VIEWER_DISPLAY_NAME = "Log Viewer"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-152- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-153- description = "

Enables realm administration. This feature limits the rights of administrators to a single realm. All users that a realm administrator creates are assigned to his realm and he can only administer users of his own realm.

The assignment of a realm to an administrator requires super administrator authorization.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-154- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-155- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-156- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-157- @PluginPropertyLicenseRestriction(moduleAffiliation = "RealmAdministration") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-158- private RealmAdministrationConfig realmAdministration; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-159- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-160- description = "Session idle timeout for the Adminapp (including Config Editor).\nWhen IAM is deployed behind an Airlock Gateway (WAF), timeout and lifetime values should always\nbe longer than those maintained by the Gateway.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-161- displayName = "Session Idle Timeout", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-162- exampleValues = {"30m", "2h 15m"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-163- optional = true, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-55- private RequestAuthenticationConfigForAdminapp requestAuthentication; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-56- public static final String REQUEST_AUTHENTICATION_DISPLAY_NAME = "Request Authentication"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-57- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-58- description = "The hash function used to hash information that is transferred over the public network.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-59- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-60- defaultValue = SHA256Base64PasswordHash.class work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-61- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-62- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-63- private PasswordHash hashFunction; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-64- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-65- description = "The shared secret to be included in the hashed information.

Can be used together with the 'Hash Function' to externalize session information to the client.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-66- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java:67: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-68- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-69- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-70- private String hashSharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-71- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-72- description = "The settings to allow cross-domain REST calls.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-73- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-74- defaultValue = CorsSettings.class, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-75- displayName = "CORS Settings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-76- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-77- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-78- private CorsSettings corsSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-79- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-80- description = "

If enabled, REST endpoints are protected against CSRF attacks.

With this protection, the REST API only accepts requests that contain the custom header X-Same-Domain with an arbitrary non-empty value. In cross-origin resource sharing (CORS), such requests are not considered simple requests and thus must always be preceded by a preflight request, which prevents cross-site request forgery (CSRF) attacks.

Security warning: Disabling this feature may allow CSRF attacks. Only do so if the REST client is unable to comply with the aforementioned restrictions.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-81- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-82- displayName = "CSRF Protection", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-83- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-84- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-85- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-86- private boolean csrfProtection; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-87- @PluginListProperty( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-40-@Groups(groupSequence = {"Basic Settings", "Advanced Settings"}, openGroups = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-41-public final class ApiPolicyServiceAppConfig implements RestConfigSpec { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-42- public static final String API_POLICY_SERVICE_DISPLAY_NAME = "API Policy Service"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-43- public static final AppId API_POLICY_SERVICE_CONFIG_IDENTIFIER = AppId.appId("api-policy-service"); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-44- public static final String WAF_REQUEST_ID_HEADER = "X-AL-RequestId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-45- public static final String WAF_SESSION_ID_HEADER = "X-AL-SessionId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-46- public static final String WAF_REMOTE_ADDR_HEADER = "X-AL-RemoteAddr"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-47- @PluginProperty(description = "A repository that allows to configure the DB access concerning API policy service functionality.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-48- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-49- private TechClientRepositoryConfig repository; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-50- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-51- description = "

Shared secret to verify the JWT signature. Must be the same as on the Airlock Gateway (WAF) using this API Policy Service endpoint.

The shared secret must be encoded in base64. The minimal required unencoded length is at least 512 bits. Configuration validation fails if the secret is too short.

One can, for example, generate a random secret with 512 bits (64 bytes) as base64 encoded string using openssl as follows: openssl rand -base64 96

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java:52: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-53- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-54- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-55- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-56- private String sharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-57- public static final String HMAC_KEY_PROPERTY_NAME = "sharedSecret"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-58- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-59- description = "Specifies how a context is to be extracted from a request.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-60- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-61- defaultValue = NoContextExtractor.class, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-62- supportsContexts = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-63- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-64- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-65- private ContextExtractor contextExtractor; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-66- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-67- description = "

Configures the database settings to use when persisting user trail log entries.

