| ... |
... |
@@ -1,6 +1,6 @@ |
| 1 |
1 |
{{content/}} |
| 2 |
2 |
|
| 3 |
|
-The file //application.properties// stores several application-wide properties, such as which links are shown on the start page or settings regarding failed logins. |
|
3 |
+The file //application.properties// stores several application-wide properties, such as which links are shown on the start page or settings regarding failed logins. The file can be found in the config directory on the master server. The exact location of the propterties files is listed under System > [[Server information>>doc:Formcycle.SystemSettings.UserInterface.ServerInformation||target="_blank"]] > Used paths > Configuration files. |
| 4 |
4 |
|
| 5 |
5 |
== UI == |
| 6 |
6 |
|
| ... |
... |
@@ -57,6 +57,7 @@ |
| 57 |
57 |
|
| 58 |
58 |
{{table dataTypeAlpha="0" preSort="0-asc" caption="Settings regarding login restrictions"}} |
| 59 |
59 |
|= Property|= Default value|= Explanation |
|
60 |
+|login.duplicated.message.suppress|false|Whether to show a message when a user logs in and another session already exists for the same user. |
| 60 |
60 |
|login.fails.lock.timeout|900 (=15 minutes)|The amount of time in seconds a user needs to wait after using up all their login attempts. If the value is less than {{code language="none"}}60{{/code}}, it is clamped to {{code language="none"}}60{{/code}}. |
| 61 |
61 |
|login.fails.lock.count|5|The number of consecutive failed login attempts before a user is locked out. Set to {{code language="none"}}0{{/code}} for an unlimited amount of attempts. |
| 62 |
62 |
|login.fails.lock.onfullcache|true|Whether the system is locked when the login cache is full. Users cannot login anymore if the system is locked. |
| ... |
... |
@@ -95,11 +95,15 @@ |
| 95 |
95 |
|
| 96 |
96 |
{{table dataTypeAlpha="0" preSort="0-asc" caption="Various settings regarding the application"}} |
| 97 |
97 |
|= Property|= Default value|= Explanation |
| 98 |
|
-|bot.field.name|x-i-m-a-5536-required|Name of the hidden input field [[for detecting bots.>>doc:Formcycle.SystemSettings.ErrorMessageTemplates]] |
|
99 |
+|bot.field.name|x-i-m-a-5536-required|Name of the hidden input field [[for detecting bots>>doc:Formcycle.SystemSettings.ErrorMessageTemplates]]. Since V7, the field name is automatically renewed when the form is opened. |
|
100 |
+|{{version major="7" minor="1"/}} bot.field.autocomplete|new-password|Value for the //autocomplete// attribute of the bot field. When this property is not present, it defaults to //new-password//. When the value is empty, the //autocomplete// attribute is not set. Any other value is used for the //autocomplete// attribute. |
| 99 |
99 |
|defaults.systemeinstellung.loginName|sadmin|Login name for the super administrator of the system. |
| 100 |
100 |
|defaults.systemeinstellung.passwort|hash(admin)|Login name for the super administrator of the system. Should be changed after installing the application. The password is stored hashed, it should not be set manually in the configuration file, but only via the user interface. |
| 101 |
101 |
|cluster.implementation|jgroups|The implementation used for [[clustering>>doc:Formcycle.SystemSettings.UserInterface.Cluster.WebHome]]. Allowed options are [[jgroups>>http://www.jgroups.org/||target="_blank"]] and [[shoal>>https://javaee.github.io/shoal/||target="_blank"]]. |
| 102 |
102 |
|system.server.id |(generated)|Unique ID of the server which can be included in the HTTP header and attached to the submit URL of a form for the use of load balancers. See //HTTP//. |
|
105 |
+|{{version major="7" minor="1"/}} monitoring.enabled|false|Whether the [[frontend server monitoring URL>>doc:Formcycle.SystemSettings.Monitoring]] is enabled. |
|
106 |
