Class SAML2AssertionValidationParameters
- java.lang.Object
-
- org.opensaml.saml.saml2.assertion.SAML2AssertionValidationParameters
-
public final class SAML2AssertionValidationParameters extends Object
Parameter keys used to store and retrieve static and dynamic parameters within aValidationContext.
-
-
Field Summary
Fields Modifier and Type Field Description static StringCLOCK_SKEWCarries aDurationspecifying a clock skew value.static StringCOND_INFIXThe standard infix for parameters concerned with conditions evaluation.static StringCOND_ONE_TIME_USE_EXPIRESCarries aDurationrepresenting the per-invocation value for the Assertion replay cache expiration.static StringCOND_REQUIRED_CONDITIONSstatic StringCOND_VALID_AUDIENCESCarries aSet<String>whose values are the acceptableAudienceRestrictionAudiencevalues for evaluating the Assertion.static StringCONFIRMED_SUBJECT_CONFIRMATIONCarries theSubjectConfirmationthat confirmed the subject.static StringLIFETIMECarries aDurationspecifying a lifetime from 'now' for IssueInstant.static StringSC_ADDRESS_REQUIREDCarries aBooleanflag which indicates whether theSubjectConfirmationDataAddress is required.static StringSC_CHECK_ADDRESSCarries aBooleanflag which indicates whether theSubjectConfirmationDataaddress should be checked.static StringSC_HOK_CONFIRMED_KEYINFOCarries theKeyInfothat successfully confirmed the subject via holder-of-key subject confirmation.static StringSC_HOK_PRESENTER_CERTCarries theX509Certificateused by the presenter.static StringSC_HOK_PRESENTER_KEYCarries thePublicKeyused by the presenter.static StringSC_IN_RESPONSE_TO_REQUIREDCarries aBooleanflag which indicates whetherSubjectConfirmationDataInResponseTo is required.static StringSC_INFIXThe standard infix for parameters concerned with subject confirmation.static StringSC_NOT_BEFORE_REQUIREDCarries aBooleanflag which indicates whetherSubjectConfirmationDataNotBefore is required.static StringSC_NOT_ON_OR_AFTER_REQUIREDCarries aBooleanflag which indicates whetherSubjectConfirmationDataNotOnOrAfter is required.static StringSC_RECIPIENT_REQUIREDCarries aBooleanflag which indicates whetherSubjectConfirmationDataRecipient is required.static StringSC_VALID_ADDRESSESstatic StringSC_VALID_IN_RESPONSE_TOCarries aStringwhose value is the acceptableSubjectConfirmationDataInResponseTo.static StringSC_VALID_RECIPIENTSstatic StringSIGNATURE_REQUIREDCarries aBooleanflag which indicates whether the Assertion is required to be signed.static StringSIGNATURE_VALIDATION_CRITERIA_SETCarries aCriteriaSetwhich will be used as the input to aSignatureTrustEngine.static StringSIGNATURE_VALIDATION_PREVALIDATORCarries aSignaturePrevalidatorwhich will be used to pre-validate the Assertion signature.static StringSIGNATURE_VALIDATION_TRUST_ENGINECarries aSignatureTrustEnginewhich will be used to validate the Assertion signature.static StringSTD_PREFIXThe standard prefix for all SAML 2 parameters defined in this set.static StringSTMT_AUTHN_CHECK_ADDRESSCarries aBooleanflag which indicates whether the Address attribute of theSubjectLocalityof anAuthnStatementshould be checked.static StringSTMT_AUTHN_MAX_TIMECarries aDurationused to evaluate the allowed value of an AuthnInstant attribute of anAuthnStatement.static StringSTMT_AUTHN_VALID_ADDRESSESCarries aSet<InetAddress>whose values are the acceptable values for the Address attribute of theSubjectLocalityof anAuthnStatement.static StringSTMT_INFIXThe standard infix for parameters concerned with statement evaluation.static StringVALID_ISSUERS
-
Constructor Summary
Constructors Modifier Constructor Description privateSAML2AssertionValidationParameters()Constructor.
-
-
-
Field Detail
-
STD_PREFIX
public static final String STD_PREFIX
The standard prefix for all SAML 2 parameters defined in this set.- See Also:
- Constant Field Values
-
SC_INFIX
public static final String SC_INFIX
The standard infix for parameters concerned with subject confirmation.- See Also:
- Constant Field Values
-
COND_INFIX
public static final String COND_INFIX
The standard infix for parameters concerned with conditions evaluation.- See Also:
- Constant Field Values
-
STMT_INFIX
public static final String STMT_INFIX
The standard infix for parameters concerned with statement evaluation.- See Also:
- Constant Field Values
-
CLOCK_SKEW
public static final String CLOCK_SKEW
Carries aDurationspecifying a clock skew value.- See Also:
- Constant Field Values
-
LIFETIME
public static final String LIFETIME
Carries aDurationspecifying a lifetime from 'now' for IssueInstant.- See Also:
- Constant Field Values
-
CONFIRMED_SUBJECT_CONFIRMATION
public static final String CONFIRMED_SUBJECT_CONFIRMATION
Carries theSubjectConfirmationthat confirmed the subject.- See Also:
- Constant Field Values
-
VALID_ISSUERS
public static final String VALID_ISSUERS
- See Also:
- Constant Field Values
-
SIGNATURE_REQUIRED
public static final String SIGNATURE_REQUIRED
Carries aBooleanflag which indicates whether the Assertion is required to be signed.- See Also:
- Constant Field Values
-
SIGNATURE_VALIDATION_CRITERIA_SET
public static final String SIGNATURE_VALIDATION_CRITERIA_SET
Carries aCriteriaSetwhich will be used as the input to aSignatureTrustEngine.- See Also:
- Constant Field Values
-
SIGNATURE_VALIDATION_TRUST_ENGINE
public static final String SIGNATURE_VALIDATION_TRUST_ENGINE
Carries aSignatureTrustEnginewhich will be used to validate the Assertion signature.- See Also:
- Constant Field Values
-
SIGNATURE_VALIDATION_PREVALIDATOR
public static final String SIGNATURE_VALIDATION_PREVALIDATOR
Carries aSignaturePrevalidatorwhich will be used to pre-validate the Assertion signature.- See Also:
- Constant Field Values
-
SC_NOT_BEFORE_REQUIRED
public static final String SC_NOT_BEFORE_REQUIRED
Carries aBooleanflag which indicates whetherSubjectConfirmationDataNotBefore is required.- See Also:
- Constant Field Values
-
SC_NOT_ON_OR_AFTER_REQUIRED
public static final String SC_NOT_ON_OR_AFTER_REQUIRED
Carries aBooleanflag which indicates whetherSubjectConfirmationDataNotOnOrAfter is required.- See Also:
- Constant Field Values
-
SC_RECIPIENT_REQUIRED
public static final String SC_RECIPIENT_REQUIRED
Carries aBooleanflag which indicates whetherSubjectConfirmationDataRecipient is required.- See Also:
- Constant Field Values
-
SC_VALID_RECIPIENTS
public static final String SC_VALID_RECIPIENTS
- See Also:
- Constant Field Values
-
SC_ADDRESS_REQUIRED
public static final String SC_ADDRESS_REQUIRED
Carries aBooleanflag which indicates whether theSubjectConfirmationDataAddress is required.- See Also:
- Constant Field Values
-
SC_CHECK_ADDRESS
public static final String SC_CHECK_ADDRESS
Carries aBooleanflag which indicates whether theSubjectConfirmationDataaddress should be checked.- See Also:
- Constant Field Values
-
SC_VALID_ADDRESSES
public static final String SC_VALID_ADDRESSES
- See Also:
- Constant Field Values
-
SC_IN_RESPONSE_TO_REQUIRED
public static final String SC_IN_RESPONSE_TO_REQUIRED
Carries aBooleanflag which indicates whetherSubjectConfirmationDataInResponseTo is required.- See Also:
- Constant Field Values
-
SC_VALID_IN_RESPONSE_TO
public static final String SC_VALID_IN_RESPONSE_TO
Carries aStringwhose value is the acceptableSubjectConfirmationDataInResponseTo.- See Also:
- Constant Field Values
-
SC_HOK_PRESENTER_KEY
public static final String SC_HOK_PRESENTER_KEY
Carries thePublicKeyused by the presenter.- See Also:
- Constant Field Values
-
SC_HOK_PRESENTER_CERT
public static final String SC_HOK_PRESENTER_CERT
Carries theX509Certificateused by the presenter.- See Also:
- Constant Field Values
-
SC_HOK_CONFIRMED_KEYINFO
public static final String SC_HOK_CONFIRMED_KEYINFO
Carries theKeyInfothat successfully confirmed the subject via holder-of-key subject confirmation.- See Also:
- Constant Field Values
-
COND_REQUIRED_CONDITIONS
public static final String COND_REQUIRED_CONDITIONS
- See Also:
- Constant Field Values
-
COND_VALID_AUDIENCES
public static final String COND_VALID_AUDIENCES
Carries aSet<String>whose values are the acceptableAudienceRestrictionAudiencevalues for evaluating the Assertion.- See Also:
- Constant Field Values
-
COND_ONE_TIME_USE_EXPIRES
public static final String COND_ONE_TIME_USE_EXPIRES
Carries aDurationrepresenting the per-invocation value for the Assertion replay cache expiration.- See Also:
- Constant Field Values
-
STMT_AUTHN_CHECK_ADDRESS
public static final String STMT_AUTHN_CHECK_ADDRESS
Carries aBooleanflag which indicates whether the Address attribute of theSubjectLocalityof anAuthnStatementshould be checked.- See Also:
- Constant Field Values
-
STMT_AUTHN_VALID_ADDRESSES
public static final String STMT_AUTHN_VALID_ADDRESSES
Carries aSet<InetAddress>whose values are the acceptable values for the Address attribute of theSubjectLocalityof anAuthnStatement.- See Also:
- Constant Field Values
-
STMT_AUTHN_MAX_TIME
public static final String STMT_AUTHN_MAX_TIME
Carries aDurationused to evaluate the allowed value of an AuthnInstant attribute of anAuthnStatement.- See Also:
- Constant Field Values
-
-