\n

If this value is defined, then all user trail log messages generated by the API Policy\nService App module will additionally be forwarded to the database configured within the\nreferenced repository plugin.

\n

All forwarded log entries are stored inside the table \"USER_TRAIL_LOG\". Note that\nsetting this value does not disable writing log messages to the API Policy Service\nlog file.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-68- globalPluginReference = "globalUserTrailLogRepository", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-69- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-70- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-71- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-72- private UserTrailLogRepositoryConfig logUserTrailToDatabase; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-101- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-102- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-103- private int statisticLogInterval; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-104- @IntegerProperty(description = "Minimum number of threads in pool.", optional = true, minValue = 1, defaultValue = 10, exampleValues = {1, 10, 20}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-105- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-106- private int minimumThreads; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-107- @IntegerProperty(description = "Maximum number of threads in pool.", optional = true, minValue = 1, defaultValue = 100, exampleValues = {100, 500, 1000}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-108- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-109- private int maximumThreads; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-110- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-111- description = "The service container secret is used to access the service container from the Adminapp. The shared secret will be used to encrypt the SSO ticket, sent from the Adminapp to the service container in order to authenticate the admin. The shared secret must be identical to the property Service Container Shared Secret in the Adminapp (Advanced Settings).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-112- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java:113: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-114- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-115- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-116- private String serviceContainerSharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-117- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-118- description = "

Configures the repository used to store accepted SSO tickets and reject previously accepted ones.

\n

The in-memory repository cannot be used if multiple instances of IAM are deployed in parallel (failover, horizontal scaling).\nFurthermore, the in-memory repository does not preserve previously accepted SSO tickets across IAM restarts.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-119- displayName = "Accepted SSO Tickets Repository", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-120- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-121- globalPluginReference = "globalAcceptedSsoTicketSettings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-122- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-123- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-124- private AcceptedSsoTicketRepositoryConfig acceptedSsoTicketRepository; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-125- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-126- description = "

Configures the database settings to use when persisting user trail log entries.

\n

If this value is defined, then all user trail log messages generated by the Service\nContainer App module will additionally be forwarded to the database configured within\nthe referenced repository plugin.

\n

All forwarded log entries are stored inside the table \"USER_TRAIL_LOG\". Note that\nsetting this value does not disable writing log messages to the Service Container App\nlog file.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-127- globalPluginReference = "globalUserTrailLogRepository", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-128- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-129- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-130- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-131- private UserTrailLogRepositoryConfig logUserTrailToDatabase; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-132- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-133- displayName = "Correlation ID Settings", -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-89- private static final String INTERFACE_IP_FIELD = "interfaceIp"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-90- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-91- description = "If enabled, all clients must include a valid Message-Authenticator attribute in their requests, otherwise the messages will be discarded.\n

Note: even when disabled, received requests containing a Message-Authenticator will always be validated.\nAlso, responses from this server will always include the Message-Authenticator attribute.

