Currently, it has one config which tends to be growing.

wso2.carbon.auth:
    # User Store Configurations
  userStoreConfiguration:
    connectorType: JDBC
    hashAlgo: SHA256
    iterationCount: 4096
    jdbcProperties:
      dataSource: WSO2_UM_DB
    keyLength: 256
    ldapProperties:
      ldap.ConnectionName: cn=admin,dc=example,dc=org
      ldap.GroupEntryObjectClass: groupOfNames
      ldap.UserNameSearchFilter: (&(objectClass=person)(uid=?))
      ldap.ConnectionURL: ldap://localhost:389
      ldap.InitialContextFactory: com.sun.jndi.ldap.LdapCtxFactory
      ldap.connectorClass: org.wso2.carbon.auth.user.store.connector.ldap.LDAPUserStoreConnector
      ldap.GroupSearchBase: ou=Groups,dc=example,dc=org
      ldap.ConnectionPassword: admin
      ldap.UserNameAttribute: uid
      ldap.GroupSearchFilter: (&(objectClass=groupOfNames)(cn=?))
      ldap.UserEntryObjectClass: identityPerson
      ldap.GroupAttribute: cn
      ldap.SecurityAuthentication: simple
      ldap.UserNameListFilter: (objectClass=person)
      ldap.GroupListFilter: (objectClass=groupOfNames)
      ldap.UserSearchBase: ou=Users,dc=example,dc=org
    readOnly: false
    superUser: admin
    superUserPass: admin
    # Key Management Configurations
  keyManagerConfigs:
      # Access token default validity period
    defaultTokenValidityPeriod: 3600

password hash Algorithm, iteration count, key length need to be configurable instead of hard coding.

public class RegistrationRequestDTO {
@SerializedName("redirect_uris")
private List redirectUris = new ArrayList();
}

With this { "redirect_uris" : "aaaa" } should properly be mapped to the java object but it does not work.

We need to double check and fix.

Component - Key Manager/SCIM

• SCIM User Related Functions

Component - Key Manager/DCR

Dynamic Client Registration

Key Manager/DCR

• DCR Management

They are hardcoded in DB script. No way of adding new attributes.

Description:
Need to create Database Specific SQL scripts

Component - Key Manager/UserStore

LDAP User Store Connector

ATM DB type need to be passed to identify the queries to be loaded. This shuld be identify using driver class name instead of additional DB type

Component - Key Manager/SCIM

SCIM Role Related Functions

Component - Key Manager/SCIM

• SCIM Extensions

as a part of #wso2/carbon-apimgt#5055

Description:

Refresh Token Grant not populating user

Steps to reproduce:

1.Generate token from password grant
2. Generate token from Refresh token generated from above.
3. Introspect token generated from [2].

We need to add Travis support for carbon-auth.

this need to be increase to 3600s or so

1. https://github.com/wso2/carbon-auth/blob/v1.0.31/components/auth/org.wso2.carbon.auth.client.registration.rest.api/pom.xml#L158
2. https://github.com/wso2/carbon-auth/blob/v1.0.31/components/auth/org.wso2.carbon.auth.oauth.rest.api/pom.xml#L169
3. https://github.com/wso2/carbon-auth/blob/v1.0.31/components/auth/org.wso2.carbon.auth.scope.registration.rest.api/pom.xml#L147
4. https://github.com/wso2/carbon-auth/blob/v1.0.31/components/auth/org.wso2.carbon.auth.token.introspection.rest.api/pom.xml#L154
   ..

Component - Key Manager/UserStore

JDBC User Store Connector

Implement userinfo API to get user's information for given token.

Sample impl - https://docs.wso2.com/display/IS540/Basic+Client+Profile+with+Playground

redirects urls are represents as regex in the application info response. It need to be valid json array.

default user admin:admin is hard coded and need to be added to configurations file

eg:

1. https://github.com/wso2/carbon-auth/blob/v1.0.31/components/auth/org.wso2.carbon.auth.user.mgt/src/main/java/org/wso2/carbon/auth/user/mgt/UserStoreManagerFactory.java#L20
2. https://github.com/wso2/carbon-auth/blob/v1.0.31/components/auth/org.wso2.carbon.auth.scim/src/main/java/org/wso2/carbon/auth/scim/impl/CarbonAuthUserManager.java#L26

https://github.com/wso2/carbon-auth/pull/66/files#diff-fc562d8c0d31888a273b4bcab5171bf2R66

Ex:

public class UpdateRequestDTO {
@JsonProperty("redirect_uris")
private List redirectUris = new ArrayList();

@JsonProperty("client_name")
private String clientName = null;

@JsonProperty("grant_types")
private List grantTypes = new ArrayList();

}

msf4j is using GSON for Object <-> JSON mapping. We need to use com.google.gson.annotations.SerializedName instead of com.fasterxml.jackson.annotation.JsonProperty

Need to fix this and regenerate the code properly

At startup it check the default user is exist. When do so, it throw an exception.
It need to be handler in side since it is known exception.

1. Use @SerializedName instead of @JsonProperty
2. Remove manual serialization/deserialiation using gson