fix!(jans-cedarling): fix cedarling-properties docs to be more proper (…

…#10788) * docs(jans-cedarling): remove `cedarling` properties from `pyi` file. Because it hard to keep consistent, and contains mistakes Signed-off-by: Oleh Bohzok <[email protected]> (cherry picked from commit cdd7a41) * docs(jans-cedarling): align config parameter names against Cedarling-Nativity-Plan Signed-off-by: Oleh Bohzok <[email protected]> * docs(jans-cedarling): align doc value for `FeatureToggle` type Signed-off-by: Oleh Bohzok <[email protected]> * docs(jans-cedarling): remove duplicate of CEDARLING_LOG_TYPE Signed-off-by: Oleh Bohzok <[email protected]> * docs(jans-cedarling): add section Required keys for startup Signed-off-by: Oleh Bozhok <[email protected]> * chore(jans-cedarling): remove `CEDARLING_TOKEN_CONFIGS` default macros. To highlight key if missing Signed-off-by: Oleh Bozhok <[email protected]> * chore(jans-cedarling): sort keys to required be first Signed-off-by: Oleh Bozhok <[email protected]> * docs(jans-cedarling): update example of json and yaml Signed-off-by: Oleh Bozhok <[email protected]> * docs(jans-cedarling): align doc value for FeatureToggle type Signed-off-by: Oleh Bozhok <[email protected]> * chore(jans-cedarling): return using default implementation of `CEDARLING_TOKEN_CONFIGS` when parsing wia serde Signed-off-by: Oleh Bozhok <[email protected]> * docs(jans-cedarling): `CEDARLING_TOKEN_CONFIGS` update documentation that show default implementation of `CEDARLING_TOKEN_CONFIGS` Signed-off-by: Oleh Bozhok <[email protected]> * docs(jans-cedarling): rename `CEDARLING_LOCAL_POLICY_STORE` to `CEDARLING_POLICY_STORE_LOCAL` Signed-off-by: Oleh Bozhok <[email protected]> --------- Signed-off-by: Oleh Bohzok <[email protected]> Signed-off-by: Oleh Bozhok <[email protected]>
JanssenProject · Feb 4, 2025 · 4b4d5b2 · 4b4d5b2
1 parent 9286f82
commit 4b4d5b2
Show file tree

Hide file tree

Showing 13 changed files with 206 additions and 185 deletions.
diff --git a/docs/cedarling/cedarling-properties.md b/docs/cedarling/cedarling-properties.md
@@ -24,16 +24,9 @@ These Bootstrap Properties control default application level behavior.
 
 **The following bootstrap properties are needed to configure log behavior:**
 
-* **`CEDARLING_LOG_STORAGE`** : `off`, `memory`, `std_out`
+* **`CEDARLING_LOG_TYPE`** : `off`, `memory`, `std_out`
 * **`CEDARLING_LOG_LEVEL`** : System Log Level [See here](./cedarling-logs.md). Default to `WARN`
 * **`CEDARLING_LOG_STDOUT_TYPE`** : Either `System`, `Metric`, or `Decision`. Default to System.
-* **`CEDARLING_LOG_LEVEL`** : Log level filter for logging. Log level has only `System` log type entries. `TRACE` is lowest. `FATAL` is highest. Possible variants:
-  * FATAL
-  * ERROR
-  * WARN
-  * INFO
-  * DEBUG
-  * TRACE
 * **`CEDARLING_DECISION_LOG_USER_CLAIMS`** : List of claims to map from user entity, such as ["sub", "email", "username", ...]
 * **`CEDARLING_DECISION_LOG_WORKLOAD_CLAIMS`** : List of claims to map from user entity, such as ["client_id", "rp_id", ...]
 * **`CEDARLING_DECISION_LOG_DEFAULT_JWT_ID`** : Token claims that will be used for decision logging. Default is "jti", but perhaps some other claim is needed.
@@ -42,25 +35,43 @@ These Bootstrap Properties control default application level behavior.
 **The following bootstrap properties are needed to configure JWT and cryptographic behavior:**
 
