work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-118- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-119- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-120- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-121- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-122- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-123- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-124- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-125- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-126- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-127- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-128- description = "The password used verify the authenticity of the trust store.
\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t
When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.
\nIf the correlation ID is not defined, the correlation ID header is not included in sent requests.
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-146- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-147- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-148- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-149- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-150- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-151- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-152- private String correlationIdHeaderName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-153- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-154- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-155- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-156- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-157- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-158- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-159- @StringProperty(description = "Username for the HTTP proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-160- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-161- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java:162: @StringProperty(description = "Password for the HTTP proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-163- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-164- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-165- @PluginListProperty(description = "A list of cookies to expect and send back to the client.", minElements = 1, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-166- @GroupProperty(groupIdentifier = "Access Cookie Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAccessCookieIdentityPropagator.java-167- private ListIf set, adds the given audiences to an AudienceRestriction element. This is usually not required. Each element of this list is included in the AudienceRestriction as a separate Audience.
e.g. If this list contains the Strings:{\"https://1.airlock.com\",\"https://2.airlock.com\"} the resulting condition contains:
<saml:Conditions ...>
<saml:AudienceRestriction>
<saml:Audience>https://1.airlock.com</saml:Audience>
<saml:Audience>https://2.airlock.com</saml:Audience>
</saml:AudienceRestriction>
</saml:Conditions>",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-213- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-214- exampleElements = "https://sp.airlock.com"
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-215- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-216- @GroupProperty(groupIdentifier = "Advanced Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/saml2/application/configuration/SamlAssertionBase.java-217- private ListThe encryption key (encoded in base64) is required to encrypt sensitive data in cookies or in REST responses.
The openssl tool can be used to generate a random base64 string with 256 bits (32 bytes): openssl rand -base64 32
The HMAC Key (encoded in base64) is required to sign sensitive data stored in cookies or REST responses.
The openssl tool can be used to generate a random base64 string with 512 bits (64 bytes): openssl rand -base64 64
Security Recommendation: Use an HMAC key length of 512 bit or greater for optimal security with the used HS512 algorithm.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java:43: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-44- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-45- displayName = "HMAC Key (Base64 Encoded)" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-47- private String hmacKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-48- public static final String HMAC_KEY_PROPERTY_NAME = "hmacKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-49- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-50- description = "The settings to allow cross-domain REST calls.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-51- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-52- defaultValue = CorsSettings.class, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-53- displayName = "CORS Settings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-54- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-55- private CorsSettings corsSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-56- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-57- description = "If enabled, REST endpoints are protected against CSRF attacks.
With this protection, the REST API only accepts requests that contain the custom header X-Same-Domain with an arbitrary non-empty value. In cross-origin resource sharing (CORS), such requests are not considered simple requests and thus must always be preceded by a preflight request, which prevents cross-site request forgery (CSRF) attacks.
Security warning: Disabling this feature may allow CSRF attacks. Only do so if the REST client is unable to comply with the aforementioned restrictions.
To be RFC-compliant, the endpoint\n/<loginapp-uri>/rest/public/tech-client-registration/oauth2/<as-identifier>/register\nnever requires the X-Same-Domain header.
\nRequests to this endpoint are guaranteed to be non-simple, because of the enforced non-simple content\ntype application/json
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-58- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-59- displayName = "CSRF Protection", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-60- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-61- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-62- private boolean csrfProtection; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/application/configuration/SecurityConfig.java-63- @IntegerProperty( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-1-package com.airlock.iam.login.app.misc.oauth2.introspection.config; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-4-import com.airlock.iam.plugin.api.annotation.license.PluginLicenseRestriction; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-5-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-6-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-7- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-8-@Plugin(description = "A combination of a username and password that shall be allowed for this endpoint.") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-9-@PluginLicenseRestriction(moduleAffiliation = "OAuthServer") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-10-public class AllowedUsernamePasswordCombination { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-11- @StringProperty(description = "The username.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-12- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java:13: @StringProperty(description = "The user's password.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-14- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-15- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-16- public String getUsername() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-17- return this.username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-18- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-19- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-20- public String getPassword() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-21- return this.password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-22- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-23- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-24- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-25- public static AllowedUsernamePasswordCombination.AllowedUsernamePasswordCombinationBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-26- return new AllowedUsernamePasswordCombination.AllowedUsernamePasswordCombinationBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-27- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-28- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-29- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-30- public AllowedUsernamePasswordCombination(String username, String password) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-31- this.username = username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-32- this.password = password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oauth2/introspection/config/AllowedUsernamePasswordCombination.java-33- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-119- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-120- private ListOverrides the default Proof Key for Code Exchange (PKCE, see RFC 7636)\nconfiguration of the Authorization Code Flow/Grant for this particular client.
\nThis allows to either disable PKCE enforcement for this client if enforced by default or to enforce PKCE for this\nclient if not enforced by default.
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-123- displayName = "PKCE Code Challenge Method", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-124- defaultValue = "DEFAULT", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-125- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-126- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-127- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-128- private PkceCodeChallengeMethodClientOverride pkceCodeChallengeMethodOverride; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-129- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-130- description = "The client secret, used for authentication.openssl rand -base64 32.\nIf using an HMAC signature for ID tokens, the client secret length must suffice for the signature algorithm (e.g., 32 bytes for HS256).\n",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java:131: isSensitive = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-132- optional = true
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-133- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-134- @GroupProperty(groupIdentifier = "Authentication Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-135- private String clientSecret;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-136- public static final String STATIC_CLIENT_SECRET_PROPERTY = "clientSecret";
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-137- @PluginListProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-138- description = "The information about the certificates of a client. The information of the certificate used in the TLS handshake must be defined here for the request to be successfully authenticated.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-139- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-140- minElements = 1
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-141- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-142- @GroupProperty(groupIdentifier = "Authentication Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/configuration/oauth/as/client/OAuth2StaticClientConfig.java-143- private ListA JSON Web Key Set (JWKS) containing the keys that can be used by the client for authentication to the\nauthorization server, e.g. when accessing the token endpoint (if configured to use\nprivate_key_jwt).
For this client to authenticate using private_key_jwt, either this property or at least one\npublic key must be configured. However, both may not be configured at the same time, i.e. if a public key\nis configured, then this property must not be set.
\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t
Security warning: The revocation status is only checked for the leaf certificate. Issuer certificates are not checked for revocation. If revocation checks for issuer certificates are required, these must be performed by the administrative process that manages the IAM truststore, see property 'Trust Store Path'.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-101- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-102- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-103- @GroupProperty(groupIdentifier = "Verification") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/login/app/misc/oneshot/impl/HttpSignatureVerificationCredentialExtractorConfig.java-104- private ListThe site key can be assumed to be public knowledge and identifies the associated CAPTCHA account.
", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-27- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-28- private String siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-29- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-30- description = "The secret is used to validate the CAPTCHA challenge response on the custom CAPTCHA server.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java:31: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-32- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-33- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-34- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-35- private String secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-36- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-37- description = "URL of the CAPTCHA service to use. The CAPTCHA validation will be performed against a CAPTCHA server with this URL. The server API must match the reCAPTCHA API.For example, the API request for reCAPTCHA is 'https://google.com/recaptcha/api/siteverify' as POST method with the 'secret' and the user 'response' token as POST parameters.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-38- displayName = "CAPTCHA Service URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-39- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-40- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-41- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-42- private String captchaServiceUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-43- private static final String CAPTCHA_SERVICE_URL_FIELD = "captchaServiceUrl"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-44- private static final String CAPTCHA_SERVICE_URL_DISPLAY_NAME = "CAPTCHA Service URL"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-45- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-46- description = "Whether a CAPTCHA solution is always required. By default, solving a CAPTCHA in a step will cause subsequent steps with CAPTCHA to skip CAPTCHA verification. When this setting is enabled, the user is always required to solve the CAPTCHA for this step, irrespective of whether a CAPTCHA has previously been solved. Later CAPTCHA verifications are also not influenced by the step using this CAPTCHA, i.e. solving the CAPTCHA in this step has no effect on later CAPTCHA verifications. When this setting is disabled, no CAPTCHA is required if a CAPTCHA was resolved in a preceding step, unless the preceding Custom Captcha Step had this setting activated.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-47- displayName = "Enforce CAPTCHA for step", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-48- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-49- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-50- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-51- @GroupProperty(groupIdentifier = "Basic Settings") -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-60- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-61- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be used.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-62- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-63- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-64- exampleValues = "https://proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-65- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-66- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-67- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-68- private static final String FIELD_PROXY_URI = "proxyUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-69- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-70- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-71- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java:72: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-73- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-74- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-75- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-76- @ConfigurationValidator work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-77- static void checkCaptchaServiceUrl(PluginConfiguration config, ConfigurationEnvironment env, ConfigurationContext context, Environment validationEnvironment) throws ConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-78- UriPropertyValidator.uriPropertyValidator("captchaServiceUrl", "CAPTCHA Service URL", config, env, context) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-79- .validateIsUri() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-80- .validateHasNoQuery() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-81- .validateHasNoFragment(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-82- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-83- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-84- public String getSiteKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-85- return this.siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-86- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-87- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-88- public String getSecretKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-89- return this.secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-90- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-91- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/CustomCaptchaConfig.java-92- public String getCaptchaServiceUrl() { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-14-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-15-@Groups(groupSequence = {"Basic Settings", "Proxy Settings"}, openGroups = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-16-public final class HCaptchaConfig implements CaptchaProviderConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-17- static final String PROXY_SETTINGS = "Proxy Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-18- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-19- description = "The site key can be assumed to be public knowledge and identifies the associated hCAPTCHA account.
The site key can be found on the hCAPTCHA profile page.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-20- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-21- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-22- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-23- private String siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-24- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-25- description = "The secret key is used to validate the CAPTCHA challenge response on the hCAPTCHA server. While a leaked secret key doesn't impact the security or validity of this CAPTCHA method, its misuse can infer costs as it is used for quota calculations at the CAPTCHA provider (similar to an API key).
The secret key can be found on the hCAPTCHA profile page.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java:26: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-27- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-28- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-29- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-30- private String secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-31- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-32- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be used.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-33- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-34- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-35- exampleValues = "https://proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-36- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-37- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-38- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-39- private static final String FIELD_PROXY_URI = "proxyUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-40- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true, exampleValues = "proxyLogin") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-41- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-42- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java:43: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-44- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-45- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-46- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-47- public String getSiteKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-48- return this.siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-49- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-50- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-51- public String getSecretKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-52- return this.secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-53- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-54- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-55- @Nullable work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-56- public String getProxyUri() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-57- return this.proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-58- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-59- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-60- @Nullable work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-61- public String getProxyLoginUser() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-62- return this.proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/HCaptchaConfig.java-63- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-14-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-15-@Groups(groupSequence = {"Basic Settings", "Proxy Settings"}, openGroups = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-16-public final class ReCaptchaConfig implements CaptchaProviderConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-17- static final String PROXY_SETTINGS = "Proxy Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-18- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-19- description = "The site key can be assumed to be public knowledge and identifies the associated reCAPTCHA account.
The site key can be found on the reCAPTCHA admin page.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-20- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-21- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-22- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-23- private String siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-24- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-25- description = "The secret is used to validate the CAPTCHA challenge response on the reCAPTCHA server. While a leaked secret key doesn't impact the security or validity of this CAPTCHA method, its misuse can infer costs as it is used for quota calculations at the CAPTCHA provider (similar to an API key).
The secret key can be found on the reCaptcha admin page.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java:26: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-27- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-28- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-29- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-30- private String secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-31- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-32- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be used.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-33- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-34- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-35- exampleValues = "https://proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-36- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-37- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-38- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-39- private static final String FIELD_PROXY_URI = "proxyUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-40- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-41- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-42- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java:43: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-44- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-45- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-46- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-47- public String getSiteKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-48- return this.siteKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-49- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-50- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-51- public String getSecretKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-52- return this.secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-53- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-54- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-55- @Nullable work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-56- public String getProxyUri() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-57- return this.proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-58- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-59- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-60- @Nullable work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-61- public String getProxyLoginUser() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-62- return this.proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/captcha/ReCaptchaConfig.java-63- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-23- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-24- minLength = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-25- maxLength = 30, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-26- validationRegex = "[a-zA-Z0-9_]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-27- defaultValue = "AL_LoginFromNewDevice" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-28- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-29- private String cookieName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-30- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-31- description = "The key used to encrypt the cookie. Must be 32 Bytes encoded as Base64 String.
