new configuration version

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/etc/nevis/k8s-nai-6ec6739e824c8e56d9633622.yaml

@@ -45,7 +45,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-b7ab01834be6c4b3111c46b4d3b2629e1bbaf759"
+    tag: "r-92029afe3699cc6fa66d24bbc9140b71c45247f1"
     dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai"
     credentials: "git-credentials"
   keystores:

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/own/tokensigner/cert.pem

@@ -0,0 +1,19 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/own/tokensigner/key.pem

@@ -0,0 +1,30 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----
+MIIFKzBVBgkqhkiG9w0BBQ0wSDAnBgkqhkiG9w0BBQwwGgQU1w+0ZNamq3X91Bur
+d/pQZH7Yq+wCAggAMB0GCWCGSAFlAwQBKgQQ+NvXoFb05UDnOc75yNr/DQSCBNBD
+m3o2GoHnMupzBuc4G7KdllLa2iaP0zkbK5SrJ2QlBWzei3K9PfyWsCSiGDoEL1fG
+X8sjFmWDXiKg8z2KjZ8SAIVliMusz318hIjSkv7MOtcEKZ7uZ3C9e/AHl2CY55O7
+OroDbvQfiexVyKS49vd8lex9DFZQ6nrhK7sQoygDeo469NoCJKu4s1Q657L8aeoQ
+RSYBgtO3tThXIHqrW7FhuYGy8GSi8nI5axGTE7tfo3NqQo4Ap44a9W+vP8NsWUm+
+WAyoErFTWxiuzXDU8LV2ziN4IZLsMZ0dgJjElIY6lAopr9YtjmKV+3IofYcy9BDa
+q1WDfwqBBdoKdbMGLvXs8MBTPWbTinbiLGjNfRehtTdQ6zoVBYdxbPQBbw39vH2q
+k2eLYsWuJmWQHfd3vCEc1B5kAgdAIiPSKvY5wRqb2cg1V/MjQRVZy7wHUBcYVx14
+aXPqOgvkSLXYN3nt+X3PsubU5l/aOM9KCI2gT8j4AtvBjgVWzKglyVe5l0T8FGQ4
+KMykvMwFQ2x6g63GyF+xfIM9XMVo8EJ7XNafz18CJ2s7HZ7Zv6twM2D2+xTaa9iq
+CTcShTPVOLmnLfz6/3I7KKFMKOtm05rZTW7P3dOwcO8symm8qsfz5Kb4FC0H1Kmj
+MAPO3vAhCIkHOsvrQiFP5RiIk2C+Ea1ygmSl5L3VC2eVA7Hy5FCDiZg7qJAWZqCH
+ik/cttmzTKy44x2BvrPIKy5l37uGHFcRG/AgIY8hXo+1LUjeKpjjE9hs6MXSqyZh
+zTkWFOXUkWFeBHrZqR45WO+ByVx7qD55pQmo2YMQ1q7fzM3VCzpO1OD1HAdhGWRu
+3cin9Asj3+0X4SUknf/ZrVPGOdyj5Lj09ymL05hwYsiuAtWX3hH4I4ZYB6miJ3+F
+rOnIPed/exXuCsq/H0+WWLilwDxO7VOamO3ggDKm0LebwTx+N8HQaKVXl7HYh5F8
+Jmpp/bQrFswa42874GaZMJimyQx66SDsPTULjlk+0Ydc2gbWqvIbzBzerxlIm9nR
+vWsx+V4+3Zvoom5Vwuo3P7Su3DAY142pn6cmqn77TSaMapWLK23tk24D7wUt6ROY
+xRPfVuSgQ+u3xxDKmKLfFvdFbVx2YNmd174fQJFvr5cpwpMg/uqvnXdw6YwJugmd
+hGtsodhd3aoX/BjTxkur2Aw4GFpXQYCdeioVFaOIPZDsmOokNcdVw45qC8xRn2Bx
+VcZ24opYyGtnfl5DxOd2tl1dsKKxoVR4nWphHED//08ZfcUWaudeyIMfNJm790s7
+8+0smUkQpd2f1Xc3YNBKwLN+U6hUme9DvSBoF6bQn/LEBGOSrE546W/Refytg907
+SdHN1Qv5uDpFH7iIr44o/uIbwg0S1l/uLGNUR2o+ORt5SXh4fY6spjgCZc+UleUU
+hjiGE8Nqh5fSvpnud7p2KPSUhuKcybQbKmn/mTBbP2GNaL2nHHXGRHO7MXGhZpHB
+njmd8DyE+SOBtQTB+aLYlPGkRTNbFkJdyzc9gMCUJCEQs9CNrj/VGy4ZM41Khi3z
+ZG2hJNjINqaZ5mzDJCdAHuNiwsvdhNqYJVVgPXl3ZkjcBbarZuAzxSih7FlEGDRs
+43vyCSLp33X5o2gLVf9FsFRZgQxwZnJvaWl86OUWeA==
+-----END ENCRYPTED PRIVATE KEY-----

