|
29 | 29 |
|
30 | 30 | class ModuleConfig |
31 | 31 | { |
32 | | - final public const MODULE_NAME = 'oidc'; |
33 | | - protected const KEY_DESCRIPTION = 'description'; |
| 32 | + final public const string MODULE_NAME = 'oidc'; |
| 33 | + protected const string KEY_DESCRIPTION = 'description'; |
34 | 34 |
|
35 | 35 | /** |
36 | 36 | * Default file name for module configuration. Can be overridden in constructor, for example, for testing purposes. |
37 | 37 | */ |
38 | | - final public const DEFAULT_FILE_NAME = 'module_oidc.php'; |
39 | | - |
40 | | - final public const OPTION_PKI_PRIVATE_KEY_PASSPHRASE = 'pass_phrase'; |
41 | | - final public const OPTION_PKI_PRIVATE_KEY_FILENAME = 'privatekey'; |
42 | | - final public const DEFAULT_PKI_PRIVATE_KEY_FILENAME = 'oidc_module.key'; |
43 | | - final public const OPTION_PKI_CERTIFICATE_FILENAME = 'certificate'; |
44 | | - final public const DEFAULT_PKI_CERTIFICATE_FILENAME = 'oidc_module.crt'; |
45 | | - final public const OPTION_TOKEN_AUTHORIZATION_CODE_TTL = 'authCodeDuration'; |
46 | | - final public const OPTION_TOKEN_REFRESH_TOKEN_TTL = 'refreshTokenDuration'; |
47 | | - final public const OPTION_TOKEN_ACCESS_TOKEN_TTL = 'accessTokenDuration'; |
48 | | - final public const OPTION_TOKEN_SIGNER = 'signer'; |
49 | | - final public const OPTION_AUTH_SOURCE = 'auth'; |
50 | | - final public const OPTION_AUTH_USER_IDENTIFIER_ATTRIBUTE = 'useridattr'; |
51 | | - final public const OPTION_AUTH_SAML_TO_OIDC_TRANSLATE_TABLE = 'translate'; |
52 | | - final public const OPTION_AUTH_CUSTOM_SCOPES = 'scopes'; |
53 | | - final public const OPTION_AUTH_ACR_VALUES_SUPPORTED = 'acrValuesSupported'; |
54 | | - final public const OPTION_AUTH_SOURCES_TO_ACR_VALUES_MAP = 'authSourcesToAcrValuesMap'; |
55 | | - final public const OPTION_AUTH_FORCED_ACR_VALUE_FOR_COOKIE_AUTHENTICATION = 'forcedAcrValueForCookieAuthentication'; |
56 | | - final public const OPTION_AUTH_PROCESSING_FILTERS = 'authproc.oidc'; |
57 | | - final public const OPTION_CRON_TAG = 'cron_tag'; |
58 | | - final public const OPTION_ADMIN_UI_PERMISSIONS = 'permissions'; |
59 | | - final public const OPTION_ADMIN_UI_PAGINATION_ITEMS_PER_PAGE = 'items_per_page'; |
60 | | - final public const OPTION_FEDERATION_TOKEN_SIGNER = 'federation_token_signer'; |
61 | | - final public const OPTION_PKI_FEDERATION_PRIVATE_KEY_PASSPHRASE = 'federation_private_key_passphrase'; |
62 | | - final public const OPTION_PKI_FEDERATION_PRIVATE_KEY_FILENAME = 'federation_private_key_filename'; |
63 | | - final public const DEFAULT_PKI_FEDERATION_PRIVATE_KEY_FILENAME = 'oidc_module_federation.key'; |
64 | | - final public const OPTION_PKI_FEDERATION_CERTIFICATE_FILENAME = 'federation_certificate_filename'; |
65 | | - final public const DEFAULT_PKI_FEDERATION_CERTIFICATE_FILENAME = 'oidc_module_federation.crt'; |
66 | | - final public const OPTION_ISSUER = 'issuer'; |
67 | | - final public const OPTION_FEDERATION_ENTITY_STATEMENT_DURATION = 'federation_entity_statement_duration'; |
68 | | - final public const OPTION_FEDERATION_AUTHORITY_HINTS = 'federation_authority_hints'; |
