Skip to content

feat: Allow token auth age to be disabled #362

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

nabeelpaytrix
Copy link

This disable can be via env variable RP_AUTH_SAML_TOKEN_AGE_CHECK

This validation is enabled by default, so reportportal must be explicitly configured to disable this check

Github Issue: #361

…ML_TOKEN_AGE_CHECK

This validation is enabled by default, so reportportal must be explicitly configured to disable this check
@MeirsPortal
Copy link

Also waiting for a way to handle this issue - will be happy to test this workaround.

import static org.springframework.security.saml.util.DateUtils.toZuluTime;
import static org.springframework.util.StringUtils.hasText;

public class CustomValidator extends DefaultValidator {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In case you implement CustomValidator, why not change maxAuthenticationAgeMillis to long in your implementation?
There are not many usages inside the DefaultValidator
https://jar-download.com/artifacts/org.springframework.security.extensions/spring-security-saml2-core/2.0.0.M31/source-code/org/springframework/security/saml/spi/DefaultValidator.java

@wesco-HariSarmaNarayana
Copy link

Any tentative timeline for this feature to be enable??? Appreciate your inputs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants