Package swiss.trustbroker.config.dto
Class AccessRequestConfig.AccessRequestConfigBuilder
java.lang.Object
swiss.trustbroker.config.dto.AccessRequestConfig.AccessRequestConfigBuilder
- Enclosing class:
AccessRequestConfig
-
Method Summary
Modifier and TypeMethodDescriptionattributes(Map<String, Object> attributes) Custom attributes that might be needed by the implementation.build()canonicalizationAlgorithm(String canonicalizationAlgorithm) Access Request canonicalization algorithm.centralCICD(String centralCICD) Global default for optional request parameter added to URLs.digestMethod(String digestMethod) Access requiest digest method.doSignSamlMessages(boolean doSignSamlMessages) Sign outgoing Access Request SAML messages (not re-using SecurityChecks.doSignSuccessResponse) Assertion signature is controlled by SecurityChecks.doSignAssertions for AccessRequest too.enabled(boolean enabled) Globally enable the feature.endpointReferenceAddress(String endpointReferenceAddress) Global default for ID in requests sent by the AccessRequest.interactiveMultiServiceParameters(String interactiveMultiServiceParameters) Global default for interactive Access Request service parameters (multi tenant mode).interactiveResultParameter(String interactiveResultParameter) Interactive Access Request result parameter name.interactiveResultUserCancel(String interactiveResultUserCancel) Value of resultParameter indicating user has cancelled the process.interactiveServiceParameters(String interactiveServiceParameters) Global default for interactive Access Request service parameters.interactiveServiceUrl(String interactiveServiceUrl) Global default for interactive Access Request service URLGlobal default issuer ID.Mappings that might be needed by the implementation.originalAttributes(List<String> originalAttributes) Special attributes that might be marked as coming from the original issuer i.e.recipientId(String recipientId) Global default recipient ID.signatureMethodAlgorithm(String signatureMethodAlgorithm) Access Request signature algorithm.signercert(swiss.trustbroker.common.config.KeystoreProperties signercert) Signer for outbound messages.signerTruststore(swiss.trustbroker.common.config.KeystoreProperties signerTruststore) Truststore for validating inbound messages.silentServiceUrl(String silentServiceUrl) Global default for silent Access Request service URLtoString()truststore(swiss.trustbroker.common.config.KeystoreProperties truststore) Keystore for outbound requests.wsTrustRequestValiditySeconds(int wsTrustRequestValiditySeconds) Validity in seconds for WS-Trust expires.wsTrustSoapProtocolVersion(String wsTrustSoapProtocolVersion) WS-Trust SOAP protocl.
-
Method Details
-
enabled
Globally enable the feature.
Default: false- Returns:
this.
-
interactiveServiceUrl
public AccessRequestConfig.AccessRequestConfigBuilder interactiveServiceUrl(String interactiveServiceUrl) Global default for interactive Access Request service URL- Returns:
this.
-
interactiveServiceParameters
public AccessRequestConfig.AccessRequestConfigBuilder interactiveServiceParameters(String interactiveServiceParameters) Global default for interactive Access Request service parameters.- Returns:
this.
-
interactiveMultiServiceParameters
public AccessRequestConfig.AccessRequestConfigBuilder interactiveMultiServiceParameters(String interactiveMultiServiceParameters) Global default for interactive Access Request service parameters (multi tenant mode).- Returns:
this.- Since:
- 1.12.0
-
centralCICD
Global default for optional request parameter added to URLs.- Returns:
this.
-
interactiveResultParameter
public AccessRequestConfig.AccessRequestConfigBuilder interactiveResultParameter(String interactiveResultParameter) Interactive Access Request result parameter name.- Returns:
this.- Since:
- 1.7.0
-
interactiveResultUserCancel
public AccessRequestConfig.AccessRequestConfigBuilder interactiveResultUserCancel(String interactiveResultUserCancel) Value of resultParameter indicating user has cancelled the process.- Returns:
this.- Since:
- 1.7.0
-
silentServiceUrl
Global default for silent Access Request service URL- Returns:
this.
-
endpointReferenceAddress
public AccessRequestConfig.AccessRequestConfigBuilder endpointReferenceAddress(String endpointReferenceAddress) Global default for ID in requests sent by the AccessRequest.- Returns:
this.
-
wsTrustRequestValiditySeconds
public AccessRequestConfig.AccessRequestConfigBuilder wsTrustRequestValiditySeconds(int wsTrustRequestValiditySeconds) Validity in seconds for WS-Trust expires.- Returns:
this.
-
wsTrustSoapProtocolVersion
public AccessRequestConfig.AccessRequestConfigBuilder wsTrustSoapProtocolVersion(String wsTrustSoapProtocolVersion) WS-Trust SOAP protocl.
Default: SOAP 1.1 Protocol (alternative: SOAP 1.2 Protocol)- Returns:
this.
-
truststore
public AccessRequestConfig.AccessRequestConfigBuilder truststore(swiss.trustbroker.common.config.KeystoreProperties truststore) Keystore for outbound requests.- Returns:
this.
-
signerTruststore
public AccessRequestConfig.AccessRequestConfigBuilder signerTruststore(swiss.trustbroker.common.config.KeystoreProperties signerTruststore) Truststore for validating inbound messages.- Returns:
this.
-
doSignSamlMessages
public AccessRequestConfig.AccessRequestConfigBuilder doSignSamlMessages(boolean doSignSamlMessages) Sign outgoing Access Request SAML messages (not re-using SecurityChecks.doSignSuccessResponse) Assertion signature is controlled by SecurityChecks.doSignAssertions for AccessRequest too.
Default: true- Returns:
this.
-
signatureMethodAlgorithm
public AccessRequestConfig.AccessRequestConfigBuilder signatureMethodAlgorithm(String signatureMethodAlgorithm) Access Request signature algorithm.
Default: http://www.w3.org/2001/04/xmldsig-more#rsa-sha256- Returns:
this.
-
canonicalizationAlgorithm
public AccessRequestConfig.AccessRequestConfigBuilder canonicalizationAlgorithm(String canonicalizationAlgorithm) Access Request canonicalization algorithm.
Default: http://www.w3.org/2001/10/xml-exc-c14n#- Returns:
this.
-
digestMethod
Access requiest digest method.
Default: null (Use default)- Returns:
this.
-
signercert
public AccessRequestConfig.AccessRequestConfigBuilder signercert(swiss.trustbroker.common.config.KeystoreProperties signercert) Signer for outbound messages.- Returns:
this.
-
issuerId
Global default issuer ID.- Returns:
this.
-
recipientId
Global default recipient ID.- Returns:
this.
-
mappings
public AccessRequestConfig.AccessRequestConfigBuilder mappings(List<swiss.trustbroker.common.config.RegexNameValue> mappings) Mappings that might be needed by the implementation.- Returns:
this.
-
attributes
Custom attributes that might be needed by the implementation.- Returns:
this.
-
originalAttributes
public AccessRequestConfig.AccessRequestConfigBuilder originalAttributes(List<String> originalAttributes) Special attributes that might be marked as coming from the original issuer i.e. IDP- Returns:
this.
-
build
-
toString
-