# Note that the syntax of this file must be valid Perl code.
our @SHIBBOLETH_IDPS = ("idp.mit.edu");
our $TEST_SERVER = 0;
our $HONOR_REMOTE_USER = 1;
our $REMUSER_EXPIRES = 60 * 60 * 8;
our @REALMS = ('ATHENA.MIT.EDU', 'MIT.EDU', '');
our $TEMPLATE_PATH = "./templates";

our %REMOTE_USER_REDIRECTS = (
    certificate => 'https://idp.mit.edu:9443/login-cert',
    kerberos    => 'https://idp.mit.edu/login-kerberos',
    certrequired => 'https://idp.mit.edu:9444/login-cert-required',
);

# These are used by auth-options.
our %REMOTE_USER_TESTS = (
    certificate => 'https://idp.mit.edu:9443/test-cert',
    kerberos    => 'https://idp.mit.edu/test-kerberos',
);

# The mobi WURFL server URL, for looking up client devices based on
# the browser user agent string.
our $WURFL_URL = 'http://mobi-service.mit.edu/wurfl/api';

# These client devices have their own set of template pages.
our @SPECIAL_DEVICES = ('iphone');

# Client devices which should use "SSLVerifyClient require",
# because they cannot grok "SSLVerifyClient optional",
our @CERT_REQUIRED = ('iphone');