Class MaxAgeFromAuthenticationRequestLookupFunction

java.lang.Object
net.shibboleth.profile.context.navigate.AbstractRelyingPartyLookupFunction<Duration>
net.shibboleth.sp.oidc.profile.context.navigate.MaxAgeFromAuthenticationRequestLookupFunction
All Implemented Interfaces:
Function<org.opensaml.profile.context.ProfileRequestContext,Duration>, org.opensaml.messaging.context.navigate.ContextDataLookupFunction<org.opensaml.profile.context.ProfileRequestContext,Duration>

@NotThreadSafe public class MaxAgeFromAuthenticationRequestLookupFunction extends net.shibboleth.profile.context.navigate.AbstractRelyingPartyLookupFunction<Duration>
Locate the maximum authentication age from the authentication request state. If not present in the request, it is taken from the profile configuration associated with the relying party context. Returning a default value if neither are found.
  • Field Details

    • maxAgeDefault

      @Nonnull private final Duration maxAgeDefault
      Default max authentication age if none can be found on the profile context.
    • stateDataContextLookupStrategy

      @Nonnull private Function<org.opensaml.profile.context.ProfileRequestContext,net.shibboleth.sp.context.StateDataContext> stateDataContextLookupStrategy
      Strategy used to locate the StateDataContext. Defaults to under the inbound message context.
  • Constructor Details

    • MaxAgeFromAuthenticationRequestLookupFunction

      public MaxAgeFromAuthenticationRequestLookupFunction(@ParameterName(name="maxAgeDefault") @Nonnull Duration defaultAge)
      Constructor.
      Parameters:
      defaultAge - the default value to use for maximum authentication age
  • Method Details

    • setStateDataContextLookupStrategy

      public void setStateDataContextLookupStrategy(@Nonnull Function<org.opensaml.profile.context.ProfileRequestContext,net.shibboleth.sp.context.StateDataContext> strategy)
      Set the authentication request lookup strategy to use.
      Parameters:
      strategy - the strategy
    • apply

      @Nonnull public Duration apply(@Nullable org.opensaml.profile.context.ProfileRequestContext input)