+|{{version major="7" minor="1"/}} monitoring.allowed.hosts|(empty)|List of host, that are allowd to access the [[frontend server monitoring URL>>doc:Formcycle.SystemSettings.Monitoring]] . localhost (loopback) is always granted access. |
|
107 |
+|defaults.http.use_system_properties {{version major="7" minor="2"/}}|true|When //true//, uses settings from JVM system properties to configure HTTP requests. The following system properties are read: //https.protocols//, //https.cipherSuites//, //http.keepAlive//, //http.maxConnections//, //http.agent//. In addition, when a proxy was configured for the JVM, that proxy is used unless an explicit proxy server was configured within {{formcycle/}}. Finally, when attempting to access protected resources, the default system credentials provider is also queried for credentials. |
| 103 |
103 |
{{/table}} |
| 104 |
104 |
|
| 105 |
105 |
== Limits == |
| ... |
... |
@@ -111,7 +111,7 @@ |
| 111 |
111 |
|defaults.upload.max_fieldsize|0|Maximum size in bytes when retrieving columns of type //character// (eg. char or varchar) or //binary//. Set to {{code language="none"}}0{{/code}} to disable. |
| 112 |
112 |
{{/table}} |
| 113 |
113 |
|
| 114 |
|
-== Frontend Server == |
|
119 |
+== Frontend server == |
| 115 |
115 |
|
| 116 |
116 |
These settings control the connection to the {{fserver/}}. They should be edited [[via the user interface>>doc:Formcycle.SystemSettings.UserInterface.FrontendServer]]. |
| 117 |
117 |
|
| ... |
... |
@@ -142,8 +142,12 @@ |
| 142 |
142 |
|http.header.referer|same-origin|The referre policy for HTTP responses. You can also change this setting [[in the system settings menu >>doc:Formcycle.SystemSettings.UserInterface.General.WebHome]]. |
| 143 |
143 |
|http.header.hsts.max|(empty)|The value for the //max-age// of the HTTP Strict Transport Security. You can also change this setting [[in the system settings menu >>doc:Formcycle.SystemSettings.UserInterface.General.WebHome]]. |
| 144 |
144 |
|http.header.hsts.sub|false|Whether the HTTP Strict Transport Security should be applied to sub domains as well. You can also change this setting [[in the system settings menu >>doc:Formcycle.SystemSettings.UserInterface.General.WebHome]]. |
| 145 |
|
-|http.header.serverid.name |(not available)|Specifies the header name with which the //system.server.id// is written to all requests. If this entry exists but is empty the corresponding header will not be set. If the entry does not exist the default //XFC-Server-Id// is used. |
|
150 |
+|http.header.serverid.name |(not available)|Specifies the header name with which the //system.server.id// is written to all requests. If this entry exists but is empty the corresponding header will not be set. If the entry does not exist the default //XFC-Server-Id// is used. |
| 146 |
146 |
|http.param.serverid.name |(not available)|Specifies the name of the URL parameter used to append the //system.server.id// to the form submission URL. If the value is empty or not available, no parameter will be appended. |
|
152 |
+|http.header.csp.backend {{version major="7" minor="2" patch="1" /}}|(empty)|Sets the value for the HTTP headder //Content-Security-Policy// in the backend (configuration UI). You can also edit this value in the backend via the menu System, General. |
|
153 |
+|http.header.csp.frontend {{version major="7" minor="2" patch="1" /}}|(empty)|Sets the value for the HTTP headder //Content-Security-Policy// in the frontend (web form). You can also edit this value in the backend via the menu System, General. |
|
154 |
+|http.header.csp.reportonly.backend {{version major="7" minor="2" patch="1" /}}|(empty)|Sets the value for the HTTP headder //Content-Security-Policy-Report-Only// in the backend (configuration UI). You can also edit this value in the backend via the menu System, General. |
