se.litsec.opensaml.saml2.common.assertion

Class AbstractAssertionValidationParametersBuilder<T extends AbstractAssertionValidationParametersBuilder<T>>

java.lang.Object

se.litsec.opensaml.common.validation.AbstractValidationParametersBuilder<T>

se.litsec.opensaml.saml2.common.response.AbstractResponseValidationParametersBuilder<T>

se.litsec.opensaml.saml2.common.assertion.AbstractAssertionValidationParametersBuilder<T>

All Implemented Interfaces:

ValidationParametersBuilder

Direct Known Subclasses:

AssertionValidationParametersBuilder

public abstract class AbstractAssertionValidationParametersBuilder<T extends AbstractAssertionValidationParametersBuilder<T>>
extends AbstractResponseValidationParametersBuilder<T>

Abstract builder class for building the ValidationContext object for use as validation input to the AssertionValidator.

The reason for all fiddling with generics is that we want to be able to subclass the builder classes.

Author:

Martin Lindström (martin.lindstrom@litsec.se)

Constructor Summary

Constructors

Constructor and Description
AbstractAssertionValidationParametersBuilder()

Method Summary

Modifier and Type	Method and Description
T	authnRequestForceAuthn(Boolean forceAuthn) Assigns the ForceAuthn flag from the corresponding AuthnRequest.
T	authnRequestIssueInstant(Long issueInstant) Assigns the issuance time for the corresponding AuthnRequest when validating an assertion.
T	maxAcceptedSsoSessionTime(Long duration) Assigns the maximum session time that we, as a SP, can accept when receiving assertions based on older authentications (SSO).
T	responseIssueInstant(Long instant) Assigns the issue instant from the Response message that contained the assertion being validated.
T	validAddresses(InetAddress... addresses) Assigns the valid addresses that we allow the user agent to have.
T	validAudiences(String... audiences) Assigns the entityID:s of the valid audiences.
T	validRecipients(String... recipients) Assigns the valid URLs for the intended recipients.

Methods inherited from class se.litsec.opensaml.saml2.common.response.AbstractResponseValidationParametersBuilder

authnRequest, authnRequestID, expectedIssuer, receiveInstant, receiveUrl

Methods inherited from class se.litsec.opensaml.common.validation.AbstractValidationParametersBuilder

addDynamicParameter, addDynamicParameters, addStaticParameter, addStaticParameters, allowedClockSkew, build, dynamicParameter, getThis, maxAgeReceivedMessage, signatureRequired, signatureValidationCriteriaSet, staticParameter, strictValidation

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AbstractAssertionValidationParametersBuilder

public AbstractAssertionValidationParametersBuilder()

Method Detail

responseIssueInstant

public T responseIssueInstant(Long instant)

Assigns the issue instant from the Response message that contained the assertion being validated.

Parameters:

instant - the response issue instant

Returns:

the builder

validRecipients

public T validRecipients(String... recipients)

Assigns the valid URLs for the intended recipients.

Parameters:

recipients - one or more URLs

Returns:

the builder

validAddresses

public T validAddresses(InetAddress... addresses)

Assigns the valid addresses that we allow the user agent to have.

Parameters:

addresses - one or more IP addresses

Returns:

the builder

validAudiences

public T validAudiences(String... audiences)

Assigns the entityID:s of the valid audiences.

Parameters:

audiences - the audiences

Returns:

the builder

authnRequestForceAuthn

public T authnRequestForceAuthn(Boolean forceAuthn)

Assigns the ForceAuthn flag from the corresponding AuthnRequest.

Parameters:

forceAuthn - true/false

Returns:

the builder

authnRequestIssueInstant

public T authnRequestIssueInstant(Long issueInstant)

Assigns the issuance time for the corresponding AuthnRequest when validating an assertion.

Parameters:

issueInstant - issue time (in milliseconds since epoch)

Returns:

the builder

maxAcceptedSsoSessionTime

public T maxAcceptedSsoSessionTime(Long duration)

Assigns the maximum session time that we, as a SP, can accept when receiving assertions based on older authentications (SSO).

Parameters:

duration - milliseconds

Returns:

the builder