One can, for example, generate a random base64 string with 256 bits (32 bytes) using OpenSSL as follows: openssl rand -base64 32
If this value is changed, all previously used devices are forgotten.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-32- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-33- minLength = 44, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-34- maxLength = 44, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java:35: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-36- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-37- private String key; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-38- public static final String KEY_FIELD = "key"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-39- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-40- description = "Time period during which previous logins are considered. If a user's most recent login on a device is older than the configured validity period, the device is treated as new for that user.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-41- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-42- defaultValue = "365d", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-43- exampleValues = {"10d", "8h", "2d 12h"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-44- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-45- private String validity; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-46- private static final String VALIDITY_FIELD = "validity"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-47- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-48- public String getCookieName() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-49- return this.cookieName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-50- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-51- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-52- public String getKey() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-53- return this.key; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-54- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/flow/shared/application/configuration/newdevice/NewDeviceCookieConfig.java-55- -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-43- static final String TRUST_AND_KEYSTORE_SETTINGS = "Trust and Keystore Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-44- private static final ELogger LOG = ELoggerFactory.getLogger(FuturaeServerConfig.class); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-45- private static final NoRetryPolicyConfig NO_RETRY_POLICY = createNoRetryPolicy(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-46- private static final String CSP_DESCRIPTION = "Note: When using a custom URL and a CSP, add exceptions for img-src and connect-src directives with the configured URL to it.
"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-47- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-48- description = "The service ID of the client.The value is of the form 'xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx'.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-49- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-50- displayName = "Service ID" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-51- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-52- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-53- private String serviceId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-54- public static final String SERVICE_ID_DISPLAY_NAME = "Service ID"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:55: @StringProperty(description = "The API key for the Futurae Auth API.", optional = false, isSensitive = true, displayName = "Auth API Key") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-56- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-57- private String authApiKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-58- public static final String AUTH_API_KEY_DISPLAY_NAME = "Auth API Key"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-59- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-60- description = "The API key for the Futurae Admin API.The Admin API key is different than the Auth API key, which is used to access the Auth API.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-61- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:62: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-63- displayName = "Admin API Key" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-64- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-65- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-66- private String adminApiKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-67- public static final String ADMIN_API_KEY_DISPLAY_NAME = "Admin API Key"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-68- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-69- displayName = "Back-End Server URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-70- description = "The back-end URL of the Futurae server (without path or trailing slash).This URL is used by the back-end of IAM to connect to the Futurae API.
Note: When using a custom URL and a CSP, add exceptions for img-src and connect-src directives with the configured URL to it.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-71- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-72- validationRegex = "https?:\\/\\/[^\\/]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-73- defaultValue = "https://api.futurae.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-74- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-75- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-76- private String backEndUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-77- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-78- displayName = "Front-End Server URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-79- description = "The front-end URL of the Futurae server (without path or trailing slash).This URL is used by the browser of the end user to access the Futurae API via the internet.
Note: When using a custom URL and a CSP, add exceptions for img-src and connect-src directives with the configured URL to it.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-80- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-81- validationRegex = "https?:\\/\\/[^\\/]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-82- defaultValue = "https://api.futurae.com" -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-109- description = "Keystore file name containing trusted certificate issuers (and trusted certificates).\nIf this property is not defined the following certificate issuers are trusted:\n
If this property is defined then the following certificate issuers are trusted:\n
In any case, IAM will only establish an HTTPS connection to the Futurae server or its proxy if the server certificate issuer is trusted or the certificate itself is trusted according to the aforementioned definition of trust.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-110- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-111- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-112- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-113- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-114- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-115- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-116- @GroupProperty(groupIdentifier = "Trust and Keystore Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-117- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-118- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-119- description = "The password used to check the integrity of the truststore, or to unlock the truststore.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-120- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:121: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-122- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-123- @GroupProperty(groupIdentifier = "Trust and Keystore Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-124- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-125- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-126- description = "The keystore containing a client certificate (including a private key) for Airlock IAM. The client certificate is used to establish mutual SSL connections for HTTPS REST calls.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-127- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-128- exampleValues = {"keystore.jks", "/etc/airlock/keystore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-129- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-130- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-131- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-132- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-133- @GroupProperty(groupIdentifier = "Trust and Keystore Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-134- private File keyStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-135- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-136- description = "The password used to check the integrity of the keystore, or to unlock the keystore. Must be provided in case the keystore is configured.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-137- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:138: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-139- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-140- @GroupProperty(groupIdentifier = "Trust and Keystore Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-141- private String keyStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-142- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-143- description = "URI of a HTTP proxy the connector should use. If the port component of the URI is absent then a default port of 8080 is assumed. If this property is left empty then no proxy will be utilized.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-144- displayName = "Proxy URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-145- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-146- exampleValues = "https://proxy.company.com" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-147- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-148- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-149- private String proxyUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-150- private static final String FIELD_PROXY_URI = "proxyUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-151- @StringProperty(description = "Username for the proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-152- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-153- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java:154: @StringProperty(description = "Password for the proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-155- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-156- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-157- private RestClient restClient; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-158- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-159- public FuturaeServerConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-160- String serviceId, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-161- String authApiKey, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-162- String adminApiKey, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-163- String backEndUrl, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-164- String frontEndUrl, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-165- int callTimeoutMs, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-166- int connectionPoolMaxSize, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-167- File trustStorePath, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-168- String trustStorePassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-169- File keyStorePath, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-170- String keyStorePassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-171- String proxyUri, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-172- String proxyLoginUser, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-173- String proxyLoginPassword work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/FuturaeServerConfig.java-174- ) { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-98- private boolean lockUserOnFraud; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-99- public static final String LOCK_USER_ON_FRAUD_DISPLAY_NAME = "Lock User on Fraud"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-100- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-101- description = "If enabled, Futurae users that have the bypass mode enabled will be allowed to authenticate /\nperform approval with IAM. Otherwise, any authentication or approval attempts for users with the bypass\nmode enabled will result in a failure.
\nWarning: Enabling bypass mode effectively disables all Airlock 2FA second factor checks.\nBypass mode should not be used in production environments.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-102- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-103- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-104- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-105- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-106- private boolean allowFuturaeBypassMode; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-107- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-108- description = "The symmetric key to encrypt the authentication/transaction payloads. If left empty, the payloads are not encrypted.\n\nThe encryption of payloads in requests to the Futurae API prevents that intermediate infrastructure such as\na reverse proxy is able to read or alter the confidential data therein.\nThe encryption key can be obtained from the Futurae Admin Dashboard.\n
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-109- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java:110: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-111- displayName = "Payload Encryption Key" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-112- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-113- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-114- private String payloadEncryptionKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-115- public static final String PAYLOAD_ENCRYPTION_KEY_DISPLAY_NAME = "Payload Encryption Key"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-116- private static final String PAYLOAD_ENCRYPTION_KEY_FIELD_NAME = "payloadEncryptionKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-117- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-118- description = "When a 'Payload Encryption Key' is configured, 'Unencrypted Payload for Hardware Tokens' should be enabled. This setting only applies when a hardware token is used for authentication or approval via Offline QR Code.Note: Enabling this property without configuring a 'Payload Encryption Key' has no effect, as the payload is transmitted unencrypted by default.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-119- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-120- defaultValue = "false", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-121- displayName = "Unencrypted Payload for Hardware Tokens" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-122- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-123- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-124- private boolean unencryptedPayloadForHWTokens; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-125- public static final String UNENCRYPTED_PAYLOAD_FOR_HARDWARE_TOKENS_DISPLAY_NAME = "Unencrypted Payload for Hardware Tokens"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-126- private static final String UNENCRYPTED_PAYLOAD_FOR_HARDWARE_TOKENS_FIELD_NAME = "unencryptedPayloadForHWTokens"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-127- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-128- description = "If configured, a cooldown period is enabled during which a newly registered device cannot be used for certain operations.
By default, all Airlock 2FA steps are configured so that devices may not be used during the \"Cooldown Period\". Exceptions can be configured directly on the step by de-activating the \"Respect Cooldown Period\" property.
The duration must be specified in the format \"2d 4h 10m 5s\" (any part can be omitted).
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-129- exampleValues = {"10m", "12h", "2d"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/factor/application/configuration/airlock2fa/Airlock2FASettings.java-130- optional = true, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-1-package com.airlock.iam.core.application.configuration.basicauth; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-4-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-5-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-6- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-7-@Plugin(description = "Configures a HTTP Basic Authentication header containing username and password.", displayName = "Basic Auth Credentials") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-8-public class BasicAuthCredentialsConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-9- @StringProperty(description = "The username for HTTP Basic Authentication.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-10- private String userName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java:11: @StringProperty(description = "The password for HTTP Basic Authentication.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-12- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-13- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-14- public String getUsername() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-15- return this.userName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-16- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-17- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-18- public String getPassword() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-19- return this.password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-20- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-21- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-22- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-23- public static BasicAuthCredentialsConfig.BasicAuthCredentialsConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-24- return new BasicAuthCredentialsConfig.BasicAuthCredentialsConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-25- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-26- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-27- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-28- public BasicAuthCredentialsConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-29- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-30- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/application/configuration/basicauth/BasicAuthCredentialsConfig.java-31- @SuppressFBWarnings(justification = "generated code") -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-72- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-73- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = SwissphoneSmsGateway.SwissphoneSmsGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-74- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-75- private String portalListDistributionUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-76- @IntegerProperty(description = "The port of the portal list distribution server.", optional = true, defaultValue = 443, exampleValues = 443, minValue = 1) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-77- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SwissphoneSmsGateway.SwissphoneSmsGatewayTcpTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-78- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-79- private int portalListDistributionPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-80- @StringProperty(description = "Username used to access the IMASYS XML gateway functions.", optional = false, exampleValues = "user1234") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-81- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SwissphoneSmsGateway.SwissphoneSmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-82- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-83- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java:84: @StringProperty(description = "Password used to accesss to IMASYS XML gateway functions.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-85- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-86- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-87- @BooleanProperty(description = "Long SMS option is enabled.", optional = true, defaultValue = "false") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-88- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-89- private Boolean longSmsOptionEnabled; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-90- @EnumProperty(description = "The priority of the message.", optional = true, defaultValue = "high") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-91- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-92- private SwissphoneSmsGateway.PriorityEnumeration priority; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-93- private String portalListUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-94- private int portalListPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-95- private long lastUpdated; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-96- private int updateIntervalMinutes = 60; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-97- private final Object updateLock = new Object(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SwissphoneSmsGateway.java-98- private Listusername.", optional = true, isSensitive = true)
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-32- @GroupProperty(groupIdentifier = "Basic Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-33- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class)
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-34- private String password;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-35- @StringProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-36- displayName = "Service URI",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/KannelSmsGateway.java-37- description = "The URI of the Kannel sendsms HTTP(S) interface.Legacy SMS gateway implementation for \"http://www.ecall.ch/\".
This plugin uses the HTTP(S) interface of eCall to send SMS messages.
Important: This plugin only supports the eCall HTTP SMS Gateway Version 1.x (using the \"/ecallurl/ecallurl.ASP\" endpoint). For ECall HTTP Gateway 2.0, please use the generic \"HTTP SMS Gateway\" using the following configuration:
Swisscom recommends the following setups:
Swisscom recommends the following setups:
Only allow connections to servers whose certificate is trusted.\nSee documentation of property \"Trust Store Path\" for more information about what certificates are trusted.
\nSecurity warning: Trusting all certificates allows connections to adversarial hosts.\nOnly disable this property for testing and integration setups.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-58- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-59- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-60- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-61- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-62- private boolean allowOnlyTrustedCerts; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-63- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-64- description = "Enables hostname verification, i.e. the actual hostname must be the same as in the server certificate.
\nSecurity warning: Not verifying the hostname may allow connections to adversarial hosts,\ne.g. if they employ DNS spoofing. Only disable this property for testing and integration setups.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-65- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-66- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-67- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-68- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-69- private boolean verifyServerHostname; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-70- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-71- description = "Keystore file name containing trusted certificate issuers (and trusted certificates).\nIf this property is not defined the following certificate issuers are trusted:\n
If this property is defined then the following certificate issuers are trusted:\n
This property is only relevant if the property \"Allow Only Trusted Certs\" is enabled.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-72- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-73- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-74- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-75- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-76- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-77- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-78- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-79- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-80- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-81- @GroupProperty(groupIdentifier = "HTTPS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-82- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-83- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-84- description = "The password used verify the authenticity of the trust store.\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t
When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.
\nIf the correlation ID is not defined, the correlation ID header is not included in sent requests.
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-102- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-103- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-104- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-105- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsHttpGatewayBase.java-106- ) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-59- .put("608", "MultiModem iSMS is busy, can't accept this request") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-60- .put("609", "Timeout waiting for a TCP API request") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-61- .put("610", "Unknown Action Trigger") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-62- .put("611", "Error in broadcast trigger") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-63- .put("612", "System Error - Memory Allocation Failure") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-64- .put("613", "Invalid Modem Index") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-65- .put("614", "Invalid device model number") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-66- .build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-67- @StringProperty(description = "Username used to send an SMS over this gateway.", optional = false, exampleValues = "fmuster") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-68- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-69- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = SmsFinderGateway.SmsFinderGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-70- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java:71: @StringProperty(description = "Password used to send and SMS over this gateway.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-72- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-73- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-74- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-75- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-76- displayName = "Service URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-77- description = "URL of the Gateway's HTTP interface.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-78- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-79- exampleValues = "http://172.24.33.55:5000/sendmsg" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-80- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-81- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-82- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SmsFinderGateway.SmsFinderGatewayTcpTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-83- private String serviceUrl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-84- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-85- description = "Modem index to send SMS (available only for SF 400/800 models). If modem is not specified in the request, the send request will be distributed via all the available modems.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-86- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-87- minValue = 0, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-88- maxValue = 8, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-89- exampleValues = {0, 1} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-90- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/SmsFinderGateway.java-91- @GroupProperty(groupIdentifier = "Advanced Settings") -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-44- private static final ResourcePoolThe charset to encode messages. This parameter is specified by the SMSC Server and must correlate with the \"Data Coding Scheme\" below. Notice that some charsets use more bytes than others to encode (certain) characters and thus reduce the maximum size of the message.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-68- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-69- defaultValue = "ISO_8859_1" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-70- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-71- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-72- private SmppEncodingCharset messageEncodingCharset; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-73- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-74- description = "The DCS or Data Coding Scheme indicates to the SMSC Server how the binary message shall be interpreted. A value of 0x00 (the default) leaves the decision to the server. Unless it is configurable on the server, a more specific DCS should be chosen based on the charset above.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-75- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-76- defaultValue = "DEFAULT" -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-169- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-170- private boolean useSsl; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-171- private static final String USE_SSL_FIELD = "useSsl"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-172- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-173- description = "The path of the JKS trust store. Mandatory property if SSL is turned on.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-174- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-175- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-176- exampleValues = "directory/keystore.jks" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-177- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-178- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-179- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-180- private static final String TRUST_STORE_PATH_FIELD = "trustStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java:181: @StringProperty(description = "The password of the JKS trust store. Mandatory property if SSL is turned on.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-182- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-183- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-184- private static final String TRUST_STORE_PASSWORD_FIELD = "trustStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-185- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-186- @ConfigurationValidator work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-187- public static void checkSslConfig(PluginConfiguration conf, ConfigurationEnvironment env, ConfigurationContext context, Environment validationEnvironment) throws ConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-188- Boolean useSslConfig = BooleanPropertyValueReader.effectiveBooleanPropertyValue(conf, "useSsl", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-189- if (useSslConfig) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-190- if (StringUtils.isEmpty(FilePropertyValueReader.effectiveFilePropertyValue(conf, "trustStorePath", env, context))) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-191- throw new MandatoryPropertyMissingException("trustStorePath", conf, env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-192- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-193- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-194- if (!PasswordPropertyProcessor.isDefined(conf, "trustStorePassword", env, context)) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-195- throw new MandatoryPropertyMissingException("trustStorePassword", conf, env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-196- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-197- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-198- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-199- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-200- @ConfigurationValidator work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/sms/SmppSmsGatewaySettings.java-201- public static void checkServerIpAndPort( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-33- private static final ELogger LOG = ELoggerFactory.getLogger(AspSmsGateway.class); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-34- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-35- description = "Userkey as provided in the ASPSMS portal.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-36- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-37- exampleValues = "myaspsmslogin" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-38- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-39- @TestletProperty(buttonToolTip = "Send a test SMS to a receiver", testletClass = AspSmsGateway.AspSmsGatewayTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-40- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-41- private String accountUsername; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-42- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-43- description = "API Password as provided in the ASPSMS portal.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-44- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java:45: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-47- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-48- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = SmsGatewayTestlet.SmsGatewaySSLTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-49- private String accountPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-50- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-51- displayName = "Service URI", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sms/AspSmsGateway.java-52- description = "The URI of the ASPSMS service.Use the plugin
The options are:
The options are:
basic-auth-password.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-25- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-26- exampleValues = "johndoe"
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-27- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-28- private String basicAuthUsername;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-29- @StringProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-30- description = "Password used to fetch the CRL when basic authentication is required to access the URL. Used in conjunction with property basic-auth-username.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-31- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java:32: isSensitive = true
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-33- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-34- private String basicAuthPassword;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-35- @StringProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-36- description = "The http proxy host if connections to the specified URL must be made using a http proxy.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-37- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-38- exampleValues = {"gw.foo.bar", "192.168.12.13"}
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-39- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-40- private String proxyHost;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-41- @IntegerProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-42- description = "The http proxy port if connections to the specified URL must be made using a http proxy.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-43- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-44- exampleValues = {8080, 3182},
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-45- minValue = 1,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-46- maxValue = 65535
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-47- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-48- private Integer proxyPort;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-49- @StringProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-50- description = "The user for authentication at the http proxy server. Using a http proxy does not necessarily make this property necessary. This depends on the proxy configuration.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-51- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-52- exampleValues = {"felix", "jdoe"}
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-53- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-54- private String proxyLoginUser;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-55- @StringProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-56- description = "The password for authentication at the http proxy server. Using a http proxy does not necessarily make this property necessary. This depends on the proxy configuration.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-57- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java:58: isSensitive = true
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-59- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-60- private String proxyLoginPassword;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-61- @BooleanProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-62- description = "Only allow connections to servers whose certificate is trusted.\nSee documentation of property \"Trust Store Path\" for more information about what certificates are trusted.
\nSecurity warning: Trusting all certificates allows connections to adversarial hosts.\nOnly disable this property for testing and integration setups.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-63- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-64- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-65- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-66- private boolean allowOnlyTrustedCerts; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-67- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-68- description = "Enables hostname verification, i.e. the actual hostname must be the same as in the server certificate.
\nSecurity warning: Not verifying the hostname may allow connections to adversarial hosts,\ne.g. if they employ DNS spoofing. Only disable this property for testing and integration setups.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-69- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-70- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-71- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-72- private boolean verifyServerHostname; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-73- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-74- description = "Keystore file name containing trusted certificate issuers (and trusted certificates).\nIf this property is not defined the following certificate issuers are trusted:\n
If this property is defined then the following certificate issuers are trusted:\n
This property is only relevant if the property \"Allow Only Trusted Certs\" is enabled.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-75- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-76- exampleValues = {"truststore.jks", "/etc/airlock/truststore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-77- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-78- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-79- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-80- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-81- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-82- @StringProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS", allowedValues = {"JKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-83- private String trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-84- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-85- description = "The password used verify the authenticity of the trust store.\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t
When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.
\nIf the correlation ID is not defined, the correlation ID header is not included in sent requests.
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-101- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-102- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-103- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-104- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-105- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-106- private String correlationIdHeaderName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/cert/crl/AbstractHTTPConnectionOptions.java-107- private CloseableHttpClient httpClient; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-28- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-29-public abstract class JwtTicketVerifierSettings implements JwtSignatureVerifier { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-30- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-31- description = "Keystore that holds the certificate containing the public key for JWT signature verification. Alternatively, it can be a file containing a PEM encoded public key.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-32- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-33- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-34- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-35- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-36- exampleValues = {"keystore.p12", "/etc/airlock/keystore.jks", "public_key.pem"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-37- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-38- private File keystorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-39- private static final String KEY_STORE_NAME = "keystorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java:40: @StringProperty(description = "Password for the keystore.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-41- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-42- private static final String KEY_STORE_PASSWORD_NAME = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-43- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-44- description = "Alias for the X.509 certificate contained in the keystore that should be used for signature verification. This field can be omitted if the keystore only contains one X.509 certificate with a public key.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-45- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-46- displayName = "X.509 Certificate Alias" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-47- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-48- private String x509CertificateAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-49- private static final String CERTIFICATE_ALIAS_NAME = "x509CertificateAlias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-50- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-51- protected static void validateConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-52- PluginConfiguration pc, ConfigurationEnvironment env, ConfigurationContext context, SignatureAlgorithm signatureAlgorithm work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-53- ) throws PropertyConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/JwtTicketVerifierSettings.java-54- OptionalDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\n\t
The key for the HMAC function, encoded in base64.
The minimal required length depends on the configured algorithm and must be at least 256 bits. Configuration validation will fail if the secret is too short.
One can, for example, generate a random base64 string with 512 bits (64 bytes) using OpenSSL as follows: openssl rand -base64 64
\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t
When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.
\nIf the correlation ID is not defined, the correlation ID header is not included in sent requests.
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-138- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-139- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-140- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-141- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-142- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-143- private String correlationIdHeaderName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-144- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-145- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-146- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-147- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-148- @StringProperty(description = "Username for the HTTP proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-149- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java:150: @StringProperty(description = "Password for the HTTP proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-151- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-152- @PluginListProperty(description = "A list of cookies to expect and send back to the client.", minElements = 1, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/sso/AccessCookieIdentityPropagator.java-153- private ListThe 'Private Key Alias' is used to find the X.509 certificate in the keystore to compute the thumbprint for. I.e., it is assumed that the alias identifies a private key with the corresponding certificate. If no 'Private Key Alias' is configured, the keystore is assumed to contain exactly one certificate.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-74- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-75- displayName = "Add x5t#S256 Header Parameter", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-76- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-77- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-78- @GroupProperty(groupIdentifier = "Certificate Thumbprints") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-79- private boolean addX5tS256HeaderParameter; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/signature/PrivateKeyJwtTicketSignerSettings.java-80- static final String ADD_X5TS256_HEADER_PARAMETER_NAME = "addX5tS256HeaderParameter"; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-30- displayName = "JWT Ticket Direct AES Encryption Settings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-31-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-32-public class JwtTicketDirectAesEncryptionSettings implements JwtTicketEncrypter, JwtTicketDecrypter { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-33- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-34- description = "The algorithm used for direct encryption. The configured secret must match the length requirements for the configured direct encryption method, see property 'Encryption Key'.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-35- defaultValue = "A256GCM", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-36- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-37- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-38- private DirectEncryptionMethod directEncryptionMethod; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-39- public static final String DIRECT_ENCRYPTION_METHOD_NAME = "directEncryptionMethod"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-40- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/jwt/encryption/JwtTicketDirectAesEncryptionSettings.java-41- description = "The key for the selected direct encryption method, encoded in base64. The minimal required length depends on the configured encryption method and must be chosen as follows:
One can, for example, generate a random base64 string with 256 bits (32 bytes) using OpenSSL as follows: openssl rand -base64 32
Defines how data is encrypted when stored on the database.
Beware that changing the configured secret may result in data loss.
" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-27-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-28-public class StorageEncryptionConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-29- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-30- displayName = "Secret (Base64-encoded)", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/security/StorageEncryptionConfig.java-31- description = "A Base64-encoded secret. It must be exactly 768 bits (96 bytes or 128 Base64-encoded characters) long.
One can, for example, generate a random Base64 string with 768 bits (96 bytes) using openssl as follows: openssl rand -base64 96
References:
HOTP RFC 4226 http://www.ietf.org/rfc/rfc4226.txt
TOTP RFC 6238 http://www.ietf.org/rfc/rfc6238.txt
More formal:hotp := truncate(secureHash(sharedSecret, counter)) totp := truncate(secureHash(sharedSecret, time_slot))
We implement HOTP as defined in RFC 4226
and for TOTP we follow the draft standard
http://www.ietf.org/id/draft-mraihi-totp-timebased-06.txt).
The label is used together with the username as label of the OTP generator (usually, a mobile app can display multiple OTP generators).
Make sure the context data property is provided by the configured credential persister.
Note that spaces will be removed from the label (not allowed in some mobile clients).
If this property is not defined or the referenced context data value is empty, the default label is used (see separate configuration property).
