From c4972ac0fe89817c7c2c51ca5cda58614b09dd34 Mon Sep 17 00:00:00 2001
From: haburger <haburger>
Date: Thu, 12 Dec 2024 06:40:57 +0000
Subject: [PATCH] new configuration version

---
 .../k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml  |  2 +-
 .../var/opt/nevisauth/default/conf/esauth4.xml | 18 ++++++++++++++++--
 2 files changed, 17 insertions(+), 3 deletions(-)

diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth/etc/nevis/k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth/etc/nevis/k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml
index 539cbd1..9e2f511 100644
--- a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth/etc/nevis/k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth/etc/nevis/k8s-ob-auth-d00b0dcbe241793d30daf91c.yaml
@@ -45,7 +45,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-de27c9925c6b44fc9e1dc51749c7832ef739e7cd"
+    tag: "r-89d09fa1182d6b706fb36674eda251615691d046"
     dir: "DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth"
     credentials: "git-credentials"
   keystores:
diff --git a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth/var/opt/nevisauth/default/conf/esauth4.xml b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth/var/opt/nevisauth/default/conf/esauth4.xml
index 68a0477..87a1f2d 100644
--- a/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth/var/opt/nevisauth/default/conf/esauth4.xml
+++ b/DEFAULT-ADN-AGOV-WORK-OB-PROJECT/DEFAULT-DEFAULT-ADN-AGOV-OB-INV/ob-auth/var/opt/nevisauth/default/conf/esauth4.xml
@@ -64,7 +64,7 @@
             <Entry method="authenticate" state="ob-realm_ob-realm-idm-pwd-login-IdmUserVerifyState" selector="${request:currentResource:/pwreset/start:true}"/>
             <Entry method="stepup" state="ob-realm_Selector"/>
         </Domain>
-        <AuthState name="ob-mock-me-realm_ob-mock-me-auth-processor" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false" resumeState="false">
+        <AuthState name="ob-mock-me-realm_ob-mock-me-auth-processor" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false" resumeState="true">
             <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
             <ResultCond name="processResponse" next="ob-mock-me-realm_ob-mock-me-auth-processor_serviceProvider"/>
             <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
@@ -76,6 +76,8 @@
                     <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
                     <GuiElem name="lasterror" type="error" label="${notes:lasterrorinfo}" value="${notes:lasterror}" optional="true"/>
                     <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
+                    <GuiElem name="operation" type="text" label="operation" value="${inctx|connection.actualURL|^https:\/\/[^\/]+\/mock-me\/(.+)$|$1}" optional="true"/>
+                    <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
                     <GuiElem name="subject" type="text" label="subject" value="${notes:saml.assertion.subject}" optional="true"/>
                     <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
                     <GuiElem name="statusCode" type="text" label="statusCode" value="${notes:saml.response.statusCode}" optional="true"/>
@@ -84,8 +86,14 @@
                     <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
                     <GuiElem name="authenticatedWith" type="text" label="authenticatedWith" value="${notes|saml.attributes.http://schemas.agov.ch/ws/2023/05/identity/claims/authenticatedWith}" optional="true"/>
                     <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
+                    <GuiElem name="requestedRoleLevel" type="text" label="requestedRoleLevel" value="${notes|saml.attributes.http://schemas.agov.ch/ws/2023/05/identity/claims/requestedRoleLevel}" optional="true"/>
+                    <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
                     <GuiElem name="rpEntityId" type="text" label="rpEntityId" value="${notes|saml.attributes.http://schemas.agov.ch/ws/2023/09/identity/claim/rpEntityId}" optional="true"/>
                     <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
+                    <GuiElem name="allowedVerificationMethods" type="text" label="allowedVerificationMethods" value="${notes|saml.attributes.http://schemas.agov.ch/ws/2023/09/identity/claim/allowedVerificationMethods}" optional="true"/>
+                    <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
+                    <GuiElem name="addressRequired" type="text" label="addressRequired" value="${notes|saml.attributes.http://schemas.agov.ch/ws/2023/09/identity/claims/addressRequired}" optional="true"/>
+                    <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
                     <GuiElem name="currentAgovAq" type="text" label="currentAgovAq" value="${notes|saml.attributes.http://schemas.agov.ch/ws/2023/11/identity/claims/currentAgovAq}" optional="true"/>
                     <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
                     <GuiElem name="dateOfVerification" type="text" label="dateOfVerification" value="${notes|saml.attributes.http://schemas.agov.ch/ws/2023/05/identity/claims/qa/dateOfVerification}" optional="true"/>
@@ -97,8 +105,10 @@
             </Response>
             <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
             <property name="script" value="file:///var/opt/nevisauth/default/conf/mock-me-processing.groovy"/>
+            <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
+            <property name="parameter.idp-sso-url" value="https://auth.agov-w.azure.adnovum.net/SAML2/SSO/"/>
         </AuthState>
-        <AuthState name="ob-mock-me-realm_ob-mock-me-auth-processor_serviceProvider" class="ch.nevis.esauth.auth.states.saml.ServiceProviderState" final="false" resumeState="true">
+        <AuthState name="ob-mock-me-realm_ob-mock-me-auth-processor_serviceProvider" class="ch.nevis.esauth.auth.states.saml.ServiceProviderState" final="false" resumeState="false">
             <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
             <ResultCond name="default" next="ob-mock-me-realm_ob-mock-me-auth-processor"/>
             <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
@@ -121,6 +131,10 @@
             <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
             <property name="in.internalBindingSource" value="${notes:SAMLResponse}"/>
             <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
+            <property name="in.audienceRegex" value="https://ob.agov-w.azure.adnovum.net/mock-me/.+"/>
+            <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
+            <property name="in.audience.checkrequired" value="false"/>
+            <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
             <property name="in.max_age" value="30"/>
             <!-- source: pattern://be8f8436b2ec70e9d601fdd3 -->
             <property name="in.keystoreref" value="DefaultKeyStore"/>