From 10ea684f042c763143e711bf4d23d974af740e4b Mon Sep 17 00:00:00 2001
From: Madhumita <madhu@gluu.org>
Date: Mon, 14 Nov 2022 17:16:10 +0530
Subject: [PATCH] fix: #2487 - removing inwebo

---
 .../webapp/auth/inwebo/iwauthenticate.xhtml   |  78 ----
 .../src/main/webapp/auth/inwebo/iwlogin.xhtml | 132 -------
 .../other/inwebo/inwebo.py                    | 338 ------------------
 .../other/inwebo/iw_creds.json                |   1 -
 .../other/inwebo/iw_va.xhtml                  |  93 -----
 .../other/inwebo/iwauthenticate.xhtml         |  99 -----
 .../other/inwebo/iwlogin.xhtml                |  94 -----
 .../inwebo/iwlogin_without_password.xhtml     |  91 -----
 .../other/inwebo/iwpushnotification.xhtml     |  90 -----
 .../other/inwebo/oxauth.properties            |  19 -
 10 files changed, 1035 deletions(-)
 delete mode 100644 jans-auth-server/server/src/main/webapp/auth/inwebo/iwauthenticate.xhtml
 delete mode 100644 jans-auth-server/server/src/main/webapp/auth/inwebo/iwlogin.xhtml
 delete mode 100644 jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/inwebo.py
 delete mode 100644 jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iw_creds.json
 delete mode 100644 jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iw_va.xhtml
 delete mode 100644 jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwauthenticate.xhtml
 delete mode 100644 jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwlogin.xhtml
 delete mode 100644 jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwlogin_without_password.xhtml
 delete mode 100644 jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwpushnotification.xhtml
 delete mode 100644 jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/oxauth.properties

diff --git a/jans-auth-server/server/src/main/webapp/auth/inwebo/iwauthenticate.xhtml b/jans-auth-server/server/src/main/webapp/auth/inwebo/iwauthenticate.xhtml
deleted file mode 100644
index 0ad54c62c39..00000000000
--- a/jans-auth-server/server/src/main/webapp/auth/inwebo/iwauthenticate.xhtml
+++ /dev/null
@@ -1,78 +0,0 @@
-<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
-        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<ui:composition xmlns="http://www.w3.org/1999/xhtml"
-                xmlns:f="http://xmlns.jcp.org/jsf/core"
-                xmlns:ui="http://xmlns.jcp.org/jsf/facelets"
-                xmlns:h="http://xmlns.jcp.org/jsf/html"
-                template="/WEB-INF/incl/layout/template.xhtml">
-    <f:metadata>
-	<f:viewAction action="#{authenticator.prepareAuthenticationForStep}" if="#{not identity.loggedIn}"/>
-    </f:metadata>
-
-    <ui:define name="head">
-        <style type="text/css">
-            .login-panel {
-                border-style: solid;
-                border-width: 1px;
-                padding: 1px;
-                background-color: #FFFFFF;
-                border-color: #C4C0B9;
-            }
-
-            .login-panel-header {
-                background-color: #D4CFC7;
-                background-image: url("#{webConfigurationService.getImgLocation()}/panel_header_bg.png");
-                background-position: left top;
-                background-repeat: repeat-x;
-                border-style: solid;
-                border-width: 1px;
-                padding: 2px;
-                border-color: #D4CFC7;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-                font-weight: bold;
-            }
-
-            .login-panel-body {
-                padding: 10px;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-            }
-        </style>
-    </ui:define>
-
-    <ui:define name="pageTitle">#{msgs['inwebo.pageTitle']}</ui:define>
-
-    <ui:define name="body">
-        <form id="loginForm" method="post" action="#{request.contextPath}/postlogin.htm">
-            <h:panelGroup id="loginGroup" rendered="#{not identity.loggedIn}">
-                <div class="login-panel">
-                    <div class="login-panel-header">#{msgs['inwebo.login']}</div>
-                    <div class="login-panel-body">
-                        <ui:param name="client" value="#{clientService.getClient(redirect.parameters['client_id'])}" />
-                        <h:panelGroup rendered='#{!empty client.getLogoUri()}'>
-                            <h:graphicImage url='#{client.getLogoUri()}'/>
-                        </h:panelGroup>
-
-                        <p class="info">#{msgs['inwebo.pleaseLoginHere']}</p>
-
-                        <h:panelGrid columns="2" rowClasses="prop" columnClasses="name,value">
-                            <h:outputLabel for="pairing_phrase">#{msgs['inwebo.authenticationToken']}</h:outputLabel>
-                            <input name="iw_token" type="text" autocomplete="off" />
-                        </h:panelGrid>
-
-                        <h:panelGroup rendered='#{!empty client.getPolicyUri()}'>
-                            <p>
-                                <a target="_blank" href='#{client.getPolicyUri()}'>#{msgs['inwebo.termsPrivacy']}</a>
-                            </p>
-                        </h:panelGroup>
-
-                        <h:commandButton value="Authenticate" action="#{authenticator.authenticate}" />
-                    </div>
-                </div>
-            </h:panelGroup>
-        </form>
-    </ui:define>
-</ui:composition>
\ No newline at end of file
diff --git a/jans-auth-server/server/src/main/webapp/auth/inwebo/iwlogin.xhtml b/jans-auth-server/server/src/main/webapp/auth/inwebo/iwlogin.xhtml
deleted file mode 100644
index 6aea0ff2b03..00000000000
--- a/jans-auth-server/server/src/main/webapp/auth/inwebo/iwlogin.xhtml
+++ /dev/null
@@ -1,132 +0,0 @@
-<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
-        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<ui:composition xmlns="http://www.w3.org/1999/xhtml"
-		xmlns:f="http://xmlns.jcp.org/jsf/core"
-                xmlns:ui="http://xmlns.jcp.org/jsf/facelets"
-                xmlns:h="http://xmlns.jcp.org/jsf/html"
