com.haulmont.idp

Interface IdpConfig

All Superinterfaces:

Config

public interface IdpConfig
extends Config

Configuration interface for IDP web service.

Method Summary

Modifier and Type	Method and Description
boolean	getIdpCookieHttpOnly()
int	getIdpCookieMaxAge()
java.util.List<java.lang.String>	getServiceProviderLogoutUrls()
java.util.List<java.lang.String>	getServiceProviderUrlMasks()
java.util.List<java.lang.String>	getServiceProviderUrls()
int	getSessionExpirationCheckIntervalMs()
int	getSessionExpirationTimeoutSec()
int	getTicketExpirationTimeoutSec()
java.lang.String	getTrustedClientPassword()
java.lang.String	getTrustedServicePassword()

Method Detail

getTrustedClientPassword

java.lang.String getTrustedClientPassword()

Returns:

trusted password of middleware

getTrustedServicePassword

java.lang.String getTrustedServicePassword()

Returns:

trusted password to grant access to services, must be equal to cuba.web.idp.trustedServicePassword on service

getServiceProviderUrls

java.util.List<java.lang.String> getServiceProviderUrls()

Returns:

all permitted service URLs separated by comma.
IDP is allowed to send redirects only on these URLs, or URLs, that match regexps from cuba.idp.serviceProviderUrlsMasks
First URL is used as default if user opened IDP login form directly.

getServiceProviderUrlMasks

java.util.List<java.lang.String> getServiceProviderUrlMasks()

Returns:

java regexp masks for permitted service URLs separated by comma.
Should be carefully chosen to not to allow redirecting to untrusted URLs.
For example, http://your-domain.com.* unsafe mask, as would allow redirecting to http://your-domain.com.org, that might be owned by malefactor. For this case, safe mask would be http://your-domain.com/.*

getServiceProviderLogoutUrls

java.util.List<java.lang.String> getServiceProviderLogoutUrls()

Returns:

all URLs that need to be notified on session logout or expiration separated by comma.
For example in CUBA it is http://localhost:8080/app/dispatch/idpc/logout.
IDP will pass to POST request two form-urlencoded parameters with names idpSessionId and trustedServicePassword.

getTicketExpirationTimeoutSec

int getTicketExpirationTimeoutSec()

Returns:

service provider ticket expiration timeout in seconds.

getSessionExpirationTimeoutSec

int getSessionExpirationTimeoutSec()

Returns:

IDP session expiration timeout in seconds.

getSessionExpirationCheckIntervalMs

int getSessionExpirationCheckIntervalMs()

Returns:

check interval for sessions and tickets expiration.

getIdpCookieMaxAge

int getIdpCookieMaxAge()

Returns:

IDP session cookie max age.

getIdpCookieHttpOnly

boolean getIdpCookieHttpOnly()

Returns:

Whether to use http-only flag for IDP session cookie.