config.js.template

#!/usr/bin/env node
const config = {};

config.port = 3000;
config.host = 'http://localhost:3000';
config.headless = false;
config.debug = false;

config.registration = {
  redirect: '',
  extension: '/?new_user=1'
}

// HTTPS enable
config.https = {
  enabled: false,
  cert_file: 'certs/idm-2018-cert.pem',
  key_file: 'certs/idm-2018-key.pem',
  ca_certs: [],
  port: 443
};

// Config email list type to use domain filtering
config.email_list_type = null; // whitelist or blacklist

// Enable 2fa authentication
config.enable_2fa = false;

// Secret for user sessions in web
config.session = {
  secret: require('crypto').randomBytes(20).toString('hex'), // Must be changed
  expires: 60 * 60 * 1000 // 1 hour
};

// Key to encrypt user passwords
config.password_encryption = {
  key: 'nodejs_idm' // Must be changed
};

// Enable CORS
config.cors = {
  enabled: false,
  options: {
    /* eslint-disable snakecase/snakecase */
    origin: '*',
    methods: ['GET', 'HEAD', 'PUT', 'PATCH', 'POST', 'DELETE'],
    allowedHeaders: '*',
    exposedHeaders: undefined,
    credentials: undefined,
    maxAge: undefined,
    preflightContinue: false,
    optionsSuccessStatus: 204
    /* eslint-enable snakecase/snakecase */
  }
};

// Content Security Policy configuration
config.csp = {
    form_action: undefined,
    script_src: undefined
};

// Config oauth2 parameters
config.oauth2 = {
  authorization_code_lifetime: 5 * 60, // Five minutes
  access_token_lifetime: 60 * 60, // One hour
  ask_authorization: true, // Prompt a message to users to allow the application to read their details
  refresh_token_lifetime: 60 * 60 * 24 * 14, // Two weeks
  unique_url: false, // This parameter allows to verify that an application with the same url
  // does not exist when creating or editing it. If there are already applications
  // with the same URL, they should be changed manually
  not_require_client_authentication_grant_type: [] // Define grant types that do not require a client authentication

};

// Config oidc parameters
config.oidc = {
  jwt_algorithm: 'HS256', // HS256,HS384,HS512,RS256
};

// Config api parameters
config.api = {
  token_lifetime: 60 * 60 // One hour
};

// Configure Policy Decision Point (PDP)
//  - IdM can perform basic policy checks (HTTP verb + path)
//  - AuthZForce can perform basic policy checks as well as advanced
// If authorization level is advanced you can create rules, HTTP verb+resource and XACML advanced. In addition
// you need to have an instance of authzforce deployed to perform advanced authorization request from a Pep Proxy.
// If authorization level is basic, only HTTP verb+resource rules can be created
config.authorization = {
  level: 'basic', // basic|payload|advanced
  authzforce: {
    enabled: false,
    host: 'localhost',
    port: 8080
  }
};

// Enable usage control and configure where is the Policy Translation Point
config.usage_control = {
  enabled: false,
  ptp: {
    host: 'localhost',
    port: 8081
  }
};

// Database info
config.database = {
  host: 'localhost',
  password: 'idm',
  username: 'root',
  database: 'idm',
  dialect: 'mysql',
  port: undefined
};

// External user authentication
config.external_auth = {
  enabled: false,
  id_prefix: 'external_',
  password_encryption: 'sha1', // bcrypt and sha1 supported
  password_encryption_key: undefined,
  database: {
    host: 'localhost',
    port: undefined,
    database: 'db_name',
    username: 'db_user',
    password: 'db_pass',
    user_table: 'user_view',
    dialect: 'mysql'
  }
};

// External user authentication with LDAP
// Testing credentials from https://www.forumsys.com/tutorials/integration-how-to/ldap/online-ldap-test-server/
config.external_auth_ldap = {
  enabled: false,
  id_prefix: 'external_ldap_',
  database: {
    /* eslint-disable snakecase/snakecase */
    host: 'ldap.forumsys.com',
    port: 389,
    reader_dn: 'cn=read-only-admin,dc=example,dc=com',
    reader_password: 'password',
    suffix: 'dc=example,dc=com',
    idAttribute: 'uid',
    usernameAttribute: 'uid',
    emailAttribute: 'mail'
    /* eslint-enable snakecase/snakecase */
  }
};

// External Participant Registry
config.pr = {
    url: undefined,
    id: "EU.EORI.NL000000000",
    parties_endpoint: undefined,
    token_endpoint: undefined,
    client_id: undefined,
    client_key: undefined,
    client_crt: undefined
}

// External Authorization Registry (requires enabling the external participant registry)
config.ar = {
    url: undefined,
    id: "EU.EORI.NL000000004",
    delegation_endpoint: undefined,
    token_endpoint: undefined
}

// Email configuration
config.mail = {
  host: 'localhost',
  port: 25,
  from: 'noreply@localhost',
  secure: false,
  enable_authentication: false,
  auth: {
    type: "type",
    user: "username",
    pass: "pass",
  }
};

// Config themes
config.site = {
  title: 'Identity Manager',
  theme: 'default'
};

// Config language
config.lang = {
    default_lang: 'en'  
};

// Config eIDAS Authentication
config.eidas = {
  enabled: false,
  gateway_host: 'localhost',
  node_host: 'https://se-eidas.redsara.es/EidasNode/ServiceProvider',
  metadata_expiration: 60 * 60 * 24 * 365 // One year
};

config.external_vc = {
  enabled: false,
  credential_location: 'local', // local, jwks
  jwks: {
    host: '',
    path: '/verifier/.well-known/jwks_uri',
    kid: ''
  }
}

// Enables the possibility of adding identity attributes in users' profile
config.identity_attributes = {
  /* eslint-disable snakecase/snakecase */
  enabled: false,
  attributes: [
    {
      name: 'Vision',
      key: 'vision',
      type: 'number',
      minVal: '0',
      maxVal: '100'
    },
    {
      name: 'Color Perception',
      key: 'color',
      type: 'number',
      minVal: '0',
      maxVal: '100'
    },
    {
      name: 'Hearing',
      key: 'hearing',
      type: 'number',
      minVal: '0',
      maxVal: '100'
    },
    {
      name: 'Vocal Capability',
      key: 'vocal',
      type: 'number',
      minVal: '0',
      maxVal: '100'
    },
    {
      name: 'Manipulation Strength',
      key: 'manipulation',
      type: 'number',
      minVal: '0',
      maxVal: '100'
    },
    { name: 'Reach', key: 'reach', type: 'number', minVal: '0', maxVal: '100' },
    {
      name: 'Cognition',
      key: 'cognition',
      type: 'number',
      minVal: '0',
      maxVal: '100'
    }
  ]
  /* eslint-enable snakecase/snakecase */
};

module.exports = config;