Server Config 6.16.0
HYPR Server configuration properties
Version 6.16.0
- ControlCenterConfigBean
- EventConfigBean
- Fido2ConfigBean
- RegistrationRetentionTimeConfigBean
- RegistrationTimeoutConfigBean
- RPConfigBean
- RPLicenseServerConfig
- RPPushConfigBean
- RPProxyConfigBean
- RPSessionTimeConfigBean
- RPWorkstationConfigBean
- RPMagicLinkConfigBean
- ServerConfigBean
- RPEndpointAPITokenConfigBean
- RPSecurityConfigBean
- RPLogAggregationConfigBean
ControlCenterConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.cc.serviceAccountUsername ★ | Service username used to first log into to CC post install or in recover mode | HYPR | 6.8 |
hypr.cc.serviceAccountPassword ★ | Service password used to first log into to CC post install or in recover mode | 6.8 | |
hypr.cc.licenseKey | License key used to communicate directly to the License server. This is needed for the V3 API and will have be requested from HYPR | 6.8 | |
hypr.cc.licenseKeyV4 | License key for HYPR. Upload via CC UI | 6.8 | |
hypr.cc.licenseFileName | File name of the License upload via CC UI. Tracked for convenience | 6.8 | |
hypr.cc.defaultAppName | Default web application created on first startup. May be used for trial. Do NOT use in production | HYPRDefaultApplication | 6.8 |
hypr.cc.defaultWorkstationAppName | Default workstation application created on first startup. May be used for trial. Do NOT use in production | HYPRDefaultWorkstationApplication | 6.8 |
hypr.cc.showRfcErrorDetails | Include extra error details in error msgs. Useful for development. Do NOT enable in production | false | 6.8 |
hypr.cc.swaggerEnabled | Enable API docs at /swagger-ui.html. Do NOT enable in production | false | 6.8 |
hypr.cc.facetUrl | HYPRDefaultApplication | 6.8 |
EventConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.event.eventsRetentionCheckInterval | Time in hours. Interval at which event retention check in done | 1 | 6.8 |
hypr.event.eventsRetention | Time in hours. After this interval an event is deleted from the DB to keep disk space requirements within bounds | 720 | 6.8 |
hypr.event.eventsLevel | Log level of the events. Set to DEBUG for more detailed logging. Not recommended for Production | INFO | 6.8 |
hypr.event.jasyptPassword ★ | Encryption key for the DB | changeMe | 6.8 |
hypr.event.hibernateConnectionUrl ★ | Java JDBC connection URL. See: https://dev.mysql.com/doc/connector-j/8.0/en/connector-j-reference-jdbc-url-format.html | 6.8 | |
hypr.event.hibernateConnectionUsername ★ | DB connection username | 6.8 | |
hypr.event.hibernateConnectionPassword ★ | DB connection password | 6.8 | |
hypr.event.hibernateConnectionDriver | Fully-qualified Java class name of the JDBC driverClass | com.mysql.jdbc.Driver | 6.8 |
hypr.event.hibernateDialect ★ | Hibernate dialect to match the type/version of the DB | org.hibernate.dialect.MySQL8Dialect | 6.8 |
hypr.event.isHibernateShowSql | Log the SQL queries in HYPR log files. Property name is 'hypr.rp.hibernateShowSql' | false | 6.8 |
hypr.event.hibernateHbm2dllAuto |
Hibernate schema management mode See: https://docs.jboss.org/hibernate/orm/5.2/userguide/html_single/Hibernate_User_Guide.html#configurations-hbmddl |
update | 6.8 |
hypr.event.hibernateC3P0MinSize | Minimum number of Connections a pool will maintain at any given time | 20 | 6.8 |
hypr.event.hibernateC3P0MaxSize | Maximum number of Connections a pool will maintain at any given time | 100 | 6.8 |
hypr.event.hibernateC3P0MaxStmts |
The size of c3p0's global PreparedStatement cache See: https://www.mchange.com/projects/c3p0/#maxStatements |
