web.xml revision eca6c70374c07de3d21cfbca0915fb9e5285d108
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor<web-app version="2.4" xmlns="http://java.sun.com/xml/ns/j2ee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd">
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <!-- Initialises the Guice Injector. -->
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <listener-class>org.forgerock.openam.core.guice.OpenAMServletContextListener</listener-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <listener-class>org.forgerock.guice.core.GuiceInitialisationFilter</listener-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <listener-class>org.forgerock.openam.identity.idm.AMIdentityRepositoryListenerInitializer</listener-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>jato:enforceStrictSessionTimeout</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>jato:com.sun.identity.authentication.UI.*:moduleURL</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>jato:com.sun.identity.password.ui.*:moduleURL</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>jato:enforceStrictSessionTimeout1</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <!-- context param -->
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>com.sun.identity.setup.AMSetupFilter</filter-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-name>ResponseValidationFilter</filter-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>org.forgerock.openam.validation.ResponseValidationFilter</filter-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>org.forgerock.openam.xui.XUIFilter</filter-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>org.forgerock.openam.headers.SetHeadersFilter</filter-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>org.forgerock.openam.headers.SetHeadersFilter</filter-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>public, max-age=2592000</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>/policyEditor/,/policyEditor/index.html,/scripts/,/scripts/index.html,/XUI/,/XUI/index.html</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <!-- To configure CORS Support, please see the documentation and use the following lines as a template.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-name>CORSFilter</filter-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>org.forgerock.openam.cors.CORSFilter</filter-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Accepted Methods (Required):
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor A comma separated list of HTTP methods for which to accept CORS requests.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>methods</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>POST,PUT</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Accepted Origins (Required):
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor A comma separated list of origins from which to accept CORS requests.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>origins</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>http://www.example.net,https://example.org:8433</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Allow Credentials (Optional):
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Whether to include the Vary (Origin) and Access-Control-Allow-Credentials headers in the response.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Default: false
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>allowCredentials</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>false</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Allowed Headers (Optional):
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor A comma separated list of HTTP headers which can be included in the requests.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>headers</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>headerOne,headerTwo,headerThree</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Expected Hostname (Optional):
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor The name of the host expected in the request Host header.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>expectedHostname</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>openam.example.com:8080</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Exposed Headers (Optional):
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor The comma separated list of headers which the user-agent can expose to its CORS client.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>exposeHeaders</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>exposeHeaderOne,exposeHeaderTwo</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Maximum Cache Age (Optional):
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor The maximum time that the CORS client can cache the pre-flight response, in seconds.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Default: 600
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>maxAge</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>600</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </init-param>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>com.sun.identity.rest.AuthNFilter</filter-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>com.sun.identity.rest.AuthZFilter</filter-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-class>org.forgerock.openam.audit.context.AuditContextFilter</filter-class> <!-- TODO Does this needs updating too? -->
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <!-- filter declaration -->
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-name>ResponseValidationFilter</filter-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-mapping>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <filter-name>CORSFilter</filter-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <url-pattern>/json/*</url-pattern>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor </filter-mapping>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <!-- filter mapping -->
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <listener-class>com.sun.identity.common.ShutdownServletContextListener</listener-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <listener-class>com.sun.identity.monitoring.AgentShutdownServletContextListener</listener-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <listener-class>com.sun.identity.authentication.service.AuthServletContextListener</listener-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <listener-class>com.sun.identity.wss.sts.STSContextListener</listener-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <!-- listener declaration -->
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.authentication.UI.LoginServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.setup.SetSetupProgress</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>org.forgerock.openam.upgrade.SetUpgradeProgress</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.policy.util.Gateway</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-name>MonitoringConfiguration</servlet-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.common.MonitoringConfiguration</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.authentication.UI.LoginLogoutMapping</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.setup.AMSetupServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.iplanet.dpro.session.service.GetHttpSession</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.iplanet.services.comm.server.PLLRequestServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.xml.rpc.server.http.JAXRPCServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.sm.SMServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.password.ui.PWResetServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-name>notificationservice</servlet-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.iplanet.services.comm.client.PLLNotificationServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>Web Service Endpoint - Identity Services</description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.idsvcs.IdentityServicesServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>REST Endpoint - Identity Services</description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <display-name>IdentityServicesHandler</display-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-name>IdentityServicesHandler</servlet-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.idsvcs.rest.IdentityServicesHandler</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <description>Default security provider</description>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>com.sun.identity.idsvcs.opensso.IdentityServicesImpl</param-value>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-name>notificationservlet</servlet-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.entitlement.opensso.NotificationServlet</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.identity.entitlement.util.NetworkMonitor</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <!-- JAX-RS -->
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <!-- Java defines REST support via the Java Specification Request 311 (JSR).
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor This specificiation is called JAX-RS (The Java API for RESTful Web Services).
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor JAX-RS uses annotations to define the REST relevance of Java classes.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Jersey is the reference implementation for this specification.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor Jersey contains basically a REST server and a REST client.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor The core client can be used provides a library to communicate with the server.
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <servlet-class>com.sun.jersey.spi.container.servlet.ServletContainer</servlet-class>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-name>javax.ws.rs.Application</param-name>
9e39c5ba00a55fa05777cc94b148296af305e135Bill Taylor <param-value>com.sun.identity.rest.RestService</param-value>
<servlet-class>com.sun.identity.federation.services.fednsso.FSIntersiteTransferService</servlet-class>
<servlet-class>com.sun.identity.federation.services.fednsso.FSAssertionConsumerService</servlet-class>
<servlet-class>com.sun.identity.federation.services.termination.FSTerminationInitiationServlet</servlet-class>
<servlet-class>com.sun.identity.federation.services.termination.FSTerminationRequestServlet</servlet-class>
<servlet-class>com.sun.identity.federation.services.termination.FSTerminationReturnServlet</servlet-class>
<servlet-class>com.sun.identity.federation.services.registration.FSRegistrationInitiationServlet</servlet-class>
<servlet-class>com.sun.identity.federation.services.registration.FSRegistrationRequestServlet</servlet-class>
<servlet-class>com.sun.identity.federation.services.registration.FSRegistrationReturnServlet</servlet-class>
<!-- Setup favicon.ico extension type -->
<!-- This tag is for the welcome files such as index.html -->
<!-- workarounds for lockart 2.x -->
<res-ref-name>jdbc/openssousersdb</res-ref-name>
<res-type>javax.sql.DataSource</res-type>