\n

Warning: when disabled, this server is vulnerable to the BlastRADIUS attack.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-92- displayName = "Enforce Message-Authenticator", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-93- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-94- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-95- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-96- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-97- private boolean enforceMessageAuthenticator; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-98- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-99- description = "The shared secret for the Radius service. The shared secret is used to protect sensitive information being sent from the Radius client to the Radius server. Since charsets on the server and the client may differ, use only ASCII characters (and choose a longer secret).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-100- exampleValues = {"secret4th1ss3rv3r", "s843bdfl03h4", "wonttellu"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java:101: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-102- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-103- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-104- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-105- private String sharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-106- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-107- description = "The authenticator to be used by the Radius service. Make sure that the authentication scheme provided by the authenticator can be used via RADIUS. Client certificate authentication, for example, is usually not done via RADIUS. Common examples are password-, token-, and challenge-response-authentication.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-108- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-109- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-110- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-111- private Authenticator authenticator; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-112- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-113- description = "Configures the behavior of temporary user locking. Notice that responses are not delayed like in the login app not to trigger UDP retransmissions but any further request falling into the temporary lock timeout will be refused immediately with a special message.
If enabling the Temporary Locking settings, either a linear or an exponential factor must be provided or it will have no effect at all. Additionally, a user persister must be specified which must provide the number of failed logins and the last login attempt.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-114- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-115- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-116- @GroupProperty(groupIdentifier = "Optional Authentication Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-117- private TemporaryLockingSettings temporaryLockingSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-118- private static final String TEMPORARY_LOCKING_SETTINGS = "temporaryLockingSettings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-119- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-120- description = "The user persister used to calculate the temporary locking and to read out roles after a mandatory password change.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-121- optional = true -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-16- private String tenantId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-17- public static final String TENANT_ID_PROPERTY = "tenantId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-18- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-19- description = "Identifies the registered application or service principal requesting access to Azure resources.\n

This value is available in the Azure portal, e.g., in the overview of your application registration.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-20- displayName = "Client ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-21- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-22- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-23- private String clientId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-24- public static final String CLIENT_ID_PROPERTY = "clientId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-25- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-26- description = "Client secret associated with the registered application (client ID).\n

This value is available in the Azure portal, e.g., in the certificates & secrets page of your application registration.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-27- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java:28: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-29- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-30- private String clientSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-31- public static final String CLIENT_SECRET_PROPERTY = "clientSecret"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-32- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-33- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-34- public AzureAuthenticationSettings getAuthenticationSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-35- return AzureAuthenticationSettings.ClientSecretAuthenticationSettings.builder() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-36- .tenantId(this.tenantId) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-37- .clientId(this.clientId) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-38- .clientSecret(this.clientSecret) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-39- .build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-40- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-41- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-42- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-43- public static AzureClientSecretAuthenticationConfig.AzureClientSecretAuthenticationConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-44- return new AzureClientSecretAuthenticationConfig.AzureClientSecretAuthenticationConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-45- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-46- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-47- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-48- public AzureClientSecretAuthenticationConfig() { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-5-import com.airlock.iam.servicecontainer.api.application.configuration.event.kafka.KafkaProducerAuthenticationConfig; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-6-import com.airlock.iam.servicecontainer.api.application.configuration.event.kafka.KafkaSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-7-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-8- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-9-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-10- description = "SASL/PLAIN authentication for Kafka.\n

\nFor more information, see Authentication using SASL.\n

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-11- displayName = "Kafka SASL Plain (Username/Password) Authentication" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-12-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-13-public final class KafkaSaslPlainAuthenticationConfig implements KafkaProducerAuthenticationConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-14- @StringProperty(description = "The username for SASL/PLAIN authentication.\n", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-15- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-16- public static final String SASL_PLAIN_USERNAME_PROPERTY = "username"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java:17: @StringProperty(description = "The password for SASL/PLAIN authentication.\n", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-18- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-19- public static final String SASL_PLAIN_PASSWORD_PROPERTY = "password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-20- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-21- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-22- public KafkaSettings getKafkaSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-23- return KafkaSaslPlainAuthentication.builder().username(this.username).password(this.password).build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-24- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-25- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-26- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-27- public static KafkaSaslPlainAuthenticationConfig.KafkaSaslPlainAuthenticationConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-28- return new KafkaSaslPlainAuthenticationConfig.KafkaSaslPlainAuthenticationConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-29- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-30- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-31- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-32- public KafkaSaslPlainAuthenticationConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-33- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-34- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-35- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-36- public KafkaSaslPlainAuthenticationConfig(String username, String password) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-37- this.username = username; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-25- private String clientId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-26- public static final String CLIENT_ID_PROPERTY = "clientId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-27- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-28- description = "Path of the keystore file containing the service principal's certificate and private key.\nThe keystore file must be in PKCS12 format (.pfx-file).\n

The corresponding public key certificate must be registered for your application in the Azure portal,\ne.g., in the certificates & secrets page of your application registration.

\n

The path must be absolute or relative to the instance root directory.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-29- exampleValues = "service-credentials.pfx, /home/airlock/iam/instances/auth/service-credentials.pfx", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-30- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-31- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-32- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-33- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-34- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-35- private File keystore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-36- public static final String KEYSTORE_PROPERTY = "keystore"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java:37: @StringProperty(description = "Password for reading the service principal's private key from the keystore file.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-38- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-39- public static final String KEYSTORE_PASSWORD_PROPERTY = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-40- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-41- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-42- public AzureAuthenticationSettings getAuthenticationSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-43- return AzureAuthenticationSettings.CertificateAuthenticationSettings.builder() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-44- .tenantId(this.tenantId) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-45- .clientId(this.clientId) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-46- .certificate(this.keystore) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-47- .password(this.keystorePassword) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-48- .build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-49- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-50- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-51- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-52- public static AzureCertificateAuthenticationConfig.AzureCertificateAuthenticationConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-53- return new AzureCertificateAuthenticationConfig.AzureCertificateAuthenticationConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-54- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-55- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-56- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-57- public AzureCertificateAuthenticationConfig() { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-13-public final class KafkaSaslOAuthBearerAuthenticationConfig implements KafkaProducerAuthenticationConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-14- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-15- description = "The client ID for SASL/OAUTHBEARER authentication.\n

\nRelated Kafka producer property: sasl.oauthbearer.client.credentials.client.id\n

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-16- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-17- exampleValues = {"airlock-iam-kafka-oauth-client", "49e162ab-156b-40d9-a6ab-1934b7ceec3d"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-18- displayName = "Client ID" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-19- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-20- private String clientId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-21- public static final String SASL_OAUTHBEARER_CLIENT_ID_PROPERTY = "clientId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-22- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-23- description = "The client secret for SASL/OAUTHBEARER authentication.\n

\nRelated Kafka producer property: sasl.oauthbearer.client.credentials.client.secret\n

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-24- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java:25: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-26- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-27- private String clientSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-28- public static final String SASL_OAUTHBEARER_CLIENT_SECRET_PROPERTY = "clientSecret"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-29- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-30- description = "The scope for SASL/OAUTHBEARER authentication.\n

\nRelated Kafka producer property: sasl.oauthbearer.scope\n

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-31- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-32- exampleValues = "my-application-scope" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-33- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-34- private String scope; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-35- public static final String SASL_OAUTHBEARER_SCOPE_PROPERTY = "scope"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-36- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-37- description = "The token endpoint URL for SASL/OAUTHBEARER authentication.\n

\nNote: The token endpoint URL must be explicitly allowed via Java Opts, in the instance.properties file (this is enforced by the library),\ne.g. iam.java.opts=-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls=https://localhost:8443/auth-login/rest/oauth2/authorization-servers/local-iam-as/token\n

\n

\nRelated Kafka producer property: sasl.oauthbearer.token.endpoint.url\n

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-38- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-39- exampleValues = "https://example.com/oauth2/v1/token", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-40- displayName = "Token Endpoint URL" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-41- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-42- private String tokenEndpointUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-43- public static final String SASL_OAUTHBEARER_TOKEN_ENDPOINT_URL_PROPERTY = "tokenEndpointUrl"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-44- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-45- @Override -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-54- public static final String EVENT_HUB_NAME_PROPERTY = "eventHubName"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-55- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-56- description = "Configures how IAM authenticates to Azure services (Microsoft Entra ID).\n

Dependending on the setup and available infrastructure, different methods may suit better.\nRefer to the individual plugin documentation for further explanations.

\n

If authentication with Microsoft Entra ID is not possible, consider using a \"Connection String\" for direct access.

\n

For successful authentication, ensure that the necessary certificates are available when a custom truststore is used with IAM.

\n

For integration or if necessary, additional logging regarding connections to Azure can be enabled in the Log4J configuration.\nIAM documentation explains custom logging configuration.

\n

Adjust the log levels for \"com.azure\", \"com.azure.core.amqp\", \"com.microsoft.azure.proton.transport.proxy\" or other libraries to your needs.

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-57- mandatoryUnless = "connectionString", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-58- notCombinableWith = "connectionString", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-59- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-60- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-61- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-62- private AzureAuthenticationConfig authentication; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-63- public static final String AUTHENTICATION_PROPERTY = "authentication"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-64- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-65- description = "

Alternative service authentication method if general authentication with Microsoft Entra ID is not possible.

\nAn Azure connection string contains all information required for an application to securely authenticate with and connect to an Azure Event Hub.\nIt includes the service endpoint, authentication credentials (Shared Access Key), and an optional entity path (Event Hub name).\n

A namespace-level connection string grants the specified permissions (manage, read, or write)\nfor all Event Hubs within the namespace.
\nAn Event Hub–level connection string (ends with ;EntityPath=<EventHubName>) grants the specified permissions only for that specific Event Hub.

\n

Connection strings should only be used when authentication with Microsoft Entra ID is not available or for integration.

\n

It is recommended to rotate connection strings regularly.

\n

For successful authentication, ensure that the necessary certificates are available when a custom truststore is used with IAM.

\n

For integration or if necessary, additional logging regarding connections to Azure can be enabled in the Log4J configuration.\nIAM documentation explains custom logging configuration.

\n

Adjust the log levels for \"com.azure\", \"com.azure.core.amqp\" or other libraries to your needs.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java:66: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-67- exampleValues = { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-68- "Endpoint=sb://<NamespaceName>.servicebus.windows.net/;SharedAccessKeyName=<KeyName>;SharedAccessKey=<KeyValue>", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-69- "Endpoint=sb://<NamespaceName>.servicebus.windows.net/;SharedAccessKeyName=<KeyName>;SharedAccessKey=<KeyValue>;EntityPath=<EventHubName>" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-70- }, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-71- notCombinableWith = "authentication", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-72- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-73- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-74- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-75- private String connectionString; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-76- public static final String CONNECTION_STRING_PROPERTY = "connectionString"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-77- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-78- description = "Defines the transport type by which all the communication with Azure Event Hub occurs.\n

AMQP is the default transport type and is recommended for most scenarios. Outbound connections use port 5671.

\n

AMQP over Web Sockets is useful for environments where networking is restrictive or when a proxy configuration must be used.\nOutbound connections use port 443.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-79- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-80- displayName = "Transport Type", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-81- defaultValue = "AMQP" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-82- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-83- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-84- private AmqpTransportType transportType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-85- public static final String TRANSPORT_TYPE_PROPERTY = "transportType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-86- private static final String TRANSPORT_TYPE_PROPERTY_DISPLAY_NAME = "Transport Type"; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-116- private ProxyAuthenticationType proxyAuthenticationType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-117- public static final String PROXY_AUTH_TYPE_PROPERTY = "proxyAuthenticationType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-118- private static final String PROXY_AUTH_TYPE_PROPERTY_DISPLAY_NAME = "Proxy Authentication Type"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-119- @StringProperty(description = "Username for the proxy if proxy authentication is used.", displayName = "Proxy Login User", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-120- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-121- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-122- public static final String PROXY_LOGIN_USER_PROPERTY = "proxyLoginUser"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-123- static final String PROXY_LOGIN_USER_PROPERTY_DISPLAY_NAME = "Proxy Login User"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-124- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-125- description = "Password for the proxy if proxy authentication is used.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-126- displayName = "Proxy Login Password", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-127- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java:128: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-129- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-130- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-131- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-132- public static final String PROXY_LOGIN_PASSWORD_PROPERTY = "proxyLoginPassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-133- static final String PROXY_LOGIN_PASSWORD_PROPERTY_DISPLAY_NAME = "Proxy Login Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-134- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-135- description = "

A partition key is used to map event data into specific partitions for data organization.