-                template="/WEB-INF/incl/layout/template.xhtml">
-    <f:metadata>
-        <f:viewAction action="#{authenticator.prepareAuthenticationForStep}" if="#{not identity.loggedIn}"/>
-    </f:metadata>
-
-    <ui:define name="head">
-        <style type="text/css">
-            .login-panel {
-                border-style: solid;
-                border-width: 1px;
-                padding: 1px;
-                background-color: #FFFFFF;
-                border-color: #C4C0B9;
-            }
-
-            .login-panel-header {
-                background-color: #D4CFC7;
-                background-image: url("#{webConfigurationService.getImgLocation()}/panel_header_bg.png");
-                background-position: left top;
-                background-repeat: repeat-x;
-                border-style: solid;
-                border-width: 1px;
-                padding: 2px;
-                border-color: #D4CFC7;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-                font-weight: bold;
-            }
-
-            .login-panel-body {
-                padding: 10px;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-            }
-        </style>
-
-        <h:panelGroup rendered="#{helium_enabled}">
-            <script src="https://ult-inwebo.com/webapp/js/helium.min.js"/>
-        </h:panelGroup>
-    </ui:define>
-
-    <ui:define name="pageTitle">#{msgs['inwebo.title']}</ui:define>
-
-    <ui:define name="body">
-        <h:panelGroup rendered="#{helium_enabled}">
-            <div id="inweboDetect" alias="#{helium_alias}" action="authenticate" lang="auto" style="display:none" />
-            <div id="heliumDesign" displaytype="inline" container="heliumForm" top="10" left="40" rounded="0" shaded="0" skin="default" maincolor="#28AA28" withlogo="1" withactiontitle="1" withborder="0" bordercolor="#28AA28" bgcolor="#999999" withtitle="0" titlebgcolor="#28AA28" titlecolor="#FFFFFF" />
-        </h:panelGroup>
-
-        <h:form id="loginForm" rendered="#{not helium_enabled}">
-
-            <h:panelGroup rendered="#{not identity.loggedIn}">
-                <div class="login-panel">
-                    <div class="login-panel-header">#{msgs['inwebo.loginLabel']}</div>
-                    <div class="login-panel-body">
-                        <ui:param name="client" value="#{clientService.getClient(identity.sessionId.sessionAttributes['client_id'])}" />
-
-                        <h:panelGroup rendered='#{!empty client.getLogoUri()}'>
-                            <h:graphicImage url='#{client.getLogoUri()}'/>
-                        </h:panelGroup>
-
-                        <p class="info">#{msgs['inwebo.pleaseLoginHere']}</p>
-
-                        <div class="dialog">
-                            <h:panelGrid columns="2" rowClasses="prop" columnClasses="name,value">
-                                <h:outputLabel for="username">#{msgs['inwebo.username']}</h:outputLabel>
-                                <h:inputText id="username"
-                                             value="#{credentials.username}" autocomplete="off"/>
-                                <h:outputLabel for="password">#{msgs['inwebo.password']}</h:outputLabel>
-                                <h:inputSecret id="password"
-                                               value="#{credentials.password}" autocomplete="off"/>
-                                <h:outputLabel for="rememberMe">#{msgs['inwebo.rememberMe']}</h:outputLabel>
-                                <h:selectBooleanCheckbox id="rememberMe"
-                                                         value="#{rememberMe.enabled}"/>
-                            </h:panelGrid>
-                        </div>
-
-                        <h:panelGroup rendered='#{!empty client.getPolicyUri()}'>
-                            <p>
-                                <a target="_blank" href='#{client.getPolicyUri()}'>#{msgs['inwebo.termsPrivacy']}</a>
-                            </p>
-                        </h:panelGroup>
-
-                        <div class="actionButtons">
-                            <h:commandButton id="loginButton"
-                                             value="Login"
-                                             action="#{authenticator.authenticate}" />
-                        </div>
-                    </div>
-                </div>
-            </h:panelGroup>
-        </h:form>
-
-        <h:panelGroup rendered="#{helium_enabled}">
-            <!-- Temporary solution because InWebo not support id with ':' character -->
-            <form id="iwLoginForm" action="#{request.contextPath}/postlogin.htm">
-                <h:panelGroup rendered="#{not identity.loggedIn}">
-                    <div class="login-panel">
-                        <div class="login-panel-header">#{msgs['inwebo.loginLabel']}</div>
-                        <div class="login-panel-body">
-                            <ui:param name="client" value="#{clientService.getClient(identity.sessionId.sessionAttributes['client_id'])}" />
-
-                            <h:panelGroup rendered='#{!empty client.getLogoUri()}'>
-                                <h:graphicImage url='#{client.getLogoUri()}'/>
-                            </h:panelGroup>
-
-                            <p class="info">#{msgs['inwebo.pleaseLoginHere']}</p>
-
-                            <div id="heliumForm"/>
-                            <input type="hidden" name="login"/>
-                            <input type="hidden" name="password"/>
-
-                            <h:panelGroup rendered='#{!empty client.getPolicyUri()}'>
-                                <p>
-                                    <a target="_blank" href='#{client.getPolicyUri()}'>#{msgs['inwebo.termsPrivacy']}</a>
-                                </p>
-                            </h:panelGroup>
-                        </div>
-                    </div>
-                </h:panelGroup>
-            </form>
-        </h:panelGroup>
