Class DefaultTokenRevocationLifetimeLookupStrategy
- java.lang.Object
-
- net.shibboleth.idp.plugin.oidc.op.profile.logic.DefaultTokenRevocationLifetimeLookupStrategy
-
public class DefaultTokenRevocationLifetimeLookupStrategy extends Object implements Function<com.nimbusds.jwt.JWTClaimsSet,Duration>
Default lookup function for fetching the token revocation lifetime from the given claims set. If an expiration time is found from the claims set, a difference between now and it is first calculated and then the configurable clock skew value and additional 5 minutes are added to the value. The result is returned.If the expiration time is in the past with clock skew considered, a
Duration.ZEROis returned.If no expiration time is found, null is returned.
-
-
Constructor Summary
Constructors Constructor Description DefaultTokenRevocationLifetimeLookupStrategy()Constructor.
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description Durationapply(com.nimbusds.jwt.JWTClaimsSet claimsSet)voidsetClockSkew(Duration skew)Set the clock skew.
-
-
-
Field Detail
-
log
@Nonnull private final org.slf4j.Logger log
Class logger.
-
clockSkew
@Nonnull private Duration clockSkew
Positive clock skew adjustment to consider when calculating revocation lifetime.
-
-
Method Detail
-
setClockSkew
public void setClockSkew(@Nonnull Duration skew)Set the clock skew.- Parameters:
skew- clock skew to set
-
-