Package net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate

Class AuthenticationRequestTimeLookupFunction

java.lang.Object

net.shibboleth.idp.plugin.authn.oidc.rp.context.navigate.AuthenticationRequestTimeLookupFunction

All Implemented Interfaces:

Function<ProfileRequestContext,Instant>

public class AuthenticationRequestTimeLookupFunction
extends Object
implements Function<ProfileRequestContext,Instant>

Lookup function that returns the time at which the RP sent the authentication request, as taken from the authentication request object.

Field Summary

Fields

Modifier and Type	Field	Description
private Function<ProfileRequestContext,OIDCAuthenticationRequest>	authenticationRequestLookupStrategy	Strategy used to locate the OIDCAuthenticationRequest.
private Duration	clockSkew	A clock skew to apply to the authentication request time.

Constructor Summary

Constructors

Constructor	Description
AuthenticationRequestTimeLookupFunction()	Constructor.

Method Summary

Modifier and Type	Method	Description
Instant	apply(ProfileRequestContext input)
void	setAuthenticationRequestLookupStrategy(Function<ProfileRequestContext,OIDCAuthenticationRequest> strategy)	Set the strategy used to locate the OIDCAuthenticationRequest to use.
void	setClockSkew(Duration skew)	Set the clock skew.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.util.function.Function

andThen, compose

Field Details

authenticationRequestLookupStrategy

@Nonnull
private Function<ProfileRequestContext,OIDCAuthenticationRequest> authenticationRequestLookupStrategy

Strategy used to locate the OIDCAuthenticationRequest. Defaults to the outbound message context of the PRC.

clockSkew

@Nonnull
private Duration clockSkew

A clock skew to apply to the authentication request time. This accounts for differences between system clocks by treating the authentication request as if it occurred slightly earlier by the specified skew duration. By default there is no skew.

Constructor Details

AuthenticationRequestTimeLookupFunction

public AuthenticationRequestTimeLookupFunction()

Constructor.

Method Details

setClockSkew

public void setClockSkew(@Nonnull
 Duration skew)

Set the clock skew.

Parameters:

skew - clock skew to set

setAuthenticationRequestLookupStrategy

public void setAuthenticationRequestLookupStrategy(@Nonnull
 Function<ProfileRequestContext,OIDCAuthenticationRequest> strategy)

Set the strategy used to locate the OIDCAuthenticationRequest to use.

Parameters:

strategy - lookup strategy

apply

@Nullable
public Instant apply(@Nullable
 ProfileRequestContext input)

Specified by:

apply in interface Function<ProfileRequestContext,Instant>