Package swiss.trustbroker.config.dto

Class WsTrustConfig.WsTrustConfigBuilder

java.lang.Object

swiss.trustbroker.config.dto.WsTrustConfig.WsTrustConfigBuilder

Enclosing class:

WsTrustConfig

public static class WsTrustConfig.WsTrustConfigBuilder
extends Object

Method Summary

Modifier and Type	Method	Description
WsTrustConfig.WsTrustConfigBuilder	alias(String alias)	Keystore alias.
WsTrustConfig.WsTrustConfigBuilder	allowedClientIpRegex(String allowedClientIpRegex)	Regex of client IPs allowed (using X-Forwarded-For HTTP header).
WsTrustConfig.WsTrustConfigBuilder	allowedNetworks(List<String> allowedNetworks)	List of client networks allowed (using trustbroker.config.network.networkHeader HTTP header).
WsTrustConfig.WsTrustConfigBuilder	bindings(List<String> bindings)	List of exposed WS-Trust bindings.
WsTrustConfig	build()
WsTrustConfig.WsTrustConfigBuilder	cert(String cert)	Keystore path.
WsTrustConfig.WsTrustConfigBuilder	doSignResponse(boolean doSignResponse)	Sign SOAP responses.
WsTrustConfig.WsTrustConfigBuilder	enabled(boolean enabled)	Feature toggle allowing to disable the WSTrust endpoint Default: false (since 1.13.0)
WsTrustConfig.WsTrustConfigBuilder	enforceClientIp(boolean enforceClientIp)	Client IPs enforced if configured (allowedClientIpRegex).
WsTrustConfig.WsTrustConfigBuilder	enforceNetwork(boolean enforceNetwork)	Client networks enforced if configured (allowedNetworks).
WsTrustConfig.WsTrustConfigBuilder	issueEnabled(boolean issueEnabled)	Deprecated. use bindings
WsTrustConfig.WsTrustConfigBuilder	issueRequireSignedAssertions(boolean issueRequireSignedAssertions)	Deprecated.
WsTrustConfig.WsTrustConfigBuilder	issueRequireSignedRequests(boolean issueRequireSignedRequests)	Require signed SOAP requests for WS-Trust ISSUE.
WsTrustConfig.WsTrustConfigBuilder	issueRequireTimestamp(boolean issueRequireTimestamp)	WS-Trust ISSUE requires timestamp.
WsTrustConfig.WsTrustConfigBuilder	lifetimeMin(long lifetimeMin)	Lifetime expiration in minutes.
WsTrustConfig.WsTrustConfigBuilder	password(String password)	Keystore password.
WsTrustConfig.WsTrustConfigBuilder	renewEnabled(boolean renewEnabled)	Deprecated. use bindings
WsTrustConfig.WsTrustConfigBuilder	renewRequireSignedRequests(boolean renewRequireSignedRequests)	Require signed SOAP requests for WS-Trust RENEW.
WsTrustConfig.WsTrustConfigBuilder	renewRequiresSecurityToken(boolean renewRequiresSecurityToken)	RENEW request requires a valid security token.
WsTrustConfig.WsTrustConfigBuilder	renewRequiresSsoSession(boolean renewRequiresSsoSession)	RENEW request requires a valid SSO session.
WsTrustConfig.WsTrustConfigBuilder	soapHeadersToConsider(List<String> soapHeadersToConsider)	SOAP headers considered by the WS-Trust implementation.
WsTrustConfig.WsTrustConfigBuilder	soapVersion(WsTrustConfig.SoapVersionConfig soapVersion)	SOAP version.
String	toString()
WsTrustConfig.WsTrustConfigBuilder	type(String type)	Keystore type.
WsTrustConfig.WsTrustConfigBuilder	wsBasePath(String wsBasePath)	Allow base path differing from SAML API.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Method Details

enabled

public WsTrustConfig.WsTrustConfigBuilder enabled(boolean enabled)

Feature toggle allowing to disable the WSTrust endpoint
Default: false (since 1.13.0)

Returns:

this.

Since:

1.9.0

cert

public WsTrustConfig.WsTrustConfigBuilder cert(String cert)

Keystore path.

Returns:

this.

type

public WsTrustConfig.WsTrustConfigBuilder type(String type)

Keystore type.

Returns:

this.

alias

public WsTrustConfig.WsTrustConfigBuilder alias(String alias)

Keystore alias.

Returns:

this.

Since:

1.13.0

password

public WsTrustConfig.WsTrustConfigBuilder password(String password)

Keystore password.

Returns:

this.

wsBasePath

public WsTrustConfig.WsTrustConfigBuilder wsBasePath(String wsBasePath)

Allow base path differing from SAML API.

Returns:

this.

issueEnabled

@Deprecated
public WsTrustConfig.WsTrustConfigBuilder issueEnabled(boolean issueEnabled)

Deprecated.

use bindings

Enable ISSUE request.
Default: false (since 1.13.0)

Returns:

this.

Since:

1.12.0

renewEnabled

@Deprecated
public WsTrustConfig.WsTrustConfigBuilder renewEnabled(boolean renewEnabled)

Deprecated.

use bindings

Enable RENEW request.
Default: false

Returns:

this.

Since:

1.11.0

bindings

public WsTrustConfig.WsTrustConfigBuilder bindings(List<String> bindings)

List of exposed WS-Trust bindings.
Default: none

Returns:

this.

Since:

1.14.0

See Also:

• WsTrustBinding

renewRequiresSsoSession

public WsTrustConfig.WsTrustConfigBuilder renewRequiresSsoSession(boolean renewRequiresSsoSession)

RENEW request requires a valid SSO session.
Default: true

Returns:

this.

Since:

1.11.0

renewRequiresSecurityToken

public WsTrustConfig.WsTrustConfigBuilder renewRequiresSecurityToken(boolean renewRequiresSecurityToken)

RENEW request requires a valid security token.
Default: true

Returns:

this.

Since:

1.11.0

issueRequireSignedRequests

public WsTrustConfig.WsTrustConfigBuilder issueRequireSignedRequests(boolean issueRequireSignedRequests)

Require signed SOAP requests for WS-Trust ISSUE.
Default: true

Returns:

this.

Since:

1.13.0

issueRequireTimestamp

public WsTrustConfig.WsTrustConfigBuilder issueRequireTimestamp(boolean issueRequireTimestamp)

WS-Trust ISSUE requires timestamp.
Default: true

Returns:

this.

Since:

1.15.0

issueRequireSignedAssertions

@Deprecated
public WsTrustConfig.WsTrustConfigBuilder issueRequireSignedAssertions(boolean issueRequireSignedAssertions)

Deprecated.

Require signed SOAP requests for WS-Trust ISSUE.
Default: true

Returns:

this.

Since:

1.13.0

renewRequireSignedRequests

public WsTrustConfig.WsTrustConfigBuilder renewRequireSignedRequests(boolean renewRequireSignedRequests)

Require signed SOAP requests for WS-Trust RENEW.
Default: true

Returns:

this.

Since:

1.13.0

doSignResponse

public WsTrustConfig.WsTrustConfigBuilder doSignResponse(boolean doSignResponse)

Sign SOAP responses.
Default: true

Returns:

this.

Since:

1.13.0

lifetimeMin

public WsTrustConfig.WsTrustConfigBuilder lifetimeMin(long lifetimeMin)

Lifetime expiration in minutes.
Default: 480 (8 hours)

Returns:

this.

Since:

1.12.0

soapVersion

public WsTrustConfig.WsTrustConfigBuilder soapVersion(WsTrustConfig.SoapVersionConfig soapVersion)

SOAP version.
Default: SOAP_1_X (alternatives SOAP_1_1, SOAP_1_2)

Returns:

this.

soapHeadersToConsider

public WsTrustConfig.WsTrustConfigBuilder soapHeadersToConsider(List<String> soapHeadersToConsider)

SOAP headers considered by the WS-Trust implementation.
Default: not set

Returns:

this.

allowedNetworks

public WsTrustConfig.WsTrustConfigBuilder allowedNetworks(List<String> allowedNetworks)

List of client networks allowed (using trustbroker.config.network.networkHeader HTTP header). Default: not restricted

Returns:

this.

Since:

1.13.0

enforceNetwork

public WsTrustConfig.WsTrustConfigBuilder enforceNetwork(boolean enforceNetwork)

Client networks enforced if configured (allowedNetworks).
Default: true - set to false in order to warn for violations only

Returns:

this.

Since:

1.13.0

allowedClientIpRegex

public WsTrustConfig.WsTrustConfigBuilder allowedClientIpRegex(String allowedClientIpRegex)

Regex of client IPs allowed (using X-Forwarded-For HTTP header).

Returns:

this.

Since:

1.13.0

enforceClientIp

public WsTrustConfig.WsTrustConfigBuilder enforceClientIp(boolean enforceClientIp)

Client IPs enforced if configured (allowedClientIpRegex).
Default: true - set to false in order to warn for violations only

Returns:

this.

Since:

1.13.0

build

public WsTrustConfig build()

toString

public String toString()

Overrides:

toString in class Object