scripting.xml revision 9cde3c1224dad3f7bc15171c940932e5fbcd32fb
809N/A<?xml version="1.0" encoding="UTF-8"?>
2362N/A<!--
809N/A * The contents of this file are subject to the terms of the Common Development and
809N/A * Distribution License (the License). You may not use this file except in compliance with the
809N/A * License.
809N/A *
809N/A * You can obtain a copy of the License at legal/CDDLv1.0.txt. See the License for the
809N/A * specific language governing permission and limitations under the License.
809N/A *
809N/A * When distributing Covered Software, include this CDDL Header Notice in each file and include
809N/A * the License file at legal/CDDLv1.0.txt. If applicable, add the following below the CDDL
809N/A * Header, with the fields enclosed by brackets [] replaced by your own identifying
809N/A * information: "Portions copyright [year] [name of copyright owner]".
809N/A *
809N/A * Copyright 2015-2016 ForgeRock AS.
809N/A-->
809N/A<!DOCTYPE ServicesConfiguration
809N/A PUBLIC "=//iPlanet//Service Management Services (SMS) 1.0 DTD//EN" "jar://com/sun/identity/sm/sms.dtd">
2362N/A
2362N/A<ServicesConfiguration>
2362N/A <Service name="ScriptingService" version="1.0">
809N/A
809N/A <Schema serviceHierarchy="/DSAMEConfig/ScriptingService"
809N/A i18nFileName="scripting"
809N/A revisionNumber="1"
809N/A i18nKey="service-description"
809N/A resourceName="scripting">
809N/A <Global>
809N/A <AttributeSchema name="defaultScriptContext" i18nKey="g101" type="single_choice"
809N/A resourceName="defaultContext">
809N/A <ChoiceValues>
809N/A <ChoiceValue i18nKey="script-type-01">POLICY_CONDITION</ChoiceValue>
809N/A <ChoiceValue i18nKey="script-type-02">AUTHENTICATION_SERVER_SIDE</ChoiceValue>
809N/A <ChoiceValue i18nKey="script-type-03">AUTHENTICATION_CLIENT_SIDE</ChoiceValue>
809N/A <ChoiceValue i18nKey="script-type-04">OIDC_CLAIMS</ChoiceValue>
809N/A </ChoiceValues>
809N/A <DefaultValues>
809N/A <Value>POLICY_CONDITION</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <SubSchema name="scriptContext" inheritance="multiple" resourceName="contexts">
809N/A <AttributeSchema name="i18nKey" type="single"/>
809N/A <AttributeSchema name="languages" type="multiple_choice" syntax="string" i18nKey="st101">
809N/A <ChoiceValues>
809N/A <ChoiceValue i18nKey="language-01">JAVASCRIPT</ChoiceValue>
809N/A <ChoiceValue i18nKey="language-02">GROOVY</ChoiceValue>
809N/A </ChoiceValues>
809N/A <DefaultValues>
809N/A <Value>JAVASCRIPT</Value>
809N/A <Value>GROOVY</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="defaultScript" type="single_choice" uitype="scriptSelect"
809N/A propertiesViewBeanURL="/XUI/%23realms/{0}/scripts/edit/{1}" syntax="string"
809N/A i18nKey="st103">
809N/A <ChoiceValues>
809N/A <ChoiceValuesClassName
809N/A className="org.forgerock.openam.scripting.service.ScriptChoiceValues"/>
809N/A </ChoiceValues>
809N/A </AttributeSchema>
809N/A <SubSchema name="engineConfiguration" i18nKey="ec100">
809N/A <AttributeSchema name="i18nKey" type="single">
809N/A <DefaultValues>
809N/A <Value>engine-configuration</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="serverTimeout"
809N/A type="single" syntax="number_range" rangeStart="0"
809N/A rangeEnd="2147483647" i18nKey="ec101">
809N/A <DefaultValues>
809N/A <Value>0</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="coreThreads"
809N/A type="single" syntax="number_range" rangeStart="1"
809N/A rangeEnd="2147483647" i18nKey="ec102">
809N/A <DefaultValues>
