jcoffey-dev
1fd32c51a0
Upstream commit: 18f4e9505027d790fd7e9fdad7f922be6719101d Enterprise-only files removed or emptied: 63 Enterprise-only snippets removed: 118 in 50 files Dangling module declarations removed: 5 Edits turning enterprise off: 25 Third-party code: 14 files, 0 not in THIRD-PARTY.md Renamed identifiers: 67 in 19 files Verification: clean The same Enterprise footprint as v0.16.25. The build check is clean apart from the expected errors in the rebuilt-feature tests. Adds sd_notify readiness, an x86-64-v2 baseline for glibc x86_64 builds with a startup CPU check, and hickory from upstream's patched branch. Fixes RocksDB blob GC rewriting every blob on compaction, a milter stall with SMFIP_NOHDRS, OIDC's email-claim fallback, Mailbox/set moves and case-only renames, EmailSubmission onSuccess* naming an existing submission, and VacationResponse/set enabling an empty script.
271 lines
7.1 KiB
JSON
271 lines
7.1 KiB
JSON
{
|
|
"realm": "stalwart",
|
|
"enabled": true,
|
|
"registrationAllowed": false,
|
|
"loginWithEmailAllowed": true,
|
|
"duplicateEmailsAllowed": false,
|
|
"sslRequired": "none",
|
|
"clients": [
|
|
{
|
|
"clientId": "stalwart",
|
|
"enabled": true,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "stalwart-secret",
|
|
"redirectUris": [
|
|
"*"
|
|
],
|
|
"webOrigins": [
|
|
"*"
|
|
],
|
|
"publicClient": false,
|
|
"protocol": "openid-connect",
|
|
"directAccessGrantsEnabled": true,
|
|
"standardFlowEnabled": true,
|
|
"serviceAccountsEnabled": true,
|
|
"defaultClientScopes": [
|
|
"openid",
|
|
"email",
|
|
"profile",
|
|
"roles"
|
|
],
|
|
"protocolMappers": [
|
|
{
|
|
"name": "groups",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-group-membership-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"full.path": "false",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "groups",
|
|
"userinfo.token.claim": "true"
|
|
}
|
|
},
|
|
{
|
|
"name": "email-claim",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "email",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "email",
|
|
"userinfo.token.claim": "true",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"name": "audience",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-audience-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"included.client.audience": "stalwart",
|
|
"id.token.claim": "false",
|
|
"access.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"clientId": "stalwart-fallback",
|
|
"enabled": true,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "stalwart-fallback-secret",
|
|
"redirectUris": [
|
|
"*"
|
|
],
|
|
"webOrigins": [
|
|
"*"
|
|
],
|
|
"publicClient": false,
|
|
"protocol": "openid-connect",
|
|
"directAccessGrantsEnabled": true,
|
|
"standardFlowEnabled": true,
|
|
"serviceAccountsEnabled": true,
|
|
"defaultClientScopes": [
|
|
"openid"
|
|
],
|
|
"optionalClientScopes": [
|
|
"email",
|
|
"profile",
|
|
"roles"
|
|
],
|
|
"protocolMappers": [
|
|
{
|
|
"name": "email-claim-userinfo-only",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "email",
|
|
"id.token.claim": "false",
|
|
"access.token.claim": "false",
|
|
"claim.name": "email",
|
|
"userinfo.token.claim": "true",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"name": "groups-userinfo-only",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-group-membership-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"full.path": "false",
|
|
"id.token.claim": "false",
|
|
"access.token.claim": "false",
|
|
"claim.name": "groups",
|
|
"userinfo.token.claim": "true"
|
|
}
|
|
},
|
|
{
|
|
"name": "audience",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-audience-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"included.client.audience": "stalwart",
|
|
"id.token.claim": "false",
|
|
"access.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"clientId": "stalwart-userinfo-username",
|
|
"enabled": true,
|
|
"clientAuthenticatorType": "client-secret",
|
|
"secret": "stalwart-userinfo-username-secret",
|
|
"redirectUris": [
|
|
"*"
|
|
],
|
|
"webOrigins": [
|
|
"*"
|
|
],
|
|
"publicClient": false,
|
|
"protocol": "openid-connect",
|
|
"directAccessGrantsEnabled": true,
|
|
"standardFlowEnabled": true,
|
|
"serviceAccountsEnabled": true,
|
|
"defaultClientScopes": [
|
|
"openid"
|
|
],
|
|
"optionalClientScopes": [
|
|
"email",
|
|
"profile",
|
|
"roles"
|
|
],
|
|
"protocolMappers": [
|
|
{
|
|
"name": "email-claim",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-usermodel-attribute-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"user.attribute": "email",
|
|
"id.token.claim": "true",
|
|
"access.token.claim": "true",
|
|
"claim.name": "email",
|
|
"userinfo.token.claim": "true",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"name": "login-userinfo-only",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-hardcoded-claim-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"claim.name": "login",
|
|
"claim.value": "jdoe",
|
|
"id.token.claim": "false",
|
|
"access.token.claim": "false",
|
|
"userinfo.token.claim": "true",
|
|
"jsonType.label": "String"
|
|
}
|
|
},
|
|
{
|
|
"name": "audience",
|
|
"protocol": "openid-connect",
|
|
"protocolMapper": "oidc-audience-mapper",
|
|
"consentRequired": false,
|
|
"config": {
|
|
"included.client.audience": "stalwart",
|
|
"id.token.claim": "false",
|
|
"access.token.claim": "true"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"users": [
|
|
{
|
|
"username": "[email protected]",
|
|
"enabled": true,
|
|
"email": "[email protected]",
|
|
"emailVerified": true,
|
|
"firstName": "John",
|
|
"lastName": "Doe",
|
|
"credentials": [
|
|
{
|
|
"type": "password",
|
|
"value": "this is an OIDC password",
|
|
"temporary": false
|
|
}
|
|
],
|
|
"groups": [
|
|
"/[email protected]"
|
|
]
|
|
},
|
|
{
|
|
"username": "[email protected]",
|
|
"enabled": true,
|
|
"email": "[email protected]",
|
|
"emailVerified": true,
|
|
"firstName": "Jane",
|
|
"lastName": "Smith",
|
|
"credentials": [
|
|
{
|
|
"type": "password",
|
|
"value": "this is an OIDC password",
|
|
"temporary": false
|
|
}
|
|
],
|
|
"groups": [
|
|
"/[email protected]",
|
|
"/[email protected]"
|
|
]
|
|
},
|
|
{
|
|
"username": "[email protected]",
|
|
"enabled": true,
|
|
"email": "[email protected]",
|
|
"emailVerified": true,
|
|
"firstName": "Bill",
|
|
"lastName": "Foobar",
|
|
"credentials": [
|
|
{
|
|
"type": "password",
|
|
"value": "this is an OIDC password",
|
|
"temporary": false
|
|
}
|
|
],
|
|
"groups": [
|
|
"/[email protected]"
|
|
]
|
|
}
|
|
],
|
|
"groups": [
|
|
{
|
|
"name": "[email protected]",
|
|
"path": "/[email protected]"
|
|
},
|
|
{
|
|
"name": "[email protected]",
|
|
"path": "/[email protected]"
|
|
}
|
|
]
|
|
} |