1000 | 6.8 |
hypr.event.hibernateC3P0InitialSize | Number of Connections a pool will try to acquire upon startup. Should be between minPoolSize and maxPoolSize | 20 | 6.8 |
hypr.event.hibernateC3P0CheckoutTimeoutInMillis | Milliseconds, limits how long a client will wait for a Connection | 15000 | 6.8 |
hypr.event.hibernateC3P0MaxConnectionAgeInSecs | Seconds, conn TTL. A Connection older than maxConnectionAge will be destroyed and purged from the pool | 1800 | 6.8 |
hypr.event.hibernateC3P0MaxIdleTimeInSecs | Seconds a Connection can remain pooled but unused before being discarded | 30 | 6.8 |
hypr.event.hibernateC3P0TestConnOnCheckout | Test all idle, pooled but unchecked-out connections, every this number of seconds | true | 6.8 |
hypr.event.hibernateC3P0IdleTestPeriodInSecs | Seconds, pooled but unchecked-out connections, every this number of seconds | 30 | 6.8 |
hypr.event.hibernateC3P0UnreturnedConnectionTimeoutInSecs | Seconds, defines a limit (in seconds) to how long a Connection may remain checked out | 60 | 6.8 |
Fido2ConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.fido2.detailedApiErrorMsgs | Include extra error details in error msgs. Useful for development. Do NOT enable in production | false | 6.8 |
hypr.fido2.defaultMetadataStatementsDir | Dir to scan on server startup and load extra metadata from | metadataStatements | 6.8 |
hypr.fido2.defaultServerOrigin | http://localhost | 6.8 | |
hypr.fido2.defaultAppId | localhost | 6.8 | |
hypr.fido2.certificateRevocationCheckEnabled |
Extracts the CRL distribution points from the certificate (if available) and checks the certificate revocation status against the CRLs coming from the distribution points. Supports HTTP, HTTPS, FTP and LDAP based URLs |
true | 6.8 |
hypr.fido2.jasyptPassword ★ | Encryption key for the DB | 6.8 | |
hypr.fido2.hibernateConnectionUrl ★ | Java JDBC connection URL. See: https://dev.mysql.com/doc/connector-j/8.0/en/connector-j-reference-jdbc-url-format.html | 6.8 | |
hypr.fido2.hibernateConnectionUsername ★ | DB connection username | 6.8 | |
hypr.fido2.hibernateConnectionPassword ★ | DB connection password | 6.8 | |
hypr.fido2.hibernateConnectionDriver | Fully-qualified Java class name of the JDBC driverClass | com.mysql.jdbc.Driver | 6.8 |
hypr.fido2.hibernateDialect ★ | Hibernate dialect to match the type/version of the DB | 6.8 | |
hypr.fido2.isHibernateShowSql | Log the SQL queries in HYPR log files. Property name is 'hypr.rp.hibernateShowSql' | false | 6.8 |
hypr.fido2.hibernateHbm2dllAuto |
Hibernate schema management mode See: https://docs.jboss.org/hibernate/orm/5.2/userguide/html_single/Hibernate_User_Guide.html#configurations-hbmddl |
update | 6.8 |
hypr.fido2.hibernateC3P0MinSize | Minimum number of Connections a pool will maintain at any given time | 20 | 6.8 |
hypr.fido2.hibernateC3P0MaxSize | Maximum number of Connections a pool will maintain at any given time | 200 | 6.8 |
hypr.fido2.hibernateC3P0MaxStmts |
The size of c3p0's global PreparedStatement cache See: https://www.mchange.com/projects/c3p0/#maxStatements |
250 | 6.8 |
hypr.fido2.hibernateC3P0InitialSize | Number of Connections a pool will try to acquire upon startup. Should be between minPoolSize and maxPoolSize | 20 | 6.8 |
hypr.fido2.hibernateC3P0CheckoutTimeoutInMillis | Milliseconds, limits how long a client will wait for a Connection | 15000 | 6.8 |
hypr.fido2.hibernateC3P0MaxConnectionAgeInSecs | Seconds, conn TTL. A Connection older than maxConnectionAge will be destroyed and purged from the pool | 1800 | 6.8 |