 * **`CEDARLING_LOCAL_JWKS`** : JWKS file with public keys
-* **`CEDARLING_LOCAL_POLICY_STORE`** : JSON object with policy store
+* **`CEDARLING_POLICY_STORE_LOCAL`** : JSON object with policy store
 * **`CEDARLING_POLICY_STORE_LOCAL_FN`** : Local file with JSON object with policy store
-* **`CEDARLING_JWT_SIG_VALIDATION`** : `Enabled` | `Disabled` -- Whether to check the signature  of all JWT tokens. This requires an `iss` is present.
-* **`CEDARLING_JWT_STATUS_VALIDATION`** : `Enabled` | `Disabled` -- Whether to check the status of the JWT. On startup, the Cedarling should fetch and retreive the latest Status List JWT from the `.well-known/openid-configuration` via the `status_list_endpoint` claim and cache it. See the [IETF Draft](https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/) for more info.
+* **`CEDARLING_JWT_SIG_VALIDATION`** : `enabled` | `disabled` -- Whether to check the signature  of all JWT tokens. This requires an `iss` is present.
+* **`CEDARLING_JWT_STATUS_VALIDATION`** : `enabled` | `disabled` -- Whether to check the status of the JWT. On startup, the Cedarling should fetch and retreive the latest Status List JWT from the `.well-known/openid-configuration` via the `status_list_endpoint` claim and cache it. See the [IETF Draft](https://datatracker.ietf.org/doc/draft-ietf-oauth-status-list/) for more info.
 * **`CEDARLING_JWT_SIGNATURE_ALGORITHMS_SUPPORTED`** : Only tokens signed with these algorithms are acceptable to the Cedarling.
 * **`CEDARLING_TOKEN_CONFIGS`** : JSON object containing token specific configs. See: [Token Configs](#token-configs).
 * **`CEDARLING_ID_TOKEN_TRUST_MODE`** :  `Strict` | `None`. Varying levels of validations based on the preference of the developer.
 `Strict` mode requires (1) id_token `aud` matches the access_token `client_id`; (2) if a Userinfo token is present, the `sub` matches the id_token, and that the `aud` matches the access token client_id.
 
 **The following bootstrap properties are only needed for enterprise deployments.**
 
-* **`CEDARLING_LOCK`** : Enabled | Disabled. If Enabled, the Cedarling will connect to the Lock Master for policies, and subscribe for SSE events.
-* **`CEDARLING_LOCK_MASTER_CONFIGURATION_URI`** : Required if `LOCK` == `Enabled`. URI where Cedarling can get JSON file with all required metadata about Lock Master, i.e. `.well-known/lock-master-configuration`.
-* **`CEDARLING_LOCK_DYNAMIC_CONFIGURATION`** : Enabled | Disabled, controls whether Cedarling should listen for SSE config updates.
+* **`CEDARLING_LOCK`** : `enabled` | `disabled`. If `enabled`, the Cedarling will connect to the Lock Master for policies, and subscribe for SSE events.
+* **`CEDARLING_LOCK_MASTER_CONFIGURATION_URI`** : Required if `LOCK` == `enabled`. URI where Cedarling can get JSON file with all required metadata about Lock Master, i.e. `.well-known/lock-master-configuration`.
+* **`CEDARLING_LOCK_DYNAMIC_CONFIGURATION`** : `enabled` | `disabled`, controls whether Cedarling should listen for SSE config updates.
 * **`CEDARLING_LOCK_SSA_JWT`** : SSA for DCR in a Lock Master deployment. The Cedarling will validate this SSA JWT prior to DCR.
 * **`CEDARLING_LOCK_LOG_INTERVAL`** : How often to send log messages to Lock Master (0 to turn off trasmission).
 * **`CEDARLING_LOCK_HEALTH_INTERVAL`** : How often to send health messages to Lock Master (0 to turn off transmission).
 * **`CEDARLING_LOCK_TELEMETRY_INTERVAL`** : How often to send telemetry messages to Lock Master (0 to turn off transmission).
-* **`CEDARLING_LOCK_LISTEN_SSE`** :  Enabled | Disabled: controls whether Cedarling should listen for updates from the Lock Server.
+* **`CEDARLING_LOCK_LISTEN_SSE`** :  `enabled` | `disabled`: controls whether Cedarling should listen for updates from the Lock Server.
+
+## Required keys for startup
+
+* **`CEDARLING_APPLICATION_NAME`
+* **`CEDARLING_TOKEN_CONFIGS` - check if default implementation of Token Config is suitable for you.
+
+To enable usage of principals at least one of the following keys must be provided:
+
+* **`CEDARLING_WORKLOAD_AUTHZ`
+* **`CEDARLING_USER_AUTHZ`
+
+To load policy store one of the following keys must be provided:
+
+* **`CEDARLING_POLICY_STORE_LOCAL`
+* **`CEDARLING_POLICY_STORE_URI`
+* **`CEDARLING_POLICY_STORE_LOCAL_FN`
+
+All other fields are optional and can be omitted. If a field is not provided, Cedarling will use the default value specified in the property definition.
 
