com.aspc.cms.rest.plugin.oidc

Interface OidcRefreshCookieMaxAgeResolver

All Known Implementing Classes:

DefaultOidcRefreshCookieMaxAgeResolver, FixedMaxAgeOidcRefreshCookieMaxAgeResolver

public interface OidcRefreshCookieMaxAgeResolver

Pluggable policy for the Max-Age of the OIDC refresh-token HttpOnly cookie.

Implementations are loaded from OidcConfig.PROP_OIDC_REFRESH_COOKIE_MAX_AGE_RESOLVER when the class name is allowlisted in OidcConfig. When unset, not allowlisted, or unloadable, DefaultOidcRefreshCookieMaxAgeResolver applies OidcCookieUtil.DEFAULT_REFRESH_TOKEN_MAX_AGE.

Client-specific resolvers (e.g. APA privilege-based session rules) live outside com.aspc.cms.rest.plugin.oidc and are referenced only via the property.

Author:

Claude

Method Summary

Modifier and Type	Method and Description
int	resolveMaxAgeSeconds(OidcTokenResponse tokenResponse) Returns the refresh-token cookie lifetime in seconds.

Method Detail

resolveMaxAgeSeconds

@CheckReturnValue
int resolveMaxAgeSeconds(@Nonnull
                                           OidcTokenResponse tokenResponse)

Returns the refresh-token cookie lifetime in seconds.

Parameters:

tokenResponse - tokens returned from Cognito (access, ID, optional refresh)

Returns:

cookie Max-Age in seconds (must be >= 0)