468 lines
12 KiB
Perl
468 lines
12 KiB
Perl
##@file
|
|
# Some configuration subattributes
|
|
|
|
##@class
|
|
#Some configuration subattributes
|
|
|
|
package Lemonldap::NG::Common::Conf::SubAttributes;
|
|
|
|
use Mouse;
|
|
|
|
our $VERSION = '1.9.0';
|
|
|
|
## E
|
|
|
|
has 'exportedHeaders' => (
|
|
is => 'rw',
|
|
isa => 'HashRef',
|
|
default => sub { return { 'Auth-User' => '$uid' }; },
|
|
documentation => "Headers for a virtual host",
|
|
);
|
|
|
|
## L
|
|
|
|
has 'locationRules' => (
|
|
is => 'rw',
|
|
isa => 'HashRef',
|
|
default => sub { return { default => 'deny' }; },
|
|
documentation => "Rules for a virtual host",
|
|
);
|
|
|
|
## O
|
|
|
|
has 'oidcOPMetaDataExportedVars' => (
|
|
is => 'rw',
|
|
isa => 'HashRef',
|
|
default => sub { return { 'uid' => 'sub' }; },
|
|
documentation => "Exported vars for an OP",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsAcrValues' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP acr_values",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsCheckJWTSignature' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'OIDC OP JWT signature checking',
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsClientID' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP client ID",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsClientSecret' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP client Secret",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsConfigurationURI' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP configuration endpoint",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsDisplay' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP display",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsDisplayName' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => "Provider name",
|
|
documentation => "OIDC OP display name",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsIcon' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP logo file",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsIDTokenMaxAge' => (
|
|
is => 'rw',
|
|
isa => 'Int',
|
|
default => 30,
|
|
documentation => "OIDC OP ID Token max age",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsJWKSTimeout' => (
|
|
is => 'rw',
|
|
isa => 'Int',
|
|
default => "0",
|
|
documentation => "OIDC OP JWKS data refresh interval",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsUseNonce' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => "OIDC OP Use nonce",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsMaxAge' => (
|
|
is => 'rw',
|
|
isa => 'Int|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP max_age",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsPrompt' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP prompt",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsScope' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => "openid email profile",
|
|
documentation => "OIDC OP scope",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsTokenEndpointAuthMethod' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => "client_secret_basic",
|
|
documentation => "OIDC OP scope",
|
|
);
|
|
|
|
has 'oidcOPMetaDataOptionsUiLocales' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC OP ui_locales",
|
|
);
|
|
|
|
has 'oidcRPMetaDataExportedVars' => (
|
|
is => 'rw',
|
|
isa => 'HashRef',
|
|
default => sub { return { 'sub' => 'uid' }; },
|
|
documentation => "Exported vars for a RP",
|
|
);
|
|
|
|
has 'oidcRPMetaDataOptionsAccessTokenExpiration' => (
|
|
is => 'rw',
|
|
isa => 'Int',
|
|
default => '3600',
|
|
documentation => "OIDC RP Access Token Expiration",
|
|
);
|
|
|
|
has 'oidcRPMetaDataOptionsClientID' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC RP client ID",
|
|
);
|
|
|
|
has 'oidcRPMetaDataOptionsClientSecret' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC RP client Secret",
|
|
);
|
|
|
|
has 'oidcRPMetaDataOptionsIDTokenExpiration' => (
|
|
is => 'rw',
|
|
isa => 'Int',
|
|
default => '3600',
|
|
documentation => "OIDC RP ID Token Expiration",
|
|
);
|
|
|
|
has 'oidcRPMetaDataOptionsIDTokenSignAlg' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => 'HS256',
|
|
documentation => "OIDC RP ID Token Signature Algorithm",
|
|
);
|
|
|
|
has 'oidcRPMetaDataOptionsUserIDAttr' => (
|
|
is => 'rw',
|
|
isa => 'Str|Undef',
|
|
default => undef,
|
|
documentation => "OIDC RP User ID Attribute",
|
|
);
|
|
|
|
## P
|
|
|
|
has 'post' => (
|
|
is => 'rw',
|
|
isa => 'HashRef',
|
|
default => sub { return { none => { expr => {}, }, }; },
|
|
documentation => "Form replay for a virtual host",
|
|
);
|
|
|
|
## S
|
|
|
|
has 'samlIDPMetaDataExportedAttributes' => (
|
|
is => 'rw',
|
|
isa => 'HashRef',
|
|
default => sub { return { 'uid' => '0;uid;;' }; },
|
|
documentation => "Exported attributes for an IDP",
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsAdaptSessionUtime' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML IDP option adapt session utime',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsAllowLoginFromIDP' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML IDP option allow SSO IDP initiated',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsAllowProxiedAuthn' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML IDP option allow IDP proxy',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsCheckConditions' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML IDP option check conditions',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsCheckSLOMessageSignature' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML IDP option check SLO signature',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsCheckSSOMessageSignature' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML IDP option check SSO signature',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsEncryptionMode' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => 'none',