 ## User-Workload Boolean Operation
 
@@ -107,6 +118,55 @@ CEDARLING_TOKEN_CONFIGS = {
 }
 ```
 
+## Default implementation of Token Config
+
+Here is rust code default implementation of Token Configs (`CEDARLING_TOKEN_CONFIGS`). This is used when no custom token config is provided.
+
+```rust
+impl Default for TokenConfigs {
+    fn default() -> Self {
+        Self(HashMap::from([
+            ("access_token".to_string(), TokenConfig {
+                entity_type_name: "Access_token".to_string(),
+                claims: ClaimsValidationConfig {
+                    iss: FeatureToggle::Enabled,
+                    sub: FeatureToggle::Disabled,
+                    aud: FeatureToggle::Disabled,
+                    exp: FeatureToggle::Enabled,
+                    nbf: FeatureToggle::Disabled,
+                    iat: FeatureToggle::Disabled,
+                    jti: FeatureToggle::Enabled,
+                },
+            }),
+            ("id_token".to_string(), TokenConfig {
+                entity_type_name: "id_token".to_string(),
+                claims: ClaimsValidationConfig {
+                    iss: FeatureToggle::Enabled,
+                    sub: FeatureToggle::Enabled,
+                    aud: FeatureToggle::Enabled,
+                    exp: FeatureToggle::Enabled,
+                    nbf: FeatureToggle::Disabled,
+                    iat: FeatureToggle::Disabled,
+                    jti: FeatureToggle::Disabled,
+                },
+            }),
+            ("userinfo_token".to_string(), TokenConfig {
+                entity_type_name: "Userinfo_token".to_string(),
+                claims: ClaimsValidationConfig {
+                    iss: FeatureToggle::Enabled,
+                    sub: FeatureToggle::Enabled,
+                    aud: FeatureToggle::Enabled,
+                    exp: FeatureToggle::Enabled,
+                    nbf: FeatureToggle::Disabled,
+                    iat: FeatureToggle::Disabled,
+                    jti: FeatureToggle::Disabled,
+                },
+            }),
+        ]))
+    }
+}
+```
+
 ## ID Token Trust Mode
 
 The level of validation for the ID Token JWT can be set to either `None` or `Strict`.
@@ -165,59 +225,50 @@ Below is an example of a bootstrap config in JSON format. Not all fields should
 
