From 4113ebdfe2b69c50edf2c5eb8e16d623ac2d1b9a Mon Sep 17 00:00:00 2001
From: thb <thb>
Date: Mon, 18 Nov 2024 14:52:24 +0000
Subject: [PATCH] new configuration version

---
 .../k8s-nai-6ec6739e824c8e56d9633622.yaml     |   3 +-
 ...e-proxy-auth-6ec6739e824c8e56d9633622.yaml |  18 ---
 .../opt/nevisauth/default/conf/esauth4.xml    | 150 +-----------------
 .../cossa-token-exchange-authstates.jar       | Bin 22005 -> 21990 bytes
 .../k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml     |   2 +-
 .../WEB-INF/web.xml                           | 141 +---------------
 6 files changed, 9 insertions(+), 305 deletions(-)
 delete mode 100644 DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-sh4r3d-keystore-proxy-auth-6ec6739e824c8e56d9633622.yaml

diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
index fdbd1e4..ace3213 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml
@@ -45,11 +45,10 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-bc24fc84643c9386aa8dd06d4216e6c125b244e5"
+    tag: "r-3357c2abd09c33f401a7d1a0d44c03d1e5b5c5e0"
     dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai"
     credentials: "git-credentials"
   keystores:
-  - "nai-sh4r3d-keystore-proxy-auth"
   - "nai-default-identity"
   - "nai-sh4r3d-default-default-signer"
   truststores:
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-sh4r3d-keystore-proxy-auth-6ec6739e824c8e56d9633622.yaml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-sh4r3d-keystore-proxy-auth-6ec6739e824c8e56d9633622.yaml
deleted file mode 100644
index fee9f43..0000000
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-sh4r3d-keystore-proxy-auth-6ec6739e824c8e56d9633622.yaml
+++ /dev/null
@@ -1,18 +0,0 @@
-apiVersion: "operator.nevis-security.ch/v1"
-kind: "NevisKeyStore"
-metadata:
-  name: "nai-sh4r3d-keystore-proxy-auth"
-  namespace: "adn-postit-tknxchng-01-dev"
-  labels:
-    deploymentTarget: "nai"
-  annotations:
-    projectKey: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT"
-    patternId: "6ec6739e824c8e56d9633622"
-spec:
-  cn: "New_OAuth_2.0_Authorization_Server_OpenID_Provider-signer"
-  usage: "signer"
-  san:
-    dns:
-    - "nai"
-    - "nai.adn-postit-tknxchng-01-dev"
-    email: []
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
index 2a04c66..426a227 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml
@@ -42,11 +42,6 @@
             <!-- source: pattern://d9ea344685ab4a9bb0e1e3e7 -->
             <KeyObject name="tokensigner" certificate="/var/opt/keys/own/tokensigner/cert.pem" privateKey="/var/opt/keys/own/tokensigner/keystore.jks" passPhrase="pipe:///var/opt/keys/own/tokensigner/keypass"/>
         </KeyStore>
-        <!-- source: pattern://f03382307f2e35b70d181f0e -->
-        <KeyStore name="Store_New_OAuth_2.0_Authorization_Server_OpenID_Provider">
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <KeyObject name="Signer_New_OAuth_2.0_Authorization_Server_OpenID_Provider" certificate="/var/opt/keys/own/nai-sh4r3d-keystore-proxy-auth/cert.pem" privateKey="/var/opt/keys/own/nai-sh4r3d-keystore-proxy-auth/keystore.jks" passPhrase="pipe:///var/opt/keys/own/nai-sh4r3d-keystore-proxy-auth/keypass"/>
-        </KeyStore>
     </SessionCoordinator>
     <!-- source: pattern://6ec6739e824c8e56d9633622 -->
     <LocalOutOfContextDataStore reaperPeriod="60"/>
@@ -55,11 +50,7 @@
         <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
         <Domain name="MockRelam" default="false" inactiveInterval="7200" reauthInterval="0" resetAuthenticationCondition="${inargs:cancel}">
             <Entry method="authenticate" state="MockRelam_DispatchMockRequests"/>