hypr.fido2.hibernateC3P0MaxIdleTimeInSecs | Seconds a Connection can remain pooled but unused before being discarded | 30 | 6.8 |
hypr.fido2.hibernateC3P0TestConnOnCheckout | Test all idle, pooled but unchecked-out connections, every this number of seconds | true | 6.8 |
hypr.fido2.hibernateC3P0IdleTestPeriodInSecs | Seconds, pooled but unchecked-out connections, every this number of seconds | 30 | 6.8 |
hypr.fido2.hibernateC3P0UnreturnedConnectionTimeoutInSecs | Seconds, defines a limit (in seconds) to how long a Connection may remain checked out | 60 | 6.8 |
RegistrationRetentionTimeConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.registration.retention-time.state | Indicates how much time to retain final registration state, e.g. for debugging purposes. Usually it's the same value as PIN retention | PT1H | 6.8 |
hypr.rp.registration.retention-time.pin | Indicates how much time to retain used PIN. An error is thrown if client or device tries to use the same PIN again during this time interval | PT1H | 6.8 |
RegistrationTimeoutConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.registration.timeout.clientInit | Once the client initiated registration, the device must initiate its part within this period of time before the registration is invalidated | PT1M | 6.8 |
hypr.rp.registration.timeout.deviceInit | Once the device initiated registration, the client must initiate its part within this period of time before the registration is invalidated | PT1M | 6.8 |
hypr.rp.registration.timeout.fidoGet | Once the client and device initiated registration, the device must send FIDO GET request within this period of time before the registration is invalidated | PT1M | 6.8 |
hypr.rp.registration.timeout.fidoSend | Once the device sent FIDO GET request, it must send FIDO SEND request within this period of time before the registration is invalidated | PT1M | 6.8 |
hypr.rp.registration.timeout.clientComplete | Once the device finished FIDO flow, the client must complete the registration within this period of time before the registration is invalidated | PT1M | 6.8 |
hypr.rp.registration.timeout.deviceComplete | Once the client completed registration, the device must complete its part within this period of time before the registration is invalidated | PT1M | 6.8 |
RPConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.sslPrimaryCertSerialNum | Serial number of the primary SSL cert to be used for SSL pining | 6.8 | |
hypr.rp.sslPinningEnabled | false | 6.8 | |
hypr.rp.haasMode | HaaS Mode flag. Disabled by default. | false | 6.8 |
hypr.rp.reddisonConfig ★ |
Redis connection configuration for the Redisson library Redisson is to be deprecated in favor of the Lettuce library For now, both Redisson and Lettuce config is needed The config depends on the type of Redis setup: - Single: https://github.com/redisson/redisson/wiki/2.-Configuration#26-single-instance-mode - Multi-node with sentinels: https://github.com/redisson/redisson/wiki/2.-Configuration#27-sentinel-mode - Master/slave replication (AWS elastic cache) : https://github.com/redisson/redisson/wiki/2.-Configuration#25-replicated-mode |
6.8 | |
springLettuceConfig ★ |
