Configuration Properties

The PowerAuth Server uses the following public configuration properties:

Database Configuration

Property Default Note
spring.datasource.url jdbc:postgresql://localhost:5432/powerauth Database JDBC URL
spring.datasource.username powerauth Database JDBC username
spring.datasource.password _empty_ Database JDBC password
spring.jpa.hibernate.ddl-auto none Configuration of automatic database schema creation
spring.jpa.properties.hibernate.connection.characterEncoding utf8 Character encoding
spring.jpa.properties.hibernate.connection.useUnicode true Character encoding - Unicode support

PowerAuth Service Configuration

Property Default Note
powerauth.service.applicationName powerauth-server Application name exposed in status endpoint
powerauth.service.applicationDisplayName PowerAuth Server Application display name exposed in status endpoint
powerauth.service.applicationEnvironment _empty_ Application environment exposed in status endpoint
powerauth.service.restrictAccess false Whether access to the REST API is restricted

Activation and Cryptography Configuration

Property Default Note
powerauth.service.crypto.activationValidityInMilliseconds 120000 Default activation validity period in miliseconds
powerauth.service.crypto.signatureMaxFailedAttempts 5 Maximum failed attempts for signature verification
powerauth.service.crypto.requestExpirationInMilliseconds 60000 Expiration for ECIES and MAC token requests.
powerauth.service.crypto.requestExpirationInMillisecondsExtended 7200000 Expiration for ECIES and MAC token requests for protocol versions 3.1 and older.
powerauth.service.crypto.replayVerificationService default Request replay verification service, options: default, none
powerauth.service.token.timestamp.validity 7200000 PowerAuth MAC token timestamp validity in miliseconds
powerauth.service.recovery.maxFailedAttempts 5 Maximum failed attempts for activation recovery
powerauth.service.secureVault.enableBiometricAuthentication false Whether biometric authentication is enabled when accessing Secure Vault
powerauth.server.db.master.encryption.key _empty_ Master DB encryption key for decryption of server private key in database
powerauth.service.proximity-check.otp.length 8 Length of OTP generated for proximity check
powerauth.service.pagination.default-page-size 500 The default number of records per page when paginated results are requested
powerauth.service.pagination.default-page-number 0 The default page number when paginated results are requested. Page numbers start from 0

HTTP Configuration

Property Default Note
powerauth.service.http.proxy.enabled false Whether proxy is enabled for outgoing HTTP requests
powerauth.service.http.proxy.host 127.0.0.1 Proxy host for outgoing HTTP requests
powerauth.service.http.proxy.port 8080 Proxy port for outgoing HTTP requests
powerauth.service.http.proxy.username _emtpy_ Proxy username for outgoing HTTP requests
powerauth.service.http.proxy.password _empty_ Proxy password for outgoing HTTP requests
powerauth.service.http.connection.timeout 5s HTTP connection timeout
powerauth.service.http.response.timeout 60s HTTP response timeout
powerauth.service.http.connection.max-idle-time 200s HTTP max idle time

Spring Vault Configuration

Property Default Note
spring.cloud.vault.enabled false Whether Spring Vault integration is enabled
spring.cloud.vault.kv.enabled true Whether the Spring Vault integration uses the versioned key-value backend

Correlation HTTP Header Configuration

Property Default Note
powerauth.service.correlation-header.enabled false Whether correlation header is enabled
powerauth.service.correlation-header.name X-Correlation-ID Correlation header name
powerauth.service.correlation-header.value.validation-regexp [a-zA-Z0-9\\-]{8,1024} Regular expression for correlation header value validation
logging.pattern.console See value in application.properties Logging pattern for console which includes the correlation header value

Monitoring and Observability

| Property | Default | Note | |——————————————-|———|—————————————————————————————————————————————————————————–| | management.tracing.sampling.probability | 1.0 | Specifies the proportion of requests that are sampled for tracing. A value of 1.0 means that 100% of requests are sampled, while a value of 0 effectively disables tracing. |

The WAR file includes the micrometer-registry-prometheus dependency. Discuss its configuration with the Spring Boot documentation.

Scheduled Jobs Configuration

Property Default Note
powerauth.service.scheduled.job.operationCleanup 5000 Time delay in milliseconds between two consecutive tasks that expire long pending operations.
powerauth.service.scheduled.job.activationsCleanup 5000 Time delay in milliseconds between two consecutive tasks that expire abandoned activations.
powerauth.service.scheduled.job.activationsCleanup.lookBackInMilliseconds 3600000 Number of milliseconds to look back in the past when looking for abandoned activations.
powerauth.service.scheduled.job.uniqueValueCleanup 60000 Time delay in milliseconds between two consecutive tasks that delete expired unique values.
powerauth.service.scheduled.job.fido2AuthenticatorCacheEviction 3600000 Duration in milliseconds for which the internal cache holds details of FIDO2 Authenticator models.
Last updated on Apr 05, 2024 (05:55) Edit on Github Send Feedback
Search

1.7.x

PowerAuth Server