-            <Entry method="authenticate" state="MockRelam_AuthorizationServer_New_OAuth_2.0_Authorization_Server_OpenID_Provider" selector="${request:currentResource:^http[s]?\u003A//[^/]+/asdf/.*$:true}"/>
-            <Entry method="authenticate" state="MockRelam_AuthorizationServer_New_OAuth_2.0_Authorization_Server_OpenID_Provider" selector="${request:currentResource:^http[s]?\u003A//[^/]+/qwert/.*$:true}"/>
             <Entry method="stepup" state="MockRelam_Selector"/>
-            <Entry method="stepup" state="MockRelam_AuthorizationServer_New_OAuth_2.0_Authorization_Server_OpenID_Provider" selector="${request:currentResource:^http[s]?\u003A//[^/]+/asdf/.*$:true}"/>
-            <Entry method="stepup" state="MockRelam_AuthorizationServer_New_OAuth_2.0_Authorization_Server_OpenID_Provider" selector="${request:currentResource:^http[s]?\u003A//[^/]+/qwert/.*$:true}"/>
         </Domain>
         <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
         <Domain name="cossa_realm" default="false" inactiveInterval="7200" reauthInterval="0" resetAuthenticationCondition="${inargs:cancel}">
@@ -109,114 +100,6 @@
             <!-- source: pattern://3f7b857b6d35114fcd8c4984 -->
             <property name="statusCode" value="200"/>
         </AuthState>
-        <AuthState name="MockRelam_AuthorizationServer_New_OAuth_2.0_Authorization_Server_OpenID_Provider" class="ch.nevis.esauth.auth.states.oauth2.AuthorizationServer" final="false">
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <ResultCond name="authenticate:valid-authorization-request" next="MockRelam_DispatchMockRequests"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <ResultCond name="invalid-authorization-request" next="MockRelam_Authentication_Failed"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <ResultCond name="invalid-client" next="MockRelam_Authentication_Failed"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <ResultCond name="invalid-redirect-uri" next="MockRelam_Authentication_Failed"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <ResultCond name="invalid-token-request" next="MockRelam_Authentication_Failed"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <ResultCond name="stepup:valid-authorization-request" next="MockRelam_Selector"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="keystoreref" value="Store_New_OAuth_2.0_Authorization_Server_OpenID_Provider"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="keyobjectref" value="Signer_New_OAuth_2.0_Authorization_Server_OpenID_Provider"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="keyID" value="Signer_New_OAuth_2.0_Authorization_Server_OpenID_Provider"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="openid.idTokenLifetime" value="600"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="authCodeLifetime" value="60"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="propagationScope" value="session"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="dataSource" value="nevismeta"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="nevismeta.location" value="https://sdgdf:443/nevismeta/rest/modules/oauthv2/setups/Setup_00000000000000000000000000000000/entities"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="nevismeta.maxAge" value="600"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="openid.support" value="true"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="openid.issuerId" value="https://klp.agov-w.azure.adnovum.net"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.openid" value=""/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.openid.authorizationCodeFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.openid.refreshTokenRequestPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.openid.implicitFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.openid.clientCredentialsFlowPolicy" value="true"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.offline_access" value=""/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.offline_access.authorizationCodeFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.offline_access.refreshTokenRequestPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.offline_access.implicitFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.offline_access.clientCredentialsFlowPolicy" value="true"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.address" value=""/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.address.authorizationCodeFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.address.refreshTokenRequestPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.address.implicitFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.address.clientCredentialsFlowPolicy" value="true"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.profile" value=""/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.profile.authorizationCodeFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.profile.refreshTokenRequestPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.profile.implicitFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.profile.clientCredentialsFlowPolicy" value="true"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.email" value=""/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.email.authorizationCodeFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.email.refreshTokenRequestPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.email.implicitFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.email.clientCredentialsFlowPolicy" value="true"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.phone" value=""/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.phone.authorizationCodeFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.phone.refreshTokenRequestPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.phone.implicitFlowPolicy" value="NO_CONSENT_REQUIRED"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="scope.phone.clientCredentialsFlowPolicy" value="true"/>
-        </AuthState>
-        <AuthState name="MockRelam_Authentication_Failed" class="ch.nevis.esauth.auth.states.standard.AuthError" final="false">
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <Response value="AUTH_ERROR">
-                <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                <Gui name="Error">
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="info" type="error" label="error_99"/>
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="submit" type="button" label="continue.button.label"/>
-                </Gui>
-            </Response>
-        </AuthState>
         <AuthState name="MockRelam_Selector" class="ch.nevis.esauth.auth.states.standard.ConditionalDispatcherState" final="false">
             <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
             <ResultCond name="nomatch" next="MockRelam_Prepare_Done"/>
@@ -228,7 +111,7 @@
         </AuthState>
         <AuthState name="MockRelam_Prepare_Done" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false">
             <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-            <ResultCond name="default" next="MockRelam_02_CheckConsent_New_OAuth_2.0_Authorization_Server_OpenID_Provider"/>
+            <ResultCond name="default" next="MockRelam_Auth_Done"/>
             <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
             <Response value="AUTH_DONE">
                 <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
@@ -237,37 +120,6 @@
             <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
