<?xml version="1.0" encoding="utf-8"?>
<!--
For more information on how to configure your ASP.NET application, please visit
http://go.microsoft.com/fwlink/?LinkId=301879
-->
<configuration>
<configSections>
<!-- For more information on Entity Framework configuration, visit http://go.microsoft.com/fwlink/?LinkID=237468 -->
<section name="entityFramework" type="System.Data.Entity.Internal.ConfigFile.EntityFrameworkSection, EntityFramework, Version=6.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
</configSections>
<system.diagnostics>
<trace>
<listeners>
<add type="Microsoft.WindowsAzure.Diagnostics.DiagnosticMonitorTraceListener, Microsoft.WindowsAzure.Diagnostics, Version=2.8.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" name="AzureDiagnostics">
<filter type="" />
</add>
<add name="myAppInsightsListener" type="Microsoft.ApplicationInsights.TraceListener.ApplicationInsightsTraceListener, Microsoft.ApplicationInsights.TraceListener" />
</listeners>
</trace>
</system.diagnostics>
<connectionStrings>
<add name="UnilinkContext" connectionString="Data Source=UnilinkdevSQL02.cloudapp.net;Initial Catalog=Unilink;Persist Security Info=True;User ID=lpena;Password=M3q6C+EUz8cySsH1;MultipleActiveResultSets=True;Connect Timeout=420" providerName="System.Data.SqlClient" />
<add name="StorageConnectionString" connectionString="DefaultEndpointsProtocol=https;AccountName=unilinkqastorage;AccountKey=tBR1Wcw3+e0kAh8HatYNTiPEUV0iwg3j6cSY86PouVvogWwNf0H517xlvknKuPQUk9BbeAxUmBAtElKpMNgCug==" />
<add name="AssetsConnectionString" connectionString="provider=AzureBlobStorage;DefaultEndpointsProtocol=http;AccountName=unilinkqastorage;AccountKey=tBR1Wcw3+e0kAh8HatYNTiPEUV0iwg3j6cSY86PouVvogWwNf0H517xlvknKuPQUk9BbeAxUmBAtElKpMNgCug==" />
<add name="AssetsConnectionString1" connectionString="provider=AzureBlobStorage;DefaultEndpointsProtocol=http;AccountName=unilinkqastorage;AccountKey=tBR1Wcw3+e0kAh8HatYNTiPEUV0iwg3j6cSY86PouVvogWwNf0H517xlvknKuPQUk9BbeAxUmBAtElKpMNgCug==" />
<add name="UnilinkDemo" connectionString="data source=UnilinkdevSQL02.cloudapp.net;initial catalog=UnilinkDemo;persist security info=True;user id=lpena;password=M3q6C+EUz8cySsH1;MultipleActiveResultSets=True;Connect Timeout=420" providerName="System.Data.SqlClient" />
<add name="UnilinkMetadata" connectionString="data source=UnilinkdevSQL02.cloudapp.net;initial catalog=UnilinkMetadataDesarrollo;persist security info=True;user id=lpena;password=M3q6C+EUz8cySsH1;MultipleActiveResultSets=True;Connect Timeout=420" providerName="System.Data.SqlClient" />
<add name="UnilinkSessionContext" connectionString="Data Source=UnilinkdevSQL02.cloudapp.net;Persist Security Info=True;User ID =lpena; Password =M3q6C+EUz8cySsH1;MultipleActiveResultSets=True;Connect Timeout=420" providerName="System.Data.SqlClient" />
</connectionStrings>
<appSettings>
<!-- Configuracion compartida -->
<add key="webpages:Version" value="3.0.0.0" />
<add key="webpages:Enabled" value="false" />
<add key="ClientValidationEnabled" value="true" />
<add key="UnobtrusiveJavaScriptEnabled" value="true" />
<add key="QueueName" value="unilinkemailtesting" />
<add key="recaptcha:secret-key" value="6LfZaiMTAAAAAE-hmi8vTr2YEzPQTOiAQQUCCLVx" />
<add key="recaptcha:public-key" value="6LfZaiMTAAAAAL7wW-gzZwtvkmxU-GXH_Yg6mNSM" />
<!--Configuracion exclusiva de cotizaciones-->
<add key="ImgPath" value="https://requisition.blob.core.windows.net" />
<add key="ProjectBase" value="" />
<add key="timezoneoffset" value="240" />
<add key="URL_SERVER" value="https://qamantos.ulinksolution.com" />
<add key="EmailBaseURL" value="https://qamantos.ulinksolution.com/Amalgam.Web/" />
<add key="WebHookEmailBaseURL" value="http://unilinkworkerrole01.cloudapp.net/" />
<add key="BaseURL" value="https://qamantos.ulinksolution.com/IntegrationModule.Web/" />
<!-- configuracion exclusiva de licitaciones-->
<add key="RolSupervisor" value="31" />
<add key="RolObserver" value="32" />
<add key="RolBuyer" value="28" />
<add key="RolSupplier" value="29" />
<add key="RolInvited" value="33" />
<add key="MaxFileSize" value="2000000000" />
<add key="StorageAccountName" value="unilink" />
<!-- configuracion identityserver -->
<add key="Application.Env" value="testing" />
<add key="Application.ApplicationInsightsKey" value="f8bad63a-3af0-4def-8eca-412e7cd1ef07" />