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/own/tokensigner/keypass

@@ -0,0 +1,2 @@
+#!/bin/bash
+echo '09I1B4lsP4+KQB8dB3AeEyU4RawLttIo55+0EWPPh0I='

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/keys/own/tokensigner/keystore.pem

@@ -0,0 +1,50 @@
+-----BEGIN ENCRYPTED PRIVATE KEY-----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+-----END ENCRYPTED PRIVATE KEY-----
+
+-----BEGIN CERTIFICATE-----
+MIIDAzCCAesCFFJeJMyjfQq6To7dqRpfc5oDX//oMA0GCSqGSIb3DQEBCwUAMD4x
+CzAJBgNVBAYTAkNIMQ0wCwYDVQQHDARCZXJuMRAwDgYDVQQKDAdBZG5vdnVtMQ4w
+DAYDVQQDDAVjb3NzYTAeFw0yNDExMDcxMzA3NTJaFw0yNTExMDcxMzA3NTJaMD4x
+CzAJBgNVBAYTAkNIMQ0wCwYDVQQHDARCZXJuMRAwDgYDVQQKDAdBZG5vdnVtMQ4w
+DAYDVQQDDAVjb3NzYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOWq
+kbFj7UAPDlzgqua7/ws43sIswHuhA400R3jKkHcvTC/QduDuDWoTeYkiQdv8lo7k
+PVQA7tP//Pe+2O2wS0spNMrlw0Jv0MWeGlN1Jv5PH9TuOnL1nrd6w2OCKClnR7t3
+xWZUEd3t4AtM/69VKNwSvVADt5yU6tifj1vCiE4uPoDkI8TNbT92aL2aDnq+VVRL
+Eki5SpQ6ZGUlZGFGhMMOoA9efnTGqrJBsP3m50SAEUqTUpo1aH6IaJXorf8+zzEE
+zWD4A13b0kvz75A9qh1rReYZgr1sQIfWwzoP76HQwpdEQsjnAteJi1SV7rSK/ekQ
++iuJ9ql2Mjpve8vsWrsCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAE4GJgtYJRI3r
+hAWb4ptd6ngPfvW6pNb8Q9do/k0yVmAzckibRVSgmCoTeFnArn56NB2nrZlpnncG
+IYB5uVI7jiEHCTZRXG7JbI/MHiwkq5P+Mf+OlvJWgiWkKFteJS46GBVo6JFVAIbv
+H/UEflHbeTbaSYsoH0Xv54S9IvIuv/IA7KooFRmuzRb10hBBV0EUdrGfdBHmSpQf
+CiSMPOTqu3nzcms4O4DLHnW2kVRyrd/G0Lkg/FUGsN4ZHyYGSC36gUOFqubGy9GV
+HJqM6758pE0Myk7LMFGd8MrlnYTeWgBnRlAmfzMVMWZaAaRGGZ5SwQrZmenVB1ne
+Ix41vfiHmA==
+-----END CERTIFICATE-----