Redis connection configuration for the Lettuce library Use one of the following, depending on your Redis setup # ************ Single Redis node config (Lettuce) *************************************** spring.redis.host=REDIS_MASTER_HOST spring.redis.port=REDIS_PORT spring.redis.password=REDIS_PASSWORD # ************ Redis cluster: Master/slave replicated with sentinels (Lettuce) ********** spring.redis.clientName=hypr-fido2 spring.redis.sentinel.master=hypr-master spring.redis.password=REDIS_PASSWORD spring.redis.sentinel.nodes=SENTINEL_NODE_1_IP:REDIS_SENTINEL_PORT, SENTINEL_NODE_2_IP:REDIS_SENTINEL_PORT, SENTINEL_NODE_3_IP:REDIS_SENTINEL_PORT # ************ AWS elastic cache nodes (Master/Slave replicas) (Lettuce) **************** spring.redis.clientName=hypr-master spring.redis.replicated.read.from=any spring.redis.replicated.nodes=AWS_NODE_1:REDIS_PORT, AWS_NODE_2:REDIS_PORT, AWS_NODE_3:REDIS_PORT spring.redis.lettuce.pool.maxActive=50 spring.redis.lettuce.pool.maxIdle=25 spring.redis.lettuce.pool.maxWait=1000ms spring.redis.lettuce.pool.minIdle=10 |
6.8 | |
hypr.rp.cacheNamespace ★ | Suffix added to the Redis cache keys. Allows multiple CC instances to use the same Redis cache instance - by making key names unique to each CC instance | 6.8 | |
hypr.rp.fido2EnabledByDefault | Enable FIDO2 by default on newly created RP apps | false | 6.8 |
hypr.rp.fido2DefaultOrigin | Default FIDO2 origin on newly created RP apps. Can be modified in CC UI | http://localhost | 6.8 |
hypr.rp.publicFullyQualifiedDomainName ★ |
Fully qualified domain name of the RelyingParty server. Typically the public DNS name Example: sub.mycorp.com |
6.8 | |
hypr.rp.corsAllowedOriginsRegex ★ |
CSV of CORS allowed origins patterns Example: "https://.*\.main\.com$" matches "https://sub.main.com" |
6.8 | |
hypr.rp.rpappSetupWhitelist | Whitelist of apps that dont need SecurityContext for registration. Only applies to non-prod demo scenarios | 6.8 | |
hypr.rp.sslCerts | SSL certs to be used for SSL pining. Generally easier to upload from CC UI | [] | 6.8 |
hypr.rp.jasyptPassword ★ | Encryption key for the DB | 6.8 | |
hypr.rp.hibernateConnectionUrl ★ | Java JDBC connection URL. See: https://dev.mysql.com/doc/connector-j/8.0/en/connector-j-reference-jdbc-url-format.html | 6.8 | |
hypr.rp.hibernateConnectionUsername ★ | DB connection username | 6.8 | |
hypr.rp.hibernateConnectionPassword ★ | DB connection password | 6.8 | |
hypr.rp.hibernateConnectionDriver | Fully-qualified Java class name of the JDBC driverClass | com.mysql.jdbc.Driver | 6.8 |
hypr.rp.hibernateDialect ★ | Hibernate dialect to match the type/version of the DB | 6.8 | |
hypr.rp.isHibernateShowSql | Log the SQL queries in HYPR log files. Property name is 'hypr.rp.hibernateShowSql' | false | 6.8 |
hypr.rp.hibernateHbm2dllAuto |
Hibernate schema management mode See: https://docs.jboss.org/hibernate/orm/5.2/userguide/html_single/Hibernate_User_Guide.html#configurations-hbmddl |
validate | 6.8 |
hypr.rp.hibernateC3P0MinSize | Minimum number of Connections a pool will maintain at any given time | 20 | 6.8 |
hypr.rp.hibernateC3P0MaxSize | Maximum number of Connections a pool will maintain at any given time | 500 | 6.8 |
hypr.rp.hibernateC3P0MaxStmts |
The size of c3p0's global PreparedStatement cache See: https://www.mchange.com/projects/c3p0/#maxStatements |
250 | 6.8 |
hypr.rp.hibernateC3P0InitialSize | Number of Connections a pool will try to acquire upon startup. Should be between minPoolSize and maxPoolSize | 20 | 6.8 |
hypr.rp.hibernateC3P0CheckoutTimeoutInMillis | Milliseconds, limits how long a client will wait for a Connection | 15000 | 6.8 |
hypr.rp.hibernateC3P0MaxConnectionAgeInSecs | Seconds, conn TTL. A Connection older than maxConnectionAge will be destroyed and purged from the pool | 1800 | 6.8 |