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-43- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-44- displayName = "Token Label Context Property", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-45- exampleValues = {"company", "instance_id"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/tokenverifier/oathotp/OathOtpSettings.java-47- @GroupProperty(groupIdentifier = "Basic Settings") -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-52- exampleValues = {"rediss://redis:6379", "redis://localhost:6379"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-53- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-54- displayName = "Redis URI" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-55- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-56- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-57- @TestletProperty(buttonToolTip = "Test TCP connection", testletClass = SingleModeRedisStateRepositoryConfig.RedisTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-58- private String redisUri; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-59- static final String REDIS_URI_PROPERTY = "redisUri"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-60- static final String REDIS_URI_DISPLAY_NAME = "Redis URI"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-61- @StringProperty(description = "The username to login on Redis.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-62- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-63- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java:64: @StringProperty(description = "The password to login on Redis.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-65- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-66- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-67- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-68- description = "The minimum amount of idle Redis connections.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-69- displayName = "Minimum Idle Connections", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-70- defaultValue = 24, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-71- minValue = 0, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-72- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-73- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-74- @GroupProperty(groupIdentifier = "Performance Tuning") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-75- private Integer minimumIdleConnections; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-76- private static final String MINIMUM_IDLE_CONNECTIONS_PROPERTY = "minimumIdleConnections"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-77- private static final String MINIMUM_IDLE_CONNECTIONS_DISPLAY_NAME = "Minimum Idle Connections"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-78- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-79- description = "The maximum Redis connection pool size.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-80- displayName = "Maximum Pool Size", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-81- defaultValue = 64, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-82- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-83- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-84- ) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-129- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-130- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-131- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-132- displayName = "Trust Store Path" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-133- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-134- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-135- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-136- static final String TRUST_STORE_PATH_FIELD = "trustStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-137- static final String TRUST_STORE_PATH_DISPLAY_NAME = "Trust Store Path"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-138- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-139- description = "The password used to check the integrity of the trust store, or to unlock the trust store.The password must be provided if a trust store is configured.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-140- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java:141: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-142- displayName = "Trust Store Password" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-143- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-144- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-145- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-146- private static final String TRUST_STORE_PASSWORD_FIELD = "trustStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-147- private static final String TRUST_STORE_PASSWORD_DISPLAY_NAME = "Trust Store Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-148- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-149- description = "Enables hostname verification, i.e. the actual hostname must be the same as in the server certificate.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-150- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-151- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-152- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-153- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-154- private boolean verifyServerHostname; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-155- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-156- description = "The keystore containing a client certificate (including a private key) for Airlock IAM. The client certificate is used to establish a mutual SSL connection with Redis.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-157- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-158- exampleValues = {"keystore.jks", "/etc/airlock/keystore.jks"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-159- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-160- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-161- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-162- displayName = "Key Store Path" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-163- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-164- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-165- private File keyStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-166- private static final String KEY_STORE_PATH_FIELD = "keyStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-167- private static final String KEY_STORE_PATH_DISPLAY_NAME = "Key Store Path"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-168- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-169- description = "The password used to check the integrity of the keystore, or to unlock the keystore.The password must be provided if a keystore is configured.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-170- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java:171: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-172- displayName = "Key Store Password" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-173- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-174- @GroupProperty(groupIdentifier = "TLS Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-175- private String keyStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-176- private static final String KEY_STORE_PASSWORD_FIELD = "keyStorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-177- private static final String KEY_STORE_PASSWORD_DISPLAY_NAME = "Key Store Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-178- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-179- public SingleModeRedisStateRepositoryConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-180- StateEncryptionConfig encryption, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-181- boolean legacyKeyFormat, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-182- String namespace, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-183- String redisUri, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-184- String username, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-185- String password, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-186- Integer minimumIdleConnections, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-187- Integer maximumPoolSize, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-188- Integer idleTimeoutInMs, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-189- Integer connectionTimeoutInMs, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-190- Integer responseTimeoutInMs, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/SingleModeRedisStateRepositoryConfig.java-191- Integer pingConnectionIntervalInMs, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-62- "jdbc:postgresql://host:5432/iamdb" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-63- }, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-64- displayName = "URL", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-65- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-66- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-67- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-68- private String url; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-69- static final String URL_FIELD = "url"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-70- @StringProperty(description = "The username used to login on the database.", exampleValues = {"admin", "dba", "airlock"}, optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-71- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-72- private String user; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-73- static final String USER_FIELD = "user"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java:74: @StringProperty(description = "The password used to login on the database.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-75- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-76- @TestletProperty(buttonToolTip = "Test database connection", testletClass = DbConnectionTestlet.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-77- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-78- static final String PASSWORD_FIELD = "password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-79- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-80- description = "SQL statement to test the database connection. Only use this property if your connections aren't correctly tested for validity. A JDBC 4.0 driver is usually able to test the connection validity with an internal mechanism, without an explicit test statement.
For H2 databases, a statement involving a table name should be used.
This is database specific and should be set to a query that consumes the minimal amount of load on the server.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-81- suggestedValues = {"/* ping */ SELECT 1", "SELECT NOW()", "SELECT 1 FROM DUAL", "SELECT COUNT(*) FROM medusa_admin"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-82- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-83- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-84- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-85- private String connectionTestStatement; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-86- static final String CONNECTION_TEST_STATEMENT_FIELD = "connectionTestStatement"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-87- @EnumProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-88- description = "The SQL dialect to use. SQL dialects have minor – but important – differences: For example, Oracle does not support auto-increment, or MSSQL requires extra information for an insert statement with default values.
With the default setting (AUTOMATIC), the dialect is automatically determined based on the \"Driver Class\" of the JDBC driver. When using a non-standard \"Driver Class\", the SQL dialect of the underlying database cannot be determined automatically and must be set to the correct value here.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-89- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-90- defaultValue = "AUTOMATIC", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-91- displayName = "SQL Dialect" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-92- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-93- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/db/JdbcDataSource.java-94- private SqlDataSource.SqlDialect sqlDialect; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-13-import com.airlock.iam.plugin.impl.PropertyExternalFileUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-14-import com.airlock.iam.security.util.crypto.Aes128GcmCipher; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-15-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-16- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-17-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-18- description = "State encryption that uses AES/GCM with 128-bit keys to encrypt all values stored in the state repository.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-19- displayName = "AES 128 GCM State Encryption" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-20-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-21-public class Aes128GcmStateEncryptionConfig implements StateEncryptionConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-22- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-23- description = "Key used for encryption and decryption, 128 bit encoded in Base64.A random Base64 string with 128 bits (16 bytes) can be generated e.g. using openssl as follows: openssl rand -base64 16
CAUTION: Once the key is set and has been used to encrypt the key must not be changed!. Data encrypted with a different key cannot be recovered.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-24- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java:25: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-26- minLength = 8 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-27- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-28- private String secretKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-29- public static final String SECRET_KEY_PROPERTY_NAME = "secretKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-30- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-31- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-32- static void validateEncryption(PluginConfiguration pc, ConfigurationEnvironment env, ConfigurationContext context, Environment valenv) throws PropertyConstraintViolationException, PropertyTypeMismatchException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-33- if (valenv != Environment.GENERAL || !PropertyExternalFileUtils.isStringInExternalFile(pc.getSimplePropertyConfigurationValue("secretKey", env, context)) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-34- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-35- { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-36- String secretKey = PasswordPropertyValueReader.effectivePasswordConfigValue(pc, "secretKey", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-37- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-38- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-39- new Aes128GcmCipher(secretKey).encrypt("Test"); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-40- } catch (Exception e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-41- throw new PropertyConstraintViolationException( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-42- "secretKey", pc, env, context, "Encryption not possible with the provided secret key: " + e.getMessage() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-43- ); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-44- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/common/application/configuration/state/Aes128GcmStateEncryptionConfig.java-45- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-25- @PluginProperty(description = "The underlying persister plugin used to load and store data.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-26- @SuppressFBWarnings("UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-27- private TokenListPersister tokenListPersister; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-28- @StringListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-29- description = "Specifies a list of names of string context data properties that have to be stored encrypted on the database.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-30- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-31- exampleElements = {"firstname", "givenname", "phonenumber"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-32- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-33- private ListPassword used for the encryption and decryption.
If other persister plugins (e.g. a UserPersister plugin) also use encryption on data fields encrypted in this plugin, make sure they use the same password.
This property supports the extended string syntax, i.e. its value may be configured scrambled or in an external file (see example values).
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-36- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java:37: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-38- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-39- private String cipherPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-40- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-41- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-42- public TokenUserStructure getTokenUserStructure(String uid) throws NotFoundException, NotUniqueException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-43- TokenUserStructure tus = this.tokenListPersister.getTokenUserStructure(uid); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-44- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-45- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-46- this.decryptContextDataContainer(uid, tus.getContextDataContainer()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-47- return tus; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-48- } catch (DecryptionException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-49- throw new PersisterException("failed to decrypt values: " + e.getMessage(), e); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-50- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-51- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-52- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-53- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-54- public void makeTokenUserStructurePersistent(TokenUserStructure tokenUserStructure) throws NotFoundException, NotUniqueException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-55- TokenUserStructure tus = tokenUserStructure.cloneTokenUserStructure(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-56- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherTokenListPersister.java-57- try { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-30- private boolean encryptSerial; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-31- @BooleanProperty(description = "Set to TRUE if the credential data of the credential should be encrypted.", defaultValue = "true", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-32- private boolean encryptCredentialData; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-33- @StringListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-34- description = "Specifies a list of names of string context data properties that have to be stored encrypted on the database.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-35- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-36- exampleElements = {"firstname", "givenname", "phonenumber"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-37- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-38- private ListPassword used for the encryption and decryption.
If other persister plugins (e.g. a UserPersister plugin) also use encryption on data fields encrypted in this plugin, make sure they use the same password.
This property supports the extended string syntax, i.e. its value may be configured scrambled or in an external file (see example values).
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-41- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java:42: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-43- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-44- private String cipherPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-45- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-46- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-47- public CredentialBean getPersistentCredentialByUsername(String username) throws NotUniqueException, NotFoundException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-48- CredentialBean cb = this.getCredentialPersister().getPersistentCredentialByUsername(username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-49- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-50- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-51- this.decryptSerial(cb.getCurrent(), username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-52- this.decryptSerial(cb.getNext(), username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-53- this.decryptTokenData(cb.getCurrent(), username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-54- this.decryptTokenData(cb.getNext(), username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-55- this.decryptContextDataContainer(username, cb.getContextDataContainer()); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-56- return cb; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-57- } catch (DecryptionException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-58- throw new PersisterException("failed to decrypt values: " + e.getMessage(), e); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-59- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-60- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-61- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherCredentialPersister.java-62- @Override -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-33-public class CipherUserPersister extends CipherPersisterBase implements ExtendedUserPersister, UserIterator, LicenseUserCounter { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-34- @PluginProperty(description = "The underlying persister plugin used to load and store data.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-35- private ExtendedUserPersister userPersister; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-36- @StringListProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-37- description = "Specifies a list of names of string context data properties that have to be stored encrypted on the database.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-38- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-39- exampleElements = {"firstname", "givenname", "phonenumber"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-40- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-41- private ListPassword used for the encryption and decryption.
If other persister plugins (e.g. a CredentialPersister plugin) also use encryption on context data fields listed in this plugin, make sure they use the same password.
This property supports the extended string syntax, i.e. its value may be configured scrambled or in an external file (see example values).
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-44- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java:45: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-47- private String cipherPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-48- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-49- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-50- public void deleteUser(String username) throws NotFoundException, NotUniqueException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-51- this.userPersister.deleteUser(username); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-52- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-53- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-54- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-55- public void insertUser(PersistentUser user) throws NotUniqueException, PersisterException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-56- Objects.requireNonNull(user); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-57- AuthUserBean u = AuthUserBeanImpl.clone(user); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-58- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-59- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/persistency/cipher/CipherUserPersister.java-60- Map\tDepending on the keystore type, leaving this property empty (or undefined) has a different effect:\t
When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.
\nIf the correlation ID is not defined, the correlation ID header is not included in sent requests.