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/LitDict.properties

@@ -3,6 +3,7 @@ accept.button.label=Accept
 cancel.button.label=Cancel
 continue.button.label=Continue
 deputy.profile.label=(Deputy Profile)
+error.login.test.1=Your last login attempt failed. Please check your input.
 error.saml.failed=Please close your browser and try again.
 error_1=Please check your input.
 error_10=Please select the correct user account.
@@ -24,6 +25,7 @@ error_9=Session take over failed.
 error_97=You are not authorized to access this resource.
 error_98=Your account has been locked.
 error_99=System problems. Please try later.
+info.login.test=Test Authentication for System Setup Verification (Password = UserID)
 info.logout.confirmation=Please confirm that you want to log out.
 info.logout.reminder=Your session on this application has expired. Try again with a login.
 info.oauth.consent=Do you want to authorise this application to access your data?
@@ -69,9 +71,12 @@ policyInfo.regex.nonLetter=▪ must contain at least {0} non-letter characte
 policyInfo.regex.numeric=▪ must contain at least {0} numeric characters.
 policyInfo.regex.upper=▪ must contain at least {0} upper case characters.
 policyInfo.title=The password has to comply with the following password policy:
+prompt.password=Password
+prompt.userid=User-ID
 reject.button.label=Deny
 submit.button.label=Submit
 tan.sent=Please enter the security code which has been sent to your mobile phone.
+title.login.test=Test Authentication
 title.logout=Logout
 title.logout.confirmation=Logout
 title.logout.reminder=Logout

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/LitDict_de.properties

@@ -3,6 +3,7 @@ accept.button.label=Akzeptieren
 cancel.button.label=Abbrechen
 continue.button.label=Weiter
 deputy.profile.label=(Profil Stellvertreter)
+error.login.test.1=Ihr letzter Login ist fehlgeschlagen. Bitte überprüfen Sie Ihre Eingabe.
 error.saml.failed=Bitte schliessen Sie Ihren Browser und versuchen Sie es erneut.
 error_1=Bitte überprüfen Sie Ihre Eingabe.
 error_10=Bitte wählen Sie den gewünschten Benutzer.
@@ -24,6 +25,7 @@ error_9=Die SSO-Session konnte nicht übernommen werden.
 error_97=Sie verfügen nicht über die für den Zugriff auf diese Ressource benötigte Berechtigung.
 error_98=Ihr Konto ist gesperrt.
 error_99=Systemfehler. Bitte versuchen Sie es später.
+info.login.test=Test-Authentisierung zur System-Installations-Verifikation (Passwort = Benutzername)
 info.logout.confirmation=Bitte bestätigen Sie, dass Sie sich abmelden möchten.
 info.logout.reminder=Ihre Session ist auf dieser Applikation abgelaufen. Versuchen Sie es nochmals mit einem Login.
 info.oauth.consent=Wollen Sie der Anwendung den Zugriff erlauben?
@@ -69,9 +71,12 @@ policyInfo.regex.nonLetter=▪ muss mindestens {0} Zeichen enthalten, die ke
 policyInfo.regex.numeric=▪ muss mindestens {0} numerische Zeichen enthalten.
 policyInfo.regex.upper=▪ muss mindestens {0} Grossbuchstaben enthalten.
 policyInfo.title=Das Passwort muss den folgenden Passwort-Richtlinien entsprechen:
+prompt.password=Passwort
+prompt.userid=Benutzer-ID
 reject.button.label=Ablehnen
 submit.button.label=Senden
 tan.sent=Bitte erfassen Sie den Sicherheitscode, welcher an Ihr Mobiltelefon gesendet wurde.
+title.login.test=Test-Authentisierung
 title.logout=Logout
 title.logout.confirmation=Logout
 title.logout.reminder=Logout