69 | | - final public const OPTION_ORGANIZATION_NAME = 'organization_name'; |
70 | | - final public const OPTION_DISPLAY_NAME = 'display_name'; |
71 | | - final public const OPTION_DESCRIPTION = 'description'; |
72 | | - final public const OPTION_KEYWORDS = 'keywords'; |
73 | | - final public const OPTION_CONTACTS = 'contacts'; |
74 | | - final public const OPTION_LOGO_URI = 'logo_uri'; |
75 | | - final public const OPTION_POLICY_URI = 'policy_uri'; |
76 | | - final public const OPTION_INFORMATION_URI = 'information_uri'; |
77 | | - final public const OPTION_HOMEPAGE_URI = 'homepage_uri'; |
78 | | - final public const OPTION_ORGANIZATION_URI = 'organization_uri'; |
79 | | - final public const OPTION_FEDERATION_ENABLED = 'federation_enabled'; |
80 | | - final public const OPTION_FEDERATION_CACHE_ADAPTER = 'federation_cache_adapter'; |
81 | | - final public const OPTION_FEDERATION_CACHE_ADAPTER_ARGUMENTS = 'federation_cache_adapter_arguments'; |
82 | | - final public const OPTION_FEDERATION_CACHE_MAX_DURATION_FOR_FETCHED = 'federation_cache_max_duration_for_fetched'; |
83 | | - final public const OPTION_FEDERATION_TRUST_ANCHORS = 'federation_trust_anchors'; |
84 | | - final public const OPTION_FEDERATION_TRUST_MARK_TOKENS = 'federation_trust_mark_tokens'; |
85 | | - final public const OPTION_FEDERATION_DYNAMIC_TRUST_MARKS = 'federation_dynamic_trust_mark_tokens'; |
86 | | - final public const OPTION_FEDERATION_PARTICIPATION_LIMIT_BY_TRUST_MARKS = |
87 | | - 'federation_participation_limit_by_trust_marks'; |
88 | | - final public const OPTION_FEDERATION_TRUST_MARK_STATUS_ENDPOINT_USAGE_POLICY = |
89 | | - 'federation_trust_mark_status_endpoint_usage_policy'; |
90 | | - final public const OPTION_FEDERATION_CACHE_DURATION_FOR_PRODUCED = 'federation_cache_duration_for_produced'; |
91 | | - final public const OPTION_PROTOCOL_CACHE_ADAPTER = 'protocol_cache_adapter'; |
92 | | - final public const OPTION_PROTOCOL_CACHE_ADAPTER_ARGUMENTS = 'protocol_cache_adapter_arguments'; |
93 | | - final public const OPTION_PROTOCOL_USER_ENTITY_CACHE_DURATION = 'protocol_user_entity_cache_duration'; |
94 | | - final public const OPTION_PROTOCOL_CLIENT_ENTITY_CACHE_DURATION = 'protocol_client_entity_cache_duration'; |
95 | | - final public const OPTION_PROTOCOL_DISCOVERY_SHOW_CLAIMS_SUPPORTED = 'protocol_discover_show_claims_supported'; |
96 | | - |
97 | | - final public const OPTION_PKI_NEW_PRIVATE_KEY_PASSPHRASE = 'new_private_key_passphrase'; |
98 | | - final public const OPTION_PKI_NEW_PRIVATE_KEY_FILENAME = 'new_privatekey'; |
99 | | - final public const OPTION_PKI_NEW_CERTIFICATE_FILENAME = 'new_certificate'; |
100 | | - |
101 | | - final public const OPTION_PKI_FEDERATION_NEW_PRIVATE_KEY_PASSPHRASE = 'federation_new_private_key_passphrase'; |
102 | | - final public const OPTION_PKI_FEDERATION_NEW_PRIVATE_KEY_FILENAME = 'federation_new_private_key_filename'; |
103 | | - final public const OPTION_PKI_FEDERATION_NEW_CERTIFICATE_FILENAME = 'federation_new_certificate_filename'; |
| 38 | + final public const string DEFAULT_FILE_NAME = 'module_oidc.php'; |
