public interface ValidatableSamlToken extends SamlToken
SamlToken.TokenDelegate| Modifier and Type | Method and Description |
|---|---|
void |
validate(X509Certificate[] trustedRootCertificates,
long clockToleranceSec)
Validates that the token is signed using a trusted certificate and is
within the lifetime range
|
equals, getAdvice, getAudience, getConfirmationCertificate, getConfirmationType, getDelegationChain, getExpirationTime, getGroupList, getId, getStartTime, getSubject, getSubjectNameId, hashCode, isDelegable, isRenewable, isSolutionimportTo, toXmlvoid validate(X509Certificate[] trustedRootCertificates, long clockToleranceSec) throws InvalidTokenException
trustedRootCertificates - List of trusted root STS certificates that ValidatableSamlToken
will use when validating the token's signature. Required.clockToleranceSec - Tolerate that many seconds of discrepancy between the token's
sender clock and the local system clock when validating the
token's start and expiration time. This effectively "expands"
the token's validity period with the given number of seconds.InvalidSignatureException - when the signature cannot be verified.InvalidTimingException - when times in the token are malformed, invalid or divergent at
the time of validationMalformedTokenException - when the token or some of its elements are malformedInvalidTokenException - if the token or some of its elements is invalid or malformedCopyright © 2016. All rights reserved.