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/LitDict_en.properties

@@ -3,6 +3,7 @@ accept.button.label=Accept
 cancel.button.label=Cancel
 continue.button.label=Continue
 deputy.profile.label=(Deputy Profile)
+error.login.test.1=Your last login attempt failed. Please check your input.
 error.saml.failed=Please close your browser and try again.
 error_1=Please check your input.
 error_10=Please select the correct user account.
@@ -24,6 +25,7 @@ error_9=Session take over failed.
 error_97=You are not authorized to access this resource.
 error_98=Your account has been locked.
 error_99=System problems. Please try later.
+info.login.test=Test Authentication for System Setup Verification (Password = UserID)
 info.logout.confirmation=Please confirm that you want to log out.
 info.logout.reminder=Your session on this application has expired. Try again with a login.
 info.oauth.consent=Do you want to authorise this application to access your data?
@@ -69,9 +71,12 @@ policyInfo.regex.nonLetter=▪ must contain at least {0} non-letter characte
 policyInfo.regex.numeric=▪ must contain at least {0} numeric characters.
 policyInfo.regex.upper=▪ must contain at least {0} upper case characters.
 policyInfo.title=The password has to comply with the following password policy:
+prompt.password=Password
+prompt.userid=User-ID
 reject.button.label=Deny
 submit.button.label=Submit
 tan.sent=Please enter the security code which has been sent to your mobile phone.
+title.login.test=Test Authentication
 title.logout=Logout
 title.logout.confirmation=Logout
 title.logout.reminder=Logout

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/LitDict_fr.properties

@@ -3,6 +3,7 @@ accept.button.label=Accepter
 cancel.button.label=Abandonner
 continue.button.label=Continuer
 deputy.profile.label=(Profil du suppléant)
+error.login.test.1=Login échoué. Veuillez vérifier vos données, s.v.p.
 error.saml.failed=Fermez votre navigateur et r;eacute;essayez.
 error_1=Veuillez vérifier vos données, s.v.p.
 error_10=Choisissez votre compte.
@@ -24,6 +25,7 @@ error_9=Il n'est pas possible de transmettre la session.
 error_97=Vous n'avez pas les autorisations nécessaires pour accéder à cette ressource.
 error_98=Votre compte a été bloqué.
 error_99=Problème technique. Veuillez essayer plus tard, s.v.p.
+info.login.test=Verification d'installation (mot de passe = nom d'utilisateur)
 info.logout.confirmation=Veuillez confirmer que vous souhaitez vous déconnecter.
 info.logout.reminder=Votre session sur cette application a expirée. Essayez encore avec un login.
 info.oauth.consent=Voulez-vous autoriser l'application?
@@ -69,9 +71,12 @@ policyInfo.regex.nonLetter=▪ doit contenir au moins {0} caractères
 policyInfo.regex.numeric=▪ doit comprendre au minimum {0} caractères numériques.
 policyInfo.regex.upper=▪ doit contenir au moins {0} caractère(s) majuscule(s).
 policyInfo.title=Le mot de passe doit respecter les règles suivantes:
+prompt.password=Mot de passe
+prompt.userid=ID de l'utilisateur
 reject.button.label=Refuser
 submit.button.label=Envoyer
 tan.sent=Veuillez saisir le code de sécurité que vous avez reçu au votre téléphone mobile.
+title.login.test=Verification d'installation
 title.logout=Logout
 title.logout.confirmation=Logout
 title.logout.reminder=Logout

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/LitDict_it.properties

@@ -3,6 +3,7 @@ accept.button.label=Accettare
 cancel.button.label=Abortire
 continue.button.label=Continua
 deputy.profile.label=(profilo del delegato)
+error.login.test.1=Login non riuscito. Verificare i dati immessi.
 error.saml.failed=Chiudi il browser e riprova.
 error_1=Verificare i dati immessi.
 error_10=Per favore selezionare il conto utente corretto.
@@ -24,6 +25,7 @@ error_9=La sessione non può essere ripresa.
 error_97=Non si dispone delle autorizzazioni necessarie per accedere a questa risorsa.
 error_98=L'account è stato bloccato.
 error_99=Errore di sistema. Riprovare.
+info.login.test=Test di autenticazione per il sistema di verifica dell'installazione (password = user ID)
 info.logout.confirmation=Si prega di confermare che si desidera disconnettersi.
 info.logout.reminder=La sessione su questa applicazione è scaduta. Prova ancora con un login.
 info.oauth.consent=Vuoi consentire all'applicazione?
@@ -69,9 +71,12 @@ policyInfo.regex.nonLetter=▪ non può contenere più di {0} nu
 policyInfo.regex.numeric=▪ deve contenere un minimo di {0} carattere/i numerico/i.
 policyInfo.regex.upper=▪ deve conenere almeno {0} carattere/i maiuscolo/i.
 policyInfo.title=La password deve rispettare le seguenti direttive:
+prompt.password=Password
+prompt.userid=Nome utente
 reject.button.label=Rifiuti
 submit.button.label=Continua
 tan.sent=Inserisci il codice di sicurezza che è stato inviato al tuo telefono cellulare.
+title.login.test=Test di autenticazione
 title.logout=Logout
 title.logout.confirmation=Logout
 title.logout.reminder=Logout

