server:
  port: 9443
  host: "0.0.0.0"
  protocol: "https"
  tls:
    keystore: "/var/opt/keys/own/fido-uaf-default-server-identity/keystore.p12"
    keystore-type: "pkcs12"
    keystore-passphrase: "${exec:/var/opt/keys/own/fido-uaf-default-server-identity/keypass}"
    truststore: "/var/opt/keys/trust/fido-uaf-fido-uaf-extended-frontent-truststore/truststore.p12"
    truststore-type: "pkcs12"
    truststore-passphrase: "${exec:/var/opt/keys/trust/fido-uaf-fido-uaf-extended-frontent-truststore/keypass}"
management:
  server:
    port: 9089
  healthchecks:
    enabled: true
fido-uaf:
  enabled: true
  app-id: "https://auth.agov-w.azure.adnovum.net/nevisfido/uaf/1.1/facets"
  facets:
  - "android:apk-key-hash:kb0yJ345nFUmt4nOYK5Li7KvwDDobMKPosY48Uwb0QI"
  - "ios:bundle-id:ch.agov.accessapp.t"
  - "android:apk-key-hash:msmxrDDoIcxmazyIf9aj8uIvRXdH/wX668OQYaYdXpE"
  - "ios:bundle-id:ch.agov.accessapp"
  - "android:apk-key-hash:BFZz7gpBpUUk8rLis19LKpR6ZcIZkdxxFPYOwBSKKQk"
  - "android:apk-key-hash:xoRd0kamp4TSJcvzfWzNoivuNldp+GKI7fjnwX+VEFg"
  policy:
    path: "conf/policy/"
  timeout:
    registration: "300s"
    authentication: "300s"
    token-registration: "180s"
    token-deregistration: "180s"
    token-authentication: "180s"
    device-request: "600s"
  transaction-confirmation:
    max-text-length: 2000
  metadata:
    path: "conf/metadata/metadata.json"
  idm-connection-type: "soap"
  dispatchers:
  - type: "firebase-cloud-messaging"
    dry-run: false
    service-account-json: "inv-res-secret://a78926e06a159811ee15c224-bdd107d2"
    registration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/registration"
    authentication-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/authentication"
    deregistration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/deregistration"
  - type: "png-qr-code"
    registration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/registration"
    authentication-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/authentication"
    deregistration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/deregistration"
  - type: "link"
    registration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/registration"
    authentication-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/authentication"
    deregistration-redeem-url: "https://auth.agov-w.azure.adnovum.net/nevisfido/token/redeem/deregistration"
    base-url: "ch.agov.access-t://x-callback-url/authenticate"
  basic-full-attestation:
    android-verification-level: "strict"
  authorization:
    registration:
      type: "sectoken"
      truststore: "/var/opt/keys/trust/fido-uaf-internal-idp-auth-signer-trust/truststore.p12"
      truststore-type: "pkcs12"
      truststore-passphrase: "${exec:/var/opt/keys/trust/fido-uaf-internal-idp-auth-signer-trust/keypass}"
      username-attribute-names:
      - "loginId"
      - "userid"
    authentication:
      type: "none"
    deregistration:
      type: "sectoken"
      truststore: "/var/opt/keys/trust/fido-uaf-internal-idp-auth-signer-trust/truststore.p12"
      truststore-type: "pkcs12"
      truststore-passphrase: "${exec:/var/opt/keys/trust/fido-uaf-internal-idp-auth-signer-trust/keypass}"
      username-attribute-names:
      - "loginId"
      - "userid"
    create-dispatch-target:
      type: "sectoken"
      truststore: "/var/opt/keys/trust/fido-uaf-internal-idp-auth-signer-trust/truststore.p12"
      truststore-type: "pkcs12"
      truststore-passphrase: "${exec:/var/opt/keys/trust/fido-uaf-internal-idp-auth-signer-trust/keypass}"
      username-attribute-names:
      - "loginId"
      - "userid"
    query-dispatch-target:
      type: "none"
    delete-dispatch-target:
      type: "sectoken"
      truststore: "/var/opt/keys/trust/fido-uaf-internal-idp-auth-signer-trust/truststore.p12"
      truststore-type: "pkcs12"
      truststore-passphrase: "${exec:/var/opt/keys/trust/fido-uaf-internal-idp-auth-signer-trust/keypass}"
      username-attribute-names:
      - "userid"
session-repository:
  type: "sql"
  jdbc-url: "jdbc:mariadb://mariadb-session-store-service.adn-agov-nevisidm-ob-01-uat:3306/nevisfido_uaf?sslMode=disable&autocommit=true"
  max-connection-lifetime: "10m"
  user: "${exec:/var/opt/nevisfido/default/conf/credentials/dbUser}"
  password: "${exec:/var/opt/nevisfido/default/conf/credentials/dbPassword}"
  schema-user: ""
  schema-user-password: ""
  automatic-db-schema-setup: false
credential-repository:
  type: "nevisidm"
  client-id: "agov"
  user-attribute: "extId"
  administration-url: "https://idm.adn-agov-nevisidm-admin-01-uat:8989/nevisidm/services/v1_46/AdminService"
  admin-service-version: "v1_46"
  rest-url: "https://idm.adn-agov-nevisidm-admin-01-uat:8989/nevisidm"
  keystore: "/var/opt/keys/own/fido-uaf-default-client-identity/keystore.p12"
  keystore-type: "pkcs12"
  keystore-passphrase: "${exec:/var/opt/keys/own/fido-uaf-default-client-identity/keypass}"
  truststore: "/var/opt/keys/trust/fido-uaf-idp-extended-truststore/truststore.p12"
  truststore-type: "pkcs12"
  truststore-passphrase: "${exec:/var/opt/keys/trust/fido-uaf-idp-extended-truststore/keypass}"
