security schema changes (attribute verification module is added)

Evolveum · Nov 22, 2022 · 9fc63c5 · 9fc63c5
1 parent ef7d73d
commit 9fc63c5
Showing 1 changed file with 30 additions and 0 deletions.
diff --git a/infra/schema/src/main/resources/xml/ns/public/common/common-security-3.xsd b/infra/schema/src/main/resources/xml/ns/public/common/common-security-3.xsd
@@ -154,6 +154,7 @@
             <xsd:element name="securityQuestionsForm" type="tns:SecurityQuestionsFormAuthenticationModuleType" minOccurs="0" maxOccurs="unbounded"/>
             <xsd:element name="httpSecQ" type="tns:HttpSecQAuthenticationModuleType" minOccurs="0" maxOccurs="unbounded"/>
             <xsd:element name="ldap" type="tns:LdapAuthenticationModuleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="attributeVerification" type="tns:AttributeVerificationAuthenticationModuleType" minOccurs="0" maxOccurs="unbounded"/>
             <xsd:element name="other" type="tns:OtherAuthenticationModuleType" minOccurs="0" maxOccurs="unbounded"/>
         </xsd:sequence>
         <xsd:attribute name="id" type="xsd:long"/>
@@ -430,6 +431,35 @@
         </xsd:complexContent>
     </xsd:complexType>
 
+    <xsd:complexType name="AttributeVerificationAuthenticationModuleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module can be used as an additional verification of the already authenticated user.
+                Intended for interactive user verification by comparing the specified attribute with the value provided by the user.
+            </xsd:documentation>
+            <xsd:appinfo>
+                <a:container/>
+                <a:since>4.7</a:since>
+            </xsd:appinfo>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="tns:AbstractAuthenticationModuleType">
+                <xsd:sequence>
+                    <xsd:element name="path" type="t:ItemPathType" minOccurs="0">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The path to the user attribute which should be verified.
+                            </xsd:documentation>
+                            <xsd:appinfo>
+                                <a:displayName>AttributeVerificationAuthenticationModuleType.path</a:displayName>
+                            </xsd:appinfo>
+                        </xsd:annotation>
+                    </xsd:element>
+                </xsd:sequence>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
     <xsd:complexType name="LdapSearchAuthenticationModuleType">
         <xsd:annotation>
             <xsd:documentation>