             <property name="script" value="file:///var/opt/nevisauth/default/conf/prepare_done.groovy"/>
         </AuthState>
-        <AuthState name="MockRelam_02_CheckConsent_New_OAuth_2.0_Authorization_Server_OpenID_Provider" class="ch.nevis.esauth.auth.states.oauth2.consentstate.ConsentState" final="false">
-            <ResultCond name="ok" next="MockRelam_Auth_Done"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <ResultCond name="reject" next="MockRelam_Authentication_Failed"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <Response value="AUTH_CONTINUE">
-                <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                <Gui name="oauth_consent" label="title.oauth.consent">
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="prompt" type="info" label="info.oauth.consent"/>
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="accept" type="button" label="accept.button.label" value="approve"/>
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="reject" type="button" label="reject.button.label" value="deny" optional="false"/>
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="clientName" type="info" label="" value="${notes:client_name}" optional="false"/>
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="clientLogo" type="image" label="" value="${notes:logo_uri}" optional="false"/>
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="clientToS" type="link" label="consent.tos.link.label" value="${notes:tos_uri}" optional="true"/>
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="clientPolicy" type="link" label="consent.policy.link.label" value="${notes:policy_uri}" optional="true"/>
-                    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-                    <GuiElem name="consentInformation" type="hidden" value="${notes:consentInformation}" optional="true"/>
-                </Gui>
-            </Response>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="dataSource" value="nevismeta"/>
-            <!-- source: pattern://f03382307f2e35b70d181f0e -->
-            <property name="nevismeta.location" value="https://sdgdf:443/nevismeta/rest/modules/oauthv2/setups/Setup_00000000000000000000000000000000/entities"/>
-        </AuthState>
         <AuthState name="MockRelam_Auth_Done" class="ch.nevis.esauth.auth.states.standard.AuthDone" final="false">
             <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
             <Response value="AUTH_DONE">
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/plugin/cossa-token-exchange-authstates.jar b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/plugin/cossa-token-exchange-authstates.jar
index a06c73f95fb412d11c45b0e3a8950fcb64a8bc14..3690fdc106214a01ebb830ca4d60dd8da9b893f4 100644
GIT binary patch
delta 3595
zcmY*cc{r49`<@w;Elgw7WSi_Mp^=P1*<&n&8T-<ZwLwTI8CixmAs+jr&{&fQAyNj(
zzHeEwydzt-3Ptsqe!uTHzV73AuJgFh>pHLddhWmO^V?JK!c#Ce4$H#I4+62XgP>ta
z+&3hlVg5Ftg9TxRgT-?2xp>I4fc`4XKLt4`?~^}>m0++A1j>{dw?_EJa)CfNK@dn4
z-~+>fYb<BTLV@t#jrNt}+}^L0yaxjW2bA?EyghBTw3Czzj2ESj7*mt|(c{_1QkmJ~
zJzWLH>Km-krx8Un;0U3-aDGqiBLCpXnLFV!jyZXGmYbF{Kf~(BNo%yQeR0g2@51Y^
zKknT5xcB<wznkfzq3mx3RP8i*h(sEOrYl!3kKolMlSYTNzP)7J%3{=UZm|<w+RhJ>
zs*S}5K9*thx?(*Z5$){ksQWVEd2b8z_`<aO5=RQ7jk=dPKQFKLi;LvW2sNK;2;iuL
zr+$vc`DI1e$htkrz@hHwGM*&}_dAT<w7&X0b8ICe%7$3nJMg-1dTLgc4XhQ|k`UvZ
zwX)Ph&aFi(_lvzQ^N!BTDhxbfspM@{nRa<GK{OzTooa~hY7UL?a*sbc66KC8HDQ+}
zRPe>I|MKa@4pAvSimWU222<=hYVyIFm%(#P%2#fbM1jt~DG$;VwBj@2fx6Za`J8FR
z?9OQ7@FHVNzvdM;me-rH?ep`Jd5{h82D?N4a9r};eVk>*8-MFc>M~DtY|U38y;W}d
z3q{8(q1u?{XPy-rrN~m{mHB7!d-si3ZjbETsID6F^{A@n6<Ko{ZTxcGNz5!jvvlD>
zz5GbI!?k$QCJ~;iFgvE$JVedYz#rY>mGJg{%{v^W)@!h=QA)f$E{iJAou@FgV?h_m
z9p#P>mW(1Cpdtkp)KAAPt)_lIFMKi8`|GJ$1(cfcUU4e!29|r0^>B=dM-jUz81KN4
zK$$x)?-#M@&$___Rbu!adV!nL-}Otf%F0?$u)m^?Sm7A<4SG!>vM-$l^;_N(6X2r(
