Authentication engine attributes
The following table lists the attributes of the AuthEngine.
| Attribute | Default | Description |
|---|---|---|
| differingResource Startover | true | Whether to restart the state dispatching if the resource URL accessed changes. |
| classPath | -- (but default configuration template automatically constructs a sensible classpath) | The class path for the AuthEngine and AuthStates. |
| classLoadStrategy | PARENT_FIRST | Strategy for loading classes. Valid values: PARENT_FIRST, PARENT_LAST. |
| propagateSession | true | Whether to propagate session values to client when successfully completing a conversation (AUTH_DONE). |
| hide | "auto" | List of variable names that should be hidden in logs. If the option "auto" is configured, the variables -dyncert.key as well as -connection.HttpHeader.Authorization and client_secret are hidden. Furthermore, all variables named like GUI fields of type pw-text (passwords) will be hidden.Simple wildcarding can be used by appending a at the end of the variable that should be hidden. That way, every variable that starts with a certain string will be hidden from the log. Example: "passw" will hide "password" and "passwd". |
| inputLanguageCookie | -- (but default configuration template sets LANG) | Name of a cookie containing the user's preferred language. This can be used to read cookies set by applications or by nevisLogRend. |
| inputLanguageAttribute | "language" | Name of query parameter or form field that changes the language of the user. |
| useLiteralDictionary | false . | |
| literalDictionaryLanguages | "en,de,it,fr" | List of known and accepted languages. Additional languages must be registered here and a corresponding LitDict file must be placed on the configuration directory. See also the section about [JavaEE server ". |
| addAutheLevelToSecRoles | false (but default configuration template sets "true") | Whether to add the authLevel of the user to the list of roles. This is required if the SecurityRoleFilter of nevisProxy is used to restrict access to resources based on authLevels. |