diff gwt-client/src/main/webapp/WEB-INF/web.xml @ 8839:2c8259176c46

Add configurable time tolerance to SAML ticket validation. This allows e.g. to account for time skew between the ISP and the server this servlet is run on.
author Tom Gottfried <tom@intevation.de>
date Wed, 28 Jun 2017 20:09:53 +0200
parents 062a1da97ea1
children 89dcaae0801c
line wrap: on
line diff
--- a/gwt-client/src/main/webapp/WEB-INF/web.xml	Tue May 30 12:51:42 2017 +0200
+++ b/gwt-client/src/main/webapp/WEB-INF/web.xml	Wed Jun 28 20:09:53 2017 +0200
@@ -51,6 +51,13 @@
     </context-param>
 
     <context-param>
+        <!-- Tolerance in milliseconds for validation based on NotBefore and
+             NotOnOrAfter of the SAML ticket -->
+        <param-name>saml-time-tolerance</param-name>
+        <param-value>1000</param-value>
+    </context-param>
+
+    <context-param>
         <param-name>features-file</param-name>
         <param-value>/WEB-INF/features.xml</param-value>
     </context-param>

http://dive4elements.wald.intevation.org