Package net.shibboleth.idp.plugin.authn.duo.impl

Class PopulateDuoAuthenticationContext.DefaultMaxAuthenticationAgeLookupStrategy

java.lang.Object

net.shibboleth.idp.plugin.authn.duo.impl.PopulateDuoAuthenticationContext.DefaultMaxAuthenticationAgeLookupStrategy

All Implemented Interfaces:

Function<ProfileRequestContext,Duration>

Enclosing class:

PopulateDuoAuthenticationContext

public static class PopulateDuoAuthenticationContext.DefaultMaxAuthenticationAgeLookupStrategy
extends Object
implements Function<ProfileRequestContext,Duration>

Default strategy that determines the effective maximum authentication age requirement.

The following rules apply:

1. If the integration specifies a maximum authentication age, that value is used.
2. Otherwise, if force authentication has been requested, the user is required to re-authenticate by setting max_age=0.
3. Otherwise, if a maximum authentication age is present on the authentication context, that value is used.
4. Otherwise, no maximum authentication age requirement is applied.

Field Summary

Fields

Modifier and Type	Field	Description
private final org.slf4j.Logger	log	Class logger.

Constructor Summary

Constructors

Constructor	Description
DefaultMaxAuthenticationAgeLookupStrategy()

Method Summary

Modifier and Type	Method	Description
Duration	apply(ProfileRequestContext prc)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Field Details

log

@Nonnull
private final org.slf4j.Logger log

Class logger.

Constructor Details

DefaultMaxAuthenticationAgeLookupStrategy

public DefaultMaxAuthenticationAgeLookupStrategy()

Method Details

apply

public Duration apply(ProfileRequestContext prc)

Specified by:

apply in interface Function<ProfileRequestContext,Duration>