809N/A <Value>10</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="maxThreads"
809N/A type="single" syntax="number_range" rangeStart="1"
809N/A rangeEnd="2147483647" i18nKey="ec103">
809N/A <DefaultValues>
809N/A <Value>50</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="queueSize"
809N/A type="single" syntax="number_range" rangeStart="-1"
809N/A rangeEnd="2147483647" i18nKey="ec104">
809N/A <DefaultValues>
809N/A <Value>10</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="idleTimeout"
809N/A type="single" syntax="number_range" rangeStart="0"
809N/A rangeEnd="2147483647" i18nKey="ec105">
809N/A <DefaultValues>
809N/A <Value>60</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="whiteList"
809N/A type="list" syntax="string" i18nKey="ec106">
809N/A <DefaultValues>
809N/A <Value>java.lang.Boolean</Value>
809N/A <Value>java.lang.Byte</Value>
809N/A <Value>java.lang.Character</Value>
809N/A <Value>java.lang.Character$Subset</Value>
809N/A <Value>java.lang.Character$UnicodeBlock</Value>
809N/A <Value>java.lang.Double</Value>
809N/A <Value>java.lang.Float</Value>
809N/A <Value>java.lang.Integer</Value>
809N/A <Value>java.lang.Long</Value>
809N/A <Value>java.lang.Math</Value>
809N/A <Value>java.lang.Number</Value>
809N/A <Value>java.lang.Object</Value>
809N/A <Value>java.lang.Short</Value>
809N/A <Value>java.lang.StrictMath</Value>
809N/A <Value>java.lang.String</Value>
809N/A <Value>java.lang.Void</Value>
809N/A <Value>java.util.ArrayList</Value>
809N/A <Value>java.util.HashSet</Value>
809N/A <Value>java.util.HashMap</Value>
809N/A <Value>java.util.HashMap$KeyIterator</Value>
809N/A <Value>java.util.LinkedHashMap</Value>
809N/A <Value>java.util.LinkedHashSet</Value>
809N/A <Value>java.util.LinkedList</Value>
809N/A <Value>java.util.TreeMap</Value>
809N/A <Value>java.util.TreeSet</Value>
809N/A <Value>com.sun.identity.shared.debug.Debug</Value>
809N/A <Value>org.forgerock.http.client.*</Value>
809N/A <Value>org.forgerock.http.Client</Value>
809N/A <Value>org.forgerock.http.Handler</Value>
809N/A <Value>org.forgerock.http.Context</Value>
809N/A <Value>org.forgerock.http.context.RootContext</Value>
809N/A <Value>org.forgerock.http.protocol.Request</Value>
809N/A <Value>org.forgerock.http.protocol.Response</Value>
809N/A <Value>org.forgerock.util.promise.NeverThrowsException</Value>
809N/A <Value>org.forgerock.util.promise.Promise</Value>
809N/A <Value>org.forgerock.openam.scripting.api.http.GroovyHttpClient</Value>
809N/A <Value>org.forgerock.openam.scripting.api.http.JavaScriptHttpClient</Value>
809N/A <Value>org.forgerock.openam.scripting.api.ScriptedIdentity</Value>
809N/A <Value>org.forgerock.openam.scripting.api.ScriptedSession</Value>
809N/A <Value>groovy.json.JsonSlurper</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="blackList"
809N/A type="list" syntax="string" i18nKey="ec107">
809N/A <DefaultValues>
809N/A <Value>java.security.AccessController</Value>
809N/A <Value>java.lang.Class</Value>
809N/A <Value>java.lang.reflect.*</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="useSecurityManager"
809N/A type="single" syntax="boolean" i18nKey="ec108">
809N/A <BooleanValues>
809N/A <BooleanTrueValue i18nKey="i18nTrue">true</BooleanTrueValue>
809N/A <BooleanFalseValue i18nKey="i18nFalse">false</BooleanFalseValue>
809N/A </BooleanValues>
809N/A <DefaultValues>
809N/A <Value>true</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A </SubSchema>
809N/A </SubSchema>
809N/A <SubSchema name="globalScripts" hideConfigUI="yes">