 ```json
 {
-    "CEDARLING_APPLICATION_NAME": "My App",
-    "CEDARLING_POLICY_STORE_URI": "",
-    "CEDARLING_POLICY_STORE_ID": "840da5d85403f35ea76519ed1a18a33989f855bf1cf8",
-    "CEDARLING_LOG_TYPE": "memory",
-    "CEDARLING_LOG_LEVEL": "INFO",
-    "CEDARLING_DECISION_LOG_USER_CLAIMS": ["sub", "email", "username"],
-    "CEDARLING_DECISION_LOG_WORKLOAD_CLAIMS": ["client_id", "rp_id"],
-    "CEDARLING_DECISION_LOG_DEFAULT_JWT_ID": "jti",
-    "CEDARLING_LOG_TTL": 60,
-    "CEDARLING_USER_AUTHZ": "enabled",
-    "CEDARLING_WORKLOAD_AUTHZ": "enabled",
-    "CEDARLING_USER_WORKLOAD_BOOLEAN_OPERATION": "AND",
-    "CEDARLING_MAPPING_USER": "CustomUser",
-    "CEDARLING_MAPPING_WORKLOAD": "CustomWorkload",
-    "CEDARLING_MAPPING_ROLE": "CustomRole",
-    "CEDARLING_LOCAL_JWKS": "../test_files/local_jwks.json",
-    "CEDARLING_LOCAL_POLICY_STORE": null,
-    "CEDARLING_POLICY_STORE_LOCAL_FN": "../test_files/policy-store_blobby.json",
-    "CEDARLING_JWT_SIG_VALIDATION": "enabled",
-    "CEDARLING_JWT_STATUS_VALIDATION": "disabled",
-    "CEDARLING_JWT_SIGNATURE_ALGORITHMS_SUPPORTED": [
-        "HS256",
-        "RS256"
-    ],
-    "CEDARLING_TOKEN_CONFIGS": {
-        "access_token": {
-            "entity_type_name": "Access_token",
-            "exp": "enabled",
-        },
-        "id_token": {
-            "entity_type_name": "id_token",
-            "iss": "enabled",
-            "sub": "enabled",
-            "exp": "enabled",
-            "iat": "enabled",
-            "aud": "enabled",
-        },
-        "id_token": {
-            "entity_type_name": "id_token",
-            "iss": "enabled",
-            "aud": "enabled",
-            "sub": "enabled",
-            "exp": "enabled",
-        },
+  "CEDARLING_APPLICATION_NAME": "My App",
+  "CEDARLING_USER_AUTHZ": "enabled",
+  "CEDARLING_WORKLOAD_AUTHZ": "enabled",
+  "CEDARLING_POLICY_STORE_URI": null,
+  "CEDARLING_POLICY_STORE_LOCAL": null,
+  "CEDARLING_POLICY_STORE_LOCAL_FN": "./example_files/policy-store.json",
+  "CEDARLING_TOKEN_CONFIGS": {
+    "access_token": {
+      "entity_type_name": "Access_token"
+    },
+    "id_token": {
+      "entity_type_name": "id_token"
     },
-    "CEDARLING_ID_TOKEN_TRUST_MODE": "Strict",
-    "CEDARLING_LOCK": "disabled",
-    "CEDARLING_LOCK_MASTER_CONFIGURATION_URI": null,
-    "CEDARLING_DYNAMIC_CONFIGURATION": "disabled",
-    "CEDARLING_LOCK_SSA_JWT": null,
-    "CEDARLING_AUDIT_HEALTH_INTERVAL": 0,
-    "CEDARLING_AUDIT_TELEMETRY_INTERVAL": 0,
-    "CEDARLING_LISTEN_SSE": "disabled"
+    "userinfo_token": {
+      "entity_type_name": "Userinfo_token"
+    }
+  },
+  "CEDARLING_POLICY_STORE_ID": "gICAgcHJpbmNpcGFsIGlz",
+  "CEDARLING_LOG_TYPE": "std_out",
+  "CEDARLING_LOG_LEVEL": "INFO",
+  "CEDARLING_LOG_TTL": null,
+  "CEDARLING_DECISION_LOG_USER_CLAIMS": [
+    "sub",
+    "email"
+  ],
+  "CEDARLING_DECISION_LOG_WORKLOAD_CLAIMS": [
+    "client_id",
+    "rp_id"
+  ],
+  "CEDARLING_USER_WORKLOAD_BOOLEAN_OPERATION": "AND",
+  "CEDARLING_LOCAL_JWKS": null,
+  "CEDARLING_JWT_SIG_VALIDATION": "disabled",
+  "CEDARLING_JWT_STATUS_VALIDATION": "disabled",
+  "CEDARLING_JWT_SIGNATURE_ALGORITHMS_SUPPORTED": [
+    "HS256",
+    "RS256"
+  ],
+  "CEDARLING_ID_TOKEN_TRUST_MODE": "strict",
+  "CEDARLING_LOCK": "disabled",
+  "CEDARLING_LOCK_MASTER_CONFIGURATION_URI": null,
+  "CEDARLING_LOCK_DYNAMIC_CONFIGURATION": "disabled",
+  "CEDARLING_LOCK_HEALTH_INTERVAL": 0,
+  "CEDARLING_LOCK_TELEMETRY_INTERVAL": 0,
+  "CEDARLING_LOCK_LISTEN_SSE": "disabled"
 }
 ```
 
@@ -246,39 +297,37 @@ Below is an example of a bootstrap config in YAML format. Not all fields should
 