| 39 | + |
| 40 | + final public const string OPTION_PKI_PRIVATE_KEY_PASSPHRASE = 'pass_phrase'; |
| 41 | + final public const string OPTION_PKI_PRIVATE_KEY_FILENAME = 'privatekey'; |
| 42 | + final public const string DEFAULT_PKI_PRIVATE_KEY_FILENAME = 'oidc_module.key'; |
| 43 | + final public const string OPTION_PKI_CERTIFICATE_FILENAME = 'certificate'; |
| 44 | + final public const string DEFAULT_PKI_CERTIFICATE_FILENAME = 'oidc_module.crt'; |
| 45 | + final public const string OPTION_TOKEN_AUTHORIZATION_CODE_TTL = 'authCodeDuration'; |
| 46 | + final public const string OPTION_TOKEN_REFRESH_TOKEN_TTL = 'refreshTokenDuration'; |
| 47 | + final public const string OPTION_TOKEN_ACCESS_TOKEN_TTL = 'accessTokenDuration'; |
| 48 | + final public const string OPTION_TOKEN_SIGNER = 'signer'; |
| 49 | + final public const string OPTION_AUTH_SOURCE = 'auth'; |
| 50 | + final public const string OPTION_AUTH_USER_IDENTIFIER_ATTRIBUTE = 'useridattr'; |
| 51 | + final public const string OPTION_AUTH_SAML_TO_OIDC_TRANSLATE_TABLE = 'translate'; |
| 52 | + final public const string OPTION_AUTH_CUSTOM_SCOPES = 'scopes'; |
| 53 | + final public const string OPTION_AUTH_ACR_VALUES_SUPPORTED = 'acrValuesSupported'; |
| 54 | + final public const string OPTION_AUTH_SOURCES_TO_ACR_VALUES_MAP = 'authSourcesToAcrValuesMap'; |
| 55 | + final public const string OPTION_AUTH_FORCED_ACR_VALUE_FOR_COOKIE_AUTHENTICATION = |
| 56 | + 'forcedAcrValueForCookieAuthentication'; |
| 57 | + final public const string OPTION_AUTH_PROCESSING_FILTERS = 'authproc.oidc'; |
| 58 | + final public const string OPTION_CRON_TAG = 'cron_tag'; |
| 59 | + final public const string OPTION_ADMIN_UI_PERMISSIONS = 'permissions'; |
| 60 | + final public const string OPTION_ADMIN_UI_PAGINATION_ITEMS_PER_PAGE = 'items_per_page'; |
| 61 | + final public const string OPTION_FEDERATION_TOKEN_SIGNER = 'federation_token_signer'; |
| 62 | + final public const string OPTION_PKI_FEDERATION_PRIVATE_KEY_PASSPHRASE = 'federation_private_key_passphrase'; |
| 63 | + final public const string OPTION_PKI_FEDERATION_PRIVATE_KEY_FILENAME = 'federation_private_key_filename'; |
| 64 | + final public const string DEFAULT_PKI_FEDERATION_PRIVATE_KEY_FILENAME = 'oidc_module_federation.key'; |
| 65 | + final public const string OPTION_PKI_FEDERATION_CERTIFICATE_FILENAME = 'federation_certificate_filename'; |
| 66 | + final public const string DEFAULT_PKI_FEDERATION_CERTIFICATE_FILENAME = 'oidc_module_federation.crt'; |
| 67 | + final public const string OPTION_ISSUER = 'issuer'; |
| 68 | + final public const string OPTION_FEDERATION_ENTITY_STATEMENT_DURATION = 'federation_entity_statement_duration'; |
| 69 | + final public const string OPTION_FEDERATION_AUTHORITY_HINTS = 'federation_authority_hints'; |
| 70 | + final public const string OPTION_ORGANIZATION_NAME = 'organization_name'; |
| 71 | + final public const string OPTION_DISPLAY_NAME = 'display_name'; |
| 72 | + final public const string OPTION_DESCRIPTION = 'description'; |
| 73 | + final public const string OPTION_KEYWORDS = 'keywords'; |
