Package com.ngrok.definitions
Class EndpointSamlMutate.Builder
java.lang.Object
com.ngrok.definitions.EndpointSamlMutate.Builder
- Enclosing class:
- EndpointSamlMutate
Builder class for
EndpointSamlMutate
.-
Method Summary
Modifier and TypeMethodDescriptionallowIdpInitiated
(boolean allowIdpInitiated) If true, the IdP may initiate a login directly (e.g.allowIdpInitiated
(Optional<Boolean> allowIdpInitiated) If true, the IdP may initiate a login directly (e.g.authorizedGroups
(List<String> authorizedGroups) If present, only users who are a member of one of the listed groups may access the target endpoint.authorizedGroups
(Optional<List<String>> authorizedGroups) If present, only users who are a member of one of the listed groups may access the target endpoint.build()
Constructs theEndpointSamlMutate
instance.cookiePrefix
(String cookiePrefix) the prefix of the session cookie that ngrok sets on the http client to cache authentication.cookiePrefix
(Optional<String> cookiePrefix) the prefix of the session cookie that ngrok sets on the http client to cache authentication.enabled
(boolean enabled) true
if the module will be applied to traffic,false
to disable.true
if the module will be applied to traffic,false
to disable.forceAuthn
(boolean forceAuthn) If true, indicates that whenever we redirect a user to the IdP for authentication that the IdP must prompt the user for authentication credentials even if the user already has a valid session with the IdP.forceAuthn
(Optional<Boolean> forceAuthn) If true, indicates that whenever we redirect a user to the IdP for authentication that the IdP must prompt the user for authentication credentials even if the user already has a valid session with the IdP.idpMetadata
(String idpMetadata) The full XML IdP EntityDescriptor.idpMetadata
(Optional<String> idpMetadata) The full XML IdP EntityDescriptor.inactivityTimeout
(long inactivityTimeout) Integer number of seconds of inactivity after which if the user has not accessed the endpoint, their session will time out and they will be forced to reauthenticate.inactivityTimeout
(Optional<Long> inactivityTimeout) Integer number of seconds of inactivity after which if the user has not accessed the endpoint, their session will time out and they will be forced to reauthenticate.maximumDuration
(Duration maximumDuration) Integer number of seconds of the maximum duration of an authenticated session.maximumDuration
(Optional<Duration> maximumDuration) Integer number of seconds of the maximum duration of an authenticated session.nameidFormat
(String nameidFormat) Defines the name identifier format the SP expects the IdP to use in its assertions to identify subjects.nameidFormat
(Optional<String> nameidFormat) Defines the name identifier format the SP expects the IdP to use in its assertions to identify subjects.optionsPassthrough
(boolean optionsPassthrough) Do not enforce authentication on HTTP OPTIONS requests.optionsPassthrough
(Optional<Boolean> optionsPassthrough) Do not enforce authentication on HTTP OPTIONS requests.