 ```yaml
 CEDARLING_APPLICATION_NAME: My App
-CEDARLING_POLICY_STORE_URI: ''
-CEDARLING_POLICY_STORE_ID: '840da5d85403f35ea76519ed1a18a33989f855bf1cf8'
-CEDARLING_LOG_TYPE: 'memory'
-CEDARLING_LOG_LEVEL: 'INFO'
+CEDARLING_USER_AUTHZ: enabled
+CEDARLING_WORKLOAD_AUTHZ: enabled
+CEDARLING_POLICY_STORE_URI: null
+CEDARLING_POLICY_STORE_LOCAL: null
+CEDARLING_POLICY_STORE_LOCAL_FN: ./example_files/policy-store.json
+CEDARLING_TOKEN_CONFIGS:
+    access_token: { entity_type_name: "Access_token" }
+    id_token: { entity_type_name: "id_token" }
+    userinfo_token: { entity_type_name: "Userinfo_token" }
+
+CEDARLING_POLICY_STORE_ID: gICAgcHJpbmNpcGFsIGlz
+CEDARLING_LOG_TYPE: std_out
+CEDARLING_LOG_LEVEL: INFO
+CEDARLING_LOG_TTL: null
 CEDARLING_DECISION_LOG_USER_CLAIMS: ["sub","email"]
 CEDARLING_DECISION_LOG_WORKLOAD_CLAIMS: ["client_id", "rp_id"]
-CEDARLING_LOG_TTL: 60
-CEDARLING_USER_AUTHZ: 'enabled'
-CEDARLING_WORKLOAD_AUTHZ: 'enabled'
-CEDARLING_USER_WORKLOAD_BOOLEAN_OPERATION: 'AND'
-CEDARLING_MAPPING_USER: 'CustomUser'
-CEDARLING_MAPPING_WORKLOAD: 'CustomWorkload'
-CEDARLING_MAPPING_ROLE: 'CustomRole'
-CEDARLING_LOCAL_JWKS: '../test_files/local_jwks.json'
-CEDARLING_LOCAL_POLICY_STORE: null
-CEDARLING_POLICY_STORE_LOCAL_FN: '../test_files/policy-store_blobby.json'
-CEDARLING_JWT_SIG_VALIDATION: 'enabled'
-CEDARLING_JWT_STATUS_VALIDATION: 'disabled'
+CEDARLING_USER_WORKLOAD_BOOLEAN_OPERATION: AND
+CEDARLING_LOCAL_JWKS: null
+CEDARLING_JWT_SIG_VALIDATION: disabled
+CEDARLING_JWT_STATUS_VALIDATION: disabled
 CEDARLING_JWT_SIGNATURE_ALGORITHMS_SUPPORTED:
-    - 'HS256'
-    - 'RS256'
-CEDARLING_TOKENS_CONFIG:
-    access_token: CustomAccessToken
-    id_token: CustomIdToken
-    userinfo_token: CustomUserinfoToken
-CEDARLING_ID_TOKEN_TRUST_MODE: 'Strict'
-CEDARLING_LOCK: 'disabled'
+    - HS256
+    - RS256
+
+CEDARLING_ID_TOKEN_TRUST_MODE: strict
+CEDARLING_LOCK: disabled
 CEDARLING_LOCK_MASTER_CONFIGURATION_URI: null
-CEDARLING_DYNAMIC_CONFIGURATION: 'disabled'
-CEDARLING_LOCK_SSA_JWT: 0
-CEDARLING_AUDIT_HEALTH_INTERVAL: 0
-CEDARLING_AUDIT_TELEMETRY_INTERVAL: 0
-CEDARLING_LISTEN_SSE: 'disabled'
+CEDARLING_LOCK_DYNAMIC_CONFIGURATION: disabled
+CEDARLING_LOCK_HEALTH_INTERVAL: 0
+CEDARLING_LOCK_TELEMETRY_INTERVAL: 0
+CEDARLING_LOCK_LISTEN_SSE: disabled
 ```
 
 * Note that properties set to `'disabled'`, an empty string `''`, zero `0`, and `null` can be ommited since they are the defaults.
diff --git a/jans-cedarling/bindings/cedarling_python/README.md b/jans-cedarling/bindings/cedarling_python/README.md
@@ -107,7 +107,7 @@ This project uses `maturin` to create a Python library from Rust code. Follow th
 To verify that the library works correctly, you can run the provided `example.py` script. Make sure the virtual environment is activated before running the script:
 
