Examples with SecurityAnswerVerificationConfig org.forgerock.selfservice.stages.kba.SecurityAnswerVerificationConfig used on opensource projects

Example 1 with SecurityAnswerVerificationConfig

use of org.forgerock.selfservice.stages.kba.SecurityAnswerVerificationConfig in project OpenAM by OpenRock.

the class ForgottenUsernameConfigProvider method getServiceConfig.

@Override
public ProcessInstanceConfig getServiceConfig(ForgottenUsernameConsoleConfig config, Context context, String realm) {
    List<StageConfig> stages = new ArrayList<>();
    if (config.isCaptchaEnabled()) {
        stages.add(new CaptchaStageConfig().setRecaptchaSiteKey(config.getCaptchaSiteKey()).setRecaptchaSecretKey(config.getCaptchaSecretKey()).setRecaptchaUri(config.getCaptchaVerificationUrl()));
    }
    stages.add(new UserQueryConfig().setValidQueryFields(config.getValidQueryAttributes()).setIdentityIdField("/username").setIdentityUsernameField("/username").setIdentityEmailField("/" + config.getEmailAttributeName() + "/0").setIdentityServiceUrl("/users"));
    if (config.isKbaEnabled()) {
        stages.add(new SecurityAnswerVerificationConfig(new KbaConfig()).setQuestions(config.getSecurityQuestions()).setKbaPropertyName("kbaInfo").setNumberOfQuestionsUserMustAnswer(config.getMinimumAnswersToVerify()).setIdentityServiceUrl("/users"));
    }
    if (config.isEmailEnabled()) {
        stages.add(new EmailUsernameConfig().setEmailServiceUrl("/email").setSubjectTranslations(config.getSubjectTranslations()).setMessageTranslations(config.getMessageTranslations()).setMimeType("text/html").setUsernameToken("%username%"));
    }
    if (config.isShowUsernameEnabled()) {
        stages.add(new RetrieveUsernameConfig());
    }
    String secret = SystemProperties.get(Constants.ENC_PWD_PROPERTY);
    JwtTokenHandlerConfig jwtTokenConfig = new JwtTokenHandlerConfig().setSharedKey(secret).setKeyPairAlgorithm("RSA").setKeyPairSize(1024).setJweAlgorithm(JweAlgorithm.RSAES_PKCS1_V1_5).setEncryptionMethod(EncryptionMethod.A128CBC_HS256).setJwsAlgorithm(JwsAlgorithm.HS256).setTokenLifeTimeInSeconds(config.getTokenExpiry());
    return new ProcessInstanceConfig().setStageConfigs(stages).setSnapshotTokenConfig(jwtTokenConfig).setStorageType(StorageType.STATELESS);
}

Example 2 with SecurityAnswerVerificationConfig

use of org.forgerock.selfservice.stages.kba.SecurityAnswerVerificationConfig in project OpenAM by OpenRock.

the class ForgottenPasswordConfigProvider method getServiceConfig.

@Override
public ProcessInstanceConfig getServiceConfig(ForgottenPasswordConsoleConfig config, Context context, String realm) {
    List<StageConfig> stages = new ArrayList<>();
    if (config.isCaptchaEnabled()) {
        stages.add(new CaptchaStageConfig().setRecaptchaSiteKey(config.getCaptchaSiteKey()).setRecaptchaSecretKey(config.getCaptchaSecretKey()).setRecaptchaUri(config.getCaptchaVerificationUrl()));
    }
    stages.add(new UserQueryConfig().setValidQueryFields(config.getValidQueryAttributes()).setIdentityIdField("/username").setIdentityUsernameField("/username").setIdentityEmailField("/" + config.getEmailAttributeName() + "/0").setIdentityServiceUrl("/users"));
    if (config.isEmailEnabled()) {
        String serverUrl = config.getEmailVerificationUrl() + "&realm=" + realm;
        stages.add(new VerifyEmailAccountConfig().setEmailServiceUrl("/email").setIdentityEmailField(config.getEmailAttributeName()).setSubjectTranslations(config.getSubjectTranslations()).setMessageTranslations(config.getMessageTranslations()).setMimeType("text/html").setVerificationLinkToken("%link%").setVerificationLink(serverUrl));
    }
    if (config.isKbaEnabled()) {
        stages.add(new SecurityAnswerVerificationConfig(new KbaConfig()).setQuestions(config.getSecurityQuestions()).setKbaPropertyName("kbaInfo").setNumberOfQuestionsUserMustAnswer(config.getMinimumAnswersToVerify()).setIdentityServiceUrl("/users"));
    }
    stages.add(new ResetStageConfig().setIdentityServiceUrl("/users").setIdentityPasswordField("userPassword"));
    String secret = SystemProperties.get(Constants.ENC_PWD_PROPERTY);
    JwtTokenHandlerConfig jwtTokenConfig = new JwtTokenHandlerConfig().setSharedKey(secret).setKeyPairAlgorithm("RSA").setKeyPairSize(1024).setJweAlgorithm(JweAlgorithm.RSAES_PKCS1_V1_5).setEncryptionMethod(EncryptionMethod.A128CBC_HS256).setJwsAlgorithm(JwsAlgorithm.HS256).setTokenLifeTimeInSeconds(config.getTokenExpiry());
    return new ProcessInstanceConfig().setStageConfigs(stages).setSnapshotTokenConfig(jwtTokenConfig).setStorageType(StorageType.STATELESS);
}