\n

It enables keeping related events together in the same partition and in the exact order in which they arrived.

\n

The partition key is derived from the application context and identifies the interrelationship of the events.

\n

The partition key is used for all events sent to the event hub by this message broker connector.

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-136- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-137- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-138- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-139- private String partitionKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-140- public static final String PARTITION_KEY_PROPERTY = "partitionKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-141- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-142- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-143- public static void ensureCorrectTransportTypeForProxyConfiguration( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-144- PluginConfiguration pc, ConfigurationEnvironment env, ConfigurationContext context, Environment valenv work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-145- ) throws PropertyConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-146- String proxyHost = StringPropertyValueReader.effectiveStringConfigValue(pc, "proxyHost", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-147- AmqpTransportType transportType = (AmqpTransportType)EnumPropertyValueReader.effectiveConfigEnum(pc, "transportType", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-148- if (proxyHost != null && transportType == AmqpTransportType.AMQP) { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-104- public static final String TRUST_STORE_PATH_PROPERTY = "trustStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-105- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-106- description = "The format of the truststore file. Supported formats are JKS, PKCS12 and PEM. We recommend\nusing PKCS12 or PEM formats.\n

\nRelated Kafka producer property: ssl.truststore.type\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-107- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-108- suggestedValues = {"PKCS12", "PEM", "JKS"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-109- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-110- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-111- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-112- public static final String TRUST_STORE_TYPE_PROPERTY = "trustStoreType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-113- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-114- description = "The password used to unlock the truststore.\n

\nRelated Kafka producer property: ssl.truststore.password\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-115- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java:116: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-117- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-118- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-119- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-120- public static final String TRUST_STORE_PASSWORD_PROPERTY = "trustStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-121- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-122- description = "The keystore containing a client certificate (including a private key) for Airlock IAM.\nThe client certificate is used to establish a mutual SSL connection with Kafka.\n

\nRelated Kafka producer property: ssl.keystore.location\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-123- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-124- exampleValues = {"./instances/auth/keystore.p12", "keystore.pem", "keystore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-125- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-126- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-127- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-128- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-129- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-130- private File keyStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-131- public static final String KEY_STORE_PATH_PROPERTY = "keyStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-132- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-133- description = "The format of the keystore file. Supported formats are JKS, PKCS12 and PEM. We recommend\nusing PKCS12 or PEM formats.\n

\nRelated Kafka producer property: ssl.keystore.type\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-134- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-135- suggestedValues = {"PKCS12", "PEM", "JKS"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-136- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-137- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-138- private String keyStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-139- public static final String KEY_STORE_TYPE_PROPERTY = "keyStoreType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-140- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-141- description = "The password used to unlock the keystore.\n

\nRelated Kafka producer property: ssl.keystore.password\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-142- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java:143: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-144- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-145- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-146- private String keyStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-147- public static final String KEY_STORE_PASSWORD_PROPERTY = "keyStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-148- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-149- description = "The password used to unlock the private key in the keystore file.\n

\nRelated Kafka producer property: ssl.key.password\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-150- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java:151: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-152- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-153- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-154- private String keyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-155- public static final String KEY_PASSWORD_PROPERTY = "keyPassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-156- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-157- description = "A logical identifier for the Kafka producer.\n

\nThe client ID is included in requests sent to the broker and is used for logging, metrics, and monitoring\nThe value is not used for authentication or authorization and is not stored in Kafka records.\n

\nSetting a meaningful client ID is strongly recommended in production environments to improve observability and operational debugging.\n

