Package net.shibboleth.idp.plugin.authn.duo

Class AuthenticationRequestTimeLookupStrategy

java.lang.Object
net.shibboleth.idp.plugin.authn.duo.AuthenticationRequestTimeLookupStrategy
All Implemented Interfaces:
Function<ProfileRequestContext,Instant>
public class AuthenticationRequestTimeLookupStrategy extends Object implements Function<ProfileRequestContext,Instant>
Strategy used to locate and adjust the authentication request time for a Duo OIDC authentication transaction.

The authentication request time is obtained from the DuoOIDCAuthenticationContext and adjusted by the configured clock skew. If the request time or any required context is unavailable, a default value based on the current time minus the configured clock skew is returned.

  • Field Details

    • log

      @Nonnull private final org.slf4j.Logger log
      Class logger.

    • clockSkew

      @Nonnull private final Duration clockSkew
      Clock skew applied as a negative adjustment to consider when checking returning the authentication request time.

  • Constructor Details

    • AuthenticationRequestTimeLookupStrategy

      public AuthenticationRequestTimeLookupStrategy(@ParameterName(name="clockSkew") @Nullable Duration skew)
      Constructor.
      Parameters:
      skew - clockSkew used as a negative adjustment when computing the effective authentication request time

  • Method Details