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/esauth4.xml

@@ -37,6 +37,11 @@
             <!-- source: pattern://6ec6739e824c8e56d9633622 -->
             <KeyObject name="DefaultSignerTrust" certificate="/var/opt/keys/trust/nai-default-default-signer-trust/truststore.jks"/>
         </KeyStore>
+        <!-- source: pattern://d9ea344685ab4a9bb0e1e3e7 -->
+        <KeyStore name="JwtToken">
+            <!-- source: pattern://d9ea344685ab4a9bb0e1e3e7 -->
+            <KeyObject name="tokensigner" certificate="/var/opt/keys/own/tokensigner/cert.pem" privateKey="/var/opt/keys/own/tokensigner/keystore.jks" passPhrase="pipe:///var/opt/keys/own/tokensigner/keypass"/>
+        </KeyStore>
     </SessionCoordinator>
     <!-- source: pattern://6ec6739e824c8e56d9633622 -->
     <LocalOutOfContextDataStore reaperPeriod="60"/>
@@ -98,17 +103,17 @@
         </AuthState>
         <AuthState name="cossa_realm_AuthorizationServer" class="ch.nevis.esauth.auth.states.oauth2.AuthorizationServer" final="false" resumeState="true">
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
-            <ResultCond name="authenticate:valid-authorization-request" next="cossa_realm_Prepare_Done"/>
+            <ResultCond name="authenticate:valid-authorization-request" next="cossa_realm_New_Test_Login"/>
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
-            <ResultCond name="invalid-authorization-request" next="cossa_realm_Prepare_Done"/>
+            <ResultCond name="invalid-authorization-request" next="cossa_realm_New_Test_Login"/>
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
-            <ResultCond name="invalid-client" next="cossa_realm_Prepare_Done"/>
+            <ResultCond name="invalid-client" next="cossa_realm_JwtToken"/>
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
-            <ResultCond name="invalid-redirect-uri" next="cossa_realm_Prepare_Done"/>
+            <ResultCond name="invalid-redirect-uri" next="cossa_realm_New_Test_Login"/>
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
-            <ResultCond name="invalid-token-request" next="cossa_realm_Prepare_Done"/>
+            <ResultCond name="invalid-token-request" next="cossa_realm_New_Test_Login"/>
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
-            <ResultCond name="stepup:valid-authorization-request" next="cossa_realm_Prepare_Done"/>
+            <ResultCond name="stepup:valid-authorization-request" next="cossa_realm_New_Test_Login"/>
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
             <property name="keystoreref" value="JwtToken"/>
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
@@ -194,21 +199,61 @@
             <!-- source: pattern://e02a36447ce2d3c66d8d81c0 -->
             <property name="client.test.grantTypes" value="implicit"/>
         </AuthState>
+        <AuthState name="cossa_realm_New_Test_Login" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false">
+            <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+            <ResultCond name="ok" next="cossa_realm_Prepare_Done" authLevel="1"/>
+            <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+            <Response value="AUTH_CONTINUE">
+                <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+                <Gui name="Login" label="title.login.test">
+                    <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+                    <GuiElem name="lasterror" type="error" label="${notes:lasterrorinfo}" value="${notes:lasterror}"/>
+                    <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+                    <GuiElem name="info" type="info" label="info.login.test"/>
+                    <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+                    <GuiElem name="isiwebuserid" type="text" label="prompt.userid" value="${notes:loginid}" optional="true"/>
+                    <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+                    <GuiElem name="isiwebpasswd" type="pw-text" label="prompt.password" optional="true"/>