 ```bash
-CEDARLING_LOCAL_POLICY_STORE=example_files/policy-store.json python example.py
+CEDARLING_POLICY_STORE_LOCAL=example_files/policy-store.json python example.py
 ```
 
 ## Building the Python Library

diff --git a/jans-cedarling/bindings/cedarling_python/cedarling_python.pyi b/jans-cedarling/bindings/cedarling_python/cedarling_python.pyi
@@ -17,6 +17,7 @@ class BootstrapConfig:
             "CEDARLING_POLICY_STORE_ID": "12345",
             "CEDARLING_LOG_TYPE": "memory",
             "CEDARLING_LOG_TTL": 30,
+            ...
         })
     """
 
@@ -29,38 +30,7 @@ class BootstrapConfig:
 
         Args:
             options (dict): A dictionary containing configuration key-value pairs.
-
-                Required keys:
-                    - "CEDARLING_APPLICATION_NAME" (str): The name of the application.
-                    - "CEDARLING_POLICY_STORE_ID" (str): The ID of the policy store.
-
-                Optional keys:
-                    - "CEDARLING_POLICY_STORE_URI" (str, optional): URI of the policy store. Defaults to None.
-                    - "CEDARLING_LOG_TYPE" (str, optional): Type of logging. Defaults to "memory".
-                    - "CEDARLING_LOG_TTL" (int, optional): Log time-to-live in seconds. Defaults to 60.
-                    - "CEDARLING_USER_AUTHZ" (str, optional): User authorization status. Defaults to "enabled".
-                    - "CEDARLING_WORKLOAD_AUTHZ" (str, optional): Workload authorization status. Defaults to "enabled".
-                    - "CEDARLING_USR_WORKLOAD_BOOL_OP" (str, optional): Logical operator for user workload. Defaults to "AND".
-                    - "CEDARLING_LOCAL_JWKS" (str, optional): Local JWKS (JSON Web Key Set). Defaults to None.
-                    - "CEDARLING_LOCAL_POLICY_STORE" (str, optional): Local policy store configuration. Defaults to None.
-                    - "CEDARLING_POLICY_STORE_LOCAL_FN" (str, optional): Local policy store function. Defaults to None.
-                    - "CEDARLING_WORKLOAD_MAPPING" (str, optional): The workload's entity type name. Defaults to "Jans::Workload".
-                    - "CEDARLING_USER_MAPPING" (str, optional): The workload's entity type name. Defaults to "Jans::User".
-                    - "CEDARLING_ROLE_MAPPING" (str, optional): The workload's entity type name. Defaults to "Jans::Role".
-                    - "CEDARLING_JWT_SIG_VALIDATION" (str, optional): JWT signature validation status. Defaults to "enabled".
-                    - "CEDARLING_JWT_STATUS_VALIDATION" (str, optional): JWT status validation status. Defaults to "enabled".
