Platform (shared libraries) configuration

Cross-cutting configuration shared by several services: outbound-URL SSRF guard, URL-safety validation, and GeoIP.

oauthy.geoip

Owner: core/lib/geoip · Source: core/lib/geoip/src/main/kotlin/com/devnow/core/geoip/GeoIpProperties.kt

SSO-1345 / SSO-2043: configuration properties for the GeoIP library.

Property	Type	Default	Description
oauthy.geoip.database-path	String?	null	Filesystem path to the MaxMind GeoLite2-City .mmdb database file.
oauthy.geoip.anonymous-ip-database-path	String?	null	SSO-2043: filesystem path to the MaxMind GeoIP2-Anonymous-IP .mmdb database file — the paid dataset that carries the VPN / Tor / hosting / proxy attributes.

oauthy.security.outbound-url-guard

Owner: core/lib/common · Source: core/lib/common/src/main/kotlin/com/devnow/core/common/security/OutboundUrlGuard.kt

Property	Type	Default	Description
oauthy.security.outbound-url-guard.require-https	Boolean	true	Whether plain http:// URLs are rejected by default.
oauthy.security.outbound-url-guard.allow-http-hosts	Set<String>	(empty)	Hosts allowed to be reached over plain HTTP when requireHttps is true.
oauthy.security.outbound-url-guard.allow-list	Set<String>	(empty)	Hosts exempt from the blocked-range checks.

oauthy.security.url-safety

Owner: core/lib/common · Source: core/lib/common/src/main/kotlin/com/devnow/core/common/UrlSafetyValidator.kt

Property	Type	Default	Description
oauthy.security.url-safety.allow-list	Set<String>	(empty)	Hosts that are exempt from SSRF validation.

---

Every property above is set as a YAML key under application.yml or, equivalently, as an environment variable using Spring's relaxed binding (oauthy.hub.platform-client-ids -> OAUTHY_HUB_PLATFORM_CLIENT_IDS). A _required_ default means the service will not start until the value is supplied.