mirror of
https://github.com/andwati/zitadel.git
synced 2026-11-02 20:32:19 +00:00
db1d8f4efe
* feat: oidc config * fix: oidc configurations * feat: oidc idp config * feat: add oidc config test * fix: tests * fix: tests * feat: translate new events * feat: idp eventstore * feat: idp eventstore * fix: tests * feat: command side idp * feat: query side idp * feat: idp config on org * fix: tests * feat: authz idp on org * feat: org idps * feat: login policy * feat: login policy * feat: login policy * feat: add idp func on login policy * feat: add validation to loginpolicy and idp provider * feat: add default login policy * feat: login policy on org * feat: login policy on org * fix: id config handlers * fix: id config handlers * fix: create idp on org * fix: create idp on org * fix: not existing idp config * fix: default login policy * fix: add login policy on org * fix: idp provider search on org * fix: test * fix: remove idp on org * fix: test * fix: test * fix: remove admin idp * fix: logo src as byte * fix: migration * fix: tests * Update internal/iam/repository/eventsourcing/iam.go Co-authored-by: Silvan <[email protected]> * Update internal/iam/repository/eventsourcing/iam_test.go Co-authored-by: Silvan <[email protected]> * Update internal/iam/repository/eventsourcing/iam_test.go Co-authored-by: Silvan <[email protected]> * Update internal/iam/repository/eventsourcing/model/login_policy.go Co-authored-by: Silvan <[email protected]> * Update internal/iam/repository/eventsourcing/model/login_policy.go Co-authored-by: Silvan <[email protected]> * Update internal/org/repository/eventsourcing/org_test.go Co-authored-by: Silvan <[email protected]> * Update internal/iam/repository/eventsourcing/model/login_policy_test.go Co-authored-by: Silvan <[email protected]> * Update internal/iam/repository/eventsourcing/model/login_policy_test.go Co-authored-by: Silvan <[email protected]> * fix: pr comments * fix: tests * Update types.go * fix: merge request changes * fix: reduce optimization Co-authored-by: Silvan <[email protected]> Co-authored-by: Livio Amstutz <[email protected]>
136 lines
4.0 KiB
YAML
136 lines
4.0 KiB
YAML
SystemDefaults:
|
|
DefaultLanguage: 'de'
|
|
Domain: $ZITADEL_DEFAULT_DOMAIN
|
|
ZitadelDocs:
|
|
Issuer: $ZITADEL_ISSUER
|
|
DiscoveryEndpoint: '$ZITADEL_ISSUER/.well-known/openid-configuration'
|
|
UserVerificationKey:
|
|
EncryptionKeyID: $ZITADEL_USER_VERIFICATION_KEY
|
|
IDPConfigVerificationKey:
|
|
EncryptionKeyID: $ZITADEL_IDP_CONFIG_VERIFICATION_KEY
|
|
SecretGenerators:
|
|
PasswordSaltCost: 14
|
|
ClientSecretGenerator:
|
|
Length: 64
|
|
IncludeLowerLetters: true
|
|
IncludeUpperLetters: true
|
|
IncludeDigits: true
|
|
IncludeSymbols: true
|
|
InitializeUserCode:
|
|
Length: 6
|
|
Expiry: '72h'
|
|
IncludeLowerLetters: false
|
|
IncludeUpperLetters: true
|
|
IncludeDigits: true
|
|
IncludeSymbols: false
|
|
EmailVerificationCode:
|
|
Length: 6
|
|
Expiry: '1h'
|
|
IncludeLowerLetters: false
|
|
IncludeUpperLetters: true