-    </ui:define>
-</ui:composition>
\ No newline at end of file
diff --git a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/inwebo.py b/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/inwebo.py
deleted file mode 100644
index 994b78ddbc0..00000000000
--- a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/inwebo.py
+++ /dev/null
@@ -1,338 +0,0 @@
-from io.jans.as.server.service import AuthenticationService
-from io.jans.as.server.security import Identity
-from io.jans.model.custom.script.type.auth import PersonAuthenticationType
-from io.jans.service.cdi.util import CdiUtil
-from io.jans.util import StringHelper,ArrayHelper
-from io.jans.as.server.util import ServerUtil
-from io.jans.as.server.service import UserService, AuthenticationService,SessionIdService
-from io.jans.as.server.service.net import HttpService
-from io.jans.as.server.service.common import EncryptionService
-from jakarta.faces.application import FacesMessage
-from jakarta.faces.context import FacesContext
-from io.jans.jsf2.service import FacesService
-from io.jans.jsf2.message import FacesMessages
-from java.util import Arrays
-from java.lang import String
-from java.lang import System
-import java
-import sys
-import json
-
-
-    
-class PersonAuthentication(PersonAuthenticationType):
-
-
-    def __init__(self, currentTimeMillis):
-        self.otp = "false"
-        self.client = None
-
-    def init(self, customScript, configurationAttributes):
-       
-        print "inWebo. Initialization"
-        iw_cert_store_type = configurationAttributes.get("iw_cert_store_type").getValue2()
-        iw_cert_path = configurationAttributes.get("iw_cert_path").getValue2()
-        iw_creds_file = configurationAttributes.get("iw_creds_file").getValue2()
-        
-        self.push_withoutpin = "false"
-        self.push_fail = "false"
-        
-        #permissible values = true , false
-        self.push_withoutpin = 1 
-        if StringHelper.equalsIgnoreCase("false" ,configurationAttributes.get("iw_push_withoutpin").getValue2()):
-            self.push_withoutpin = 0
-        self.api_uri =  configurationAttributes.get("iw_api_uri").getValue2()
-        self.service_id = configurationAttributes.get("iw_service_id").getValue2()
-        
-        
-        # Load credentials from file
-        f = open(iw_creds_file, 'r')
-        try:
-           creds = json.loads(f.read())
-        except:
-            print "unexpected error - "+sys.exc_info()[0]
-            return False
-        finally:
-            f.close()
-        iw_cert_password = creds["CERT_PASSWORD"]
-        
-        #TODO: the password should not be in plaintext
-        #try:
-         #   encryptionService = CdiUtil.bean(EncryptionService)
-          #  iw_cert_password = encryptionService.decrypt(iw_cert_password)
-        #except:
-         #   print("oops!",sys.exc_info()[0],"occured.")
-          #  return False
-
-        httpService = CdiUtil.bean(HttpService)
-        self.client = httpService.getHttpsClient(None, None, None, iw_cert_store_type, iw_cert_path, iw_cert_password)
-        print "inWebo. Initialized successfully"
-        return True   
-  
-
-    def destroy(self, configurationAttributes):
-        print "inWebo. Destroyed successfully"
-        return True
-
-    def getApiVersion(self):
-        return 11
-
-        
-    def getAuthenticationMethodClaims(self, requestParameters):
-        return None
-        
-    def isValidAuthenticationMethod(self, usageType, configurationAttributes):
-        return True
-
-    def getAlternativeAuthenticationMethod(self, usageType, configurationAttributes):
-        return None
-    
-    def authenticate(self, configurationAttributes, requestParameters, step):
-        
-        userService = CdiUtil.bean(UserService)
-        authenticationService = CdiUtil.bean(AuthenticationService)
-        identity = CdiUtil.bean(Identity)
-        
-        credentials = identity.getCredentials()
-        user_name = credentials.getUsername()
-        
-        iw_otp = requestParameters.get("loginForm:otp")
-         
-        if ArrayHelper.isNotEmpty(iw_otp) and StringHelper.equalsIgnoreCase("true", iw_otp[0]) and step == 2:    
-                identity.setWorkingParameter("iw_count_login_steps", 3)
-                return True
-                
-        elif StringHelper.isEmptyString(user_name) and step == 1:
-            print "empty user_name in step1 indicates browser token notfound"
-            identity.setWorkingParameter("iw_count_login_steps", 2)
-            return True
-        else:
-             
-            response_check = False
-            user_exists_in_gluu = authenticationService.authenticate(user_name)
-            identity.setWorkingParameter("iw_count_login_steps", step)
-            
-            if (step == 1 or step == 3):
-                print "if (step == 1 or step == 3):"
-                password = credentials.getPassword()
-                if StringHelper.isEmpty(password):
-                    print "InWebo. Authenticate for step 2. otp token is empty"
-                    return False
-                #password is the otp token
-                response_check = self.validateInweboToken(self.api_uri, self.service_id, user_name, password, step)
-            elif (step == 2):
-                print "elif (step == 2):"
-                session = CdiUtil.bean(SessionIdService).getSessionId()
-                if session == None:
-                    print "InWebo. Authenticate for step 2. session_id is not exists"
-                    return False
-
-                response_check = self.checkStatus(self.api_uri, self.service_id, user_name, session.getId(), self.push_withoutpin)
-                
-                if self.push_fail is not None:
-                    self.setErrorMessage(self.push_fail)
-                    identity.setWorkingParameter("iw_count_login_steps", 3)
-                    
-            return response_check and user_exists_in_gluu 
-
