fido2:
  enabled: true
  user-presence-requirement: "always"
  rp-name: "AGOV-RelPartName"
  rp-id: "adnovum.net"
  origins:
  - "https://me.agov-w.azure.adnovum.net"
  - "https://nevisidm.agov-w.azure.adnovum.net"
  - "https://auth.agov-w.azure.adnovum.net"
  - "https://ob.agov-w.azure.adnovum.net"
  signature-algorithms:
  - "ES256"
  - "EdDSA"
  display-name-source: "loginId"
  metadata:
    allow-listing-enabled: false
  timeout:
    user-verification: "300s"
    no-user-verification: "120s"
server:
  port: 9443
  protocol: "https"
  tls:
    keystore: "/var/opt/keys/own/ob-fido2-v1-default-identity/keystore.p12"
    keystore-passphrase: "${exec:/var/opt/keys/own/ob-fido2-v1-default-identity/keypass}"
    keystore-type: "pkcs12"
    truststore: "/var/opt/keys/trust/ob-fido2-v1-default-tls-client-trust/truststore.p12"
    truststore-passphrase: "${exec:/var/opt/keys/trust/ob-fido2-v1-default-tls-client-trust/keypass}"
    truststore-type: "pkcs12"
management:
  server:
    port: 9089
  healthchecks:
    enabled: true
credential-repository:
  type: "nevisidm"
  client-id: "cfa9c9b9-119f-4dff-9bb8-86d7c0cf2720"
  rest-url: "https://idm.adn-agov-nevisidm-admin-01-uat:8989/nevisidm"
  keystore: "/var/opt/keys/own/ob-fido2-v1-default-client-identity/keystore.p12"
  keystore-passphrase: "${exec:/var/opt/keys/own/ob-fido2-v1-default-client-identity/keypass}"
  keystore-type: "pkcs12"
  truststore: "/var/opt/keys/trust/ob-fido2-v1-agov-work-internal-trust-store/truststore.p12"
  truststore-passphrase: "${exec:/var/opt/keys/trust/ob-fido2-v1-agov-work-internal-trust-store/keypass}"
  truststore-type: "pkcs12"
  user-attribute: "extId"
session-repository:
  type: "in-memory"