+                    <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+                    <GuiElem name="submit" type="submit" label="submit.button.label" value="submit"/>
+                </Gui>
+            </Response>
+            <!-- source: pattern://635e4d617af6818edc9ae7c9 -->
+            <property name="script" value="file:///var/opt/nevisauth/default/conf/new_test_login.groovy"/>
+        </AuthState>
+        <AuthState name="cossa_realm_JwtToken" class="ch.nevis.esauth.auth.states.jwt.JWTToken" final="false" resumeState="true">
+            <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
+            <ResultCond name="ok" next="cossa_realm_Prepare_Done"/>
+            <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
+            <Response value="AUTH_ERROR"/>
+            <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
+            <property name="out.audience" value="https://www.adnovum.ch"/>
+            <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
+            <property name="out.issuer" value="https://my.nevis.server"/>
+            <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
+            <property name="out.time_to_live" value="86400"/>
+            <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
+            <property name="token.algorithm" value="RS256"/>
+            <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
+            <property name="keystoreref" value="JwtToken"/>
+            <!-- source: pattern://a1e5d0192e082e689465a0c9 -->
+            <property name="keyobjectref" value="tokensigner"/>
+        </AuthState>
         <AuthState name="cossa_realm_Prepare_Done" class="ch.nevis.esauth.auth.states.scripting.ScriptState" final="false">
-            <!-- source: pattern://e02a36447ce2d3c66d8d81c0, pattern://b67f81a971e4c08aa79040a2 -->
+            <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
             <ResultCond name="default" next="cossa_realm_Auth_Done"/>
-            <!-- source: pattern://e02a36447ce2d3c66d8d81c0, pattern://b67f81a971e4c08aa79040a2 -->
+            <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
             <Response value="AUTH_DONE">
-                <!-- source: pattern://e02a36447ce2d3c66d8d81c0, pattern://b67f81a971e4c08aa79040a2 -->
+                <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
                 <Gui name="ContinueResponse"/>
             </Response>
-            <!-- source: pattern://e02a36447ce2d3c66d8d81c0, pattern://b67f81a971e4c08aa79040a2 -->
+            <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
             <property name="script" value="file:///var/opt/nevisauth/default/conf/prepare_done.groovy"/>
         </AuthState>
         <AuthState name="cossa_realm_Auth_Done" class="ch.nevis.esauth.auth.states.standard.AuthDone" final="false">
-            <!-- source: pattern://e02a36447ce2d3c66d8d81c0, pattern://b67f81a971e4c08aa79040a2 -->
+            <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
             <Response value="AUTH_DONE">
-                <!-- source: pattern://e02a36447ce2d3c66d8d81c0, pattern://b67f81a971e4c08aa79040a2 -->
+                <!-- source: pattern://b67f81a971e4c08aa79040a2 -->
                 <Gui name="ContinueResponse"/>
             </Response>
         </AuthState>

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nai/var/opt/nevisauth/default/conf/new_test_login.groovy

@@ -0,0 +1,20 @@
+def uid = inargs.isiwebuserid
+if (uid == null) {
+    return // missing input
+}
+notes['loginid'] = uid // remember
+
+def pwd = inargs.isiwebpasswd
+if (pwd == null) {
+    return // missing input
+}
+
+if (uid == pwd) {
+    response.setLoginId(uid) // what the user has entered
+    response.setUserId(uid) // ID we use for this user
+    response.setResult("ok")
+    response.addActualRole("test") // helps with testing use cases that require authorization
+}
+else {
+    res.setError(1, "invalid password")
+}

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/etc/nevis/k8s-nli-7dc20659babc66c4401ce0dd.yaml