-    def prepareForStep(self, configurationAttributes, requestParameters, step):
-        
-        if (step == 1):
-            print "InWebo. Prepare for step 1"
-            return True
-        elif (step == 2):
-            print "InWebo. Prepare for step 2"
-            return True
-        elif (step == 3):
-            print "inWebo. Prepare for step 3"
-            return True
-        else:
-            return False
-        
-    def getExtraParametersForStep(self, configurationAttributes, step):
-        return None
-
-    def getCountAuthenticationSteps(self, configurationAttributes):
-        print "inside getCountAuthenticationSteps"
-        identity = CdiUtil.bean(Identity)
-        if (identity.isSetWorkingParameter("iw_count_login_steps")):
-            print "identity.getWorkingParameter(iw_count_login_steps) - ", identity.getWorkingParameter("iw_count_login_steps")
-            return identity.getWorkingParameter("iw_count_login_steps")
-        
-        return 3
-    
-    def getPageForStep(self, configurationAttributes, step):
-        
-        identity = CdiUtil.bean(Identity)
-        if (step == 1):
-            return "/auth/inwebo/iw_va.xhtml"
-        elif (step == 2):
-                return "/auth/inwebo/iwpushnotification.xhtml"
-        elif (step == 3):
-                return "/auth/inwebo/iwauthenticate.xhtml"
-        else:
-            return ""
-    
-    def isPassedDefaultAuthentication(self):
-        identity = CdiUtil.bean(Identity)
-        credentials = identity.getCredentials()
-        user_name = credentials.getUsername()
-        passed_step1 = StringHelper.isNotEmptyString(user_name)
-        return passed_step1
-    
-    def validateInweboToken(self, iw_api_uri, iw_service_id, user_name, iw_token, step):
-        httpService = CdiUtil.bean(HttpService)
-        
-        request_uri = iw_api_uri + "action=authenticateExtended" + "&serviceId=" + str(iw_service_id) + "&userId=" + httpService.encodeUrl(user_name) + "&token=" + str(iw_token)+"&format=json"
-        print "InWebo. Token verification. Attempting to send authentication request:", request_uri
-        
-        try:
-            http_service_response = httpService.executeGet(self.client, request_uri)
-            http_response = http_service_response.getHttpResponse()
-            print "status - ", http_response.getStatusLine().getStatusCode()
-        except: 
-            print "inWebo validate method. Exception: ", sys.exc_info()[1]
-            return False
-
-        try:
-            if (http_response.getStatusLine().getStatusCode() != 200):
-                print "inWebo. Invalid response from validation server: ", str(http_response.getStatusLine().getStatusCode())
-                httpService.consume(http_response)
-                return None
-            
-            response_bytes = httpService.getResponseContent(http_response)
-            response_string = httpService.convertEntityToString(response_bytes)
-            httpService.consume(http_response)
-        
-        finally:
-            http_service_response.closeConnection()
-        
-        if response_string is None:
-            print "inWebo. Get empty response from inWebo server"
-            return None
-    
-        print "response string:",response_string
-        json_response = json.loads(response_string)
-        
-        if not StringHelper.equalsIgnoreCase(json_response['err'], "OK"):
-            print "inWebo. Get response with status: ", json_response['err']
-            return False
-        else:
-            return True   # response_validation
-    
-    def checkStatus(self, iw_api_uri, iw_service_id, user_name,  session_id,without_pin):
-        print "inside check status ", user_name+session_id
-        # step 1: call action=pushAthenticate
-        httpService = CdiUtil.bean(HttpService)
-        
-        request_uri = iw_api_uri + "action=pushAuthenticate" + "&serviceId=" + str(iw_service_id) + "&userId=" + httpService.encodeUrl(user_name) + "&format=json&withoutpin="+str(without_pin)
-        #curTime = java.lang.System.currentTimeMillis()
-        #endTime = curTime + (timeout * 1000)
-        
-        try:
-            response_status = None
-            http_service_response = httpService.executeGet(self.client, request_uri)
-            http_response = http_service_response.getHttpResponse()
-             
-            if (http_response.getStatusLine().getStatusCode() != 200):
-                print "inWebo. Invalid response from inwebo server: checkStatus ", str(http_response.getStatusLine().getStatusCode())
-                httpService.consume(http_response)
-                return None
-            
-            response_bytes = httpService.getResponseContent(http_response)
-            response_string = httpService.convertEntityToString(response_bytes)
-            httpService.consume(http_response)
-        
-        except: 
-            print "inWebo validate method. Exception: ", sys.exc_info()[1]
-            return False
-    
-        finally:
-            http_service_response.closeConnection()
-            
-        print "response string:", response_string
-        json_response = json.loads(response_string)
-
-        if StringHelper.equalsIgnoreCase(json_response['err'], "OK"):
-            
-            session_id = json_response['sessionId']
-            checkResult_uri = iw_api_uri + "action=checkPushResult" + "&serviceId=" + str(iw_service_id) + "&userId=" + httpService.encodeUrl(user_name) + "&sessionId="+ httpService.encodeUrl(session_id) + "&format=json&withoutpin=1"
-            print "checkPushResult_uri:",checkResult_uri
-            
-            startTime = System.currentTimeMillis();
-            currentTime = startTime;
-            endTime = startTime  + long(25000)
-            print "start time ----> ",startTime
-            print "end time ",endTime
-            while (endTime > currentTime ):
-                try:
-                    # step 2: call action=checkPushResult; using session id from step 1
