Repository: cxf-fediz Updated Branches: refs/heads/master 909cbb950 -> b285ec5c5
Add in fediz_config.xml file Project: http://git-wip-us.apache.org/repos/asf/cxf-fediz/repo Commit: http://git-wip-us.apache.org/repos/asf/cxf-fediz/commit/b285ec5c Tree: http://git-wip-us.apache.org/repos/asf/cxf-fediz/tree/b285ec5c Diff: http://git-wip-us.apache.org/repos/asf/cxf-fediz/diff/b285ec5c Branch: refs/heads/master Commit: b285ec5c5124f4e18b82dd57d2a42174a556ed89 Parents: 909cbb9 Author: Colm O hEigeartaigh <[email protected]> Authored: Wed Nov 4 17:08:12 2015 +0000 Committer: Colm O hEigeartaigh <[email protected]> Committed: Wed Nov 4 17:08:12 2015 +0000 ---------------------------------------------------------------------- services/oidc/src/main/conf/fediz_config.xml | 54 +++++++++++++++++++++++ 1 file changed, 54 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cxf-fediz/blob/b285ec5c/services/oidc/src/main/conf/fediz_config.xml ---------------------------------------------------------------------- diff --git a/services/oidc/src/main/conf/fediz_config.xml b/services/oidc/src/main/conf/fediz_config.xml new file mode 100644 index 0000000..eb71ae8 --- /dev/null +++ b/services/oidc/src/main/conf/fediz_config.xml @@ -0,0 +1,54 @@ +<?xml version="1.0" encoding="UTF-8"?> +<!-- + Licensed to the Apache Software Foundation (ASF) under one + or more contributor license agreements. See the NOTICE file + distributed with this work for additional information + regarding copyright ownership. The ASF licenses this file + to you under the Apache License, Version 2.0 (the + "License"); you may not use this file except in compliance + with the License. You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, + software distributed under the License is distributed on an + "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY + KIND, either express or implied. See the License for the + specific language governing permissions and limitations + under the License. +--> +<!-- Place in Tomcat conf folder or other location as designated in this sample's file. + Keystore referenced below must have IDP STS' public cert included in it. This example uses the + ststrust Truststore (ststrust.jks) for this task. + In Fediz 1.0, one keystore was used for SSL and the STS public certificate. +--> +<FedizConfig> + <contextConfig name="/fediz-oidc"> + <audienceUris> + <audienceItem>urn:org:apache:cxf:fediz:fedizhelloworld</audienceItem> + </audienceUris> + <certificateStores> + <trustManager> + <keyStore file="ststrust.jks" password="storepass" type="JKS" /> + </trustManager> + </certificateStores> + <trustedIssuers> + <issuer certificateValidation="PeerTrust" /> + </trustedIssuers> + <maximumClockSkew>1000</maximumClockSkew> + <protocol xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"; + xsi:type="federationProtocolType" version="1.0.0"> + <realm>urn:org:apache:cxf:fediz:fedizhelloworld</realm> + <issuer>https://localhost:8443/fediz-idp/federation</issuer> + <roleDelimiter>,</roleDelimiter> + <roleURI>http://schemas.xmlsoap.org/ws/2005/05/identity/claims/role</roleURI> + <claimTypesRequested> + <claimType type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/role"; optional="false" /> + <claimType type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"; optional="true" /> + <claimType type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"; optional="true" /> + <claimType type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"; optional="true" /> + </claimTypesRequested> + </protocol> + </contextConfig> +</FedizConfig> +
