Package org.apache.juneau.rest.server.auth.saml

Class InMemoryAuthnRequestStore

java.lang.Object

org.apache.juneau.rest.server.auth.saml.InMemoryAuthnRequestStore

All Implemented Interfaces:

AuthnRequestStore

public class InMemoryAuthnRequestStore
extends Object
implements AuthnRequestStore

Per-process, in-memory implementation of AuthnRequestStore.

Holds at most DEFAULT_MAX_ENTRIES unexpired request IDs; each ID is accepted once. Not shared between nodes.

Since:

10.0.0

Field Summary

Fields

Modifier and Type	Field	Description
static final int	DEFAULT_MAX_ENTRIES	Default upper bound on outstanding request IDs.

Constructor Summary

Constructors

Constructor	Description
InMemoryAuthnRequestStore()	Constructor using DEFAULT_MAX_ENTRIES.
InMemoryAuthnRequestStore(int maxEntries)	Constructor.

Method Summary

Modifier and Type	Method	Description
boolean	consume(String id, long nowMs)	Atomically removes a request ID and reports whether it was outstanding.
void	remember(String id, long expiresAtMs, long nowMs)	Records an outstanding request ID.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_MAX_ENTRIES

public static final int DEFAULT_MAX_ENTRIES

Default upper bound on outstanding request IDs.

See Also:

• Constant Field Values

Constructor Details

InMemoryAuthnRequestStore

public InMemoryAuthnRequestStore()

Constructor using DEFAULT_MAX_ENTRIES.

InMemoryAuthnRequestStore

public InMemoryAuthnRequestStore(int maxEntries)

Constructor.

Parameters:

maxEntries - The maximum number of outstanding request IDs. Must be positive.

Method Details

remember

public void remember(String id,
 long expiresAtMs,
 long nowMs)

Description copied from interface: AuthnRequestStore

Records an outstanding request ID.

Specified by:

remember in interface AuthnRequestStore

Parameters:

id - The ID attribute of the outgoing request. Never null or blank.

expiresAtMs - The epoch-millisecond instant after which the ID is no longer accepted.

nowMs - The current epoch-millisecond instant according to the validator's clock.

consume

public boolean consume(String id,
 long nowMs)

Description copied from interface: AuthnRequestStore

Atomically removes a request ID and reports whether it was outstanding.

Specified by:

consume in interface AuthnRequestStore

Parameters:

id - The InResponseTo value from the response. Never null or blank.

nowMs - The current epoch-millisecond instant according to the validator's clock.

Returns:

true if the ID was registered, unexpired and not yet consumed.