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-176- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-177- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-178- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-179- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-180- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-181- private String correlationIdHeaderName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-182- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-183- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-184- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-185- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-186- @StringProperty(description = "Username for the HTTP proxy if proxy authentication is used.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-187- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java:188: @StringProperty(description = "Password for the HTTP proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-189- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-190- private HttpClient httpClient; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-191- private Pattern passwordPattern; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-192- private PasswordPolicy passwordPolicy; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-193- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-194- public HttpPasswordService( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-195- String passwordChangeUrl, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-196- String httpParamUsername, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-197- UserPersister userPersister, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/HttpPasswordService.java-198- ListThis property can be used if a mapping between the actual username and the ACE-username is used.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-51- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-52- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-53- private CredentialPersister credentialPersister; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-54- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-55- description = "If required, a PIN may be defined using this property. The specified PIN will be used together with the provided token code to authenticate the user. This may be useful if a PIN is associated to the token but you don't want the authenticating users to type it.The PIN can be defined as a static value or its value may be retrieved from a context-value field of a persisted credential. Latter case requires that a credential persister is configured. Prepend the value with the @-character to use it as a reference to a context-data field.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-56- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java:57: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-58- exampleValues = {"1234", "secret", "@token_pin", "@securid_pin"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-59- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-60- private String pin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-61- @BooleanProperty(description = "If set to TRUE the password of the credential is used as token PIN.", optional = true, defaultValue = "false") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-62- private boolean usePasswordAsPin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-63- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-64- description = "If set to TRUE the password is used as token. This mode cannot be used in conjunction with the \"MetaAuthenticator\".", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-65- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-66- defaultValue = "false" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-67- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-68- private boolean usePasswordAsToken; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-69- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-70- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-71- public AuthenticationResult authenticate(AuthenticationSession session, Credential credentials) throws AuthenticatorException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-72- return this.addAuthResultMetaData(this.authenticateInternal(session, credentials, false)); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-73- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-74- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-75- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-76- public AuthPluginContextValue authPluginClassContextValue() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/authen/TokenAuthenticator.java-77- return LegacyAuthPluginContextValue.TOKEN_AUTHENTICATOR; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-102- private static final String ENABLE_SMIME_SIGN_FIELD = "enableSmimeSign"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-103- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-104- description = "The file name of the Java keystore used for SMIME operations. It must contain the private key and a certificate. This is only used if the SMIME is used.TRUE, emails are sent encrypted using SMIME.", optional = true, defaultValue = "false")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-131- @GroupProperty(groupIdentifier = "Encryption Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-132- private boolean enableSmimeEncryption;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-133- private static final String ENABLE_SMIME_ENCRYPTION_FIELD = "enableSmimeEncryption";
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-134- @StringProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-135- description = "The error message to be sent to those recipients that do not have a certificate, i.e., that can not decrypt the encrypted message.Only needed when encryption is enabled.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-136- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-137- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-138- @GroupProperty(groupIdentifier = "Encryption Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-139- private String encryptionErrorMessage; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-140- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-141- description = "The encryption algorithm as provided by org.bouncycastle.mail.smime.SMIMEEnvelopedGenerator.Only needed when encryption is enabled.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-142- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-143- defaultValue = "AES256_CBC", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-144- allowedValues = { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-145- "DES_EDE3_CBC", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpEmailService.java-146- "RC2_CBC", -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-4-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-5-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-6- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-7-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-8- description = "The SMTP authentication method using plain text authentication with username and password.
Technically, it supports the following authentication methods (in this order of preference): LOGIN, PLAIN, DIGEST-MD5, NTLM.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-9- displayName = "SMTP Authentication With Username/Password" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-10-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-11-public class SmtpAuthenticationUsernamePasswordConfig implements SmtpAuthenticationConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-12- @StringProperty(description = "The username used to authenticate at the mail server.", optional = false, exampleValues = {"mail", "userxyz"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-13- private String user; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java:14: @StringProperty(description = "The password used to authenticate at the mail server.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-15- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-16- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-17- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-18- public String getUsername() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-19- return this.user; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-20- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-21- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-22- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-23- public String getPassword() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-24- return this.password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-25- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-26- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-27- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-28- public static SmtpAuthenticationUsernamePasswordConfig.SmtpAuthenticationUsernamePasswordConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-29- return new SmtpAuthenticationUsernamePasswordConfig.SmtpAuthenticationUsernamePasswordConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-30- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-31- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-32- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-33- public SmtpAuthenticationUsernamePasswordConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/impl/email/SmtpAuthenticationUsernamePasswordConfig.java-34- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-50- private static final String SECURE_CHANNEL_APPL = "SC"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-51- private static final int[] DEFAULT_SUCCESSFULL_CODES = new int[]{0}; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-52- private static final int[] GET_TOKEN_SUCCESSFULL_CODES = new int[]{100, 107}; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-53- private static final int SEQUENCE_NUMBER_THRESHOLD_REACHED_CODE = 1292; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-54- private static final int[] VALID_MESSAGE_SIGNATURE_CODES = new int[]{0, 1, -202, -203, 10001, 10002, 10003, 10004, 10005, 10006, 10007}; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-55- private static final Pattern NON_NUMBERS_PATTERN = Pattern.compile("[^0-9]+"); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-56- @PluginProperty(description = "Configuration Parameters for the VascoTokenVerifier.", optional = true, defaultValue = VascoRuntimeParameters.class) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-57- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-58- private VascoRuntimeParameters runtimeParameters; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-59- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-60- description = "Password used for the encryption and decryption of the Vasco blob.
As long as this property is not configured, the Vasco blob is not encrypted. When set to a non-null value, the Vasco blobs are encrypted on the fly when accessed the next time. Once set, do not change this value. Otherwise, decryption of existing Vasco blobs will fail.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-61- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java:62: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-63- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-64- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-65- private String cipherPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-66- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-67- description = "Defines the crypto application index for the \"Secure Channel\" feature. This index is used when a new token is activated. If left empty, Airlock IAM will try to automatically detect the correct application (the first application with type \"Signature\" and the substring \"SC\" in the application name).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-68- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-69- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-70- exampleValues = 1 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-71- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-72- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-73- private Integer secureChannelCryptoApplicationIndex; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-74- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-75- description = "Defines the crypto application index for the \"OTP\" feature. This index is used when a new token is activated. If left empty, Airlock IAM will try to automatically detect the correct application (the first application with type \"RESPONSE_ONLY\").", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-76- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-77- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-78- exampleValues = 1 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-79- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-80- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-81- private Integer otpCryptoApplicationIndex; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/vasco/NativeVascoHandler.java-82- @BooleanProperty( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-5-import com.airlock.iam.security.util.crypto.DecryptionException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-6-import com.airlock.iam.security.util.crypto.EncryptionException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-7-import com.airlock.iam.security.util.crypto.PBEStringCipherHelper; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-8-import com.airlock.iam.security.util.crypto.StringCipher; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-9-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-10-import org.apache.commons.lang3.StringUtils; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-11- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-12-@Plugin(description = "AES Encryption using a key that is derived from a passphrase.", displayName = "Password-based Encryption") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-13-public class PasswordBasedEncryption implements StringCipher { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-14- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-15- description = "Passphrase that is used to generate a key for encryption and decryption.CAUTION: Once this is set and the cipher has been used to encrypt data with this passphrase, the passphrase should not be changed!. Otherwise those stored data would not be recoverable.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-16- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java:17: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-18- minLength = 8 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-19- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-20- private String encryptionPassphrase; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-21- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-22- private char[] getEncryptionPassword(String username) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-23- String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-24- if (username == null) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-25- password = this.encryptionPassphrase; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-26- } else { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-27- password = this.encryptionPassphrase + username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-28- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-30- return password.toCharArray(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-31- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-32- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-33- public String encrypt(String content, String userName) throws EncryptionException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-34- if (StringUtils.isBlank(content)) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-35- return content; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-36- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/PasswordBasedEncryption.java-37- -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-26- @StringProperty(description = "The type of Java keystore to use.", optional = true, defaultValue = "JKS", suggestedValues = {"JKS", "JCEKS", "PKCS12"}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-27- private String keystoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-28- private static final String KEYSTORE_TYPE_FIELD = "keystoreType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-29- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-30- description = "The file name of the Java keystore to load the key for the encryption.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-31- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-32- exampleValues = {"instances/common/keystore.jks", "/opt/airlock/keystore.jks", "instances/common/keystore.p12"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-33- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-34- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-35- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-36- private File keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-37- private static final String KEYSTORE_FILE_FIELD = "keystoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java:38: @StringProperty(description = "The password to read the keystore.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-39- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-40- private static final String KEYSTORE_PASSWORD_FIELD = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-41- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-42- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-43- public static void validateJavaKeystore( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-44- PluginConfiguration config, ConfigurationEnvironment env, ConfigurationContext context, Environment validationEnvironment work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-45- ) throws PropertyConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-46- if (Environment.CURRENT_VM.equals(validationEnvironment)) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-47- String keystoreTypeConfig = StringPropertyValueReader.effectiveStringConfigValue(config, "keystoreType", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-48- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-49- try { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-50- String keystoreFileConfig = FilePropertyValueReader.effectiveFilePropertyValue(config, "keystoreFile", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-51- String keystorePasswordConfig = PasswordPropertyValueReader.effectivePasswordConfigValue(config, "keystorePassword", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-52- KeyStoreUtils.createKeyStoreFromFile(new File(keystoreFileConfig), Optional.of(keystorePasswordConfig), keystoreTypeConfig); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-53- } catch (KeyStoreException e) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-54- throw new PropertyConfigurationException( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-55- config, env, context, "A keystore with type " + keystoreTypeConfig + " could not be loaded.", e, new String[]{"keystoreType"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-56- ); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-57- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/JavaKeystoreConfig.java-58- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-52- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/keystore/HsmKeystoreConfig.java-53- description = "Path to a file-based keystore.openssl genrsa -des3 -out newkey.pem
openssl pkcs8 -topk8 -in newkey.pem -out encryptedprivatekey.key -outform der",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-33- optional = false,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-34- assureExistence = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-35- assureReadable = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-36- isFile = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-37- exampleValues = "privateKey.key"
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-38- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-39- private File privateKeyFile;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-40- @StringProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-41- description = "Passphrase to protect the private key file. If no passphrase is configured, it is assumed that the private key file is not password-protected.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-42- optional = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java:43: isSensitive = true
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-44- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-45- private String privateKeyPassphrase;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-46- private PublicKey publicKey;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-47- private PrivateKey privateKey;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-48-
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-49- public RsaEncryption(File publicKeyFile, File privateKeyFile, String privateKeyPassphrase) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-50- this.publicKeyFile = publicKeyFile;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-51- this.privateKeyFile = privateKeyFile;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-52- this.privateKeyPassphrase = privateKeyPassphrase;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-53- }
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-54-
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-55- @AfterConfigActivation
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-56- void preprocessCipherConfiguration() throws InitializeException {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-57- this.privateKey = null;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-58- this.publicKey = null;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-59-
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-60- try {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-61- byte[] privateKeyBytes = Files.toByteArray(this.privateKeyFile);
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-62- if (this.privateKeyPassphrase != null) {
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/crypto/RsaEncryption.java-63- this.privateKey = RsaCipher.toPrivateKey(privateKeyBytes, this.privateKeyPassphrase);
--
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-26- assureExistence = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-27- assureReadable = true,
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-28- isFile = true
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-29- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-30- @GroupProperty(groupIdentifier = "Security Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-31- private File keyStorePath;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-32- @EnumProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-33- @GroupProperty(groupIdentifier = "Security Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-34- private HttpClientConfig.TrustStoreType keyStoreType;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-35- @StringProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-36- description = "The password used to check the integrity of the keystore, or to unlock the keystore.\tThe password must be provided if a key store is specified.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-37- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java:38: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-39- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-40- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-41- private String keyStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-42- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-43- description = "The password to access the private key in the keystore stored at the key store path, in case the private key is password protected.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-44- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java:45: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-46- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-47- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-48- private String privateKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-49- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-50- HttpClientWithClientAuthConfig( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-51- int connectTimeout, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-52- int readTimeout, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-53- BasicAuthCredentialsConfig basicAuthCredentialsConfig, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-54- boolean preemptiveBasicAuth, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-55- String bearerToken, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-56- boolean verifyServerHostname, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-57- File trustStorePath, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-58- HttpClientConfig.TrustStoreType trustStoreType, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-59- String trustStorePassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-60- String proxyHost, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-61- Integer proxyPort, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-62- String proxyLoginUser, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-63- String proxyLoginPassword, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-64- String userAgent, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientWithClientAuthConfig.java-65- String correlationIdHeaderName, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-73- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-74- private BasicAuthCredentialsConfig basicAuthCredentials; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-75- private static final String BASIC_AUTH_CREDENTIALS_FIELD = "basicAuthCredentials"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-76- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-77- description = "Whether the HTTP client should perform preemptive basic authentication. If set totrue, the HTTP Client will automatically add the Authorization header to the HTTP request. If set to false, the HTTP client will only send the Authorization header when it receices an unauthorized response from the server. Setting this property only has an impact if the property Basic Auth Credentials is set.",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-78- defaultValue = "false",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-79- displayName = "Preemptive Basic Auth",
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-80- optional = true
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-81- )
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-82- @GroupProperty(groupIdentifier = "Basic Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-83- private boolean preemptiveBasicAuth;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-84- private static final String PREEMPTIVE_BASIC_AUTH_FIELD = "preemptiveBasicAuth";
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java:85: @StringProperty(description = "The Bearer Token to send with each request.", optional = true, isSensitive = true)
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-86- @GroupProperty(groupIdentifier = "Basic Settings")
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-87- private String bearerToken;
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-88- public static final String BEARER_TOKEN_FIELD_FIELD = "bearerToken";
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-89- @BooleanProperty(
work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-90- description = "Enables hostname verification, i.e. the actual hostname must be the same as in the server certificate.
