com.amazon.simplesignin.ssitoken

Class SSITokenCommon

java.lang.Object

com.amazon.simplesignin.ssitoken.SSITokenCommon

public final class SSITokenCommon
extends Object

This class contains definitions for common constants, types and utility methods related to SSI tokens.

Field Summary

Fields

Modifier and Type	Field and Description
static long	MAX_CLOCK_SKEW_MS Default value (in milliseconds) for maximum clock skew allowed between the machines issuing and validating the token.
static long	TOKEN_VALIDITY_WINDOW_MS SSIToken expiration window (in milliseconds).

Method Summary

Modifier and Type	Method and Description
static Date	getClockSkewAdjustedExpirationTime(@NonNull Date expiresAt) Adjusts "expiresAt" time which indicates the time on or after which token is not valid to account for clock skew at destination machine where token validity is checked.
static Date	getClockSkewAdjustedNotBeforeTime(@NonNull Date notBefore) Adjusts "notBefore" time which indicates the time until which token is not valid to account for clock skew at destination machine where token validity is checked.
static Date	getExpirationTime(@NonNull Date referenceDate) Computes token expiration time from the given reference time based on token validity period.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

MAX_CLOCK_SKEW_MS

public static final long MAX_CLOCK_SKEW_MS

Default value (in milliseconds) for maximum clock skew allowed between the machines issuing and validating the token.

See Also:

Constant Field Values

TOKEN_VALIDITY_WINDOW_MS

public static final long TOKEN_VALIDITY_WINDOW_MS

SSIToken expiration window (in milliseconds).

See Also:

Constant Field Values

Method Detail

getClockSkewAdjustedNotBeforeTime

public static Date getClockSkewAdjustedNotBeforeTime(@NonNull
                                                     @NonNull Date notBefore)

Adjusts "notBefore" time which indicates the time until which token is not valid to account for clock skew at destination machine where token validity is checked.

Parameters:

notBefore - Not before time.

Returns:

Date A new Date instance derived from input date after adjusting for clock skew.

getClockSkewAdjustedExpirationTime

public static Date getClockSkewAdjustedExpirationTime(@NonNull
                                                      @NonNull Date expiresAt)

Adjusts "expiresAt" time which indicates the time on or after which token is not valid to account for clock skew at destination machine where token validity is checked.

Parameters:

expiresAt - Expiration time.

Returns:

Date A new Date instance derived from input date after adjusting for clock skew.

getExpirationTime

public static Date getExpirationTime(@NonNull
                                     @NonNull Date referenceDate)

Computes token expiration time from the given reference time based on token validity period.

Parameters:

referenceDate - Reference date.

Returns:

Expiration date.