809N/A <SubSchema name="globalScript" inheritance="multiple">
809N/A <AttributeSchema name="name" type="single" syntax="string"/>
809N/A <AttributeSchema name="description" type="single" syntax="string"/>
809N/A <AttributeSchema name="context" type="single" syntax="string"/>
809N/A <AttributeSchema name="language" type="single">
809N/A <DefaultValues>
809N/A <Value>JAVASCRIPT</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="script" type="single" syntax="script"/>
809N/A <AttributeSchema name="createdBy" type="single" syntax="string">
809N/A <DefaultValues>
809N/A <Value>id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="creationDate" type="single" syntax="string">
809N/A <DefaultValues>
809N/A <Value>1433147666269</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="lastModifiedBy" type="single" syntax="string">
809N/A <DefaultValues>
809N/A <Value>id=dsameuser,ou=user,dc=openam,dc=forgerock,dc=org</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="lastModifiedDate" type="single" syntax="string">
809N/A <DefaultValues>
809N/A <Value>1433147666269</Value>
809N/A </DefaultValues>
809N/A </AttributeSchema>
809N/A </SubSchema>
809N/A </SubSchema>
809N/A </Global>
809N/A <Organization>
809N/A <SubSchema name="scriptConfigurations">
809N/A <SubSchema name="scriptConfiguration" inheritance="multiple" resourceName="scripts">
809N/A <AttributeSchema name="name" type="single" syntax="string" i18nKey="no-i18n"/>
809N/A <AttributeSchema name="description" type="single" syntax="string" i18nKey="no-i18n"/>
809N/A <AttributeSchema name="script" type="single" syntax="script" i18nKey="no-i18n"/>
809N/A <AttributeSchema name="language" type="single" syntax="string" i18nKey="no-i18n">
809N/A <ChoiceValues>
809N/A <ChoiceValue i18nKey="language-01">JAVASCRIPT</ChoiceValue>
809N/A <ChoiceValue i18nKey="language-02">GROOVY</ChoiceValue>
809N/A </ChoiceValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="context" type="single" syntax="string" i18nKey="no-i18n">
809N/A <ChoiceValues>
809N/A <ChoiceValue i18nKey="script-type-01">POLICY_CONDITION</ChoiceValue>
809N/A <ChoiceValue i18nKey="script-type-02">AUTHENTICATION_SERVER_SIDE</ChoiceValue>
809N/A <ChoiceValue i18nKey="script-type-03">AUTHENTICATION_CLIENT_SIDE</ChoiceValue>
809N/A <ChoiceValue i18nKey="script-type-04">OIDC_CLAIMS</ChoiceValue>
809N/A </ChoiceValues>
809N/A </AttributeSchema>
809N/A <AttributeSchema name="createdBy" type="single" syntax="string" i18nKey="no-i18n"/>
809N/A <AttributeSchema name="creationDate" type="single" syntax="string" i18nKey="no-i18n"/>
809N/A <AttributeSchema name="lastModifiedBy" type="single" syntax="string" i18nKey="no-i18n"/>
809N/A <AttributeSchema name="lastModifiedDate" type="single" syntax="string" i18nKey="no-i18n"/>
809N/A </SubSchema>
809N/A </SubSchema>
809N/A </Organization>
809N/A </Schema>
809N/A
809N/A <Configuration>
809N/A <GlobalConfiguration>
<SubConfiguration name="POLICY_CONDITION" id="scriptContext">
<AttributeValuePair>
<Attribute name="i18nKey"/>
<Value>script-type-01</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="defaultScript"/>
<Value>@GlobalEntitlementConditionScriptId@</Value>
</AttributeValuePair>
<SubConfiguration name="engineConfiguration" id="engineConfiguration"/>
</SubConfiguration>
<SubConfiguration name="AUTHENTICATION_SERVER_SIDE" id="scriptContext">
<AttributeValuePair>
<Attribute name="i18nKey"/>
<Value>script-type-02</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="defaultScript"/>
