Struct SamlValidationContext 

pub struct SamlValidationContext<'a> { /* private fields */ }

Caller-owned validation context for typed inbound SAML messages.

Implementations

impl<'a> SamlValidationContext<'a>

pub fn new( now: SystemTime, replay: ReplayPolicy<'a>, ) -> SamlValidationContext<'a>

Build a validation context that allows five minutes of clock skew.

The same skew covers assertion conditions, bearer confirmation, SessionNotOnOrAfter, and LogoutRequest@NotOnOrAfter. Self::with_clock_skew replaces it.

pub fn with_clock_skew(self, clock_skew: ClockSkew) -> SamlValidationContext<'a>

Replace the context clock skew, including ClockSkew::strict.

pub fn with_replay_retention( self, retention: Duration, ) -> SamlValidationContext<'a>

Set explicit replay retention for protocol messages that do not carry a SAML NotOnOrAfter value suitable for cache expiry.

pub fn now(&self) -> SystemTime

Validation instant supplied by the caller.

pub fn clock_skew(&self) -> ClockSkew

Clock skew applied to time-window checks.

pub fn replay_retention(&self) -> Option<Duration>

Replay retention for protocol message IDs without SAML expiry.