org.apache.nifi.web.security.util

Class IdentityProviderUtils

java.lang.Object

org.apache.nifi.web.security.util.IdentityProviderUtils

public class IdentityProviderUtils
extends Object

Constructor Summary

Constructors

Constructor and Description
IdentityProviderUtils()

Method Summary

Modifier and Type	Method and Description
static String	generateStateValue() Generates a value to use as State in an identity provider login sequence.
static boolean	timeConstantEqualityCheck(String value1, String value2) Implements a time constant equality check.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

IdentityProviderUtils

public IdentityProviderUtils()

Method Detail

generateStateValue

public static String generateStateValue()

Generates a value to use as State in an identity provider login sequence. 128 bits is considered cryptographically strong with current hardware/software, but a Base32 digit needs 5 bits to be fully encoded, so 128 is rounded up to 130. Base32 is chosen because it encodes data with a single case and without including confusing or URI-incompatible characters, unlike Base64, but is approximately 20% more compact than Base16/hexadecimal

Returns:

the state value

timeConstantEqualityCheck

public static boolean timeConstantEqualityCheck(String value1,
                                                String value2)

Implements a time constant equality check. If either value is null, false is returned.

Parameters:

value1 - value1

value2 - value2

Returns:

if value1 equals value2