hypr.rp.hibernateC3P0MaxIdleTimeInSecs | Seconds a Connection can remain pooled but unused before being discarded | 30 | 6.8 |
hypr.rp.hibernateC3P0TestConnOnCheckout | Test all idle, pooled but unchecked-out connections, every this number of seconds | true | 6.8 |
hypr.rp.hibernateC3P0IdleTestPeriodInSecs | Seconds, pooled but unchecked-out connections, every this number of seconds | 30 | 6.8 |
hypr.rp.hibernateC3P0UnreturnedConnectionTimeoutInSecs | Seconds, defines a limit (in seconds) to how long a Connection may remain checked out | 60 | 6.8 |
RPLicenseServerConfig
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.license.sslCertsPublicKeys |
If supplied, SSL pinning will done against the License server endpoint Public key on the Cert must match one of these |
[] | 6.8 |
hypr.rp.license.baseUrl | HYPR License server URL | https://licensing.hypr.com/ | 6.8 |
hypr.rp.license.httpClientTimeout | HTTP connection timeout in secs | 30000 | 6.8 |
hypr.rp.license.httpProxyEnable | Use Proxy config while connecting to the License server | false | 6.8 |
RPPushConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.push.pushEnabledByDefault | true | 6.8 | |
hypr.rp.push.qrEnabledByDefault | false | 6.8 | |
hypr.rp.push.fbCredentials | 6.8 | ||
hypr.rp.push.fbDbURL | 6.8 |
RPProxyConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.proxy.port | 6.8 | ||
hypr.rp.proxy.protocol | http or https | 6.8 | |
hypr.rp.proxy.host | Example: corp.proxy.com | 6.8 | |
hypr.rp.proxy.maxConnectionsPerRoute | The maximum number of connections any route or target host may use form the pool | 50 | 6.9.0 |
hypr.rp.proxy.enableTestStub | Set to true to enable the Firebase test stub usage. If enabled, no calls will be made to Firebase and a http 200 response will be returned. | false | 6.9.0 |
hypr.rp.proxy.user | 6.8 | ||
hypr.rp.proxy.pass | 6.8 | ||
hypr.rp.proxy.testUrl | Test proxy config - by connecting to this URL with Proxy settings applied | https://google.com | 6.8 |
hypr.rp.proxy.trustSelfSignedCert | Accept a self signed cert from the proxy server | true | 6.8 |
hypr.rp.proxy.connectTimeoutMillis | The time to establish the connection with the proxy | 10000 | 6.8 |
hypr.rp.proxy.readTimeoutMillis | The time waiting for data; after establishing the connection; maximum time of inactivity between two data packets | 10000 | 6.8 |
hypr.rp.proxy.connectionKeepAliveMillis | Drop persistent connections after a this period of inactivity | 5000 | 6.8 |
hypr.rp.proxy.validateAfterInactivityInMillis | Defines period of inactivity in milliseconds after which persistent connections must be re-validated prior to being leased to the consumer. Non-positive value passed to this method disables connection validation. This check helps detect connections that have become stale (half-closed) while kept inactive in the pool. | 2000 | 6.9.0 |
hypr.rp.proxy.maxTotalConnections | The total number of connections in the conn pool | 100 | 6.9.0 |
RPSessionTimeConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.session.clientSetupDeviceWaitSecs | Once the client makes a setup request, it waits this long for the device response before timing out | 60 | 6.8 |
hypr.rp.session.clientRegStartPollSecs | Client (workstation|browser) polls for this length of time when waiting for device to start reg after Pin match | 10 | 6.8 |
hypr.rp.session.clientRegCompletePollSecs | Client (browser|workstation) polls for this length of time for the device to confirm reg finish once its done with its part | 60 | 6.8 |