-                    - "CEDARLING_JWT_SIGNATURE_ALGORITHMS_SUPPORTED" (list, optional): Supported JWT signature algorithms. Defaults to an empty list.
-                    - "CEDARLING_TOKEN_CONFIGS" (dict, optional): Token Validation Settings. See docs for what this defaults to.
-                    - "CEDARLING_ID_TOKEN_TRUST_MODE" (str, optional): Trust mode for ID tokens. Defaults to "strict".
-                    - "CEDARLING_LOCK" (str, optional): Lock mechanism status. Defaults to "disabled".
-                    - "CEDARLING_LOCK_MASTER_CONFIGURATION_URI" (str, optional): Master configuration URI for locks. Defaults to None.
-                    - "CEDARLING_DYNAMIC_CONFIGURATION" (str, optional): Dynamic configuration status. Defaults to "disabled".
-                    - "CEDARLING_LOCK_SSA_JWT" (str, optional): JWT for SSA locks. Defaults to None.
-                    - "CEDARLING_AUDIT_LOG_INTERVAL" (int, optional): Interval for audit logs in seconds. Defaults to 0.
-                    - "CEDARLING_AUDIT_HEALTH_INTERVAL" (int, optional): Interval for health audit in seconds. Defaults to 0.
-                    - "CEDARLING_AUDIT_HEALTH_TELEMETRY_INTERVAL" (int, optional): Interval for telemetry health audit in seconds. Defaults to 0.
-                    - "CEDARLING_LISTEN_SSE" (str, optional): Server-Sent Events listening status. Defaults to "disabled".
-
+            For more imformation visit https://docs.jans.io/head/cedarling/cedarling-properties/
         Returns:
             None: This method initializes the instance.
 

diff --git a/jans-cedarling/bindings/cedarling_python/example_files/sample_bootstrap_props.json b/jans-cedarling/bindings/cedarling_python/example_files/sample_bootstrap_props.json
@@ -17,7 +17,7 @@
     "CEDARLING_WORKLOAD_AUTHZ": "enabled",
     "CEDARLING_USER_WORKLOAD_BOOLEAN_OPERATION": "AND",
     "CEDARLING_LOCAL_JWKS": null,
-    "CEDARLING_LOCAL_POLICY_STORE": null,
+    "CEDARLING_POLICY_STORE_LOCAL": null,
     "CEDARLING_POLICY_STORE_LOCAL_FN": "./example_files/policy-store.json",
     "CEDARLING_JWT_SIG_VALIDATION": "disabled",
     "CEDARLING_JWT_STATUS_VALIDATION": "disabled",
@@ -41,9 +41,9 @@
     "CEDARLING_ID_TOKEN_TRUST_MODE": "strict",
     "CEDARLING_LOCK": "disabled",
     "CEDARLING_LOCK_MASTER_CONFIGURATION_URI": null,
-    "CEDARLING_DYNAMIC_CONFIGURATION": "disabled",
+    "CEDARLING_LOCK_DYNAMIC_CONFIGURATION": "disabled",
     "CEDARLING_LOCK_SSA_JWT": 0,
-    "CEDARLING_AUDIT_HEALTH_INTERVAL": 0,
-    "CEDARLING_AUDIT_TELEMETRY_INTERVAL": 0,
-    "CEDARLING_LISTEN_SSE": "disabled"
-}
+    "CEDARLING_LOCK_HEALTH_INTERVAL": 0,
+    "CEDARLING_LOCK_TELEMETRY_INTERVAL": 0,
+    "CEDARLING_LOCK_LISTEN_SSE": "disabled"
+}