Package swiss.trustbroker.config.dto

Class FrameOptionsPolicies

java.lang.Object

swiss.trustbroker.config.dto.FrameOptionsPolicies

public class FrameOptionsPolicies
extends Object

HTTP Frame Options configuration.

See Also:

• X-Frame-Options

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	FrameOptionsPolicies.FrameOptionsPoliciesBuilder

Field Summary

Fields

Modifier and Type	Field	Description
static final String	DEFAULT_FRAME_OPTIONS

Constructor Summary

Constructors

Constructor	Description
FrameOptionsPolicies()
FrameOptionsPolicies(String fallback, String oidc)	Creates a new FrameOptionsPolicies instance.

Method Summary

Modifier and Type	Method	Description
static FrameOptionsPolicies.FrameOptionsPoliciesBuilder	builder()
protected boolean	canEqual(Object other)
boolean	equals(Object o)
String	getFallback()	No further differentiation here as the FE, API, and SAML URLs are used together.
String	getOidc()	/app/device and other api services might run in an application iframe so switch from deny to same origin.
int	hashCode()
void	setFallback(String fallback)	No further differentiation here as the FE, API, and SAML URLs are used together.
void	setOidc(String oidc)	/app/device and other api services might run in an application iframe so switch from deny to same origin.
String	toString()

Methods inherited from class java.lang.Object

clone, finalize, getClass, notify, notifyAll, wait, wait, wait

Field Details

DEFAULT_FRAME_OPTIONS

public static final String DEFAULT_FRAME_OPTIONS

See Also:

• Constant Field Values

Constructor Details

FrameOptionsPolicies

public FrameOptionsPolicies()

FrameOptionsPolicies

public FrameOptionsPolicies(String fallback,
 String oidc)

Creates a new FrameOptionsPolicies instance.

Parameters:

fallback - No further differentiation here as the FE, API, and SAML URLs are used together.
Default: SAMEORIGIN

oidc - /app/device and other api services might run in an application iframe so switch from deny to same origin. Does not work on: Redirects (DENY default applies there still). We make sure in OidcTxResponseWrapper to set SAMEORIGIN instead of DENY just in case.
Default: SAMEORIGIN

Method Details

builder

public static FrameOptionsPolicies.FrameOptionsPoliciesBuilder builder()

getFallback

public String getFallback()

No further differentiation here as the FE, API, and SAML URLs are used together.
Default: SAMEORIGIN

getOidc

public String getOidc()

/app/device and other api services might run in an application iframe so switch from deny to same origin. Does not work on: Redirects (DENY default applies there still). We make sure in OidcTxResponseWrapper to set SAMEORIGIN instead of DENY just in case.
Default: SAMEORIGIN

setFallback

public void setFallback(String fallback)

No further differentiation here as the FE, API, and SAML URLs are used together.
Default: SAMEORIGIN

setOidc

public void setOidc(String oidc)

/app/device and other api services might run in an application iframe so switch from deny to same origin. Does not work on: Redirects (DENY default applies there still). We make sure in OidcTxResponseWrapper to set SAMEORIGIN instead of DENY just in case.
Default: SAMEORIGIN

equals

public boolean equals(Object o)

Overrides:

equals in class Object

canEqual

protected boolean canEqual(Object other)

hashCode

public int hashCode()

Overrides:

hashCode in class Object

toString

public String toString()

Overrides:

toString in class Object