systemBehaviorConfigurations:
antiPhishingCodeEnabled: true
referralSystemEnabled: true
referralProperty:
referralCodeLength: 8
referralStartBonus: 0
registrationBonus: 50
multifactorAuthentication:
multifactorAuthSystemEnabled: true
passwordRestrictions:
passwordValidationStrategy:
uppercaseRequired: true
specialSymbolsRequired: true
passwordSimilarity:
enabled: true
minPasswordSimilarityValue: 0.15
passwordsForSimilarityCount: 5
limitForInputInvalidPassword: 5
registration:
emailRegistrationEnabled: true
phoneRegistrationEnabled: true
registrationViaInviteLinkEnabled: true
registrationWithVerificationEnabled: true
oauth2:
facebook: true
google: true
accountManagement:
defaultLanguageISOCode: "en"
defaultCountryISOCode: "UA"
limitForInputInvalidOneTimeToken: 5
limitForPasswordHistory:
enabled: false
maxPasswordHistoryCount: 5
userAvatarProperty:
widthSize: 400
heightSize: 400
antiPhishingCodeEnabled -> Add anti phishing code to profile api to user who have email. User can add anti phishing code for his account.
...
POST endpoint for add or change anti phishing code → /api/v1/account/antiPhishingCode
POST endpoint for send token for add or change anti phishing code → /api/v1/token/antiPhishingCode/changing
...
referralSystemEnabled
...
->
...
Referral
...
system
...
in
...
ProfileApi
...
that
...
awards
...
bonuses
...
to
...
users
...
if
...
someone
...
used
...
their
...
referral
...
code
...
during
...
registration.
...
Used when registering a user
...
multifactorAuthSystemEnabled
...
->
...
Multi
...
factor
...
authentication during
...
login
...
flow.
...
this configuration enables multi factor authentication.
multi factor authentication is presented for:
- email
- phone number
- google authenticator.
The user can enable the selection of the option for multi factor authentication during authorization(login). In this case, user must request a token from our system for authentication.
...
POST endpoint for user key recovery verification → /api/v1/token/userKeys/recovery/verification
...
passwordValidationStrategy
Configuration for password validation.
uppercaseRequired: Upper case for password validation. Password must Contains at least 1 Upper case
specialSymbolsRequired: Special symbols for password validation. Password must Contains at least 1 Special symbols (!@ # $ % ^ & * ( ) _ - + = )
passwordSimilarity
Compare provided password with your previous password and if they similar → reduce operation
minPasswordSimilarityValue -> 0.15 If similarityValue more than 0.15 (85%) passwords are similar. If similarityValue less or equal 0.15 passwords are different.
passwordsForSimilarityCount -> number of passwords to compare
...
registration
Configurations for registration flow
emailRegistrationEnabled -> Enable/disable registration via email. Used in validation at the api level.
phoneRegistrationEnabled -> Enable/disable registration via phone number. Used in validation at the api level.
registrationWithVerificationEnabled -> Default registration flow. More details -> Registration Flow
registrationViaInviteLinkEnabled -> Registration via invitation flow. More details -> Registration Flow
...
oauth2 -> These settings are responsible for registration or login through social networks. You can login via Google Facebook Apple Okta or Twitter. More details → Sign in/up with social networks.
...