@@ -44,7 +44,7 @@ spec:
   podDisruptionBudget:
     maxUnavailable: "50%"
   git:
-    tag: "r-273c80f3ed81849ff45349dd7d23b000a9535c6f"
+    tag: "r-92029afe3699cc6fa66d24bbc9140b71c45247f1"
     dir: "DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli"
     credentials: "git-credentials"
   podSecurity:

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/New_Authentication_Realm/resources/conf/text.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Your last login attempt failed. Please check your input.
+info.login.test=Test Authentication for System Setup Verification (Password = UserID)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Password
+prompt.userid=User-ID
 title=NEVIS SSO Portal
+title.login.test=Test Authentication

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/New_Authentication_Realm/resources/conf/text_de.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Ihr letzter Login ist fehlgeschlagen. Bitte überprüfen Sie Ihre Eingabe.
+info.login.test=Test-Authentisierung zur System-Installations-Verifikation (Passwort = Benutzername)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Passwort
+prompt.userid=Benutzer-ID
 title=NEVIS SSO Portal
+title.login.test=Test-Authentisierung

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/New_Authentication_Realm/resources/conf/text_en.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Your last login attempt failed. Please check your input.
+info.login.test=Test Authentication for System Setup Verification (Password = UserID)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Password
+prompt.userid=User-ID
 title=NEVIS SSO Portal
+title.login.test=Test Authentication

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/New_Authentication_Realm/resources/conf/text_fr.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Login échoué. Veuillez vérifier vos données, s.v.p.
+info.login.test=Verification d'installation (mot de passe = nom d'utilisateur)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Mot de passe
+prompt.userid=ID de l'utilisateur
 title=NEVIS SSO Portal
+title.login.test=Verification d'installation

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/New_Authentication_Realm/resources/conf/text_it.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Login non riuscito. Verificare i dati immessi.
+info.login.test=Test di autenticazione per il sistema di verifica dell'installazione (password = user ID)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Password
+prompt.userid=Nome utente
 title=NEVIS SSO Portal
+title.login.test=Test di autenticazione

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/cossa_realm/resources/conf/text.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Your last login attempt failed. Please check your input.
+info.login.test=Test Authentication for System Setup Verification (Password = UserID)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Password
+prompt.userid=User-ID
 title=NEVIS SSO Portal
+title.login.test=Test Authentication

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/cossa_realm/resources/conf/text_de.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Ihr letzter Login ist fehlgeschlagen. Bitte überprüfen Sie Ihre Eingabe.
+info.login.test=Test-Authentisierung zur System-Installations-Verifikation (Passwort = Benutzername)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Passwort
+prompt.userid=Benutzer-ID
 title=NEVIS SSO Portal
+title.login.test=Test-Authentisierung

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/cossa_realm/resources/conf/text_en.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Your last login attempt failed. Please check your input.
+info.login.test=Test Authentication for System Setup Verification (Password = UserID)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Password
+prompt.userid=User-ID
 title=NEVIS SSO Portal
+title.login.test=Test Authentication

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/cossa_realm/resources/conf/text_fr.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Login échoué. Veuillez vérifier vos données, s.v.p.
+info.login.test=Verification d'installation (mot de passe = nom d'utilisateur)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Mot de passe
+prompt.userid=ID de l'utilisateur
 title=NEVIS SSO Portal
+title.login.test=Verification d'installation

DEFAULT-ADN-POST-IAM-TKNXCHNG-PROJECT/DEFAULT-ADN-POST-IAM-TKNXCHNG-INV/nli/var/opt/nevislogrend/default/data/applications/cossa_realm/resources/conf/text_it.properties

@@ -1,6 +1,11 @@
 
+error.login.test.1=Login non riuscito. Verificare i dati immessi.
+info.login.test=Test di autenticazione per il sistema di verifica dell'installazione (password = user ID)
 language.de=Deutsch
 language.en=English
 language.fr=Français
 language.it=Italiano
+prompt.password=Password
+prompt.userid=Nome utente
 title=NEVIS SSO Portal
+title.login.test=Test di autenticazione