zH{?vLm7KjxtX8u{1HmRd&k6nEpXq3FvOyDc(8b`i7({VsdC?4-qI%j#2Z;DWSk=i;
zAVbDUV8Qi&JXGtQ{r`bYNZ+U~8k6KZy+Nu#RjhO2SM>xn6(=dd^p$k98~LPvg_SO5
zd$Zm%NRdRGSmIRd_qwG;tbZEkG91IR=35bYC(BbOQkzd+o~~PK-6Sb{ww3H^6xq*(
z5N*CU9+m9(-e!C)QctD3oHo??O30*GHx^lP$qEWPdb%KiakA~$t5<El27q`umF04f
z(8OkLO!o^tgd;1=k1dT;kb|CV@Z`~;5O#XGqCeXp5&kU8GKcVzt4kPuHbXR|%+ESK
z{KEG>ee21tn<qFddaod^f+^(Uz^os(qCC)r7X99hSp}4G^f1l|6m_8}SbVw#v(Vu6
z!YVz!xApT9h1NzTG_d))M$VmJ!C}r0pW~8p%Tj?(m(2;+MlAXDDXP78Kmk82FR(#~
zuF96hUoT3W6+9z4-TsNxd{S;M^QY#-fc}p-XvndXZEJ)LANrQ!nj!gi$t+IClsyjK
z5L13rcDX7<NH6oeMnj@;Q4Qdx<T38p*FUcG+LX5-b=Qw|^d5dMOk-2p{p};4HVqlI
zb_v`Dn7-uSRjzGZ|KjVN*zzlwJ^RE%>KGZ6hr+_xCh`-C?LztaX0ae?x!zcJyFKVa
z;ExCH-!$8AUeurn!Y9eJx%t|VhclUrLat#_q@;JsR(O-W4P*CBZ-eIh{`X|)($}9x
zOyDOIFzi$lV{X*BQ--PU?j==soT5r1>nvIeH#~cy)q43teCL&F#*v?R*Ef77pUj|S
z*ILc!KM>fNA;AhcQvo#Q9X7VmW5}H_ndtHmq^c{8BI`{6kH~_2eCn5C30+qizje|M
zM-NN03%d279e;<Y(PoJ7#2GU!56X(J#)zDrtm^B}Zo^rqit`T5{IhYp$r18TcR3q7
z7@v*UHo!xk`g^YCsgm>tC`VYj5qnm<s{xOQ#imMQk6BCV=O}4SyJTKY?L%$AE+xXZ
zWLKcE8xdNHBWopnR>~+l8*l;$n*_wf%l%0&tv04sSv@3^9lb>7R(BikiO$4?-VD&k
ziwKJyj&94$&URWc?hb4l{iYO|nys=Q%-I`TdM7jDF<+Y7yR7plH;kWp2k@dN{_#;+
z{XKW80E5e^Ytc}3>sD%N6uD<tDZe8<XK4FO*|%A=9yv^<!ks5M+bzP$TmxR%j?&iM
zGTOc1nA>!ttmX;#)T+W`Z@Kp1!nIZCr^Hf*Sk`zMni6apv=B0ND7}sPF74xBt?7s&
zy_k#9hY&q}4dz5RCsQFMnPhA1AzDAn;o}}Sn32Jwa5sF8hj6X4pthyLn?#m^oq4>K
zMb}8<B2)4zNXyr_tg4gwpJmox-dv=z-?bh=xWo%PbZvAcZ>X@b?#T0)+MnDgpX2uS
zCyivW2R2?pXJ%U(e?0s!RnPp{MMa&OBTrt2^+fIF&z4}UK<^ngv>F>MEuSCJ+<t{s
z%my7%yfiKpQ~&VBD_Oyv6k#))jVU>`5X+fUapZwT|5CxSrfpJnt=`bUSDq+i%(UkY
z<>q2q4_Yg6E7{y4E=aF>tN+6MR$vsW4ZS7x+=T7g#3~KeUn2;K&xh$P+g2d9ow;sT
znh6B9PLL+%UpZivRvc@D1Kp3|-kKH;+D9AWv-H0piijDzs%|^Wx#dcatvnRVI=o{#
z$pv}A+Y_+yv4Ugy{7PPyDF#j=FF#LTb>8ab5EtMac=+LpA>-d`r`r-Z`6qTq%&m;_
zpPVh$PEY+=`NcEovB2Qb=(Lh5qsbiUebyAI@&=chI98ldCkF#Y=0rG$GJZL$x-74l
zzlsyCrJJ7iOx1$R63hw9Pey6zQ!ciTYRN8q^g#u$4xI~1l^G@XJdY54T6ae%`#8^R
zLtUBx&_Vog)sOZ*z+R$_-nEq1r$@i%xoMbNN#Xg*QRv_OIO{$V&wp^^VxA`j{7xe^
zN;*ENb$u#4F4yurcz<+qc_FiI-`@Is_`a+vC9edQF{l_mm`L;?d{aE5((wenOFr_u
zM_c3f$VuMnGqa?wR)Lf)#&5Q@BL%dXnq6U}off8jWPMW%yUSAZrS_9e*e@vAaH+Qr
zq9HRG@Ip0+FD{_ZAL1%}ck6A(CEXm^a@F#ipcUm$gwzG$HcI#R{O@gkBgmJ0B0A~{
zvBK#6!LC-kre_n<mg534Sah59ELo`KmryBBgAZRe+8VaVc|3BlyS2Y6ilr;jt{+(-
z)n=qFQ&`6F)oLoSPOEHa=T`3eR#oGCu$|$f2iIL~=>&7Suyrd{WdItyo&~o5a=qkd
zQ|We$>z<4@d&>rEnclHZST9&j>T%xhQ})t(trlP73Kz*dqn%-!{6FV1rO8tP$Fbjc
zLJuk3mmG_OkHws@f1j}YHl#LI|Li*vd-|L7dx<7z@?i!#*U@>kM^(#ar|s%?Or%=X
zCpCB?&u0Yl`;E+3xC)H+E88W%9aMRnC9KAq?hq15yTlzf@>9lSuGfenS<6Lk!jdL9
z(|%a($F~QFl+izK@)pbhGIa9AP5DPVRivL(yWY+bvP6=JTkMUazgs(#FH3K7Ui80Q
zMOaH3kU7jIVM)?#I!$WGyF@70(bTzHoMWW<jLz@MR_{opFSt=OIm@PtXH<XHH_9~k
zh<A0ykEJ9eXs*HN6C!W*Gr4smYb6i!&Hxd|hm%=?IJ749_XF&!4%Lw}YDKvYZK5}~
z*_x=&HG_Acp@lZ3w!%f~3G3<+A8w<F)oD9NCf^gU!&;8T*VQ88{J7ErZc92LweLF}
z@tJp+OgL09dcC&V73bxW;^_QEP$6zh=Ay6<+rApTp*<He?d^rVc?&Bky@A*N1`503
z`-MYo0=hfC4Bnq3a#WEMi@&=(lDJQml>XSN9#naIy<KL9%RMPE`bE)wgd}M$4!QII
zf&=LOl=(+3<j4WH)hh@stM=d!cNGS0X!NRi50~dh_Y`xYA^iJY=Qo!d)MWWn+Ec@w
z-c8CM-e|b=kTwK4HGA{leork}ciy<U%UO8gOZ|XdU$7i4hm<O9h9-25c-dlCmW(n@
z0>+Z<KY&Ds`=m;Am!AIblfF`!7tea|oCog1P|R0-6ReJfiJ`}I|6ucpSvKar09guQ
zB3|715C24pgNwN@Q~U?aL^LXjor!NSFSwZ)a9Nhww(_yjHd6<rn+7p~56AQlfF|w&
z6K>(unNWu_I`Ws10FIj3F%!OKLJ&b-01D<muoTCEI<uopw)=qfg8}`pV>~!47{br;
zUmpYTnF~P*m>KEQe`ow{($+amSPo2$<zWy=>W{<uzd*Z71j5bFBbnzvuMY+1uz^5D
zydaR|Uo}N14w{|-*3A*j0XQv$AaTe)OdpaPFtK3%F<^hdqQ!x`=3>A@3&fv>_VQg*
zb(|oO$8iuy>92;dQa~<V3fMc)97qv(Aqb%OhjGA5h%#q!TKg`l!43kU;2@CfUs4eu
z2ajf|CJt0I%)#xzfa?S}u!G?PxbS~QxkwO#SYQ7Cj5M=0^MHvm`onY(BoEy(Ww!he
D3yNgF

delta 3604
zcmY+Hdpy(MAICSh+=m%ri`>fG8<K@CmOH~-)<~kcrXh39T;_ha+;T6suo7aq<*wXP
zzM)8NsYIyUzLS1izsuwIJ&(ud{W|A)-j~n$@BLn>1#Z^@dC{h<Y{CElCnsPyJd^j9
z+;F%*7Qk36Ov6~LjL+3Wl@;(0#|i}&hWofG!!`ne1}uWiFu7+6k-0noK)3_|phM{f