-                    http_check_push_response = httpService.executeGet(self.client, checkResult_uri)
-                    check_push_response = http_check_push_response.getHttpResponse()
-                    check_push_response_bytes = httpService.getResponseContent(check_push_response)
-                    check_push_response_string = httpService.convertEntityToString(check_push_response_bytes)
-                    httpService.consume(check_push_response)
-                    
-                    check_push_json_response = json.loads(check_push_response_string)
-                    print "check_push_json_response :",check_push_json_response 
-                    if StringHelper.equalsIgnoreCase(check_push_json_response['err'], "OK"):
-                        self.push_fail = None
-                        return True
-                    elif StringHelper.equalsIgnoreCase(check_push_json_response['err'], "NOK:REFUSED"):
-                        print "Push request notification for session", session_id
-                        self.push_fail = "inwebo.push.notification.rejected"
-                        return False
-                    elif StringHelper.equalsIgnoreCase(check_push_json_response['err'], "NOK:TIMEOUT"):
-                        print "Push request timed out for session", session_id
-                        self.push_fail = "inwebo.push.notification.timed.out.for.session"
-                        return False
-                    elif StringHelper.equalsIgnoreCase(check_push_json_response['err'], "NOK:WAITING"):
-                        self.push_fail = "inwebo.push.notification.timed.out.for.session"
-                        currentTime = System.currentTimeMillis();
-                        print " NOw ######## ", currentTime
-                        java.lang.Thread.sleep(5000)
-                        continue
-                    else:
-                        self.push_fail = "inwebo.push.notification.failed"
-                        return False 
-                    
-                    
-                    
-                finally:
-                    http_check_push_response.closeConnection()
-                 
-                
-                    
-        elif StringHelper.equalsIgnoreCase(json_response['err'], "NOK:SN"):
-            self.push_fail ="inwebo.no.username"
-            return False
-        elif StringHelper.equalsIgnoreCase(json_response['err'], "NOK:account unknown"):
-            self.push_fail ="inwebo.no.username"
-            return False        
-        else:
-            print "No response from server."
-            self.push_fail ="inwebo.push.notification.timed.out.for.session"
-            return False
-        
-        print "inWebo. CheckStatus. The process has not received a response from the phone yet"
-        
-        return False
-    
-    def setErrorMessage(self, errorMessage):
-        facesMessages = CdiUtil.bean(FacesMessages)
-        facesMessages.setKeepMessages()
-        facesMessages.clear()
-        facesMessages.add(FacesMessage.SEVERITY_ERROR, String.format("#{msgs['%s']}", errorMessage))
-        
-    def hasEnrollments(self, configurationAttributes,user):
-        return True;
-        
-    def getNextStep(self, configurationAttributes, requestParameters, step):
-        return -1
-
-    def getLogoutExternalUrl(self, configurationAttributes, requestParameters):
-        print "Get external logout URL call"
-        return None
-            
-    def logout(self, configurationAttributes, requestParameters):
-        return True
\ No newline at end of file
diff --git a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iw_creds.json b/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iw_creds.json
deleted file mode 100644
index 3fe86815b42..00000000000
--- a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iw_creds.json
+++ /dev/null
@@ -1 +0,0 @@
-{"CERT_PASSWORD": "example"}
diff --git a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iw_va.xhtml b/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iw_va.xhtml
deleted file mode 100644
index 8a69c6f5605..00000000000
--- a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iw_va.xhtml
+++ /dev/null
@@ -1,93 +0,0 @@
-
-<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<ui:composition xmlns="http://www.w3.org/1999/xhtml" xmlns:f="http://xmlns.jcp.org/jsf/core" xmlns:ui="http://xmlns.jcp.org/jsf/facelets"
-	xmlns:h="http://xmlns.jcp.org/jsf/html" template="/WEB-INF/incl/layout/template.xhtml">
-	<f:metadata>
-		<f:viewAction action="#{authenticator.prepareAuthenticationForStep}" if="#{not identity.loggedIn}" />
-	</f:metadata>
-	<ui:define name="head">
-		
-		<script type="text/javascript" src="https://ult-inwebo.com/va/client.js" />
-		<script type="text/javascript">
-			
-			//<![CDATA[
-			
-			VA_jQuery(document).ready(
-					function() 
-					{
-						iwstart("myStart", function(iw, data) 
-						{
-							
-							//Successful authentication
-							if (data.action == "authentication"
-									&& data.code == "ok") 
-							{
-								iw.insertFields(data.result);
-								document.getElementById("loginForm:loginButton").click();
-							}
-							
-							//Virtual Authenticator is not activated
-							if (data.type == "error" && data.code == "nok"
-									&& data.result.reason == "no_profile") {
-								//We terminate Virtual Authenticator
-								iwterminate();
-								//Insert code to redirect user to a push authentication page instead of displaying a popup
-								
-								document.getElementById("loginForm:loginButton").click();
-							}
-						});
-					});
-		//	]]>
-		</script>
-		<style type="text/css">
-.login-panel {
-	border-style: solid;
-	border-width: 1px;
-	padding: 1px;
-	background-color: #FFFFFF;
-	border-color: #C4C0B9;
-	width: 100%;
-}
-
-.login-panel-header {
-	background-color: #D4CFC7;
-	background-image: url("./img/panel_header_bg.png");
-	background-position: left top;
-	background-repeat: repeat-x;
-	border-style: solid;
-	border-width: 1px;