<Value>@GlobalServerSideAuthModuleScriptId@</Value>
</AttributeValuePair>
<SubConfiguration name="engineConfiguration" id="engineConfiguration">
<AttributeValuePair>
<Attribute name="whiteList"/>
<Value>java.lang.Boolean</Value>
<Value>java.lang.Byte</Value>
<Value>java.lang.Character</Value>
<Value>java.lang.Character$Subset</Value>
<Value>java.lang.Character$UnicodeBlock</Value>
<Value>java.lang.Double</Value>
<Value>java.lang.Float</Value>
<Value>java.lang.Integer</Value>
<Value>java.lang.Long</Value>
<Value>java.lang.Math</Value>
<Value>java.lang.Number</Value>
<Value>java.lang.Object</Value>
<Value>java.lang.Short</Value>
<Value>java.lang.StrictMath</Value>
<Value>java.lang.String</Value>
<Value>java.lang.Void</Value>
<Value>java.util.ArrayList</Value>
<Value>java.util.HashSet</Value>
<Value>java.util.HashMap</Value>
<Value>java.util.HashMap$KeyIterator</Value>
<Value>java.util.LinkedHashMap</Value>
<Value>java.util.LinkedHashSet</Value>
<Value>java.util.LinkedList</Value>
<Value>java.util.TreeMap</Value>
<Value>java.util.TreeSet</Value>
<Value>com.sun.identity.shared.debug.Debug</Value>
<Value>org.forgerock.openam.authentication.modules.scripted.*</Value>
<Value>org.forgerock.openam.scripting.api.http.GroovyHttpClient</Value>
<Value>org.forgerock.openam.scripting.api.http.JavaScriptHttpClient</Value>
<Value>org.forgerock.openam.scripting.api.ScriptedIdentity</Value>
<Value>org.forgerock.openam.scripting.api.ScriptedSession</Value>
<Value>org.forgerock.http.client.*</Value>
<Value>groovy.json.JsonSlurper</Value>
</AttributeValuePair>
</SubConfiguration>
</SubConfiguration>
<SubConfiguration name="AUTHENTICATION_CLIENT_SIDE" id="scriptContext">
<AttributeValuePair>
<Attribute name="i18nKey"/>
<Value>script-type-03</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="languages"/>
<Value>JAVASCRIPT</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="defaultScript"/>
<Value>@NoScriptDefined@</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="OIDC_CLAIMS" id="scriptContext">
<AttributeValuePair>
<Attribute name="i18nKey"/>
<Value>script-type-04</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="defaultScript"/>
<Value>@GlobalOidcClaimsScriptId@</Value>
</AttributeValuePair>
<SubConfiguration name="engineConfiguration" id="engineConfiguration">
<AttributeValuePair>
<Attribute name="whiteList"/>
<Value>java.lang.Boolean</Value>
<Value>java.lang.Byte</Value>
<Value>java.lang.Character</Value>
<Value>java.lang.Character$Subset</Value>
<Value>java.lang.Character$UnicodeBlock</Value>
<Value>java.lang.Double</Value>
<Value>java.lang.Float</Value>
<Value>java.lang.Integer</Value>
<Value>java.lang.Long</Value>
<Value>java.lang.Math</Value>
<Value>java.lang.Number</Value>
<Value>java.lang.Object</Value>
<Value>java.lang.Short</Value>
<Value>java.lang.StrictMath</Value>
<Value>java.lang.String</Value>
<Value>java.lang.Void</Value>
<Value>java.util.ArrayList</Value>
<Value>java.util.HashSet</Value>
<Value>java.util.HashMap</Value>
<Value>java.util.HashMap$Entry</Value>
<Value>java.util.HashMap$KeyIterator</Value>
<Value>java.util.LinkedHashMap</Value>
<Value>java.util.LinkedHashSet</Value>
<Value>java.util.LinkedList</Value>
<Value>java.util.TreeMap</Value>
<Value>java.util.TreeSet</Value>
<Value>com.sun.identity.shared.debug.Debug</Value>
<Value>com.iplanet.sso.providers.dpro.SSOTokenImpl</Value>
<Value>org.forgerock.http.client.*</Value>
<Value>groovy.json.JsonSlurper</Value>
<Value>com.sun.identity.idm.AMIdentity</Value>
