Kitto.Config.Auth
Typed config readers for the authentication domain (Config.yaml node Auth and its sub-nodes Defaults and the optional JWT envelope, itself carrying Cookie and Claims). Part of the per-domain organization of the config metadata (replacing the monolithic Kitto.Metadata.SubNodes). Each class reads its subtree once into typed fields (see TKConfigReader) AND carries the [YamlNode]/[YamlSubNode] attributes that KIDE reads via RTTI to drive the Config editor.
Note: the authenticators themselves read their own Auth node directly (they are TEFComponent descendants), so this reader is used by KIDE for the schema and by any runtime code that prefers the typed Config.Auth.* accessors.
TKAuthDefaultsConfig class
Default credentials for authentication. YAML path: Auth/Defaults
TKAuthCookieConfig class
Cookie attributes for the JWT token cookie. YAML path: Auth/JWT/Cookie
TKAuthClaimsConfig class
Selection of optional claims embedded in the JWT. YAML path: Auth/JWT/Claims
TKAuthJWTConfig class
Optional JWT envelope for an authenticator. YAML path: Auth/JWT The presence of this node turns on issuing/validating a signed self-contained credential cookie (kx_token); the engine is provided by the opt-in Kitto.Auth.JWT unit. Absence => plain server-side session cookie. Works under any Auth: X (DB / TextFile / OSDB / custom).
TKAuthValidatePasswordConfig class
Optional password-strength policy enforced when a user sets a password. YAML path: Auth/ValidatePassword
TKAuthMailMessageConfig class
A templated e-mail message (From/Subject/Body/HTMLBody) used by the authentication flows. YAML paths: Auth/ResetMailMessage and Auth/NewUserMailMessage. Bodies may contain #Placeholders# (e.g. #UserName#, #TempPassword#) and %Config:...% macros.
TKAuthLDAPAttributesConfig class
LDAP attribute-name mapping for the LDAP authenticator (Kitto.Auth.LDAP): maps each logical user attribute to the LDAP attribute read after the bind. YAML path: Auth/Attributes
TKAuthConfig class
Authentication settings from Config.yaml. YAML path: Auth