z3sbyUl}W<ekl&rMZdwJIWR$@2J1IjU79Jt1>2t9fMs8r~sH>Z+Zb3wZ8xfzM&wgRU
z)LYdQR7>5~tFcwIOURtO-(nZ$+}zyEus=K3>A#2#Z)drF{Y+mw*g3tiJGK$_Y*)+j
z*QZQFpiemmJBo~0dM~K#^7cr>7o%CClk#g167FFYwz#&Gj7EO%z~8;m?AaHFyftVf
z?l+3?@eaTR2vnej*)VsG8&%I%!N#R4@fFg@)}1eY>F9S?9pYLN(T+|NW#{DT5@x;_
zSqJF8KXXS*hTasM?v2YNuXsAeWp7$Gd*r8lW3%F~;DuCU)Gnep5nS68`<uoEu7iQ3
zsVA^#FVRi8x)k&CsU8`&c@@{R#;#r}?g(@DiEpf(c?=Q~u^;51`tCw|O;FzcxSVgO
zJPkN+UhSgUh%4!5UjF+u<2=1Ad{k1bg8?To>`LV;ja$hun$Ez^<-dWwsh=O_Y`4l_
zU#iJO%c>YlUmi&C87@i4xzC*pDXh3g;>r=q0qLvg-%`Bp5bB0_6tqfjY#q*uR(S92
ze)I7L85`!!A=mbF-KchNWx@cWbV5m7kWWjkL3eVck*_ok?XFch)4Z-eNqyUbcdmKz
z#BW`zjXu9H_Xaitl6>yAs%kPR>Ax#m(Cl?%D-~ELb>})1>6sTAARU=a_M|tGnw#Y#
zIm`M28bSfy4$hN9W?qR+F6{L=ky1GeP+)%`TiBiYgWp6i9kvT&Hjj@<X!B*Yif-iS
z5fFu!b;=&-Xhq$>r@4e)o>t?PsJH5thdk=qCvO@Y;RJq2S2>PZ@3me$fv2&+apTqV
z+3>sd*~icP)Qowv4RtaFukf8A70f`If5?b0zHTr_AykCBGmW@G$1U+xn$dHkg8L^7
z{8yE<<3!l0aAIjHVL+@M%W5|V-f!&;4Nr6ZdctiT^GfBc-Rj$(Q!cx{5ZLrZG;fPS
z(N^g7*mt<NYqx5qlTG*9JgcT}sLvRq#5}g?((1_UMK6J_>+K)B;z1sy%1llWjaCD-
zpSR`KfH)-}c;h79ev8??mLCzP;%~8a0g<EivQvuI{G!YL<>S;Y^kYjxU9ooV5f<l_
z)nlaLyM<AXH!8oRxgvoCy#3`~VO2v8Iz$`pNZ1rfDcE-Wo%aKup8ahoRLNt%T!>nE
zaql29DMq``myp`qdW#es0Ep-Mfpf5waa|2@j?0g7@p7u{ghx&Z;LGD}*fw=8`Hb1K
zh8-7}D_u+t2IEGuXO^o~#9_&}U$Nvt9Ht#&-*CZG`J(nsO!Y@lN~(q*uEV_lO)#=|
zsnj(%G#-!N9`zmLB43Z~9CA`)UE?l-bRqY1e09qEbsJCnkZ^yG2R}BPGe6l7Cfpv6
z)|7UPD8I|!znwDf&>hBAD<5sqHt2arAKXR9#$G~t%lG80$HIziCqSQFoQ(tw3DlEM
zB$p#x!r7jOSsR>!i${LtLVQH_rfF=P%-D75DWpOJbOm?T>g!4u%3Z5^9bXEElb;-Q
zdy4Q5xzviDAr**C9bSLA*ekStel{8hnXOzT&Z?VyPYFyvrH5!f=_*m<Eq{CeZ`*Lw
zNj0#e^pKyZUd_BOWOv?`99T6FCzucE=xJUp8|_i3m2>njNuqE0J&ZMTPiPGqlO6TR
z`WYi~tUrcZuWa!+RHiQf)De{qznSlDlz{GP^S>S_ydhOBy8H|PeikZ7IZ((yAro|g
z_L)L<+s0TNT3!voc>EG`S^rCY@KZ@w6(sypzx&pi3vNlDP`Z=KJD6+!D<VJd+Pr$R
z;WD(v9&Xi5ffx7W(mIOZteugqYX*;$Y8p^^y5(IP8SLi~Pn8vV5b(~FM+6Z+cjSus
zc=5;No($59EzNMJ?$elX@P|ciy)1>YS>jzY``xhLn)l~~L*g`LYCEDgghkFNQnvkx
z32jSQ$cNtD{ckI&<aQkczNFL(P7clz=A(gzx!bHnJC_B{#WQDBYlx2B>0CTNHZE%*
zJdvKd-3IKt1D2ecy-STK(@k2QhBekO4a<(&lOyd|20XmYW$LLq{|*o_RxGKswx8_Q
zmcO9-G%smpc|S@%1imLheRWm)^gAx16Dnn+dD5rVG>Di;H{9{}8(kZRUJTzoZQAY|
zGqV&ZGqYhll5Mp^@VzHNTe>I{xM(G}A(vC`=3m7Hli@q&s*`LHJ#MMC0PKf-o)j@x
z>mxn(ts`{`Va&BF2`L|=qI?|BZcX<%QQ1(q2$2U+y+nb8kRna%w+o}ZHe*Stug`5B
z9!yWeSf1Gx0%Z*CsE^ynSnp6;nuy=k=W8^Cy*l!NG%5@q+M9Ry<2~fPEcE$0w!I29
zyyrNS+I>x}PljDH`cwV%-qA5xL|ltV3aL1xb5}c;Z|Z7Df$}$?retSXo@Z6tTJdxC
z)`|eWaqtNK;e(1cp?6sel#Q%6<VM4%uLm~t*x@tlb>OKM@t$|FuJ}cG*;&H}+4rBA
zYu(7k`OGYJIu18|zS2@eP&Dzh%fL?@<sP;2R4ICq2V>(-#}U(yB^qz<lXI3I&X9;S
zWw@niL|AM6#VycBHlK+)wwO@kk>;?5{4J7-m_Isl@vkc@25F>b{4#E#pIB^iFI$5&
zEuf>8vPR9j#1qq$(8F!}pvl4Px$9xy5-VnG946hZ=*i{sVp>0tSE?0%Q%<=c82Y_M
zJMzu>nzGBWcGVa|#Q=S;R9wLK8d7$`(P)7JvNc$w0XSrG8EeeDHc@LhwX-G#_n?|g
zJh+zy-;48T*0x#JRZeoo9`2w&pY3^VykJts$11v$S3W!ODM9cOy9rP@0Nf;y91IcC
z*B^4{MC>cf<t*eL9NM>^%5TUk;qj)cQFqvekaWU3b+boQDl%;%-Nj;^l;oO6x}%V^
z>3vw3>UnS!#WmSj&N0$`NvTWzATFr)jK!XE#F6LO<B`j&yV@_Hhh1NV=0c)MNPQ*#
zI>Jtg0O7eaPw&wr7o?ktyBfyOfz?_V(aVs_Fr7BgwuFh-ryS_uQ;EvaA|muvgpd5$
zXr9OjAJxV5WSR@S2=^|X<V5}|7$G1Uud+V)5mn72_jjgJ&k)-3<a<z?nBi@H?7;JN
z525l786#(9WBa%(IJ!V3Pp9?V*Vy*c^zUg)HBkNT1(;rZkTHLd%NYs3a>UQh?Av=?
zu1~k)xhGE#ZCmlPW%NzZI22Y+6yFZE*6TkE@++DZwS25veC;=CmL#>?Z?l%{p2+*s
zg{Vn5j?@@%d7D}>9TVy}(!JWZPa}VDOmd>7=&QQx*{kKMxCy%V3emWAf?SP@^KEDn
z@6U3|VdJ`m%#I;mD-F7iDxGC5(0nnEU2}iIe<gZ&q2tO0sYI#a2o}<SvluTALG>`{
z*<)YR{I4IjKpZdkX(aLAeb2<=UJ{n*HxJ^!6ld4whHPg!2+C$ytVG?)N=RaCtktti
z6WBOy=Q3xjg)3wMO@bAwjo*`^x!G;Gt+`Ke=O}of>)DlvgTvae{{5+Wn<*cA0_^vD
zbg|(l!GVvVKAVX0l3lXSI%o;c(OVcXi|qr?bg+mi%5oed2}EjJ9Bd^x+)k2+i&uLl
znVx*JM3fdHzV_mgUfRu;1e?Gzj<hdJ9>G#2cD2*K^Or1Q3Z@?xV25#Pk}da=riKX;
z(reE`XS)-LC+><}iTN^FylagVq~9&@G^+w+?|-oydMT4qAibr}`$2Z*wC5z(*{P@Z
zK>FdOAK9*a<|TDFOvRVz$-`h*Jq{BR$^H{^TOI8IlJUET?VF{%b{YAnYTLyd3845i
zw{s@vN4b9-9SKv3#(b;w%dE2wzZSf{kcDusUtaE;qRUlXNh;C3P<_(hz{}!f5eJ3?