hypr.rp.session.deviceOOBRegComplete | Device (mobile) polls for this length of time when waiting for an registration request/response from the client (workstation|browser) | 60 | 6.8 |
hypr.rp.session.deviceWSRegComplete | Device (mobile) polls for this length of time when waiting for an registration request/response from the client (workstation|browser) | 180 | 6.8 |
hypr.rp.session.clientRegCancelWaitSecs | If a reg is cancelled, wait this long for the client to pickup a cancel from its Mailbox | 1 | 6.8 |
hypr.rp.session.oobAuthSessionTimeoutSecs | Timeout in seconds | 60 | 6.8 |
hypr.rp.session.clientAuthPollSecs | Client (workstation) wait for device response to /rp/versioned/client/authorize/unlock | 20 | 6.8 |
hypr.rp.session.clientAuthCompletePollSecs | Client (workstation) wait for device response to /rp/versioned/device/authorize/ws/complete/{sessionId} call | 20 | 6.8 |
hypr.rp.session.deviceAuthPollSecs | Device (mobile) wait for client response to /rp/versioned/device/authorize/ws/unlock. This is where we wait for the response to the unlock request over the web socket | 60 | 6.8 |
hypr.rp.session.deviceAuthCompletePollSecs | Device (mobile) wait for client response to /rp/versioned/client/authorization/complete/{sessionId} | 30 | 6.8 |
hypr.rp.session.deviceVerifyCompletePollSecs | Device (mobile) wait for client response to /rp/versioned/client/verification/complete/{sessionId} | 80 | 6.8 |
hypr.rp.session.deviceCancelUnlockPollSecs | When a request is made to cancel unlock on a workstation, the device waits for this length of time for a response from the workstation | 3 | 6.8 |
hypr.rp.session.deviceDeRegPollSecs | When a request is made to deregister a device from a workstation, the device waits for this length of time for a response from the workstation | 10 | 6.8 |
hypr.rp.session.deviceWorkstationLockPollSecs | When a request is made to lock a workstation from a device, the device waits for this length of time for a response from the workstation. | 10 | 6.8 |
hypr.rp.session.desktopSSOAuthSessionTimeoutSecs | Desktop SSO session started by the browser is open for this long | 60 | 6.8 |
hypr.rp.session.workstationStatusExpiryTimeSecs | Workstation only reports status when in changes i.e lock/unlock. Hold a long session | 604800 | 6.8 |
hypr.rp.session.fido2OOBRequestExpirySeconds | This is the length of time to hold a FIDO2 oob session | 60 | 6.9.0 |
hypr.rp.session.workstationMaxIdleTimeSecs | Timeout in seconds If a web socket Ping is missed from a workstation for this long, it's considered disconnected This must be greater than the ping interval on the WorkStation Note that if the WorkStation closes web socket connection cleanly, its disconnected immediately | 60 | 6.8 |
RPWorkstationConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.workstation.loginEnabledByDefault | true | 6.8 | |
hypr.rp.workstation.enforcesUserPresenceByDefault | false | 6.8 | |
hypr.rp.workstation.smartkeysEnabledByDefault | true | 6.8 | |
hypr.rp.workstation.offlineEnabledByDefault | true | 6.8 | |
hypr.rp.workstation.recoveryEnabledByDefault | false | 6.8 | |
hypr.rp.workstation.vdiDisabledByDefault | false | 6.8 | |
hypr.rp.workstation.onboardingCompletedMac | false | 6.8 | |
hypr.rp.workstation.onboardingCompletedWindows | false | 6.8 | |
hypr.rp.workstation.advancedModeMac | false | 6.8 | |
hypr.rp.workstation.advancedModeWindows | false | 6.8 | |
hypr.rp.workstation.recoveryMinPinLength | 6 | 6.8 | |
hypr.rp.workstation.recoveryMaxPinLength | 13 | 6.8 | |