-	padding: 2px;
-	border-color: #D4CFC7;
-	color: #000000;
-	font-family: Arial, Verdana, sans-serif;
-	font-size: 11px;
-	font-weight: bold;
-}
-
-.login-panel-body {
-	padding: 10px;
-	color: #000000;
-	font-family: Arial, Verdana, sans-serif;
-	font-size: 11px;
-}
-</style>
-	</ui:define>
-	<ui:define name="pageTitle">#{msgs['inwebo.title.va']}</ui:define>
-
-	<ui:define name="body">
-		
-			<div id="myContainer" style="display: none;"></div>
-			<div id="myStart" data-action="authentication" data-container="myContainer" data-quiet-start="1" data-lang="auto" data-nopin="0"
-				data-alias="3edaf592678e1b0f9028403efd70f51c"></div>
-			
-		
-			<h:form id="loginForm" >
-				<h:inputHidden id="username" value="#{credentials.username}"   />
-				<h:inputHidden id="password" value="#{credentials.password}"    />
-				<h:commandButton id="loginButton" value="Login" style="display:none" action="#{authenticator.authenticate}" />
-			</h:form>
-			
-			
-		
-		</ui:define>
-</ui:composition>
\ No newline at end of file
diff --git a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwauthenticate.xhtml b/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwauthenticate.xhtml
deleted file mode 100644
index 38a37ba42a2..00000000000
--- a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwauthenticate.xhtml
+++ /dev/null
@@ -1,99 +0,0 @@
-<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
-        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<ui:composition xmlns="http://www.w3.org/1999/xhtml"
-                xmlns:f="http://xmlns.jcp.org/jsf/core"
-                xmlns:ui="http://xmlns.jcp.org/jsf/facelets"
-                xmlns:h="http://xmlns.jcp.org/jsf/html"
-                template="/WEB-INF/incl/layout/template.xhtml">
-    <f:metadata>
-	<f:viewAction action="#{authenticator.prepareAuthenticationForStep}" if="#{not identity.loggedIn}"/>
-    </f:metadata>
-
-    <ui:define name="head">
-        <style type="text/css">
-            .login-panel {
-                border-style: solid;
-                border-width: 1px;
-                padding: 1px;
-                background-color: #FFFFFF;
-                border-color: #C4C0B9;
-            }
-
-            .login-panel-header {
-                background-color: #D4CFC7;
-                background-image: url("#{webConfigurationService.getImgLocation()}/panel_header_bg.png");
-                background-position: left top;
-                background-repeat: repeat-x;
-                border-style: solid;
-                border-width: 1px;
-                padding: 2px;
-                border-color: #D4CFC7;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-                font-weight: bold;
-            }
-
-            .login-panel-body {
-                padding: 10px;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-            }
-        </style>
-    </ui:define>
-
-    <ui:define name="pageTitle">#{msgs['inwebo.pageTitle']}</ui:define>
-
-	<ui:define name="body">
-		
-			
-			<h:form id="loginForm" >
-				<h:panelGroup rendered="#{not identity.loggedIn}">
-					<div class="login-panel" >
-						<div class="login-panel-header">#{msgs['inwebo.loginLabel']}</div>
-						<div class="login-panel-body">
-							<ui:param name="client" value="#{clientService.getClient(identity.sessionId.sessionAttributes['client_id'])}" />
-
-							<h:panelGroup rendered='#{!empty client.getLogoUri()}'>
-								<h:graphicImage url='#{client.getLogoUri()}' />
-							</h:panelGroup>
-
-							<p class="info">#{msgs['inwebo.otp.login.info']}</p>
-
-							<div class="dialog">
-								<h:panelGrid columns="2" rowClasses="prop" columnClasses="name,value">
-									
-									<h:outputLabel for="username">#{msgs['inwebo.username']}</h:outputLabel>
-									<h:inputText id="username" value="#{credentials.username}"   />
-									<h:outputLabel for="password">#{msgs['inwebo.otp']}</h:outputLabel>
-									<h:inputText id="password" value="#{credentials.password}"   autocomplete="off" />
-									
-									
-								</h:panelGrid>
-							</div>
-
-							<h:panelGroup rendered='#{!empty client.getPolicyUri()}'>
-								<p>
-									<a target="_blank" href='#{client.getPolicyUri()}'>#{msgs['inwebo.termsPrivacy']}</a>
-								</p>
-							</h:panelGroup>
-
-							<div class="actionButtons">
-								<h:commandButton value="Authenticate" action="#{authenticator.authenticate}" />
-								
-							</div>
-						</div>
-					</div>
-				</h:panelGroup>
-
-				
-			</h:form>
-			
-			
-		
-		</ui:define>
-   		<!--ui:include src="/casa/casa.xhtml">
-			<ui:param name="methods" value="${identity.getWorkingParameter('methods')}"/>
-		</ui:include-->
-</ui:composition>
diff --git a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwlogin.xhtml b/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwlogin.xhtml
deleted file mode 100644
index bf6ab64673d..00000000000
--- a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwlogin.xhtml
+++ /dev/null
@@ -1,94 +0,0 @@
-<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
-        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<ui:composition xmlns="http://www.w3.org/1999/xhtml"
-		xmlns:f="http://xmlns.jcp.org/jsf/core"
-                xmlns:ui="http://xmlns.jcp.org/jsf/facelets"
-                xmlns:h="http://xmlns.jcp.org/jsf/html"
-                template="/WEB-INF/incl/layout/template.xhtml">
-    <f:metadata>
-        <f:viewAction action="#{authenticator.prepareAuthenticationForStep}" if="#{not identity.loggedIn}"/>
-    </f:metadata>
-
-    <ui:define name="head">
-        <style type="text/css">
-            .login-panel {
-                border-style: solid;
-                border-width: 1px;
-                padding: 1px;
-                background-color: #FFFFFF;
-                border-color: #C4C0B9;
-            }
-
-            .login-panel-header {
-                background-color: #D4CFC7;
-                background-image: url("#{webConfigurationService.getImgLocation()}/panel_header_bg.png");