zbrc_U;je2iSUHE*=vc{!<KdQBqz4*%7I)AU8ODf{ve&glCq@d(`tr&`nj*)tYAc!w
z?OxcDC(*h^GRfY8U+v7k3X}$T>Y~(lpZ$M_-*^IqVPkanl-pngKeM?f@|(p3GlqdD
zoRlu{V~w-mbXI2be?t`YN1MbK*qP^CsX7*>qGZhf@H_HcJj`>6dLodia0Ho?srASP
zUZ%Pk!I@<mGt73Fag+qhAf^D(%+Z2!3VoU>-e_H>)S%7y{xN4zSgml(i>p>p7C49^
z2o$E6f{sz@t(d7PoeUZYW>7Gt6wJntHU+W>v;KF~p#ZI+EKmM@n<2_YnFI4E{?o%B
zo3p`f!OD2D-4Osl{?9P<Z&Mycp!iv9GHX;bvb2c*sgWUigfee^lu79fdROXy6k#LA
zq~<nI79*MeP!J{6=8tbRgXYTrq2>rMWsPxU_;O>QEcev^M=db2lFXMof7_ST;{*T@
z5C8!Fk3UkTWMa-RBS#pKjmSTdzcA`dqGk(aaX0!8fl!FHLQI;(pcJz|w9QtIBhiwX
F?q8qXb&vo6

diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml
index a78d87c..961d957 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/etc/nevis/k8s-npi-92e282d1dc2b69d9e4f91fc0.yaml
@@ -46,7 +46,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-a6580914174774342b195a78256c5958db82987f"
+    tag: "r-3357c2abd09c33f401a7d1a0d44c03d1e5b5c5e0"
     dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi"
     credentials: "git-credentials"
   keystores:
diff --git a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/var/opt/nevisproxy/default/host-klp.agov-w.azure.adnovum.net/WEB-INF/web.xml b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/var/opt/nevisproxy/default/host-klp.agov-w.azure.adnovum.net/WEB-INF/web.xml
index d2286f4..55f3109 100644
--- a/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/var/opt/nevisproxy/default/host-klp.agov-w.azure.adnovum.net/WEB-INF/web.xml
+++ b/DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/npi/var/opt/nevisproxy/default/host-klp.agov-w.azure.adnovum.net/WEB-INF/web.xml
@@ -6,66 +6,6 @@
         <param-name>SectokenVerifierCert</param-name>
         <param-value>/var/opt/keys/trust/npi-mockrelam-signer-trust/truststore.pem</param-value>
     </context-param>
-    <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-    <filter>
-        <filter-name>AuthenticationService_MockRelam</filter-name>
-        <filter-class>ch::nevis::isiweb4::filter::auth::IdentityCreationFilter</filter-class>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>AuthenticationServlet</param-name>
-            <param-value>Connector_MockRelam</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>BodyReadSize</param-name>
-            <param-value>32768</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>EntryPointID</param-name>
-            <param-value>klp.agov-w.azure.adnovum.net</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>InactiveInterval</param-name>
-            <param-value>7200</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>InterceptionRedirect</param-name>
-            <param-value>never</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>LoginRendererServlet</param-name>
-            <param-value>LoginRenderer_nli</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>Realm</param-name>
-            <param-value>MockRelam</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>RecheckAuthentication</param-name>
-            <param-value>On</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>RenewIdentification</param-name>
-            <param-value>true</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>StateKey</param-name>
-            <param-value>MockRelam</param-value>
-        </init-param>
-        <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-        <init-param>
-            <param-name>StoreInterceptedRequest</param-name>
-            <param-value>false</param-value>
-        </init-param>
-    </filter>
     <!-- source: pattern://8523f0587aa8cfa7008f8171, pattern://92e282d1dc2b69d9e4f91fc0 -->
     <filter>
         <filter-name>Authentication_MockRelam</filter-name>
@@ -139,33 +79,6 @@
             </param-value>
         </init-param>
     </filter>
-    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-    <filter>
-        <filter-name>OAuth_Preflighted_CORS_New OAuth 2.0 Authorization Server / OpenID Provider</filter-name>
-        <filter-class>ch::nevis::isiweb4::filter::lua::LuaFilter</filter-class>
-        <!-- source: pattern://f03382307f2e35b70d181f0e -->
-        <init-param>
-            <param-name>Script</param-name>
-            <param-value>
-                function inputHeader(request, response)
-                    response:setHeader("Access-Control-Allow-Origin", "*")
-                    response:setHeader("Access-Control-Allow-Credentials", "true")
-                    response:setHeader("Access-Control-Allow-Methods", "GET, POST, PUT, OPTIONS")
-                    response:setHeader("Access-Control-Allow-Headers", "Authorization")
-                    response:setHeader("Access-Control-Expose-Headers", "*")
-                    response:setHeader("Access-Control-Max-Age", "600")                           
-                    if request:getMethod() == "OPTIONS" then