<add key="Application.LogoUrl" value="Content/img/menu/logo-unilink.png" />
<add key="Application.DefaultLogoUrl" value="Content/img/menu/logo-unilink.png" />
<add key="Application.BaseUrl" value="https://qamantos.ulinksolution.com" />
<add key="Application.EmailBaseUrl" value="https://qamantos.ulinksolution.com/Amalgam.Web/" />
<!-- configuración identityserver -->
<add key="Identity.OwinCookieName" value="m_m_session" />
<add key="Identity.OwinCookieLoginPath" value="https://qamantos.ulinksolution.com/home/index" />
<add key="Identity.Authority" value="https://qasts.ulinksolution.com" />
<add key="Identity.ClientId" value="mantos.marketplace" />
<add key="Identity.ClientSecret" value="qa-mantos-marketplace" />
<add key="Identity.Scope" value="openid profile enterprise roles" />
<add key="Identity.RedirectUri" value="https://qamantos.ulinksolution.com" />
<add key="Identity.PostLogoutRedirectUri" value="https://qamantos.ulinksolution.com" />
<add key="Identity.ApplicationId" value="E16DFF36-E405-4DAE-BF3F-48852E159AEF" />
<add key="Identity.PortalUrl" value="https://qasts.ulinksolution.com" />
<add key="Identity.UnauthorizedUrl" value="https://qamantos.ulinksolution.com/error/unauthorized" />
<add key="Identity.LockedUrl" value="https://qamantos.ulinksolution.com/error/locked" />
<add key="PortalAccuseller" value="https://portal.accuseller.com/TermsAndConditions" />
<add key="EPPlus:ExcelPackage.LicenseContext" value="NonCommercial" />
</appSettings>
<system.web>
<globalization culture="auto:es-CL" uiCulture="auto:es-CL" />
<machineKey compatibilityMode="Framework20SP2" validationKey="FCF1C7CB12C600522ED1C77F46644FD33B16B43963D03D2A588581A8736838A55CD070AA2D1B9A9A9EC2277E73710F878479FECEDFD374542BAFE6ED105CE9C3" decryptionKey="E31238082C25D2F726F183BC83F90A874CF3BDB965980A2C7BD8D6A7B56B86BD" validation="SHA1" decryption="AES" />
<compilation debug="true" targetFramework="4.7.2">
<assemblies>
<add assembly="System.Runtime, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
<add assembly="netstandard, Version=2.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51" />
</assemblies>
</compilation>
<httpRuntime targetFramework="4.7.2" maxRequestLength="2147483647" executionTimeout="1600" requestLengthDiskThreshold="2147483647" requestPathInvalidCharacters="" requestValidationMode="2.0" />
<sessionState mode="SQLServer" timeout="60" allowCustomSqlDatabase="true" sqlConnectionString="UnilinkSessionContext" cookieless="false" />
<customErrors mode="Off">
</customErrors>
<!--<customErrors mode="On" defaultRedirect="error/generalerror.aspx">
<error statusCode="403" redirect="error/forbidden.aspx" />
<error statusCode="404" redirect="error/pagenotfound.aspx" />
<error statusCode="500" redirect="error/internalerror.aspx" />
</customErrors>-->
<httpModules>
<add name="TelemetryCorrelationHttpModule" type="Microsoft.AspNet.TelemetryCorrelation.TelemetryCorrelationHttpModule, Microsoft.AspNet.TelemetryCorrelation" />
<add name="ApplicationInsightsWebTracking" type="Microsoft.ApplicationInsights.Web.ApplicationInsightsHttpModule, Microsoft.AI.Web" />
</httpModules>
</system.web>
<system.webServer>
<httpCompression directory="%SystemDrive%\websites\_compressed" minFileSizeForComp="1024">
<scheme dll="%Windir%\system32\inetsrv\gzip.dll" name="gzip" />
<dynamicTypes>
<add enabled="true" mimeType="text/*" />
<add enabled="true" mimeType="message/*" />
<add enabled="true" mimeType="application/javascript" />
<add enabled="true" mimeType="application/json" />
<add enabled="true" mimeType="application/json; charset=utf-8" />
<add enabled="false" mimeType="*/*" />
</dynamicTypes>
<staticTypes>
<add enabled="true" mimeType="text/*" />
<add enabled="true" mimeType="message/*" />
<add enabled="true" mimeType="application/javascript" />
<add enabled="true" mimeType="application/json" />
<add enabled="true" mimeType="application/json; charset=utf-8" />
<add enabled="false" mimeType="*/*" />
</staticTypes>
</httpCompression>
<urlCompression doDynamicCompression="true" doStaticCompression="true" />
<modules runAllManagedModulesForAllRequests="false">
<remove name="WebDAVModule" />
<remove name="TelemetryCorrelationHttpModule" />
<add name="TelemetryCorrelationHttpModule" type="Microsoft.AspNet.TelemetryCorrelation.TelemetryCorrelationHttpModule, Microsoft.AspNet.TelemetryCorrelation" preCondition="managedHandler" />