-                background-position: left top;
-                background-repeat: repeat-x;
-                border-style: solid;
-                border-width: 1px;
-                padding: 2px;
-                border-color: #D4CFC7;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-                font-weight: bold;
-            }
-
-            .login-panel-body {
-                padding: 10px;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-            }
-        </style>
-
-    </ui:define>
-
-    <ui:define name="pageTitle">#{msgs['inwebo.title']}</ui:define>
-
-    <ui:define name="body">
-
-        <h:form id="loginForm" >
-
-            <h:panelGroup rendered="#{not identity.loggedIn}">
-                <div class="login-panel">
-                    <div class="login-panel-header">#{msgs['inwebo.loginLabel']}</div>
-                    <div class="login-panel-body">
-                        <ui:param name="client" value="#{clientService.getClient(identity.sessionId.sessionAttributes['client_id'])}" />
-
-                        <h:panelGroup rendered='#{!empty client.getLogoUri()}'>
-                            <h:graphicImage url='#{client.getLogoUri()}'/>
-                        </h:panelGroup>
-
-                        <p class="info">#{msgs['inwebo.pleaseLoginHere']}</p>
-
-                        <div class="dialog">
-                            <h:panelGrid columns="2" rowClasses="prop" columnClasses="name,value">
-                                <h:outputLabel for="username">#{msgs['inwebo.username']}</h:outputLabel>
-                                <h:inputText id="username"
-                                             value="#{credentials.username}" autocomplete="off"/>
-                                <h:outputLabel for="password">#{msgs['inwebo.password']}</h:outputLabel>
-                                <h:inputSecret id="password"
-                                               value="#{credentials.password}" autocomplete="off"/>
-                            </h:panelGrid>
-                        </div>
-
-                        <h:panelGroup rendered='#{!empty client.getPolicyUri()}'>
-                            <p>
-                                <a target="_blank" href='#{client.getPolicyUri()}'>#{msgs['inwebo.termsPrivacy']}</a>
-                            </p>
-                        </h:panelGroup>
-
-                        <div class="actionButtons">
-                            <h:commandButton id="loginButton"
-                                             value="Login"
-                                             action="#{authenticator.authenticate}" />
-                        </div>
-                    </div>
-                </div>
-            </h:panelGroup>
-        </h:form>
-
-    </ui:define>
-</ui:composition>
-
diff --git a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwlogin_without_password.xhtml b/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwlogin_without_password.xhtml
deleted file mode 100644
index 6d5f1335d1a..00000000000
--- a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwlogin_without_password.xhtml
+++ /dev/null
@@ -1,91 +0,0 @@
-<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
-        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<ui:composition xmlns="http://www.w3.org/1999/xhtml"
-		xmlns:f="http://xmlns.jcp.org/jsf/core"
-                xmlns:ui="http://xmlns.jcp.org/jsf/facelets"
-                xmlns:h="http://xmlns.jcp.org/jsf/html"
-                template="/WEB-INF/incl/layout/template.xhtml">
-    <f:metadata>
-        <f:viewAction action="#{authenticator.prepareAuthenticationForStep}" if="#{not identity.loggedIn}"/>
-    </f:metadata>
-
-    <ui:define name="head">
-        <style type="text/css">
-            .login-panel {
-                border-style: solid;
-                border-width: 1px;
-                padding: 1px;
-                background-color: #FFFFFF;
-                border-color: #C4C0B9;
-            }
-
-            .login-panel-header {
-                background-color: #D4CFC7;
-                background-image: url("#{webConfigurationService.getImgLocation()}/panel_header_bg.png");
-                background-position: left top;
-                background-repeat: repeat-x;
-                border-style: solid;
-                border-width: 1px;
-                padding: 2px;
-                border-color: #D4CFC7;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-                font-weight: bold;
-            }
-
-            .login-panel-body {
-                padding: 10px;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-            }
-        </style>
-
-    </ui:define>
-
-    <ui:define name="pageTitle">#{msgs['inwebo.title']}</ui:define>
-
-    <ui:define name="body">
-
-        <h:form id="loginForm" >
-
-            <h:panelGroup rendered="#{not identity.loggedIn}">
-                <div class="login-panel">
-                    <div class="login-panel-header">#{msgs['inwebo.loginLabel']}</div>
-                    <div class="login-panel-body">
-                        <ui:param name="client" value="#{clientService.getClient(identity.sessionId.sessionAttributes['client_id'])}" />
-
-                        <h:panelGroup rendered='#{!empty client.getLogoUri()}'>
-                            <h:graphicImage url='#{client.getLogoUri()}'/>
-                        </h:panelGroup>
-
-                        <p class="info">#{msgs['inwebo.pleaseLoginHere']}</p>
-
-                        <div class="dialog">
-                            <h:panelGrid columns="2" rowClasses="prop" columnClasses="name,value">
-                                <h:outputLabel for="username">#{msgs['inwebo.username']}</h:outputLabel>
-                                <h:inputText id="username"
-                                             value="#{credentials.username}" autocomplete="off"/>
-                            </h:panelGrid>
-                        </div>