\nSecurity warning: Not verifying the hostname may allow connections to adversarial hosts,\ne.g. if they employ DNS spoofing. Only disable this property for testing and integration setups.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-91- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-92- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-93- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-94- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-95- private boolean verifyServerHostname; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-96- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-97- description = "Only allow connections to servers whose certificate is trusted.\nSee documentation of property \"Trust Store Path\" for more information about what certificates are trusted.
\nSecurity warning: Trusting all certificates allows connections to adversarial hosts.\nOnly disable this property for testing and integration setups.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-98- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-99- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-100- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-101- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-102- private boolean allowOnlyTrustedCerts; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-103- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-104- description = "Keystore file name containing trusted certificate issuers (and trusted certificates).\nIf this property is not defined the following certificate issuers are trusted:\n
If this property is defined then the following certificate issuers are trusted:\n
This property is only relevant if the property \"Allow Only Trusted Certs\" is enabled.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-105- optional = true, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-107- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-108- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-109- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-110- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-111- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-112- private File trustStorePath; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-113- @EnumProperty(description = "Identifies the type of the keystore.", optional = true, defaultValue = "JKS") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-114- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-115- private HttpClientConfig.TrustStoreType trustStoreType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-116- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-117- description = "The password used to check the integrity of the trust store, or to unlock the trust store.\nThe password must be provided if a trust store is specified.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-118- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java:119: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-120- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-121- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-122- private String trustStorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-123- @StringProperty(description = "The hostname of the HTTP proxy server (if any).", optional = true, exampleValues = "proxy.company.com") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-124- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-125- private String proxyHost; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-126- @IntegerProperty(description = "The port of the HTTP proxy server (if any).", optional = true, exampleValues = 8080, minValue = 0, maxValue = 65535) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-127- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-128- private Integer proxyPort; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-129- @StringProperty(description = "Username for the HTTP proxy if proxy authentication is used.", optional = true, exampleValues = "proxyLogin") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-130- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-131- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java:132: @StringProperty(description = "Password for the HTTP proxy if proxy authentication is used.", optional = true, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-133- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-134- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-135- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-136- description = "A HTTP client sends a userAgent header with each request to identify the client software. If no value or an empty value is specified, \"Apache-HttpClient/4.1 (java 1.5)\" is used as user agent. This value allows to overwrite the default user agent.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-137- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-138- suggestedValues = { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-139- "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-140- "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:36.0) Gecko/20100101 Firefox/36.0", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-141- "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2272.76 Safari/537.36" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-142- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-143- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-144- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-145- private String userAgent; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-146- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-147- description = "When configured, all requests sent contain a header with the correlation ID with the configured name.\nIf no value or an empty value is specified, the correlation ID header is not sent.
\nIf the correlation ID is not defined, the correlation ID header is not included in sent requests.
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-148- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-149- suggestedValues = "X-Correlation-ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-150- validationRegex = "[a-zA-Z0-9_-]+", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-151- displayName = "Correlation ID Header Name" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/httpclient/HttpClientConfig.java-152- ) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-5-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-6-import com.airlock.iam.plugin.api.annotation.lifecycle.AfterConfigActivation; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-7-import com.airlock.iam.plugin.api.annotation.property.BooleanProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-8-import com.airlock.iam.plugin.api.annotation.property.IntegerProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-9-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-10-import com.airlock.iam.security.util.crypto.DecryptionException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-11-import com.airlock.iam.security.util.crypto.PBEWithSHA1andAES; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-12-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-13- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-14-@Plugin(description = "Decodes the ticket produced by the AES256 Encryption Ticket Encoder plugin.") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-15-@SuppressFBWarnings("UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-16-public class AES256DecryptionTicketDecoder extends PlainBase64TicketDecoder { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java:17: @StringProperty(description = "Specifies the password used to decrypt the ticket.", minLength = 4, optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-18- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-19- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-20- description = "If integrity is essential, it is strongly recommended to forbid tickets which are not authenticated encrypted by GCM. Only for backward compatibility reasons we do not enforce incoming tickets to be encrypted in GCM mode. If this flag is set to false, this encoder also accepts tickets that were encrypted without authentication, using the CBC mode. That may be a threat if the ticket is exposed to an attacker.If possible this flag should be enabled.
The AES256EncryptionTicketEncoder uses the GCM Mode by default.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-21- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-22- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-23- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-24- private boolean requireAuthenticatedEncryption; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-25- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-26- description = "Specifies the maximum number of PBKDF2 iterations allowed for decryption. Choose this maximum as small as possible. Allowing a large number of iterations may require a considerable amount of computing time when decoding the ticket.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-27- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-28- minValue = 1, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-29- defaultValue = 32000, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-30- exampleValues = {16000, 32000} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-31- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-32- private int maxPBKDF2Iterations; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-33- private PBEWithSHA1andAES cipher; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-34- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-35- public AES256DecryptionTicketDecoder(String password, boolean requireAuthenticatedEncryption, int maxPBKDF2Iterations) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-36- this.password = password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256DecryptionTicketDecoder.java-37- this.requireAuthenticatedEncryption = requireAuthenticatedEncryption; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-6-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-7-import com.airlock.iam.plugin.api.annotation.lifecycle.AfterConfigActivation; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-8-import com.airlock.iam.plugin.api.annotation.property.BooleanProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-9-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-10-import com.airlock.iam.security.util.crypto.EncryptionException; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-11-import com.airlock.iam.security.util.crypto.PBEWithSHA1andAES; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-12-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-13- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-14-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-15- description = "Encodes the ticket and encrypts the contents with a password.The key-value pairs are first encoded as described in
If possible this flag should be enabled.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-22- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-23- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-24- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-25- private boolean requireAuthenticatedEncryption; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-26- @SuppressFBWarnings("UWF_FIELD_NOT_INITIALIZED_IN_CONSTRUCTOR") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-27- private PBEWithSHA1andAES cipher; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-28- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-29- public AES256EncryptionTicketEncoder(String password, boolean requireAuthenticatedEncryption) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-30- this.password = password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-31- this.requireAuthenticatedEncryption = requireAuthenticatedEncryption; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-32- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-33- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-34- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-35- public byte[] encodeAsByteArray(Ticket ticket, String urlEncodingScheme) throws TicketEncodingException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-36- byte[] stringEncoded = super.encodeAsByteArray(ticket, urlEncodingScheme); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-37- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ticket/codec/AES256EncryptionTicketEncoder.java-38- try { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-18- @PluginProperty(description = "The password hash function.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-19- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-20- private PasswordHash hashFunction; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-21- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-22- description = "The configuration of the keystore. The keystore is used to load the secret key for the encryption and decryption of the hash.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-23- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-24- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-25- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-26- private KeystoreConfig keystore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-27- @StringProperty(description = "The alias of the secret symmetric key in the given keystore to encrypt the hash.", optional = false, exampleValues = "mykey") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-28- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-29- private String encryptionKeyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java:30: @StringProperty(description = "The password of the secret key to encrypt the hash.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-31- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-32- private String encryptionKeyPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-33- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/password/hash/EncryptedPasswordHashConfig.java-34- description = "The cipher to encrypt the hash. A symmetric cipher is required.\nThe supported symmetric ciphers are:\nThe type of connection security, one of NONE, START_TLS or SSL.
Notice: Most directories will refuse to perform a password change operation if the connection is not secured using SSL/TLS.
Notice: Microsoft disabled support for Server certificates using MD5 with KB2862973 (mandatory update in early 2014). Using any server certificate with an MD5 signature in its entire chain will result in a connection error. The same error will be raised when using a certificate using SHA-512 without having KB2973337 installed.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-195- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-196- defaultValue = "NONE" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-197- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-198- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-199- @TestletProperty(buttonToolTip = "Test SSL handshake", testletClass = LdapConnectionPool.LdapConnectionPoolSSLTestlet.class) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-204- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-205- exampleValues = {"mykeystore.jks", "~/.keystore"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-206- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-207- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-208- assureReadable = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-209- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-210- @GroupProperty(groupIdentifier = "Client Certificate Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-211- private File keystoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-212- static final String KEYSTORE_FILE_FIELD = "keystoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-213- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-214- description = "The password used to read the keystore and the private key also. This is only used if SSL is enabled.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-215- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java:216: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-217- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-218- @GroupProperty(groupIdentifier = "Client Certificate Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-219- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-220- static final String KEYSTORE_PASSWORD_FIELD = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-221- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-222- description = "The alias of the private key for SSL client authentication. This is only used if SSL is enabled and if the server enforces SSL client authentication. If only the server certificate should be checked, please leave this property empty.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-223- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-224- exampleValues = "airlock" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-225- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-226- @GroupProperty(groupIdentifier = "Client Certificate Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-227- private String keyAlias; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-228- static final String KEY_ALIAS_FIELD = "keyAlias"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-229- @BooleanProperty(description = "Tells if the server name should be checked against the name in the certificate.", defaultValue = "true", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-230- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-231- private boolean checkCertificateServerName; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-232- static final String CHECK_CERTIFICATE_SERVER_NAME_FIELD = "checkCertificateServerName"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-233- @BooleanProperty(description = "Tells if the server certificate validity dates should be respected.", defaultValue = "true", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-234- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-235- private boolean checkCertificateValidity; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-236- private static final String CHECK_CERTIFICATE_VALIDITY_FIELD = "checkCertificateValidity"; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-247- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-248- exampleValues = {"mytruststore.jks", "~/.truststore"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-249- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-250- isFile = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-251- assureReadable = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-252- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-253- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-254- private File truststoreFile; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-255- static final String TRUSTSTORE_FILE_FIELD = "truststoreFile"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-256- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-257- description = "The password used to read the truststore. Can be left empty if the truststore does not require any password. This is only used if SSL is enabled.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-258- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java:259: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-260- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-261- @GroupProperty(groupIdentifier = "SSL Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-262- private String truststorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-263- static final String TRUSTSTORE_PASSWORD_FIELD = "truststorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-264- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-265- description = "Specifies whether to operate in synchronous mode, in which at most one operation may be in progress at any time on a given connection.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-266- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-267- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-268- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-269- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-270- private boolean useSynchronousMode; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-271- @BooleanProperty(description = "Tells if automatic referral following should be enabled.", defaultValue = "false", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-272- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-273- private boolean followReferrals; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-274- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-275- description = "How long to wait for a connection to be established.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-276- exampleValues = {1000, 5000}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-277- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-278- defaultValue = 2000, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/ldap/LdapConnectionPool.java-279- minValue = 0, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-44- private int connectionTimeout; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-45- @IntegerProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-46- description = "Maximum number of retries to send an access request before giving up.
If multiple RADIUS servers are configured (for failover), it makes sense to set this value to zero (no retries) for the first and to a value greater than zero for the failover server(s). A typical value is 2.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-47- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-48- defaultValue = 2, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-49- exampleValues = {0, 2, 5}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-50- minValue = 0 work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-51- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-52- private int maxRetries; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-53- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-54- description = "The shared secret. It is used to encrypt the secret credentials (e.g. passwords) passed to the RADIUS server. It must be the same in this plugin and the RADIUS server.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-55- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java:56: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-57- exampleValues = {"secret", "ai38d7f3", "password"} work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-58- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-59- private String sharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-60- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-61- description = "If enabled, all servers must include a valid Message-Authenticator attribute in their responses, otherwise the messages will be discarded.\nNote: even when disabled, received responses containing a Message-Authenticator will always be validated.\nAlso, requests from this radius client will always include the Message-Authenticator attribute.