|
155 |
+|http.header.csp.reportonly.frontend {{version major="7" minor="2" patch="1" /}}|(empty)|Sets the value for the HTTP headder //Content-Security-Policy-Report-Only// in the frontend (web forms). You can also edit this value in the backend via the menu System, General. |
| 147 |
147 |
{{/table}} |
| 148 |
148 |
|
| 149 |
149 |
== Debug == |
| ... |
... |
@@ -171,3 +171,68 @@ |
| 171 |
171 |
|mail.smtp.connectiontimeout {{version major="7" minor="0" patch="4" /}}|300000|SMTP Socket connection timeout value in milliseconds. |
| 172 |
172 |
|mail.smtp.timeout {{version major="7" minor="0" patch="4" /}}|300000|SMTP Socket I/O timeout value in milliseconds. |
| 173 |
173 |
{{/table}} |
|
183 |
+ |
|
184 |
+== Workflow == |
|
185 |
+ |
|
186 |
+The following properties can be used to selectively enable or disable certain events or actions of the new workflow. |
|
187 |
+ |
|
188 |
+The properties for events share the following pattern: |
|
189 |
+ |
|
190 |
+{{code language="text"}} |
|
191 |
+trigger.<technical_name_of_the_event>.enable=false |
|
192 |
+{{/code}} |
|
193 |
+ |
|
194 |
+The properties for actions share the following pattern: |
|
195 |
+ |
|
196 |
+{{code language="text"}} |
|
197 |
+processing.<technical_name_of_the_action>.enable=false |
|
198 |
+{{/code}} |
|
199 |
+ |
|
200 |
+The technical event names are as follows: |
|
201 |
+ |
|
202 |
+* //fc_catch_error//: Workflow error |
|
203 |
+* //fc_doi_verified//: Double opt-in confirmed |
|
204 |
+* //fc_form_submit_button//: Technical name |
|
205 |
+* //fc_invitation_error//: Invitation failed |
|
206 |
+* //fc_invitation_sent//: Invitation sent |
|
207 |
+* //fc_manual//: Custom |
|
208 |
+* //fc_qualified_form_submit_button//: Submit button |
|
209 |
+* //fc_state_timer//: After state change |
|
210 |
+* //fc_time_point//: Date and time |
|
211 |
+ |
|
212 |
+The technical action names are as follows: |
|
213 |
+ |
|
214 |
+* //fc_change_form_availability//: Change availability |
|
215 |
+* //fc_change_form_value//: Change form values |
|
216 |
+* //fc_change_state//: Set state |
|
217 |
+* //fc_compress_as_zip//: Compress files |
|
218 |
+* //fc_copy_form_record//: Copy form record |
|
219 |
+* //fc_counter//: Change counter |
|
220 |
+* //fc_create_text_file//: Create text file |
|
221 |
+* //fc_delete_form_record//: Delete form record |
|
222 |
+* //fc_doi_init//: Send double opt-in email |
|
223 |
+* //fc_email//: Email |
|
224 |
+* //fc_empty//: Empty statement |
|
225 |
+* //fc_experiment//: Handle errors |
|
226 |
+* //fc_export_to_persistence//: Export to persistence file |
|
227 |
+* //fc_export_to_xml//: Export as XML |
|
228 |
+* //fc_fill_pdf//: Fill PDF document |
|
229 |
+* //fc_fill_word//: Fill word document |
|
230 |
+* //fc_import_form_value_from_xml//: Import from XML |
|
231 |
+* //fc_ldap_query//: LDAP query |
|
232 |
+* //fc_move_form_record_to_inbox//: Move to inbox |
|
233 |
+* //fc_multiple_condition//: Condition (Check value) |
|
234 |
+* //fc_post_request//: HTTP request |
|
235 |
+* //fc_provide_resource//: Provide file |
|
236 |
+* //fc_queue_task//: Queue custom event |
|
237 |
+* //fc_redirect//: Redirect |
|
238 |
+* //fc_renew_process_id//: Create new process ID |
|
239 |
+* //fc_return//: Stop processing chain |
|
240 |
+* //fc_return_file//: File download |
|
241 |
+* //fc_save_to_file_system//: Save to file system |
|
242 |
+* //fc_set_saved_flag//: Save |
|
243 |
+* //fc_show_template//: HTML response page |
|
244 |
+* //fc_sql_statement//: Database query |
|
245 |
+* //fc_throw_exception//: Throw error |
|
246 |
+* //fc_write_form_record_attributes//: Set server attribute |
|
247 |
+* //sequence//: Block statement |
