package at.gv.egovernment.moa.id.auth;

import iaik.asn1.ObjectID;


/**
 * Constants used throughout moa-id-auth component.
 * 
 * @author Paul Ivancsics
 * @version $Id$
 */
public interface MOAIDAuthConstants {

  /** servlet parameter "Target" */
  public static final String PARAM_TARGET = "Target";
  /** servlet parameter "OA" */
  public static final String PARAM_OA = "OA";
  /** servlet parameter "bkuURI" */
  public static final String PARAM_BKU = "bkuURI";
  /** servlet parameter "BKUSelectionTemplate" */
  public static final String PARAM_BKUTEMPLATE = "BKUSelectionTemplate";
  /** default BKU URL */
  public static final String DEFAULT_BKU = "http://localhost:3495/http-security-layer-request";
  /** servlet parameter "returnURI" */
  public static final String PARAM_RETURN = "returnURI";
  /** servlet parameter "Template" */
  public static final String PARAM_TEMPLATE = "Template";
  /** servlet parameter "MOASessionID" */
  public static final String PARAM_SESSIONID = "MOASessionID";
  /** servlet parameter "XMLResponse" */
  public static final String PARAM_XMLRESPONSE = "XMLResponse";
  /** servlet parameter "SAMLArtifact" */
  public static final String PARAM_SAMLARTIFACT = "SAMLArtifact";
  /** Request name {@link at.gv.egovernment.moa.id.auth.servlet.StartAuthenticationServlet} is mapped to */
  public static final String REQ_START_AUTHENTICATION = "StartAuthentication";
  /** Request name {@link at.gv.egovernment.moa.id.auth.servlet.VerifyIdentityLinkServlet} is mapped to */
  public static final String REQ_VERIFY_IDENTITY_LINK = "VerifyIdentityLink";
  /** Request name {@link at.gv.egovernment.moa.id.auth.servlet.VerifyAuthenticationBlockServlet} is mapped to */
  public static final String REQ_VERIFY_AUTH_BLOCK = "VerifyAuthBlock";
  /** Logging hierarchy used for controlling debug output of XML structures to files */
  public static final String DEBUG_OUTPUT_HIERARCHY = "moa.id.auth";
  /** Header Name for controlling the caching mechanism of the browser */
  public static final String HEADER_EXPIRES = "Expires";
  /** Header Value for controlling the caching mechanism of the browser */
  public static final String HEADER_VALUE_EXPIRES = "Sat, 6 May 1995 12:00:00 GMT";
  /** Header Name for controlling the caching mechanism of the browser */
  public static final String HEADER_PRAGMA = "Pragma";
  /** Header Value for controlling the caching mechanism of the browser */
  public static final String HEADER_VALUE_PRAGMA = "no-cache";
  /** Header Name for controlling the caching mechanism of the browser */
  public static final String HEADER_CACHE_CONTROL = "Cache-control";
  /** Header Value for controlling the caching mechanism of the browser */
  public static final String HEADER_VALUE_CACHE_CONTROL = "no-store, no-cache, must-revalidate";
  /** Header Value for controlling the caching mechanism of the browser */
  public static final String HEADER_VALUE_CACHE_CONTROL_IE = "post-check=0, pre-check=0";
  /** 
   * the identity link signer X509Subject names of those identity link signer certificates 
   * not including the identity link signer OID. The authorisation for signing the identity
   * link must be checked by using their issuer names. After february 19th 2007 the OID of
   * the certificate will be used fo checking the authorisation for signing identity links.
   */ 
  public static final String[] IDENTITY_LINK_SIGNERS_WITHOUT_OID = 
    new String[] {"T=Dr.,CN=Nikolaus Schwab,O=BM f. Inneres i.A. des gf. Mitgieds der Datenschutzkommission",
                  "T=Dr.,CN=Nikolaus Schwab,O=BM f. Inneres i.A. des gf. Mitglieds der Datenschutzkommission"};  
  /**
   * the number of the certifcate extension "Eigenschaft zur Ausstellung von Personenbindungen"
   */
  public static final String IDENTITY_LINK_SIGNER_OID_NUMBER = "1.2.40.0.10.1.7.1";
  /** 
   * the OID of the identity link signer certificate (Eigenschaft zur Ausstellung von Personenbindungen);
   * used for checking the authorisation for signing the identity link for identity links signed after february 19th 2007
   */
  public static final ObjectID IDENTITY_LINK_SIGNER_OID = new ObjectID(IDENTITY_LINK_SIGNER_OID_NUMBER);

}