1 files changed, 62 insertions, 3 deletions
diff --git a/src/testing/test_exchange_api.conf b/src/testing/test_exchange_api.conf
index d4ce4457b..7f308b56f 100644
--- a/src/testing/test_exchange_api.conf
+++ b/src/testing/test_exchange_api.conf
@@ -110,14 +110,73 @@ KYC_OAUTH2_POST_URL = http://example.com/
 KYC_OAUTH2_CONVERTER_HELPER = taler-exchange-kyc-oauth2-test-converter.sh
 CONVERTER = cat
 
-[kyc-legitimization-close]
+[kyc-check-oauth-test-id]
+VOLUNTARY = NO
+# We use an external provider
+TYPE = LINK
+DESCRIPTION = "Oauth2 dummy authentication"
+DESCRIPTION_I18N = {}
+# No context requirements
+REQUIRES =
+# Measure to execute if check failed.
+FALLBACK = manual
+# This check runs on oauth2
+PROVIDER_ID = test-oauth2
+
+# If this "check" is triggered, we merely inform
+# the user that their account has been frozen. The
+# user cannot proceed manually.
+[kyc-check-info-frozen]
+VOLUNTARY = NO
+TYPE = INFO
+DESCRIPTION = "Your account is frozen pending investigation"
+DESCRIPTION_I18N = {}
+# No context requirements
+REQUIRES =
+FALLBACK = manual
+
+[aml-program-oauth-output-check]
+DESCRIPTION = Validates the output from OAauth2
+COMMAND = cat
+# What measure to take if the COMMAND failed.
+FALLBACK = manual
+
+[kyc-measure-run-oauth]
+# Get client ID via the OAuth test provider
+CHECK_NAME = oauth-test-id
+# AML program to run on the output of the OAuth provider
+# to decide what to do next.
+PROGRAM = taler-exchange-helper-measure-test-oauth-output
+# Context to provide for check and program; empty.
+CONTEXT = {}
+
+# This is a base-measure that is being triggered
+# whenever something goes wrong. We freeze the
+# account and ask AML staff to investigate.
+[kyc-measure-manual]
+CHECK_NAME = info-frozen
+# AML program that freezes the account and flags
+# it for investigation.
+PROGRAM = taler-exchange-helper-measure-freeze
+CONTEXT = {}
+
+# This rule requests that the users passes KYC
+# when closing the reserve.
+[kyc-rule-close]
 ENABLED = YES
+# This is a public rule.
+EXPOSED = YES
+# All checks listed must be done (well, there is only one...)
 IS_AND_COMBINATOR = YES
+# This happens if the reserve is closed.
 OPERATION_TYPE = CLOSE
-REQUIRED_CHECKS = DUMMY
+# Threshold is 0, so any amount.
 THRESHOLD = EUR:0
+# Timeframe doesn't exactly matter with a threshold of EUR:0.
 TIMEFRAME = 1d
-NEXT_MEASURES = pass
+# If the rule is triggered, ask the user to provide
+# personal data via OAuth2
+NEXT_MEASURES = run-oauth
 
 [exchange-extension-age_restriction]
 ENABLED = YES