hypr.rp.workstation.recoveryDefaultPinLength | 8 | 6.8 | |
hypr.rp.workstation.recoveryMinPinCount | 1 | 6.8 | |
hypr.rp.workstation.recoveryMaxPinCount | 10 | 6.8 | |
hypr.rp.workstation.recoveryDefaultPinCount | 5 | 6.8 | |
hypr.rp.workstation.recoveryMinCodeAccessHours | 24 | 6.8 | |
hypr.rp.workstation.recoveryMaxCodeAccessHours | 72 | 6.8 | |
hypr.rp.workstation.recoveryDefaultCodeAccessHours | 72 | 6.8 | |
hypr.rp.workstation.offlineMinTokenLength | 6 | 6.8 | |
hypr.rp.workstation.offlineMaxTokenLength | 13 | 6.8 | |
hypr.rp.workstation.offlineDefaultTokenLength | 8 | 6.8 | |
hypr.rp.workstation.offlineMinTokenCount | 1 | 6.8 | |
hypr.rp.workstation.offlineMaxTokenCount | 100 | 6.8 | |
hypr.rp.workstation.offlineDefaultTokenCount | 25 | 6.8 | |
hypr.rp.workstation.offlineMinTokenEntryTimeoutSecs | 30 | 6.8 | |
hypr.rp.workstation.offlineMaxTokenEntryTimeoutSecs | 300 | 6.8 | |
hypr.rp.workstation.offlineDefaultTokenEntryTimeoutSecs | 180 | 6.8 | |
hypr.rp.workstation.offlineMinTokenExpiryDays | 7 | 6.8 | |
hypr.rp.workstation.offlineMaxTokenExpiryDays | 90 | 6.8 | |
hypr.rp.workstation.offlineDefaultTokenExpiryDays | 30 | 6.8 | |
hypr.rp.workstation.offlineMinTokenLowWarningThresholdInPercentage | 10 | 6.8 | |
hypr.rp.workstation.offlineMaxTokenLowWarningThresholdInPercentage | 100 | 6.8 | |
hypr.rp.workstation.offlineDefaultTokenLowWarningThresholdInPercentage | 20 | 6.8 |
RPMagicLinkConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.magiclink.firebaseDomainUrlPrefix | 'subdomain' as described here https://firebase.google.com/docs/dynamic-links/create-manually | https://hyprapp.page.link | 6.8 |
hypr.rp.magiclink.firebaseDeepLinkPrefix | 'your_deep_link' as described here https://firebase.google.com/docs/dynamic-links/create-manually | https://hypr.com/dynamiclink | 6.10.0 |
hypr.rp.magiclink.firebaseAndroidPackageName | apn: The package name of the Android app to use to open the link | com.hypr.one | 6.8 |
hypr.rp.magiclink.firebaseAndroidVersionCode | amv: The versionCode of the minimum version of your app that can open the link | 1 | 6.8 |
hypr.rp.magiclink.firebaseIOSBundleId | ibi: The bundle ID of the iOS app to use to open the link | com.hypr.one | 6.8 |
hypr.rp.magiclink.firebaseIOSAppStoreId | isi: Your app's App Store ID, used to send users to the App Store when the app isn't installed | 1343368858 | 6.8 |
hypr.rp.magiclink.firebaseIOSCustomScheme | ius: Your app's custom URL scheme, if defined to be something other than your app's bundle ID | hypr | 6.8 |
hypr.rp.magiclink.registrationsLimit | Number of successful registrations allowed per link. Changes only apply to new links | 10 | 6.10.0 |
hypr.rp.magiclink.registrationsLimitEnabled | Flag to enable registrations allowed per link | false | 6.14.0 |
hypr.rp.magiclink.expirationTime | Magic links expiration time for Control Center | PT48H | 6.8 |
ServerConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.server.tomcatMaxConnections | The maximum number of connections that the server will accept and process at any given time. See: https://tomcat.apache.org/tomcat-8.5-doc/config/http.html#NIO_specific_configuration | 20000 | 6.8 |
hypr.server.tomcatMaxThread | The maximum number of request processing threads to be created by this Connector, which therefore determines the maximum number of simultaneous requests that can be handled. See: https://tomcat.apache.org/tomcat-8.5-doc/config/http.html#NIO_specific_configuration | 5000 | 6.8 |
