public class ResponseValidationSettings extends Object
Modifier and Type | Field and Description |
---|---|
static long |
DEFAULT_ALLOWED_CLOCK_SKEW
The default allowed clock skew (in milliseconds) - 30 seconds.
|
static long |
DEFAULT_MAX_AGE_RESPONSE
The default age for a response message that we allow (in milliseconds) - 3 minutes.
|
static long |
DEFAULT_MAX_SESSION_AGE
Default max session age (in milliseconds) - 1 hour.
|
Constructor and Description |
---|
ResponseValidationSettings() |
Modifier and Type | Method and Description |
---|---|
long |
getAllowedClockSkew()
Returns the allowed clock skew (in milliseconds).
|
long |
getMaxAgeResponse()
Returns the maximum allowed "age" of a response message (in milliseconds).
|
long |
getMaxSessionAge()
Returns the maximum session age allowed for SSO (in milliseconds).
|
boolean |
isRequireSignedAssertions()
Do we require signed assertions?
|
boolean |
isStrictValidation()
Predicate telling whether strict validation should be performed.
|
void |
setAllowedClockSkew(long allowedClockSkew)
Assigns the allowed clock skew (in milliseconds).
|
void |
setMaxAgeResponse(long maxAgeResponse)
Assigns the maximum allowed "age" of a response message (in milliseconds).
|
void |
setMaxSessionAge(long maxSessionAge)
Assigns the maximum session age allowed for SSO (in milliseconds).
|
void |
setRequireSignedAssertions(boolean requireSignedAssertions)
Assigns whether we require signed assertions.
|
void |
setStrictValidation(boolean strictValidation)
Assigns telling whether strict validation should be performed.
|
String |
toString() |
public static final long DEFAULT_ALLOWED_CLOCK_SKEW
public static final long DEFAULT_MAX_AGE_RESPONSE
public static final long DEFAULT_MAX_SESSION_AGE
public long getAllowedClockSkew()
The default is DEFAULT_ALLOWED_CLOCK_SKEW
.
public void setAllowedClockSkew(long allowedClockSkew)
The default is DEFAULT_ALLOWED_CLOCK_SKEW
.
allowedClockSkew
- the allowed clock skew (in milliseconds)public long getMaxAgeResponse()
The default is DEFAULT_MAX_AGE_RESPONSE
.
public void setMaxAgeResponse(long maxAgeResponse)
The default is DEFAULT_MAX_AGE_RESPONSE
.
maxAgeResponse
- the maximum allowed "age" of a response message (in milliseconds)public long getMaxSessionAge()
The default is DEFAULT_MAX_SESSION_AGE
.
public void setMaxSessionAge(long maxSessionAge)
The default is DEFAULT_MAX_SESSION_AGE
.
maxSessionAge
- the maximum session age allowed for SSO (in milliseconds)public boolean isStrictValidation()
The default is false
.
public void setStrictValidation(boolean strictValidation)
The default is false
.
strictValidation
- whether strict validation should be performedpublic boolean isRequireSignedAssertions()
Should correspond the WantAssertionsSigned
of the SP metadata.
public void setRequireSignedAssertions(boolean requireSignedAssertions)
Should correspond the WantAssertionsSigned
of the SP metadata.
requireSignedAssertions
- whether we require signed assertions?Copyright © 2018 Litsec AB. All rights reserved.