<Value>java.util.LinkedHashMap$Entry</Value>
<Value>java.util.LinkedHashMap$LinkedEntrySet</Value>
<Value>org.forgerock.openam.oauth2.OpenAMAccessToken</Value>
<Value>java.util.HashMap$Node</Value>
<Value>org.forgerock.oauth2.core.UserInfoClaims</Value>
<Value>org.codehaus.groovy.runtime.GStringImpl</Value>
<Value>org.forgerock.openam.sso.providers.stateless.StatelessSSOToken</Value>
</AttributeValuePair>
</SubConfiguration>
</SubConfiguration>
<SubConfiguration name="globalScripts" id="globalScripts">
<SubConfiguration name="@GlobalEntitlementConditionScriptId@" id="globalScript">
<AttributeValuePair>
<Attribute name="name"/>
<Value>Scripted Policy Condition</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="description"/>
<Value>Default global script for Scripted Policy Conditions</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="context"/>
<Value>POLICY_CONDITION</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="script"/>
<Value>
${inject.content.policy-condition-js}
</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="@GlobalServerSideAuthModuleScriptId@" id="globalScript">
<AttributeValuePair>
<Attribute name="name"/>
<Value>Scripted Module - Server Side</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="description"/>
<Value>Default global script for server side Scripted Authentication Module</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="context"/>
<Value>AUTHENTICATION_SERVER_SIDE</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="script"/>
<Value>
${inject.content.authentication-server-side-javascript}
</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="@GlobalServerSideDeviceIdMatchScriptId@" id="globalScript">
<AttributeValuePair>
<Attribute name="name"/>
<Value>Device Id (Match) - Server Side</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="description"/>
<Value>Default global script for server side Device Id (Match) Authentication Module</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="context"/>
<Value>AUTHENTICATION_SERVER_SIDE</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="script"/>
<Value>
${inject.content.deviceIdMatch-server-js}
</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="@GlobalClientSideDeviceIdMatchScriptId@" id="globalScript">
<AttributeValuePair>
<Attribute name="name"/>
<Value>Device Id (Match) - Client Side</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="description"/>
<Value>Default global script for client side Device Id (Match) Authentication Module</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="context"/>
<Value>AUTHENTICATION_CLIENT_SIDE</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="script"/>
<Value>
${inject.content.fontdetector}
${inject.content.deviceIdMatch-client-js}
</Value>
</AttributeValuePair>
</SubConfiguration>
<SubConfiguration name="@GlobalOidcClaimsScriptId@" id="globalScript">
<AttributeValuePair>
<Attribute name="name"/>
<Value>OIDC Claims Script</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="description"/>
<Value>Default global script for OIDC claims</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="context"/>
<Value>OIDC_CLAIMS</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="language"/>
<Value>GROOVY</Value>
</AttributeValuePair>
<AttributeValuePair>
<Attribute name="script"/>
<Value>
${inject.content.oidc-claims-extension-groovy}
</Value>
</AttributeValuePair>
</SubConfiguration>
</SubConfiguration>
</GlobalConfiguration>
</Configuration>
</Service>
</ServicesConfiguration>