<remove name="ApplicationInsightsWebTracking" />
<add name="ApplicationInsightsWebTracking" type="Microsoft.ApplicationInsights.Web.ApplicationInsightsHttpModule, Microsoft.AI.Web" preCondition="managedHandler" />
</modules>
<validation validateIntegratedModeConfiguration="false" />
<handlers>
<remove name="WebDAV" />
<remove name="ExtensionlessUrlHandler-Integrated-4.0" />
<remove name="OPTIONSVerbHandler" />
<remove name="TRACEVerbHandler" />
<add name="ExtensionlessUrlHandler-Integrated-4.0" path="*." verb="*" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0" />
</handlers>
<rewrite>
<outboundRules>
<clear />
<rule name="Ensure samesite Cookies" preCondition="Missing samesite cookie">
<match serverVariable="RESPONSE_Set_Cookie" pattern=".*" negate="false" />
<action type="Rewrite" value="{R:0}; SameSite=strict" />
</rule>
<rule name="Ensure httpOnly Cookies" preCondition="Missing httpOnly cookie">
<match serverVariable="RESPONSE_Set_Cookie" pattern=".*" negate="false" />
<action type="Rewrite" value="{R:0}; HttpOnly" />
</rule>
<rule name="Ensure secure Cookies" preCondition="Missing secure cookie">
<match serverVariable="RESPONSE_Set_Cookie" pattern=".*" negate="false" />
<action type="Rewrite" value="{R:0}; secure" />
</rule>
<rule name="Remove Server header">
<match serverVariable="RESPONSE_Server" pattern=".+" />
<action type="Rewrite" value="" />
</rule>
<preConditions>
<preCondition name="ResponseIsHtml1">
<add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" />
</preCondition>
<preCondition name="Missing secure cookie">
<!-- Don't remove the first line here, it does do stuff! -->
<add input="{RESPONSE_Set_Cookie}" pattern="." />
<add input="{RESPONSE_Set_Cookie}" pattern="; secure" negate="true" />
</preCondition>
<preCondition name="Missing httpOnly cookie">
<!-- Don't remove the first line! -->
<add input="{RESPONSE_Set_Cookie}" pattern="." />
<add input="{RESPONSE_Set_Cookie}" pattern="; HttpOnly" negate="true" />
</preCondition>
<preCondition name="Missing samesite cookie">
<!-- Don't remove the first line here, it does do stuff! -->
<add input="{RESPONSE_Set_Cookie}" pattern="." />
<add input="{RESPONSE_Set_Cookie}" pattern="; SameSite=strict" negate="true" />
</preCondition>
</preConditions>
</outboundRules>
<rules>
<rule name="HTTPS Force" stopProcessing="true">
<match url="(.*)" />
<conditions>
<add input="{HTTPS}" pattern="^OFF$" />
</conditions>
<action type="Redirect" url="https://{HTTP_HOST}{REQUEST_URI}" />
</rule>
<rule name="ANGULAR APP" stopProcessing="true">
<match url="modules" />
<conditions logicalGrouping="MatchAll">
<add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
<add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
<add input="{REQUEST_URI}" matchType="Pattern" pattern="/api/" negate="true" />
</conditions>
<action type="Rewrite" url="callback?returnUrl={REQUEST_URI}" />
</rule>
</rules>
</rewrite>
<httpProtocol>
<customHeaders>
<clear />
<remove name="X-Powered-By" />
<remove name="X-Aspnet-Version" />
<remove name="Server" />
<!-- Protects against Clickjacking attacks. ref.: http://stackoverflow.com/a/22105445/1233379 -->
<add name="X-Frame-Options" value="DENY" />
<!-- Protects against Clickjacking attacks. ref.: https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet -->
<add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains; preload" />
<!-- Protects against XSS injections. ref.: https://www.veracode.com/blog/2014/03/guidelines-for-setting-security-headers/ -->
<add name="X-XSS-Protection" value="1; mode=block" />
<!-- Protects against MIME-type confusion attack. ref.: https://www.veracode.com/blog/2014/03/guidelines-for-setting-security-headers/ -->
<add name="X-Content-Type-Options" value="nosniff" />
<!-- CSP modern XSS directive-based defence, used since 2014. ref.: http://content-security-policy.com/ -->
<!--<add name="Content-Security-Policy" value="script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://az416426.vo.msecnd.net/next/ai.2.min.js 'unsafe-inline' 'unsafe-eval' devlicitaciones-aguasandinas.ulinksolution.com:443; object-src 'self'" />-->
<!-- Prevents from leaking referrer data over insecure connections. ref.: https://scotthelme.co.uk/a-new-security-header-referrer-policy/ -->
<add name="Referrer-Policy" value="no-referrer" />
