add config for apple validation

Thumimku · Nov 15, 2023 · 48012ca · 48012ca
1 parent bcd5e1f
commit 48012ca
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 1 deletion.
diff --git a/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml b/features/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml
@@ -167,6 +167,8 @@
     <ClientAttestation>
         <!-- This tag defines the allowed window between current time and attestation object creation time. -->
         <AllowedWindowMillis>60000</AllowedWindowMillis>
+        <AppleAttestationRootCertificatePath>${carbon.home}/repository/resources/identity/apple/attestation/apple_attestation_root_ca.pem</AppleAttestationRootCertificatePath>
+        <AppleAttestationRevocationCheckEnabled>false</AppleAttestationRevocationCheckEnabled>
     </ClientAttestation>
 
     <OAuth>

diff --git a/...ures/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml.j2 b/...ures/identity-core/org.wso2.carbon.identity.core.server.feature/resources/identity.xml.j2
@@ -201,6 +201,8 @@
     <ClientAttestation>
         <!-- This tag defines the allowed window between current time and attestation object creation time. -->
         <AllowedWindowMillis>{{client_attestation.allowed_window}}</AllowedWindowMillis>
+        <AppleAttestationRootCertificatePath>{{client_attestation.apple_attestation_root_certificate_path}}</AppleAttestationRootCertificatePath>
+        <AppleAttestationRevocationCheckEnabled>{{client_attestation.apple_attestation_revocation_check_enabled}}</AppleAttestationRevocationCheckEnabled>
     </ClientAttestation>
 
     <OAuth>

diff --git a/...y.core.server.feature/resources/org.wso2.carbon.identity.core.server.feature.default.json b/...y.core.server.feature/resources/org.wso2.carbon.identity.core.server.feature.default.json
@@ -1374,5 +1374,7 @@
   "organization_management.self_service.default_token_expiry_time": "7200",
   "organization_management.self_service.internal_role_name": "B2B-SS-System-Role",
   "organization_management.self_service.user_store_name_for_system_user": "PRIMARY",
-  "client_attestation.allowed_window": "60000"
+  "client_attestation.allowed_window": "60000",
+  "client_attestation.apple_attestation_root_certificate_path": "${carbon.home}/repository/resources/identity/apple/attestation/apple_attestation_root_ca.pem",
+  "client_attestation.apple_attestation_revocation_check_enabled": false
 }