-
-                        <h:panelGroup rendered='#{!empty client.getPolicyUri()}'>
-                            <p>
-                                <a target="_blank" href='#{client.getPolicyUri()}'>#{msgs['inwebo.termsPrivacy']}</a>
-                            </p>
-                        </h:panelGroup>
-
-                        <div class="actionButtons">
-                            <h:commandButton id="loginButton"
-                                             value="Login"
-                                             action="#{authenticator.authenticate}" />
-                        </div>
-                    </div>
-                </div>
-            </h:panelGroup>
-        </h:form>
-
-    </ui:define>
-</ui:composition>
-
diff --git a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwpushnotification.xhtml b/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwpushnotification.xhtml
deleted file mode 100644
index 882fde87b4d..00000000000
--- a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/iwpushnotification.xhtml
+++ /dev/null
@@ -1,90 +0,0 @@
-<!DOCTYPE composition PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
-        "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
-<ui:composition xmlns="http://www.w3.org/1999/xhtml"
-		xmlns:f="http://xmlns.jcp.org/jsf/core"
-                xmlns:ui="http://xmlns.jcp.org/jsf/facelets"
-                xmlns:h="http://xmlns.jcp.org/jsf/html"
-                template="/WEB-INF/incl/layout/template.xhtml">
-    <f:metadata>
-        <f:viewAction action="#{authenticator.prepareAuthenticationForStep}" if="#{not identity.loggedIn}"/>
-    </f:metadata>
-
-    <ui:define name="head">
-        <style type="text/css">
-            .login-panel {
-                border-style: solid;
-                border-width: 1px;
-                padding: 1px;
-                background-color: #FFFFFF;
-                border-color: #C4C0B9;
-            }
-
-            .login-panel-header {
-                background-color: #D4CFC7;
-                background-image: url("#{webConfigurationService.getImgLocation()}/panel_header_bg.png");
-                background-position: left top;
-                background-repeat: repeat-x;
-                border-style: solid;
-                border-width: 1px;
-                padding: 2px;
-                border-color: #D4CFC7;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-                font-weight: bold;
-            }
-
-            .login-panel-body {
-                padding: 10px;
-                color: #000000;
-                font-family: Arial, Verdana, sans-serif;
-                font-size: 11px;
-            }
-        </style>
-		<script type="text/javascript">
-      
-	      	function redirectToOPT()
-	      	{
-		      	
-				document.getElementById("loginForm:otp").value = "true";
-				document.getElementById("loginForm:pushButton").click();
-				
-	      	}
-        </script>
-    </ui:define>
-    <ui:define name="pageTitle">#{msgs['inwebo.push.notification.message']}</ui:define>
-    <ui:define name="body">
-        <h:form id="loginForm" rendered="#{not va_enabled}">
-        	
-            <h:panelGroup rendered="#{not identity.loggedIn}">
-                <div class="login-panel">
-                    <div class="login-panel-body">
-                        <ui:param name="client" value="#{clientService.getClient(identity.sessionId.sessionAttributes['client_id'])}" />
-
-                        <h:panelGroup rendered='#{!empty client.getLogoUri()}'>
-                            <h:graphicImage url='#{client.getLogoUri()}'/>
-                        </h:panelGroup>
-
-                        <p class="info">#{msgs['inwebo.push.notification.message']}</p>
-						<h:panelGrid columns="2" rowClasses="prop" columnClasses="name,value">
-							<h:outputLabel for="username">#{msgs['inwebo.username']}</h:outputLabel>
-							<h:inputText id="username" value="#{credentials.username}"   />
-							<h:inputHidden id="otp" value="false"   />
-						</h:panelGrid>
-                        <div class="actionButtons">
-                            <h:commandButton id="pushButton"
-                                             value="Push"
-                                             action="#{authenticator.authenticate}" />
-                                             
-                        </div>
-                        
-                        <a href="#" onclick="redirectToOPT();" >#{msgs['inwebo.authenticate.using.otp']}</a>
-                    </div>
-                </div>
-            </h:panelGroup>
-        </h:form>
-    </ui:define>
-    <!--ui:include src="/casa/casa.xhtml">
-			<ui:param name="methods" value="${identity.getWorkingParameter('methods')}"/>
-		</ui:include-->
-</ui:composition>
\ No newline at end of file
diff --git a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/oxauth.properties b/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/oxauth.properties
deleted file mode 100644
index 1a7e33cccd8..00000000000
--- a/jans-linux-setup/jans_setup/static/extension/person_authentication/other/inwebo/oxauth.properties
+++ /dev/null
@@ -1,19 +0,0 @@
-
-#inwebo
-inwebo.title=inWebo Login
-inwebo.loginLabel=Login
-inwebo.pleaseLoginHere=Please login here
-inwebo.username=Username
-inwebo.password=Password
-inwebo.pageTitle=inWebo 2FA
-inwebo.2fa.mobile.app=inWebo Authenticator
-inwebo.authenticationToken=inWebo OTP
-inwebo.push.notification.message=Click here to push notification to your phone
-inwebo.inwebo.authenticator=inWebo Authenticator
-inwebo.otp.login.info=Enter OTP from your mobile or use Web authenticator
-inwebo.otp=OTP token
-inwebo.push.notification.rejected=Push notification has been rejected.
-inwebo.push.notification.failed=Push notification has failed
-inwebo.no.username=Please enter a registered username
-inwebo.authenticate.using.otp=Authenticate using OTP instead?
-inwebo.push.notification.timed.out.for.session=Push notification has timed out.