package at.gv.egovernment.moa.id.auth; import iaik.asn1.ObjectID; /** * Constants used throughout moa-id-auth component. * * @author Paul Ivancsics * @version $Id$ */ public interface MOAIDAuthConstants { /** servlet parameter "Target" */ public static final String PARAM_TARGET = "Target"; /** servlet parameter "OA" */ public static final String PARAM_OA = "OA"; /** servlet parameter "bkuURI" */ public static final String PARAM_BKU = "bkuURI"; /** servlet parameter "BKUSelectionTemplate" */ public static final String PARAM_BKUTEMPLATE = "BKUSelectionTemplate"; /** default BKU URL */ public static final String DEFAULT_BKU = "http://localhost:3495/http-security-layer-request"; /** servlet parameter "returnURI" */ public static final String PARAM_RETURN = "returnURI"; /** servlet parameter "Template" */ public static final String PARAM_TEMPLATE = "Template"; /** servlet parameter "MOASessionID" */ public static final String PARAM_SESSIONID = "MOASessionID"; /** servlet parameter "XMLResponse" */ public static final String PARAM_XMLRESPONSE = "XMLResponse"; /** servlet parameter "SAMLArtifact" */ public static final String PARAM_SAMLARTIFACT = "SAMLArtifact"; /** Request name {@link at.gv.egovernment.moa.id.auth.servlet.StartAuthenticationServlet} is mapped to */ public static final String REQ_START_AUTHENTICATION = "StartAuthentication"; /** Request name {@link at.gv.egovernment.moa.id.auth.servlet.VerifyIdentityLinkServlet} is mapped to */ public static final String REQ_VERIFY_IDENTITY_LINK = "VerifyIdentityLink"; /** Request name {@link at.gv.egovernment.moa.id.auth.servlet.VerifyAuthenticationBlockServlet} is mapped to */ public static final String REQ_VERIFY_AUTH_BLOCK = "VerifyAuthBlock"; /** Logging hierarchy used for controlling debug output of XML structures to files */ public static final String DEBUG_OUTPUT_HIERARCHY = "moa.id.auth"; /** Header Name for controlling the caching mechanism of the browser */ public static final String HEADER_EXPIRES = "Expires"; /** Header Value for controlling the caching mechanism of the browser */ public static final String HEADER_VALUE_EXPIRES = "Sat, 6 May 1995 12:00:00 GMT"; /** Header Name for controlling the caching mechanism of the browser */ public static final String HEADER_PRAGMA = "Pragma"; /** Header Value for controlling the caching mechanism of the browser */ public static final String HEADER_VALUE_PRAGMA = "no-cache"; /** Header Name for controlling the caching mechanism of the browser */ public static final String HEADER_CACHE_CONTROL = "Cache-control"; /** Header Value for controlling the caching mechanism of the browser */ public static final String HEADER_VALUE_CACHE_CONTROL = "no-store, no-cache, must-revalidate"; /** Header Value for controlling the caching mechanism of the browser */ public static final String HEADER_VALUE_CACHE_CONTROL_IE = "post-check=0, pre-check=0"; /** * the identity link signer X509Subject names of those identity link signer certificates * not including the identity link signer OID. The authorisation for signing the identity * link must be checked by using their issuer names. After february 19th 2007 the OID of * the certificate will be used fo checking the authorisation for signing identity links. */ public static final String[] IDENTITY_LINK_SIGNERS_WITHOUT_OID = new String[] {"T=Dr.,CN=Nikolaus Schwab,O=BM f. Inneres i.A. des gf. Mitgieds der Datenschutzkommission", "T=Dr.,CN=Nikolaus Schwab,O=BM f. Inneres i.A. des gf. Mitglieds der Datenschutzkommission"}; /** * the number of the certifcate extension "Eigenschaft zur Ausstellung von Personenbindungen" */ public static final String IDENTITY_LINK_SIGNER_OID_NUMBER = "1.2.40.0.10.1.7.1"; /** * the OID of the identity link signer certificate (Eigenschaft zur Ausstellung von Personenbindungen); * used for checking the authorisation for signing the identity link for identity links signed after february 19th 2007 */ public static final ObjectID IDENTITY_LINK_SIGNER_OID = new ObjectID(IDENTITY_LINK_SIGNER_OID_NUMBER); }