\nWarning: when disabled, this client is vulnerable to the BlastRADIUS attack.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-62- displayName = "Enforce Message-Authenticator", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-63- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-64- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-65- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-66- private boolean enforceMessageAuthenticator; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-67- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-68- @AfterConfigActivation work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-69- void normalizeRadiusConnectionSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-70- this.host = StringUtils.trimToEmpty(this.host); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-71- this.sharedSecret = StringUtils.trimToEmpty(this.sharedSecret); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-72- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-73- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-74- public int getMaxRetries() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-75- return this.maxRetries; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/core/misc/util/radius/RadiusConnectionSettings.java-76- } -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-131- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-132- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-133- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-134- private GatewayConfig gatewaySettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-135- @PluginProperty(description = "Configures handling of events in the Adminapp.", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-136- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-137- private AdminappEventSettingsConfig eventSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-138- public static final String EVENT_SETTINGS_DISPLAY_NAME = "Event Settings"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-139- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-140- description = "The service container secret is used to access the service container from the Adminapp. The shared secret will be used to encrypt the SSO ticket, sent from the Adminapp to the service container in order to authenticate the admin. The shared secret must be identical to the property Service Container Shared Secret within Service Container (Advanced Settings). When not configured, no Service Container link will be displayed in Adminapp.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-141- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-142- displayName = "Service Container Shared Secret", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java:143: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-144- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-145- @GroupProperty(groupIdentifier = "SSO Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-146- private String serviceContainerSharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-147- public static final String SERVICE_CONTAINER_SHARED_SECRET_DISPLAY_NAME = "Service Container Shared Secret"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-148- @PluginProperty(description = "Configuration of the Log Viewer.", optional = true, displayName = "Log Viewer") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-149- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-150- private LogViewer logViewer; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-151- public static final String LOG_VIEWER_DISPLAY_NAME = "Log Viewer"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-152- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-153- description = "Enables realm administration. This feature limits the rights of administrators to a single realm. All users that a realm administrator creates are assigned to his realm and he can only administer users of his own realm.
The assignment of a realm to an administrator requires super administrator authorization.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-154- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-155- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-156- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-157- @PluginPropertyLicenseRestriction(moduleAffiliation = "RealmAdministration") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-158- private RealmAdministrationConfig realmAdministration; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-159- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-160- description = "Session idle timeout for the Adminapp (including Config Editor).\nWhen IAM is deployed behind an Airlock Gateway (WAF), timeout and lifetime values should always\nbe longer than those maintained by the Gateway.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-161- displayName = "Session Idle Timeout", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-162- exampleValues = {"30m", "2h 15m"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/Adminapp.java-163- optional = true, -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-55- private RequestAuthenticationConfigForAdminapp requestAuthentication; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-56- public static final String REQUEST_AUTHENTICATION_DISPLAY_NAME = "Request Authentication"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-57- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-58- description = "The hash function used to hash information that is transferred over the public network.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-59- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-60- defaultValue = SHA256Base64PasswordHash.class work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-61- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-62- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-63- private PasswordHash hashFunction; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-64- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-65- description = "The shared secret to be included in the hashed information.Can be used together with the 'Hash Function' to externalize session information to the client.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-66- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java:67: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-68- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-69- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-70- private String hashSharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-71- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-72- description = "The settings to allow cross-domain REST calls.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-73- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-74- defaultValue = CorsSettings.class, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-75- displayName = "CORS Settings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-76- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-77- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-78- private CorsSettings corsSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-79- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-80- description = "If enabled, REST endpoints are protected against CSRF attacks.
With this protection, the REST API only accepts requests that contain the custom header X-Same-Domain with an arbitrary non-empty value. In cross-origin resource sharing (CORS), such requests are not considered simple requests and thus must always be preceded by a preflight request, which prevents cross-site request forgery (CSRF) attacks.
Security warning: Disabling this feature may allow CSRF attacks. Only do so if the REST client is unable to comply with the aforementioned restrictions.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-81- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-82- displayName = "CSRF Protection", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-83- defaultValue = "true" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-84- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-85- @GroupProperty(groupIdentifier = "Security Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-86- private boolean csrfProtection; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/admin/application/configuration/AdminappRestConfig.java-87- @PluginListProperty( -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-40-@Groups(groupSequence = {"Basic Settings", "Advanced Settings"}, openGroups = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-41-public final class ApiPolicyServiceAppConfig implements RestConfigSpec { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-42- public static final String API_POLICY_SERVICE_DISPLAY_NAME = "API Policy Service"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-43- public static final AppId API_POLICY_SERVICE_CONFIG_IDENTIFIER = AppId.appId("api-policy-service"); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-44- public static final String WAF_REQUEST_ID_HEADER = "X-AL-RequestId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-45- public static final String WAF_SESSION_ID_HEADER = "X-AL-SessionId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-46- public static final String WAF_REMOTE_ADDR_HEADER = "X-AL-RemoteAddr"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-47- @PluginProperty(description = "A repository that allows to configure the DB access concerning API policy service functionality.", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-48- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-49- private TechClientRepositoryConfig repository; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-50- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-51- description = "Shared secret to verify the JWT signature. Must be the same as on the Airlock Gateway (WAF) using this API Policy Service endpoint.
The shared secret must be encoded in base64. The minimal required unencoded length is at least 512 bits. Configuration validation fails if the secret is too short.
One can, for example, generate a random secret with 512 bits (64 bytes) as base64 encoded string using openssl as follows: openssl rand -base64 96
Configures the database settings to use when persisting user trail log entries.
\nIf this value is defined, then all user trail log messages generated by the API Policy\nService App module will additionally be forwarded to the database configured within the\nreferenced repository plugin.
\nAll forwarded log entries are stored inside the table \"USER_TRAIL_LOG\". Note that\nsetting this value does not disable writing log messages to the API Policy Service\nlog file.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-68- globalPluginReference = "globalUserTrailLogRepository", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-69- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-70- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-71- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/apipolicyservice/application/configuration/ApiPolicyServiceAppConfig.java-72- private UserTrailLogRepositoryConfig logUserTrailToDatabase; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-101- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-102- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-103- private int statisticLogInterval; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-104- @IntegerProperty(description = "Minimum number of threads in pool.", optional = true, minValue = 1, defaultValue = 10, exampleValues = {1, 10, 20}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-105- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-106- private int minimumThreads; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-107- @IntegerProperty(description = "Maximum number of threads in pool.", optional = true, minValue = 1, defaultValue = 100, exampleValues = {100, 500, 1000}) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-108- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-109- private int maximumThreads; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-110- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-111- description = "The service container secret is used to access the service container from the Adminapp. The shared secret will be used to encrypt the SSO ticket, sent from the Adminapp to the service container in order to authenticate the admin. The shared secret must be identical to the property Service Container Shared Secret in the Adminapp (Advanced Settings).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-112- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java:113: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-114- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-115- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-116- private String serviceContainerSharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-117- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-118- description = "Configures the repository used to store accepted SSO tickets and reject previously accepted ones.
\nThe in-memory repository cannot be used if multiple instances of IAM are deployed in parallel (failover, horizontal scaling).\nFurthermore, the in-memory repository does not preserve previously accepted SSO tickets across IAM restarts.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-119- displayName = "Accepted SSO Tickets Repository", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-120- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-121- globalPluginReference = "globalAcceptedSsoTicketSettings" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-122- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-123- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-124- private AcceptedSsoTicketRepositoryConfig acceptedSsoTicketRepository; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-125- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-126- description = "Configures the database settings to use when persisting user trail log entries.
\nIf this value is defined, then all user trail log messages generated by the Service\nContainer App module will additionally be forwarded to the database configured within\nthe referenced repository plugin.
\nAll forwarded log entries are stored inside the table \"USER_TRAIL_LOG\". Note that\nsetting this value does not disable writing log messages to the Service Container App\nlog file.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-127- globalPluginReference = "globalUserTrailLogRepository", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-128- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-129- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-130- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-131- private UserTrailLogRepositoryConfig logUserTrailToDatabase; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-132- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/Server.java-133- displayName = "Correlation ID Settings", -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-89- private static final String INTERFACE_IP_FIELD = "interfaceIp"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-90- @BooleanProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-91- description = "If enabled, all clients must include a valid Message-Authenticator attribute in their requests, otherwise the messages will be discarded.\nNote: even when disabled, received requests containing a Message-Authenticator will always be validated.\nAlso, responses from this server will always include the Message-Authenticator attribute.
\nWarning: when disabled, this server is vulnerable to the BlastRADIUS attack.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-92- displayName = "Enforce Message-Authenticator", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-93- defaultValue = "true", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-94- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-95- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-96- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-97- private boolean enforceMessageAuthenticator; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-98- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-99- description = "The shared secret for the Radius service. The shared secret is used to protect sensitive information being sent from the Radius client to the Radius server. Since charsets on the server and the client may differ, use only ASCII characters (and choose a longer secret).", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-100- exampleValues = {"secret4th1ss3rv3r", "s843bdfl03h4", "wonttellu"}, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java:101: isSensitive = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-102- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-103- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-104- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-105- private String sharedSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-106- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-107- description = "The authenticator to be used by the Radius service. Make sure that the authentication scheme provided by the authenticator can be used via RADIUS. Client certificate authentication, for example, is usually not done via RADIUS. Common examples are password-, token-, and challenge-response-authentication.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-108- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-109- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-110- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-111- private Authenticator authenticator; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-112- @PluginProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/radius/RadiusServiceConfigBase.java-113- description = "Configures the behavior of temporary user locking. Notice that responses are not delayed like in the login app not to trigger UDP retransmissions but any further request falling into the temporary lock timeout will be refused immediately with a special message.This value is available in the Azure portal, e.g., in the overview of your application registration.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-20- displayName = "Client ID", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-21- optional = false work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-22- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-23- private String clientId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-24- public static final String CLIENT_ID_PROPERTY = "clientId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-25- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-26- description = "Client secret associated with the registered application (client ID).\nThis value is available in the Azure portal, e.g., in the certificates & secrets page of your application registration.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-27- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java:28: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-29- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-30- private String clientSecret; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-31- public static final String CLIENT_SECRET_PROPERTY = "clientSecret"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-32- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-33- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-34- public AzureAuthenticationSettings getAuthenticationSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-35- return AzureAuthenticationSettings.ClientSecretAuthenticationSettings.builder() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-36- .tenantId(this.tenantId) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-37- .clientId(this.clientId) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-38- .clientSecret(this.clientSecret) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-39- .build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-40- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-41- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-42- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-43- public static AzureClientSecretAuthenticationConfig.AzureClientSecretAuthenticationConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-44- return new AzureClientSecretAuthenticationConfig.AzureClientSecretAuthenticationConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-45- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-46- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-47- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureClientSecretAuthenticationConfig.java-48- public AzureClientSecretAuthenticationConfig() { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-5-import com.airlock.iam.servicecontainer.api.application.configuration.event.kafka.KafkaProducerAuthenticationConfig; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-6-import com.airlock.iam.servicecontainer.api.application.configuration.event.kafka.KafkaSettings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-7-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-8- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-9-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-10- description = "SASL/PLAIN authentication for Kafka.\n\nFor more information, see Authentication using SASL.\n
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-11- displayName = "Kafka SASL Plain (Username/Password) Authentication" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-12-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-13-public final class KafkaSaslPlainAuthenticationConfig implements KafkaProducerAuthenticationConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-14- @StringProperty(description = "The username for SASL/PLAIN authentication.\n", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-15- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-16- public static final String SASL_PLAIN_USERNAME_PROPERTY = "username"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java:17: @StringProperty(description = "The password for SASL/PLAIN authentication.\n", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-18- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-19- public static final String SASL_PLAIN_PASSWORD_PROPERTY = "password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-20- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-21- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-22- public KafkaSettings getKafkaSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-23- return KafkaSaslPlainAuthentication.builder().username(this.username).password(this.password).build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-24- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-25- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-26- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-27- public static KafkaSaslPlainAuthenticationConfig.KafkaSaslPlainAuthenticationConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-28- return new KafkaSaslPlainAuthenticationConfig.KafkaSaslPlainAuthenticationConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-29- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-30- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-31- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-32- public KafkaSaslPlainAuthenticationConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-33- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-34- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-35- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-36- public KafkaSaslPlainAuthenticationConfig(String username, String password) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslPlainAuthenticationConfig.java-37- this.username = username; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-25- private String clientId; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-26- public static final String CLIENT_ID_PROPERTY = "clientId"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-27- @FileProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-28- description = "Path of the keystore file containing the service principal's certificate and private key.\nThe keystore file must be in PKCS12 format (.pfx-file).\nThe corresponding public key certificate must be registered for your application in the Azure portal,\ne.g., in the certificates & secrets page of your application registration.
\nThe path must be absolute or relative to the instance root directory.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-29- exampleValues = "service-credentials.pfx, /home/airlock/iam/instances/auth/service-credentials.pfx", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-30- optional = false, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-31- assureExistence = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-32- assureReadable = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-33- isFile = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-34- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-35- private File keystore; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-36- public static final String KEYSTORE_PROPERTY = "keystore"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java:37: @StringProperty(description = "Password for reading the service principal's private key from the keystore file.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-38- private String keystorePassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-39- public static final String KEYSTORE_PASSWORD_PROPERTY = "keystorePassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-40- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-41- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-42- public AzureAuthenticationSettings getAuthenticationSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-43- return AzureAuthenticationSettings.CertificateAuthenticationSettings.builder() work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-44- .tenantId(this.tenantId) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-45- .clientId(this.clientId) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-46- .certificate(this.keystore) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-47- .password(this.keystorePassword) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-48- .build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-49- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-50- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-51- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-52- public static AzureCertificateAuthenticationConfig.AzureCertificateAuthenticationConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-53- return new AzureCertificateAuthenticationConfig.AzureCertificateAuthenticationConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-54- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-55- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-56- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureCertificateAuthenticationConfig.java-57- public AzureCertificateAuthenticationConfig() { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-13-public final class KafkaSaslOAuthBearerAuthenticationConfig implements KafkaProducerAuthenticationConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-14- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslOAuthBearerAuthenticationConfig.java-15- description = "The client ID for SASL/OAUTHBEARER authentication.\n\nRelated Kafka producer property: sasl.oauthbearer.client.credentials.client.id\n
\nRelated Kafka producer property: sasl.oauthbearer.client.credentials.client.secret\n
\nRelated Kafka producer property: sasl.oauthbearer.scope\n
\nNote: The token endpoint URL must be explicitly allowed via Java Opts, in the instance.properties file (this is enforced by the library),\ne.g. iam.java.opts=-Dorg.apache.kafka.sasl.oauthbearer.allowed.urls=https://localhost:8443/auth-login/rest/oauth2/authorization-servers/local-iam-as/token\n
\nRelated Kafka producer property: sasl.oauthbearer.token.endpoint.url\n
Dependending on the setup and available infrastructure, different methods may suit better.\nRefer to the individual plugin documentation for further explanations.
\nIf authentication with Microsoft Entra ID is not possible, consider using a \"Connection String\" for direct access.
\nFor successful authentication, ensure that the necessary certificates are available when a custom truststore is used with IAM.
\nFor integration or if necessary, additional logging regarding connections to Azure can be enabled in the Log4J configuration.\nIAM documentation explains custom logging configuration.
\nAdjust the log levels for \"com.azure\", \"com.azure.core.amqp\", \"com.microsoft.azure.proton.transport.proxy\" or other libraries to your needs.
Alternative service authentication method if general authentication with Microsoft Entra ID is not possible.
\nAn Azure connection string contains all information required for an application to securely authenticate with and connect to an Azure Event Hub.\nIt includes the service endpoint, authentication credentials (Shared Access Key), and an optional entity path (Event Hub name).\nA namespace-level connection string grants the specified permissions (manage, read, or write)\nfor all Event Hubs within the namespace.\nAn Event Hub–level connection string (ends with ;EntityPath=<EventHubName>) grants the specified permissions only for that specific Event Hub.
Connection strings should only be used when authentication with Microsoft Entra ID is not available or for integration.
\nIt is recommended to rotate connection strings regularly.
\nFor successful authentication, ensure that the necessary certificates are available when a custom truststore is used with IAM.
\nFor integration or if necessary, additional logging regarding connections to Azure can be enabled in the Log4J configuration.\nIAM documentation explains custom logging configuration.
\nAdjust the log levels for \"com.azure\", \"com.azure.core.amqp\" or other libraries to your needs.
AMQP is the default transport type and is recommended for most scenarios. Outbound connections use port 5671.
\nAMQP over Web Sockets is useful for environments where networking is restrictive or when a proxy configuration must be used.\nOutbound connections use port 443.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-79- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-80- displayName = "Transport Type", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-81- defaultValue = "AMQP" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-82- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-83- @GroupProperty(groupIdentifier = "Basic Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-84- private AmqpTransportType transportType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-85- public static final String TRANSPORT_TYPE_PROPERTY = "transportType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-86- private static final String TRANSPORT_TYPE_PROPERTY_DISPLAY_NAME = "Transport Type"; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-116- private ProxyAuthenticationType proxyAuthenticationType; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-117- public static final String PROXY_AUTH_TYPE_PROPERTY = "proxyAuthenticationType"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-118- private static final String PROXY_AUTH_TYPE_PROPERTY_DISPLAY_NAME = "Proxy Authentication Type"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-119- @StringProperty(description = "Username for the proxy if proxy authentication is used.", displayName = "Proxy Login User", optional = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-120- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-121- private String proxyLoginUser; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-122- public static final String PROXY_LOGIN_USER_PROPERTY = "proxyLoginUser"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-123- static final String PROXY_LOGIN_USER_PROPERTY_DISPLAY_NAME = "Proxy Login User"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-124- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-125- description = "Password for the proxy if proxy authentication is used.", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-126- displayName = "Proxy Login Password", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-127- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java:128: isSensitive = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-129- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-130- @GroupProperty(groupIdentifier = "Proxy Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-131- private String proxyLoginPassword; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-132- public static final String PROXY_LOGIN_PASSWORD_PROPERTY = "proxyLoginPassword"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-133- static final String PROXY_LOGIN_PASSWORD_PROPERTY_DISPLAY_NAME = "Proxy Login Password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-134- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-135- description = "A partition key is used to map event data into specific partitions for data organization.
\nIt enables keeping related events together in the same partition and in the exact order in which they arrived.
\nThe partition key is derived from the application context and identifies the interrelationship of the events.
\nThe partition key is used for all events sent to the event hub by this message broker connector.
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-136- optional = true work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-137- ) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-138- @GroupProperty(groupIdentifier = "Advanced Settings") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-139- private String partitionKey; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-140- public static final String PARTITION_KEY_PROPERTY = "partitionKey"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-141- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-142- @ConfigurationValidator(localOnly = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-143- public static void ensureCorrectTransportTypeForProxyConfiguration( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-144- PluginConfiguration pc, ConfigurationEnvironment env, ConfigurationContext context, Environment valenv work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-145- ) throws PropertyConfigurationException { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-146- String proxyHost = StringPropertyValueReader.effectiveStringConfigValue(pc, "proxyHost", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-147- AmqpTransportType transportType = (AmqpTransportType)EnumPropertyValueReader.effectiveConfigEnum(pc, "transportType", env, context); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/azure/AzureMessageBrokerConnectorConfig.java-148- if (proxyHost != null && transportType == AmqpTransportType.AMQP) { -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-104- public static final String TRUST_STORE_PATH_PROPERTY = "trustStorePath"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-105- @StringProperty( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-106- description = "The format of the truststore file. Supported formats are JKS, PKCS12 and PEM. We recommend\nusing PKCS12 or PEM formats.\n\nRelated Kafka producer property: ssl.truststore.type\n
\nRelated Kafka producer property: ssl.truststore.password\n
\nRelated Kafka producer property: ssl.keystore.location\n
\nRelated Kafka producer property: ssl.keystore.type\n
\nRelated Kafka producer property: ssl.keystore.password\n
\nRelated Kafka producer property: ssl.key.password\n
\nThe client ID is included in requests sent to the broker and is used for logging, metrics, and monitoring\nThe value is not used for authentication or authorization and is not stored in Kafka records.\n
\nSetting a meaningful client ID is strongly recommended in production environments to improve observability and operational debugging.\n\nRelated Kafka producer property: client.id\n
\nThis threshold determines how long the connector will wait for a batch of events to be sent to Kafka\nbefore considering the operation as potentially problematic. This helps prevent indefinite blocking\nand allows for better monitoring of slow Kafka operations.\n
", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-167- optional = true, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-168- defaultValue = 5000L, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-169- minValue = 500L, work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-170- displayName = "Batch Processing Timeout [ms]" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaMessageBrokerConnectorConfig.java-171- ) -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-9- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-10-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-11- description = "SASL/SCRAM authentication for Kafka.\n\nSCRAM (Salted Challenge Response Authentication Mechanism) is a SASL authentication method where the client proves\nknowledge of a password without sending the password itself, using a salted hash and a challenge–response exchange.\n
\n\nFor more information, see Authentication using SASL.\n
\n", work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-12- displayName = "Kafka SASL SCRAM Authentication" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-13-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-14-public final class KafkaSaslScramAuthenticationConfig implements KafkaProducerAuthenticationConfig { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-15- @EnumProperty(description = "The hash algorithm to use for SCRAM authentication.\n", optional = true, defaultValue = "SHA_256") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-16- private ScramHashAlgorithm hashAlgorithm; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-17- public static final String SASL_SCRAM_HASH_ALGORITHM_PROPERTY = "hashAlgorithm"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-18- @StringProperty(description = "The username for SASL/SCRAM authentication.\n", optional = false) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-19- private String username; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-20- public static final String SASL_SCRAM_USERNAME_PROPERTY = "username"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java:21: @StringProperty(description = "The password for SASL/SCRAM authentication.\n", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-22- private String password; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-23- public static final String SASL_SCRAM_PASSWORD_PROPERTY = "password"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-24- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-25- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-26- public KafkaSettings getKafkaSettings() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-27- return KafkaSaslScramAuthentication.builder().hashAlgorithm(this.hashAlgorithm).username(this.username).password(this.password).build(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-28- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-30- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-31- public static KafkaSaslScramAuthenticationConfig.KafkaSaslScramAuthenticationConfigBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-32- return new KafkaSaslScramAuthenticationConfig.KafkaSaslScramAuthenticationConfigBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-33- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-34- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-35- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-36- public KafkaSaslScramAuthenticationConfig() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-37- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-38- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-39- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-40- public KafkaSaslScramAuthenticationConfig(ScramHashAlgorithm hashAlgorithm, String username, String password) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/KafkaSaslScramAuthenticationConfig.java-41- this.hashAlgorithm = hashAlgorithm; -- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-1-package com.airlock.iam.servicecontainer.app.application.configuration.event.kafka; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-2- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-3-import com.airlock.iam.plugin.api.annotation.config.Plugin; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-4-import com.airlock.iam.plugin.api.annotation.property.StringProperty; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-5-import com.airlock.iam.servicecontainer.api.application.configuration.event.kafka.CustomKafkaConfigValue; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-6-import edu.umd.cs.findbugs.annotations.SuppressFBWarnings; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-7- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-8-@Plugin( work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-9- description = "Provides a sensitive value for a custom Kafka property.\n\nThis plugin can be used to add or overwrite arbitrary Kafka producer properties that contain sensitive information,\nsuch as passwords or secrets, which should not be part of the IAM configuration file.\n
\nExample: Setting a custom secret for a specific Kafka interceptor.\n" work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-10-) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-11-public final class SensitiveKafkaConfigValue implements CustomKafkaConfigValue { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java:12: @StringProperty(description = "The sensitive value of the Kafka property.", optional = false, isSensitive = true) work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-13- private String value; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-14- public static final String CUSTOM_SENSITIVE_KAFKA_CONFIG_VALUE_PROPERTY = "value"; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-15- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-16- @Override work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-17- public String getValue() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-18- return this.value; work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-19- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-20- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-21- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-22- public static SensitiveKafkaConfigValue.SensitiveKafkaConfigValueBuilder builder() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-23- return new SensitiveKafkaConfigValue.SensitiveKafkaConfigValueBuilder(); work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-24- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-25- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-26- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-27- public SensitiveKafkaConfigValue() { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-28- } work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-29- work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-30- @SuppressFBWarnings(justification = "generated code") work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-31- public SensitiveKafkaConfigValue(String value) { work/source-derived/airlock-iam-8.6.1/decompiled/com/airlock/iam/servicecontainer/app/application/configuration/event/kafka/SensitiveKafkaConfigValue.java-32- this.value = value;