From 1a621409d226ce0b1ef179f0c314eae94b1b3669 Mon Sep 17 00:00:00 2001
From: haburger <haburger>
Date: Wed, 3 Sep 2025 06:30:34 +0000
Subject: [PATCH] new configuration version

---
 .../k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml |  2 +-
 .../conf/filterRedirectionPaths.groovy        |  2 +-
 ...k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml |  2 +-
 .../WEB-INF/web.xml                           | 41 +++++++++++++++++++
 4 files changed, 44 insertions(+), 3 deletions(-)

diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1/etc/nevis/k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1/etc/nevis/k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml
index af05ce5..d6cb280 100644
--- a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1/etc/nevis/k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1/etc/nevis/k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml
@@ -46,7 +46,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-7188c402aab16fcbb1e1435446513b8abc18de8e"
+    tag: "r-bba80526cea899b1947578419a14c74492ea501f"
     dir: "DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1"
     credentials: "git-credentials"
   keystores:
diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1/var/opt/nevisauth/default/conf/filterRedirectionPaths.groovy b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1/var/opt/nevisauth/default/conf/filterRedirectionPaths.groovy
index 0efff11..8040c7c 100644
--- a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1/var/opt/nevisauth/default/conf/filterRedirectionPaths.groovy
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth-v1/var/opt/nevisauth/default/conf/filterRedirectionPaths.groovy
@@ -18,7 +18,7 @@ if (request.getSession(false) == null) {
 }
 
 def redirectionPath = getPathFromURL(request['currentResource'])
-def applicationPaths = ["/register/","/pwreset/"]
+def applicationPaths = ["/nevisauth/","/register/","/pwreset/"]
 def denyRegexes = [".*[\\n\\r]+.*"]
 
 def denied = false
diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml
index d940c84..a431cbf 100644
--- a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/etc/nevis/k8s-ob-proxy-b4d2da2fa2d0b060752a1fe2.yaml
@@ -47,7 +47,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-7188c402aab16fcbb1e1435446513b8abc18de8e"
+    tag: "r-bba80526cea899b1947578419a14c74492ea501f"
     dir: "DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1"
     credentials: "git-credentials"
   keystores:
diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/var/opt/nevisproxy/default/host-ob.agov-w.azure.adnovum.net/WEB-INF/web.xml b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/var/opt/nevisproxy/default/host-ob.agov-w.azure.adnovum.net/WEB-INF/web.xml
index 3530ceb..446071f 100644
--- a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/var/opt/nevisproxy/default/host-ob.agov-w.azure.adnovum.net/WEB-INF/web.xml
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-proxy-v1/var/opt/nevisproxy/default/host-ob.agov-w.azure.adnovum.net/WEB-INF/web.xml
@@ -398,6 +398,42 @@
     <listener>
         <listener-class>ch::nevis::isiweb4::listener::SessionListener</listener-class>
     </listener>
+    <!-- source: pattern://bcfcb6808653a4ca9054146b, pattern://bcfcb6808653a4ca9054146b#allowedMethods, pattern://bcfcb6808653a4ca9054146b#backends, pattern://bcfcb6808653a4ca9054146b#responseRewrite -->
+    <servlet>
+        <servlet-name>Connector_ArtifactResolutionService</servlet-name>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b -->
+        <servlet-class>ch::nevis::isiweb4::servlet::connector::http::HttpsConnectorServlet</servlet-class>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b#allowedMethods -->
+        <init-param>
+            <param-name>AllowedMethods</param-name>
+            <param-value>ALL-HTTP,ALL-WEBDAV,-TRACE,-CONNECT</param-value>
+        </init-param>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b#responseRewrite -->
+        <init-param>
+            <param-name>AutoRewrite</param-name>
+            <param-value>header</param-value>
+        </init-param>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b -->
+        <init-param>
+            <param-name>CookieManager</param-name>
+            <param-value>block:^.*$</param-value>
+        </init-param>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b -->
+        <init-param>
+            <param-name>DNSCache.ttl</param-name>
+            <param-value>60</param-value>
+        </init-param>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b#backends -->
+        <init-param>
+            <param-name>InetAddress</param-name>
+            <param-value>auth.adn-agov-nevisidm-01-uat:8991</param-value>
+        </init-param>
+        <!-- source: pattern://bcfcb6808653a4ca9054146b#backends -->
+        <init-param>
+            <param-name>UseSSL</param-name>
+            <param-value>true</param-value>
+        </init-param>
+    </servlet>
     <!-- source: pattern://25bdd7e6f5b76694f6688ab8 -->
     <servlet>
         <servlet-name>Connector_NevisFIDO</servlet-name>
@@ -606,6 +642,11 @@
         <servlet-name>Hosting_Default</servlet-name>
         <url-pattern>/mock-me/*</url-pattern>
     </servlet-mapping>
+    <!-- source: pattern://bcfcb6808653a4ca9054146b, pattern://bcfcb6808653a4ca9054146b#path -->
+    <servlet-mapping>
+        <servlet-name>Connector_ArtifactResolutionService</servlet-name>
+        <url-pattern>/nevisauth/*</url-pattern>
+    </servlet-mapping>
     <!-- source: pattern://25bdd7e6f5b76694f6688ab8 -->
     <servlet-mapping>
         <servlet-name>Connector_NevisFIDO</servlet-name>