|
|
IncludeDigits: true
|
|
IncludeSymbols: false
|
|
PhoneVerificationCode:
|
|
Length: 6
|
|
Expiry: '1h'
|
|
IncludeLowerLetters: false
|
|
IncludeUpperLetters: true
|
|
IncludeDigits: true
|
|
IncludeSymbols: false
|
|
PasswordVerificationCode:
|
|
Length: 6
|
|
Expiry: '1h'
|
|
IncludeLowerLetters: false
|
|
IncludeUpperLetters: true
|
|
IncludeDigits: true
|
|
IncludeSymbols: false
|
|
Multifactors:
|
|
OTP:
|
|
Issuer: 'Zitadel'
|
|
VerificationKey:
|
|
EncryptionKeyID: $ZITADEL_OTP_VERIFICATION_KEY
|
|
VerificationLifetimes:
|
|
PasswordCheck: 240h #10d
|
|
MfaInitSkip: 720h #30d
|
|
MfaSoftwareCheck: 18h
|
|
MfaHardwareCheck: 12h
|
|
DefaultPolicies:
|
|
Age:
|
|
Description: Standard age policy
|
|
MaxAgeDays: 365
|
|
ExpireWarnDays: 10
|
|
Complexity:
|
|
Description: Standard complexity policy
|
|
MinLength: 8
|
|
HasLowercase: true
|
|
HasUppercase: false
|
|
HasNumber: true
|
|
HasSymbol: true
|
|
Lockout:
|
|
Description: Standard lockout policy
|
|
MaxAttempts: 5
|
|
ShowLockOutFailures: true
|
|
OrgIam:
|
|
Description: Standard org policy
|
|
UserLoginMustBeDomain: true
|
|
IamID: 'IAM'
|
|
DomainVerification:
|
|
VerificationKey:
|
|
EncryptionKeyID: $ZITADEL_DOMAIN_VERIFICATION_KEY
|
|
VerificationGenerator:
|
|
Length: 32
|
|
IncludeLowerLetters: true
|
|
IncludeUpperLetters: true
|
|
IncludeDigits: true
|
|
IncludeSymbols: false
|
|
Notifications:
|
|
DebugMode: $DEBUG_MODE
|
|
Endpoints:
|
|
InitCode: '$ZITADEL_ACCOUNTS/user/init?userID={{.UserID}}&code={{.Code}}&passwordset={{.PasswordSet}}'
|
|
PasswordReset: '$ZITADEL_ACCOUNTS/password/init?userID={{.UserID}}&code={{.Code}}'
|
|
VerifyEmail: '$ZITADEL_ACCOUNTS/mail/verification?userID={{.UserID}}&code={{.Code}}'
|
|
Providers:
|
|
Chat:
|
|
Url: $CHAT_URL
|
|
SplitCount: 4000
|
|
Email:
|
|
SMTP:
|
|
Host: $SMTP_HOST
|
|
User: $SMTP_USER
|
|
Password: $SMTP_PASSWORD
|
|
From: $EMAIL_SENDER_ADDRESS
|
|
FromName: $EMAIL_SENDER_NAME
|
|
Tls: $SMTP_TLS
|
|
Twilio:
|
|
SID: $TWILIO_SERVICE_SID
|
|
Token: $TWILIO_TOKEN
|
|
From: $TWILIO_SENDER_NAME
|
|
TemplateData:
|
|
InitCode:
|
|
Title: 'InitCode.Title'
|
|
PreHeader: 'InitCode.PreHeader'
|
|
Subject: 'InitCode.Subject'
|
|
Greeting: 'InitCode.Greeting'
|
|
Text: 'InitCode.Text'
|
|
ButtonText: 'InitCode.ButtonText'
|
|
PasswordReset:
|
|
Title: 'PasswordReset.Title'
|
|
PreHeader: 'PasswordReset.PreHeader'
|
|
Subject: 'PasswordReset.Subject'
|
|
Greeting: 'PasswordReset.Greeting'
|
|
Text: 'PasswordReset.Text'
|
|
ButtonText: 'PasswordReset.ButtonText'
|
|
VerifyEmail:
|
|
Title: 'VerifyEmail.Title'
|
|
PreHeader: 'VerifyEmail.PreHeader'
|
|
Subject: 'VerifyEmail.Subject'
|
|
Greeting: 'VerifyEmail.Greeting'
|
|
Text: 'VerifyEmail.Text'
|
|
ButtonText: 'VerifyEmail.ButtonText'
|
|
VerifyPhone:
|
|
Title: 'VerifyPhone.Title'
|
|
PreHeader: 'VerifyPhone.PreHeader'
|
|
Subject: 'VerifyPhone.Subject'
|
|
Greeting: 'VerifyPhone.Greeting'
|
|
Text: 'VerifyPhone.Text'
|
|
ButtonText: 'VerifyPhone.ButtonText' |