<!-- The Expect-CT header can be used to check that all your certificates have been properly listed ref.:https://www.ryadel.com/en/expect-ct-http-header-security-chrome/ -->
<!--<add name="Expect-CT" value="enforce, max-age=300, report-uri='https://www.your-report-website.com/'" />-->
</customHeaders>
</httpProtocol>
<security>
<requestFiltering>
<requestLimits maxAllowedContentLength="2147483647" />
<hiddenSegments>
<add segment="package.json" />
<add segment="package-lock.json" />
</hiddenSegments>
<verbs allowUnlisted="false">
<add verb="POST" allowed="true" />
<add verb="DELETE" allowed="true" />
<add verb="PUT" allowed="true" />
<add verb="OPTIONS" allowed="true" />
<add verb="GET" allowed="true" />
</verbs>
</requestFiltering>
</security>
</system.webServer>
<runtime>
<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
<dependentAssembly>
<assemblyIdentity name="Newtonsoft.Json" culture="neutral" publicKeyToken="30ad4fe6b2a6aeed" />
<bindingRedirect oldVersion="0.0.0.0-11.0.0.0" newVersion="11.0.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Optimization" publicKeyToken="31bf3856ad364e35" />
<bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="1.1.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="WebGrease" publicKeyToken="31bf3856ad364e35" />
<bindingRedirect oldVersion="0.0.0.0-1.5.2.14234" newVersion="1.5.2.14234" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Practices.ServiceLocation" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-1.3.0.0" newVersion="1.3.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Owin.Security.OAuth" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Owin.Security" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Owin.Security.Cookies" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Http" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-5.2.3.0" newVersion="5.2.3.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Net.Http.Formatting" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-5.2.3.0" newVersion="5.2.3.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Practices.Unity" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-3.5.0.0" newVersion="3.5.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Data.Services.Client" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-5.7.0.0" newVersion="5.7.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Data.OData" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-5.7.0.0" newVersion="5.7.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Data.Edm" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-5.7.0.0" newVersion="5.7.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Memory" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-4.0.1.1" newVersion="4.0.1.1" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.ApplicationInsights" publicKeyToken="31bf3856ad364e35" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-2.21.0.429" newVersion="2.21.0.429" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Runtime.CompilerServices.Unsafe" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-5.0.0.0" newVersion="5.0.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Diagnostics.DiagnosticSource" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-5.0.0.0" newVersion="5.0.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Buffers" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
<bindingRedirect oldVersion="0.0.0.0-4.0.3.0" newVersion="4.0.3.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Helpers" publicKeyToken="31bf3856ad364e35" />
<bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.WebPages" publicKeyToken="31bf3856ad364e35" />
<bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0" />
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Mvc" publicKeyToken="31bf3856ad364e35" />
<bindingRedirect oldVersion="0.0.0.0-5.2.9.0" newVersion="5.2.9.0" />
</dependentAssembly>
</assemblyBinding>
</runtime>
<entityFramework>
<defaultConnectionFactory type="System.Data.Entity.Infrastructure.LocalDbConnectionFactory, EntityFramework">
<parameters>
<parameter value="mssqllocaldb" />
</parameters>
</defaultConnectionFactory>
<providers>
<provider invariantName="System.Data.SqlClient" type="System.Data.Entity.SqlServer.SqlProviderServices, EntityFramework.SqlServer" />
</providers>
</entityFramework>
</configuration>