hypr.server.workstationStatusUpdateWorkerCount | Fixed thread pool size used to asynchronously update the Workstation status in the DB | 3 | 6.8 |
hypr.server.flywayEnabled | Run the Flyway schema migration for the DB | true | 6.8 |
hypr.server.tomcatKeepAliveTimeoutSecs | The number of milliseconds this Connector will wait for another HTTP request before closing the connection. The default value is to use the value that has been set for the connectionTimeout attribute. Use a value of -1 to indicate no (i.e. infinite) timeout. | 30 | 6.11.0 |
hypr.server.tomcatMaxKeepAliveRequests | The maximum number of HTTP requests which can be pipelined until the connection is closed by the server. Setting to 1 will disable HTTP/1.0 keep-alive. Setting to -1 will allow an unlimited amount of keep-alive HTTP requests. | 10000 | 6.11.0 |
hypr.server.platform | Magic links conditional flag to load the SQS connection per environment.SQS connection is initiated for `haas` and is disabled for on `prem`. Conditional located in SQSService. Planning to merge with haasMode property to have a single flag in the future. | prem | 6.11.0 |
hypr.server.cookieName |
Name of the cookie generated for CC UI and DeviceManager. Session cookies are deleted when the current browser session ends |
SESSION | 6.8 |
hypr.server.cookieMaxAgeInSecs | Max age of the cookie generated for CC UI and DeviceManager | -1 | 6.8 |
hypr.server.tomcatAcceptorThreadCount | The number of threads to be used to accept connections. See: https://tomcat.apache.org/tomcat-8.5-doc/config/http.html#NIO_specific_configuration | 1 | 6.8 |
hypr.server.tomcatAcceptorThreadPriority | The priority of the acceptor threads | 5 | 6.8 |
hypr.server.tomcatPollerThreadCount | The number of threads to be used to run for the polling events. See: https://tomcat.apache.org/tomcat-8.5-doc/config/http.html#NIO_specific_configuration | 1 | 6.8 |
hypr.server.tomcatPollerThreadPriority | The priority of the poller threads | 5 | 6.8 |
hypr.server.tomcatAcceptCount | The maximum queue length for incoming connection requests when all possible request processing threads are in use. See: https://tomcat.apache.org/tomcat-8.5-doc/config/http.html#NIO_specific_configuration | 20000 | 6.8 |
RPEndpointAPITokenConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.endpointapi.defaultTokenExpiry | Default TTL for tokens. Examples: 90d (90 days), 90m (90 minutes), 24h (24 hours), 60s (60 seconds) | PT2160H | 6.11.0 |
hypr.rp.endpointapi.deviceTokenExpiry | Default TTL for tokens issued to devices. Examples: 90d (90 days), 90m (90 minutes), 24h (24 hours), 60s (60 seconds) | PT2160H | 6.11.0 |
hypr.rp.endpointapi.workstationTokenExpiry | Default TTL for tokens issued to workstations. Examples: 90d (90 days), 90m (90 minutes), 24h (24 hours), 60s (60 seconds) | PT2160H | 6.11.0 |
hypr.rp.endpointapi.tokenUpdateBatchSize | Token last used timestamps are updated in the DB in batches for efficiency. Number of tokens to update in a batch | 250000 | 6.11.0 |
hypr.rp.endpointapi.tokenUpdateInterval | Token last used timestamps are updated in the DB in batches for efficiency. Frequency of this update. Examples: 90d (90 days), 90m (90 minutes), 24h (24 hours), 60s (60 seconds) | PT10M | 6.11.0 |
RPSecurityConfigBean
Property | Description | Default value | Since version |
---|
RPLogAggregationConfigBean
Property | Description | Default value | Since version |
---|---|---|---|
hypr.rp.log.aggregator.threadPoolSize | The log aggregator pool size | 10 | 6.16.0 |
hypr.rp.log.aggregator.queueSize | The log aggregator queue size | 1000 | 6.16.0 |