Package net.shibboleth.idp.plugin.oidc.op.profile.logic

Class DefaultTokenRevocationLifetimeLookupStrategy

java.lang.Object

net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultTokenRevocationLifetimeLookupStrategy

All Implemented Interfaces:

Function<JWTClaimsSet,Duration>

public class DefaultTokenRevocationLifetimeLookupStrategy
extends Object
implements Function<JWTClaimsSet,Duration>

Default lookup function for fetching the token revocation lifetime from the given claims set. If an expiration time is found from the claims set, a difference between now and it is first calculated and then the configurable clock skew value and additional 5 minutes are added to the value. The result is returned.

If the expiration time is in the past with clock skew considered, a Duration.ZERO is returned.

If no expiration time is found, null is returned.

Field Summary

Fields

Modifier and Type	Field	Description
private Duration	clockSkew	Positive clock skew adjustment to consider when calculating revocation lifetime.
private final org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
DefaultTokenRevocationLifetimeLookupStrategy()	Constructor.

Method Summary

Modifier and Type	Method	Description
Duration	apply(JWTClaimsSet claimsSet)
void	setClockSkew(Duration skew)	Set the clock skew.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

clockSkew

@Nonnull
private Duration clockSkew

Positive clock skew adjustment to consider when calculating revocation lifetime.

Constructor Details

DefaultTokenRevocationLifetimeLookupStrategy

public DefaultTokenRevocationLifetimeLookupStrategy()

Constructor.

Method Details

setClockSkew

public void setClockSkew(@Nonnull
 Duration skew)

Set the clock skew.

Parameters:

skew - clock skew to set

apply

@Nullable
public Duration apply(@Nullable
 JWTClaimsSet claimsSet)

Specified by:

apply in interface Function<JWTClaimsSet,Duration>