| 74 | + final public const string OPTION_CONTACTS = 'contacts'; |
| 75 | + final public const string OPTION_LOGO_URI = 'logo_uri'; |
| 76 | + final public const string OPTION_POLICY_URI = 'policy_uri'; |
| 77 | + final public const string OPTION_INFORMATION_URI = 'information_uri'; |
| 78 | + final public const string OPTION_HOMEPAGE_URI = 'homepage_uri'; |
| 79 | + final public const string OPTION_ORGANIZATION_URI = 'organization_uri'; |
| 80 | + final public const string OPTION_FEDERATION_ENABLED = 'federation_enabled'; |
| 81 | + final public const string OPTION_FEDERATION_CACHE_ADAPTER = 'federation_cache_adapter'; |
| 82 | + final public const string OPTION_FEDERATION_CACHE_ADAPTER_ARGUMENTS = 'federation_cache_adapter_arguments'; |
| 83 | + final public const string OPTION_FEDERATION_CACHE_MAX_DURATION_FOR_FETCHED = |
| 84 | + 'federation_cache_max_duration_for_fetched'; |
| 85 | + final public const string OPTION_FEDERATION_TRUST_ANCHORS = 'federation_trust_anchors'; |
| 86 | + final public const string OPTION_FEDERATION_TRUST_MARK_TOKENS = 'federation_trust_mark_tokens'; |
| 87 | + final public const string OPTION_FEDERATION_DYNAMIC_TRUST_MARKS = 'federation_dynamic_trust_mark_tokens'; |
| 88 | + final public const string OPTION_FEDERATION_PARTICIPATION_LIMIT_BY_TRUST_MARKS = |
| 89 | + 'federation_participation_limit_by_trust_marks'; |
| 90 | + final public const string OPTION_FEDERATION_TRUST_MARK_STATUS_ENDPOINT_USAGE_POLICY = |
| 91 | + 'federation_trust_mark_status_endpoint_usage_policy'; |
| 92 | + final public const string OPTION_FEDERATION_CACHE_DURATION_FOR_PRODUCED = 'federation_cache_duration_for_produced'; |
| 93 | + final public const string OPTION_PROTOCOL_CACHE_ADAPTER = 'protocol_cache_adapter'; |
| 94 | + final public const string OPTION_PROTOCOL_CACHE_ADAPTER_ARGUMENTS = 'protocol_cache_adapter_arguments'; |
| 95 | + final public const string OPTION_PROTOCOL_USER_ENTITY_CACHE_DURATION = 'protocol_user_entity_cache_duration'; |
| 96 | + final public const string OPTION_PROTOCOL_CLIENT_ENTITY_CACHE_DURATION = 'protocol_client_entity_cache_duration'; |
| 97 | + final public const string OPTION_PROTOCOL_DISCOVERY_SHOW_CLAIMS_SUPPORTED = |
| 98 | + 'protocol_discover_show_claims_supported'; |
| 99 | + |
| 100 | + final public const string OPTION_PKI_NEW_PRIVATE_KEY_PASSPHRASE = 'new_private_key_passphrase'; |
| 101 | + final public const string OPTION_PKI_NEW_PRIVATE_KEY_FILENAME = 'new_privatekey'; |
| 102 | + final public const string OPTION_PKI_NEW_CERTIFICATE_FILENAME = 'new_certificate'; |
| 103 | + |
| 104 | + final public const string OPTION_PKI_FEDERATION_NEW_PRIVATE_KEY_PASSPHRASE = |
| 105 | + 'federation_new_private_key_passphrase'; |
| 106 | + final public const string OPTION_PKI_FEDERATION_NEW_PRIVATE_KEY_FILENAME = 'federation_new_private_key_filename'; |
| 107 | + final public const string OPTION_PKI_FEDERATION_NEW_CERTIFICATE_FILENAME = 'federation_new_certificate_filename'; |
| 108 | + |
104 | 109 |
|
105 | 110 | protected static array $standardScopes = [ |
106 | 111 | ScopesEnum::OpenId->value => [ |
|
0 commit comments