-                        response:send(204)
-                    end
-                end
-            </param-value>
-        </init-param>
-        <!-- source: pattern://f03382307f2e35b70d181f0e -->
-        <init-param>
-            <param-name>Script.InputHeaderFunctionName</param-name>
-            <param-value>inputHeader</param-value>
-        </init-param>
-    </filter>
     <!-- source: pattern://3b41ca4ca1c4028117d16f5b -->
     <filter>
         <filter-name>ResponseHeader_Default</filter-name>
@@ -239,43 +152,13 @@
     <filter-mapping>
         <filter-name>SessionHandler_MockRelam</filter-name>
         <url-pattern>/*</url-pattern>
-        <exclude-url-regex>^/asdf/.*$|^/errorpages.*$|^/favicon.ico$|^/hallo.txt$|^/index.html$|^/nevislogrend/.*$|^/qwert/.*$|^/resources.*$</exclude-url-regex>
-    </filter-mapping>
-    <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-    <filter-mapping>
-        <filter-name>SessionHandler_MockRelam</filter-name>
-        <url-pattern>/asdf/*</url-pattern>
-    </filter-mapping>
-    <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-    <filter-mapping>
-        <filter-name>SessionHandler_MockRelam</filter-name>
-        <url-pattern>/qwert/*</url-pattern>
-    </filter-mapping>
-    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-    <filter-mapping>
-        <filter-name>OAuth_Preflighted_CORS_New OAuth 2.0 Authorization Server / OpenID Provider</filter-name>
-        <url-pattern>/asdf/*</url-pattern>
-    </filter-mapping>
-    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-    <filter-mapping>
-        <filter-name>OAuth_Preflighted_CORS_New OAuth 2.0 Authorization Server / OpenID Provider</filter-name>
-        <url-pattern>/qwert/*</url-pattern>
+        <exclude-url-regex>^/errorpages.*$|^/favicon.ico$|^/hallo.txt$|^/index.html$|^/nevislogrend/.*$|^/resources.*$</exclude-url-regex>
     </filter-mapping>
     <!-- source: pattern://8523f0587aa8cfa7008f8171, pattern://92e282d1dc2b69d9e4f91fc0 -->
     <filter-mapping>
         <filter-name>Authentication_MockRelam</filter-name>
         <url-pattern>/*</url-pattern>
-        <exclude-url-regex>^/asdf/.*$|^/errorpages.*$|^/favicon.ico$|^/hallo.txt$|^/index.html$|^/nevislogrend/.*$|^/qwert/.*$|^/resources.*$</exclude-url-regex>
-    </filter-mapping>
-    <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-    <filter-mapping>
-        <filter-name>AuthenticationService_MockRelam</filter-name>
-        <url-pattern>/asdf/*</url-pattern>
-    </filter-mapping>
-    <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
-    <filter-mapping>
-        <filter-name>AuthenticationService_MockRelam</filter-name>
-        <url-pattern>/qwert/*</url-pattern>
+        <exclude-url-regex>^/errorpages.*$|^/favicon.ico$|^/hallo.txt$|^/index.html$|^/nevislogrend/.*$|^/resources.*$</exclude-url-regex>
     </filter-mapping>
     <!-- source: pattern://8523f0587aa8cfa7008f8171 -->
     <listener>
@@ -332,12 +215,6 @@
             <param-value>/var/opt/keys/own/npi-mockrelam-identity/key.pem</param-value>
         </init-param>
     </servlet>
-    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-    <servlet>
-        <servlet-name>Hosting_Default</servlet-name>
-        <!-- source: pattern://f03382307f2e35b70d181f0e -->
-        <servlet-class>ch::nevis::isiweb4::servlet::defaults::DefaultServlet</servlet-class>
-    </servlet>
     <!-- source: pattern://8a4997cddc02803b920c8ee9 -->
     <servlet>
         <servlet-name>Hosting_New_Hosting_Service</servlet-name>
@@ -417,26 +294,20 @@
             <param-value>/nevislogrend</param-value>
         </init-param>
     </servlet>
+    <servlet>
+        <servlet-name>Hosting_Default</servlet-name>
+        <servlet-class>ch::nevis::isiweb4::servlet::defaults::DefaultServlet</servlet-class>
+    </servlet>
     <!-- source: pattern://8a4997cddc02803b920c8ee9 -->
     <servlet-mapping>
         <servlet-name>Hosting_New_Hosting_Service</servlet-name>
         <url-pattern>/*</url-pattern>
     </servlet-mapping>
-    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-    <servlet-mapping>
-        <servlet-name>Hosting_Default</servlet-name>
-        <url-pattern>/asdf/*</url-pattern>
-    </servlet-mapping>
     <!-- source: pattern://7dc20659babc66c4401ce0dd -->
     <servlet-mapping>
         <servlet-name>NevisLogrendConnector_nli</servlet-name>
         <url-pattern>/nevislogrend/*</url-pattern>
     </servlet-mapping>
-    <!-- source: pattern://f03382307f2e35b70d181f0e -->
-    <servlet-mapping>
-        <servlet-name>Hosting_Default</servlet-name>
-        <url-pattern>/qwert/*</url-pattern>
-    </servlet-mapping>
     <servlet-mapping>
         <servlet-name>Hosting_Default</servlet-name>
         <url-pattern>/index.html</url-pattern>