\nRelated Kafka producer property: client.id\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-158- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-159- defaultValue = "airlock-iam.event-producer", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-160- displayName = "Client ID" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-161- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-162- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-163- private String clientId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-164- public static final String CLIENT_ID_PROPERTY = "clientId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-165- @LongProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-166- description = "Maximum duration in milliseconds to wait for batch processing to complete.\n

\nThis threshold determines how long the connector will wait for a batch of events to be sent to Kafka\nbefore considering the operation as potentially problematic. This helps prevent indefinite blocking\nand allows for better monitoring of slow Kafka operations.\n

", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-167- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-168- defaultValue = 5000L, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-169- minValue = 500L, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-170- displayName = "Batch Processing Timeout [ms]" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-171- ) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-9- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-10-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-11- description = "SASL/SCRAM authentication for Kafka.\n

\nSCRAM (Salted Challenge Response Authentication Mechanism) is a SASL authentication method where the client proves\nknowledge of a password without sending the password itself, using a salted hash and a challenge–response exchange.\n

\n

\nFor more information, see Authentication using SASL.\n

\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-12- displayName = "Kafka SASL SCRAM Authentication" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-13-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-14-public final class KafkaSaslScramAuthenticationConfig implements KafkaProducerAuthenticationConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-15- @EnumProperty(description = "The hash algorithm to use for SCRAM authentication.\n", optional = true, defaultValue = "SHA_256") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-16- private ScramHashAlgorithm hashAlgorithm; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-17- public static final String SASL_SCRAM_HASH_ALGORITHM_PROPERTY = "hashAlgorithm"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-18- @StringProperty(description = "The username for SASL/SCRAM authentication.\n", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-19- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-20- public static final String SASL_SCRAM_USERNAME_PROPERTY = "username"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java:21: @StringProperty(description = "The password for SASL/SCRAM authentication.\n", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-22- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-23- public static final String SASL_SCRAM_PASSWORD_PROPERTY = "password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-24- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-25- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-26- public KafkaSettings getKafkaSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-27- return KafkaSaslScramAuthentication.builder().hashAlgorithm(this.hashAlgorithm).username(this.username).password(this.password).build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-28- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-30- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-31- public static KafkaSaslScramAuthenticationConfig.KafkaSaslScramAuthenticationConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-32- return new KafkaSaslScramAuthenticationConfig.KafkaSaslScramAuthenticationConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-33- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-34- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-35- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-36- public KafkaSaslScramAuthenticationConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-37- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-38- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-39- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-40- public KafkaSaslScramAuthenticationConfig(ScramHashAlgorithm hashAlgorithm, String username, String password) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-41- this.hashAlgorithm = hashAlgorithm; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-1-package com.airlock.iam.servicecontainer.app.application.configuration.event.kafka; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-4-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-5-import com.airlock.iam.servicecontainer.api.application.configuration.event.kafka.CustomKafkaConfigValue; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-6-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-7- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-8-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-9- description = "Provides a sensitive value for a custom Kafka property.\n

\nThis plugin can be used to add or overwrite arbitrary Kafka producer properties that contain sensitive information,\nsuch as passwords or secrets, which should not be part of the IAM configuration file.\n

\nExample: Setting a custom secret for a specific Kafka interceptor.\n" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-10-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-11-public final class SensitiveKafkaConfigValue implements CustomKafkaConfigValue { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java:12: @StringProperty(description = "The sensitive value of the Kafka property.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-13- private String value; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-14- public static final String CUSTOM_SENSITIVE_KAFKA_CONFIG_VALUE_PROPERTY = "value"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-15- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-16- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-17- public String getValue() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-18- return this.value; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-19- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-20- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-21- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-22- public static SensitiveKafkaConfigValue.SensitiveKafkaConfigValueBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-23- return new SensitiveKafkaConfigValue.SensitiveKafkaConfigValueBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-24- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-25- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-26- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-27- public SensitiveKafkaConfigValue() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-28- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-30- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-31- public SensitiveKafkaConfigValue(String value) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-32- this.value = value;