64 lines
3.3 KiB
XML
64 lines
3.3 KiB
XML
<AuthState name="${state.entry}" class="ch.nevis.idm.authstate.IdmUserVerifyState" final="false" resumeState="false">
|
|
<ResultCond name="prospect" next="${state.entry}_IdmGetPropertiesState"/>
|
|
<!-- Security issue : goes to next state if client not found -->
|
|
<ResultCond name="failed" next="${state.entry}_FailedEmailState"/>
|
|
<ResultCond name="clientNotFound" next="${state.exit.1}"/>
|
|
<Response value="AUTH_ERROR">
|
|
<Gui name="internal_error">
|
|
<GuiElem name="transferId" type="hidden" value="${system:random.bytes.16}" optional="true"/>
|
|
</Gui>
|
|
</Response>
|
|
<propertyRef name="nevisIDM_Connector"/>
|
|
<property name="user.loginId" value="${inargs:userInputValue_prompt.email}"/>
|
|
<property name="user.loginType" value="EMAIL"/>
|
|
<property name="client.name" value="${param.client.name}"/>
|
|
<property name="presetNoteValues" value="false"/>
|
|
<property name="detaillevel.user" value="HIGH"/>
|
|
<property name="detaillevel.profile" value="HIGH"/>
|
|
<property name="detaillevel.role" value="MEDIUM"/>
|
|
<property name="detaillevel.authorization" value="HIGH"/>
|
|
<property name="detaillevel.dataroom" value="LOW"/>
|
|
<property name="detaillevel.credential" value="HIGH"/>
|
|
<property name="detaillevel.property" value="HIGH"/>
|
|
<property name="detaillevel.unit" value="LOW"/>
|
|
<property name="detaillevel.default" value="EXCLUDE"/>
|
|
</AuthState>
|
|
|
|
<AuthState name="${state.entry}_IdmGetPropertiesState" final="false" class="ch.nevis.idm.authstate.IdmGetPropertiesState" resumeState="false">
|
|
<ResultCond name="ok" next="${state.done}"/>
|
|
<ResultCond name="clientNotFound" next="${state.exit.1}"/>
|
|
<ResultCond name="default" next="${state.failed}"/>
|
|
<Response value="AUTH_ERROR">
|
|
<Gui name="internal_error">
|
|
<GuiElem name="transferId" type="hidden" value="${request:traceId}" optional="true"/>
|
|
</Gui>
|
|
</Response>
|
|
<propertyRef name="nevisIDM_Connector"/>
|
|
<property name="forceDataReload" value="true"/>
|
|
<!-- Returned Attributes in SecToken -->
|
|
<property name="user.attributes" value="${param.attributes}"/>
|
|
<property name="user.properties" value="${param.properties}"/>
|
|
<property name="user.cred.context_password1.state" value="true"/>
|
|
<property name="user.cred.context_password1.context" value="true"/>
|
|
<property name="userExtId" value="${sess:ch.nevis.session.userid}"/>
|
|
<property name="chooseDefaultProfile" value="true"/>
|
|
<property name="client.name" value="${param.client.name}"/>
|
|
<property name="detaillevel.user" value="HIGH"/>
|
|
<property name="detaillevel.profile" value="HIGH"/>
|
|
<property name="detaillevel.role" value="MEDIUM"/>
|
|
<property name="detaillevel.authorization" value="HIGH"/>
|
|
<property name="detaillevel.dataroom" value="LOW"/>
|
|
<property name="detaillevel.credential" value="HIGH"/>
|
|
<property name="detaillevel.property" value="HIGH"/>
|
|
<property name="detaillevel.unit" value="LOW"/>
|
|
<property name="detaillevel.default" value="EXCLUDE"/>
|
|
</AuthState>
|
|
|
|
<!-- Dummy authstate for failed email -->
|
|
<AuthState name="${state.entry}_FailedEmailState" class="ch.nevis.esauth.auth.states.standard.TransformAttributes" final="false">
|
|
<ResultCond name="default" next="${state.done}"/>
|
|
<Response value="AUTH_CONTINUE"/>
|
|
<property name="sess:ch.adnovum.nevisidm.user.extId" value="4a9b6cf8-0093-3416-8db8-0f063aa85d14"/>
|
|
<property name="sess:ch.nevis.idm.User.email" value="${inargs:userInputValue_prompt.email}"/>
|
|
</AuthState>
|