<?xml version="1.0" ?>

<feature-spec xmlns="urn:jboss:galleon:feature-spec:2.0" name="subsystem.elytron-oidc-client.secure-server" stability="default">
    <annotation name="jboss-op">
        <elem name="name" value="add"/>
        <elem name="op-params" value="adapter-state-cookie-path,allow-any-hostname,always-refresh-token,auth-server-url,authentication-request-format,autodetect-bearer-only,bearer-only,client-id,client-key-password,client-keystore,client-keystore-password,confidential-port,connection-pool-size,connection-timeout-millis,connection-ttl-millis,cors-allowed-headers,cors-allowed-methods,cors-exposed-headers,cors-max-age,credential,disable-trust-manager,enable-basic-auth,enable-cors,expose-token,ignore-oauth-query-parameter,min-time-between-jwks-requests,principal-attribute,provider,provider-url,proxy-url,public-client,public-key-cache-ttl,realm,realm-public-key,redirect-rewrite-rule,register-node-at-startup,register-node-period,request-object-encryption-alg-value,request-object-encryption-enc-value,request-object-signing-algorithm,request-object-signing-key-alias,request-object-signing-key-password,request-object-signing-keystore-file,request-object-signing-keystore-password,request-object-signing-keystore-type,resource,scope,socket-timeout-millis,ssl-required,token-minimum-time-to-live,token-signature-algorithm,token-store,truststore,truststore-password,turn-off-change-session-id-on-login,use-resource-role-mappings,verify-token-audience"/>
        <elem name="addr-params" value="subsystem,secure-server"/>
    </annotation>
    <annotation name="feature-branch">
        <elem name="id" value="subsystem.elytron-oidc-client"/>
    </annotation>
    <refs>
        <ref feature="subsystem.elytron-oidc-client"/>
    </refs>
    <params>
        <param name="cors-allowed-methods" nillable="true" stability="default"/>
        <param name="subsystem" feature-id="true" default="elytron-oidc-client"/>
        <param name="connection-ttl-millis" nillable="true" stability="default"/>
        <param name="request-object-encryption-enc-value" nillable="true" stability="preview"/>
        <param name="request-object-signing-key-alias" nillable="true" stability="preview"/>
        <param name="request-object-encryption-alg-value" nillable="true" stability="preview"/>
        <param name="public-client" nillable="true" stability="default"/>
        <param name="credential" nillable="true" stability="default"/>
        <param name="request-object-signing-key-password" nillable="true" stability="preview"/>
        <param name="token-signature-algorithm" nillable="true" stability="default"/>
        <param name="cors-exposed-headers" nillable="true" stability="default"/>
        <param name="truststore" nillable="true" stability="default"/>
        <param name="proxy-url" nillable="true" stability="default"/>
        <param name="cors-allowed-headers" nillable="true" stability="default"/>
        <param name="token-store" nillable="true" stability="default"/>
        <param name="resource" nillable="true" stability="default"/>
        <param name="request-object-signing-keystore-file" nillable="true" stability="preview"/>
        <param name="register-node-at-startup" nillable="true" stability="default"/>
        <param name="authentication-request-format" nillable="true" stability="preview"/>
        <param name="client-key-password" nillable="true" stability="default"/>
        <param name="confidential-port" nillable="true" stability="default"/>
        <param name="connection-timeout-millis" nillable="true" stability="default"/>
        <param name="enable-cors" nillable="true" stability="default"/>
        <param name="token-minimum-time-to-live" nillable="true" stability="default"/>
        <param name="connection-pool-size" nillable="true" stability="default"/>
        <param name="expose-token" nillable="true" stability="default"/>
        <param name="principal-attribute" nillable="true" stability="default"/>
        <param name="allow-any-hostname" nillable="true" stability="default"/>
        <param name="ignore-oauth-query-parameter" nillable="true" stability="default"/>
        <param name="autodetect-bearer-only" nillable="true" stability="default"/>
        <param name="min-time-between-jwks-requests" nillable="true" stability="default"/>
        <param name="adapter-state-cookie-path" nillable="true" stability="default"/>
        <param name="provider" nillable="true" stability="default"/>
        <param name="cors-max-age" nillable="true" stability="default"/>
        <param name="scope" nillable="true" stability="preview"/>
        <param name="client-id" nillable="true" stability="default"/>
        <param name="ssl-required" nillable="true" stability="default"/>
        <param name="bearer-only" nillable="true" stability="default"/>
        <param name="provider-url" nillable="true" stability="default"/>
        <param name="request-object-signing-keystore-type" nillable="true" stability="preview"/>
        <param name="client-keystore-password" nillable="true" stability="default"/>
        <param name="verify-token-audience" nillable="true" stability="default"/>
        <param name="realm-public-key" nillable="true" stability="default"/>
        <param name="secure-server" feature-id="true"/>
        <param name="public-key-cache-ttl" nillable="true" stability="default"/>
        <param name="use-resource-role-mappings" nillable="true" stability="default"/>
        <param name="client-keystore" nillable="true" stability="default"/>
        <param name="socket-timeout-millis" nillable="true" stability="default"/>
        <param name="enable-basic-auth" nillable="true" stability="default"/>
        <param name="redirect-rewrite-rule" nillable="true" stability="default"/>
        <param name="request-object-signing-keystore-password" nillable="true" stability="preview"/>
        <param name="truststore-password" nillable="true" stability="default"/>
        <param name="request-object-signing-algorithm" nillable="true" stability="preview"/>
        <param name="realm" nillable="true" stability="default"/>
        <param name="turn-off-change-session-id-on-login" nillable="true" stability="default"/>
        <param name="always-refresh-token" nillable="true" stability="default"/>
        <param name="register-node-period" nillable="true" stability="default"/>
        <param name="auth-server-url" nillable="true" stability="default"/>
        <param name="disable-trust-manager" nillable="true" stability="default"/>
    </params>
</feature-spec>