Fix #460: Configuration startup check

Presence check and OTP verification have to be both disabled or both enabled

enrollment-server-onboarding/src/main/java/com/wultra/app/onboardingserver/configuration/IdentityVerificationConfig.java

@@ -20,7 +20,9 @@
 import lombok.Data;
 import org.springframework.beans.factory.annotation.Value;
 import org.springframework.context.annotation.Configuration;
+import org.springframework.util.Assert;
 
+import javax.annotation.PostConstruct;
 import java.time.Duration;
 
 /**
@@ -74,4 +76,9 @@ public class IdentityVerificationConfig {
     @Value("${enrollment-server-onboarding.client-evaluation.max-failed-attempts:5}")
     private int clientEvaluationMaxFailedAttempts;
 
+    @PostConstruct
+    void validate() {
+        // Once in the future, we may replace OTP in SCA by NFC document reading
+        Assert.state(presenceCheckEnabled == verificationOtpEnabled, "Presence check and OTP verification have to be both disabled or both enabled");
+    }
 }