-
Method Details
-
enabled
true
if the module will be applied to traffic,false
to disable. defaulttrue
if unspecified- Parameters:
enabled
- the value of theenabled
parameter as aboolean
- Returns:
- this builder instance
-
enabled
true
if the module will be applied to traffic,false
to disable. defaulttrue
if unspecified- Parameters:
enabled
- the value of theenabled
parameter as aboolean
, wrapped in anOptional
- Returns:
- this builder instance
-
optionsPassthrough
Do not enforce authentication on HTTP OPTIONS requests. necessary if you are supporting CORS.- Parameters:
optionsPassthrough
- the value of theoptions_passthrough
parameter as aboolean
- Returns:
- this builder instance
-
optionsPassthrough
Do not enforce authentication on HTTP OPTIONS requests. necessary if you are supporting CORS.- Parameters:
optionsPassthrough
- the value of theoptions_passthrough
parameter as aboolean
, wrapped in anOptional
- Returns:
- this builder instance
-
cookiePrefix
the prefix of the session cookie that ngrok sets on the http client to cache authentication. default is 'ngrok.'- Parameters:
cookiePrefix
- the value of thecookie_prefix
parameter as aString
- Returns:
- this builder instance
-
cookiePrefix
the prefix of the session cookie that ngrok sets on the http client to cache authentication. default is 'ngrok.' -
inactivityTimeout
Integer number of seconds of inactivity after which if the user has not accessed the endpoint, their session will time out and they will be forced to reauthenticate.- Parameters:
inactivityTimeout
- the value of theinactivity_timeout
parameter as along
- Returns:
- this builder instance
-
inactivityTimeout
Integer number of seconds of inactivity after which if the user has not accessed the endpoint, their session will time out and they will be forced to reauthenticate.- Parameters:
inactivityTimeout
- the value of theinactivity_timeout
parameter as along
, wrapped in anOptional
- Returns:
- this builder instance
-
maximumDuration
Integer number of seconds of the maximum duration of an authenticated session. After this period is exceeded, a user must reauthenticate.- Parameters:
maximumDuration
- the value of themaximum_duration
parameter as aDuration
- Returns:
- this builder instance
-
maximumDuration
Integer number of seconds of the maximum duration of an authenticated session. After this period is exceeded, a user must reauthenticate. -
idpMetadata
The full XML IdP EntityDescriptor. Your IdP may provide this to you as a a file to download or as a URL.- Parameters:
idpMetadata
- the value of theidp_metadata
parameter as aString
- Returns:
- this builder instance
-
idpMetadata
The full XML IdP EntityDescriptor. Your IdP may provide this to you as a a file to download or as a URL. -
forceAuthn
If true, indicates that whenever we redirect a user to the IdP for authentication that the IdP must prompt the user for authentication credentials even if the user already has a valid session with the IdP.- Parameters:
forceAuthn
- the value of theforce_authn
parameter as aboolean
- Returns:
- this builder instance
-
forceAuthn
If true, indicates that whenever we redirect a user to the IdP for authentication that the IdP must prompt the user for authentication credentials even if the user already has a valid session with the IdP.- Parameters:
forceAuthn
- the value of theforce_authn
parameter as aboolean
, wrapped in anOptional
- Returns:
- this builder instance
-
allowIdpInitiated
If true, the IdP may initiate a login directly (e.g. the user does not need to visit the endpoint first and then be redirected). The IdP should set theRelayState
parameter to the target URL of the resource they want the user to be redirected to after the SAML login assertion has been processed.- Parameters:
allowIdpInitiated
- the value of theallow_idp_initiated
parameter as aboolean
- Returns:
- this builder instance
-
allowIdpInitiated
If true, the IdP may initiate a login directly (e.g. the user does not need to visit the endpoint first and then be redirected). The IdP should set theRelayState
parameter to the target URL of the resource they want the user to be redirected to after the SAML login assertion has been processed.- Parameters:
allowIdpInitiated
- the value of theallow_idp_initiated
parameter as aboolean
, wrapped in anOptional
- Returns:
- this builder instance
-
authorizedGroups
If present, only users who are a member of one of the listed groups may access the target endpoint. -
authorizedGroups
If present, only users who are a member of one of the listed groups may access the target endpoint. -
nameidFormat
Defines the name identifier format the SP expects the IdP to use in its assertions to identify subjects. If unspecified, a default value ofurn:oasis:names:tc:SAML:2.0:nameid-format:persistent
will be used. A subset of the allowed values enumerated by the SAML specification are supported.- Parameters:
nameidFormat
- the value of thenameid_format
parameter as aString
- Returns:
- this builder instance
-
nameidFormat
Defines the name identifier format the SP expects the IdP to use in its assertions to identify subjects. If unspecified, a default value ofurn:oasis:names:tc:SAML:2.0:nameid-format:persistent
will be used. A subset of the allowed values enumerated by the SAML specification are supported. -
build
Constructs theEndpointSamlMutate
instance.- Returns:
- a new
EndpointSamlMutate
-