comparison gwt-client/src/main/webapp/WEB-INF/web.xml @ 8839:2c8259176c46

Add configurable time tolerance to SAML ticket validation. This allows e.g. to account for time skew between the ISP and the server this servlet is run on.
author Tom Gottfried <tom@intevation.de>
date Wed, 28 Jun 2017 20:09:53 +0200
parents 062a1da97ea1
children 89dcaae0801c
comparison
equal deleted inserted replaced
8838:1fa03f3c9d3d 8839:2c8259176c46
46 46
47 <context-param> 47 <context-param>
48 <!-- Path to public key for validation of SAML tickets --> 48 <!-- Path to public key for validation of SAML tickets -->
49 <param-name>saml-trusted-public-key</param-name> 49 <param-name>saml-trusted-public-key</param-name>
50 <param-value>/WEB-INF/saml-signer-cert.pem</param-value> 50 <param-value>/WEB-INF/saml-signer-cert.pem</param-value>
51 </context-param>
52
53 <context-param>
54 <!-- Tolerance in milliseconds for validation based on NotBefore and
55 NotOnOrAfter of the SAML ticket -->
56 <param-name>saml-time-tolerance</param-name>
57 <param-value>1000</param-value>
51 </context-param> 58 </context-param>
52 59
53 <context-param> 60 <context-param>
54 <param-name>features-file</param-name> 61 <param-name>features-file</param-name>
55 <param-value>/WEB-INF/features.xml</param-value> 62 <param-value>/WEB-INF/features.xml</param-value>

http://dive4elements.wald.intevation.org