Skip to Content.
Sympa Menu

mace-opensaml-users - What's the purpose of 5 addititional minutes in SAMLPostProfile.accept() check?

Subject: OpenSAML user discussion

List archive

What's the purpose of 5 addititional minutes in SAMLPostProfile.accept() check?


Chronological Thread 
  • From: "Shannon Kendrick" <>
  • To: <>
  • Subject: What's the purpose of 5 addititional minutes in SAMLPostProfile.accept() check?
  • Date: Wed, 5 Mar 2003 10:30:53 -0500
Scott,
I noticed in SAMLPostProfile.accept() the following check:

if (r.getIssueInstant().getTime() + (1000 * ttlSeconds) + 300000 <
System.currentTimeMillis())
throw new ExpiredAssertionException(SAMLException.RESPONDER,
"SAMLPOSTProfile.accept() detected expired response");

What's the purpose of the additional 300000 ms? Looks like you are adding an
additional 5 minutes to whatever I provide as the time-to-live?

Just curious,
Shannon Kendrick

---------------------------------------------------mace-opensaml-users-+
For list utilities, archives, subscribe, unsubscribe, etc. please visit the
ListProc web interface at

http://archives.internet2.edu/

---------------------------------------------------mace-opensaml-users--


Archive powered by MHonArc 2.6.16.

Top of Page