|
|
documentation => 'SAML IDP option encryption mode',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsForceAuthn' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '0',
|
|
documentation => 'SAML IDP option force authentication',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsForceUTF8' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '0',
|
|
documentation => 'SAML IDP option force UTF-8',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsIsPassive' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '0',
|
|
documentation => 'SAML IDP option is passive',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsNameIDFormat' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => '',
|
|
documentation => 'SAML IDP option NameID format',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsRequestedAuthnContext' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => '',
|
|
documentation => 'SAML IDP option requested authentication context',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsResolutionRule' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => '',
|
|
documentation => 'SAML IDP option resolution rule',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsSLOBinding' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => '',
|
|
documentation => 'SAML IDP option SLO binding',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsSSOBinding' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => '',
|
|
documentation => 'SAML IDP option SSO binding',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsSignSLOMessage' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML IDP option sign SLO',
|
|
);
|
|
|
|
has 'samlIDPMetaDataOptionsSignSSOMessage' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML IDP option sign SSO',
|
|
);
|
|
|
|
has 'samlSPMetaDataExportedAttributes' => (
|
|
is => 'rw',
|
|
isa => 'HashRef',
|
|
default => sub { return { 'uid' => '0;uid;;' }; },
|
|
documentation => "Exported attributes for a SP",
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsCheckSLOMessageSignature' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML SP option check SLO',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsCheckSSOMessageSignature' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML SP option check SLO',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsEnableIDPInitiatedURL' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '0',
|
|
documentation => 'SAML SP option enable SSO IDP initiated URL',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsEncryptionMode' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => 'none',
|
|
documentation => 'SAML SP option encryption mode',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsNameIDFormat' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => '',
|
|
documentation => 'SAML SP option NameID format',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsNotOnOrAfterTimeout' => (
|
|
is => 'rw',
|
|
isa => 'Int',
|
|
default => '72000',
|
|
documentation => 'SAML SP option notOnOrAfter timeout',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsOneTimeUse' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '0',
|
|
documentation => 'SAML SP option one time use',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsSessionNotOnOrAfterTimeout' => (
|
|
is => 'rw',
|
|
isa => 'Int',
|
|
default => '72000',
|
|
documentation => 'SAML SP option sessionNotOnOrAfter timeout',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsSignSLOMessage' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML SP option sign SLO',
|
|
);
|
|
|
|
has 'samlSPMetaDataOptionsSignSSOMessage' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '1',
|
|
documentation => 'SAML SP option sign SSO',
|
|
);
|
|
|
|
## V
|
|
|
|
has 'vhostAliases' => (
|
|
is => 'rw',
|
|
isa => 'Str',
|
|
default => '',
|
|
documentation => 'Aliases for a virtual host',
|
|
);
|
|
|
|
has 'vhostHttps' => (
|
|
is => 'rw',
|
|
isa => 'Int',
|
|
default => '-1',
|
|
documentation => 'HTTPS mode for a virtual host',
|
|
);
|
|
|
|
has 'vhostMaintenance' => (
|
|
is => 'rw',
|
|
isa => 'Bool',
|
|
default => '0',
|
|
documentation => 'Maintenance mode for a virtual host',
|
|
);
|
|
|
|
has 'vhostOptions' => (
|
|
is => 'rw',
|
|
isa => 'HashRef',
|
|
default => sub {
|
|
my $self = shift;
|
|
my $vhostPort = $self ? $self->vhostPort : '-1';
|
|
my $vhostHttps = $self ? $self->vhostHttps : '-1';
|
|
my $vhostMaintenance = $self ? $self->vhostMaintenance : '0';
|
|
my $vhostAliases = $self ? $self->vhostAliases : '';
|
|
return {
|
|
vhostPort => $vhostPort,
|
|
vhostHttps => $vhostHttps,
|
|
vhostMaintenance => $vhostMaintenance,
|
|
vhostAliases => $vhostAliases,
|
|
};
|
|
},
|
|
lazy => 1,
|
|
documentation => 'Options for a virtual host',
|
|
);
|
|
|
|
has 'vhostPort' => (
|
|
is => 'rw',
|
|
isa => 'Int',
|
|
default => '-1',
|
|
documentation => 'Redirection port for a virtual host',
|
|
);
|
|
|
|
no Mouse;
|
|
|
|
1;
|