make ValidDuration configurable for IDP. (crewjam#235)

atezet · Nov 20, 2019 · e2006e1 · e2006e1
1 parent b09cf28
commit e2006e1
Showing 1 changed file with 10 additions and 2 deletions.
diff --git a/identity_provider.go b/identity_provider.go
@@ -101,16 +101,24 @@ type IdentityProvider struct {
 	SessionProvider         SessionProvider
 	AssertionMaker          AssertionMaker
 	SignatureMethod         string
+	ValidDuration           *time.Duration
 }
 
 // Metadata returns the metadata structure for this identity provider.
 func (idp *IdentityProvider) Metadata() *EntityDescriptor {
 	certStr := base64.StdEncoding.EncodeToString(idp.Certificate.Raw)
 
+	var validDuration time.Duration
+	if idp.ValidDuration != nil {
+		validDuration = *idp.ValidDuration
+	} else {
+		validDuration = DefaultValidDuration
+	}
+
 	ed := &EntityDescriptor{
 		EntityID:      idp.MetadataURL.String(),
-		ValidUntil:    TimeNow().Add(DefaultValidDuration),
-		CacheDuration: DefaultValidDuration,
+		ValidUntil:    TimeNow().Add(validDuration),
+		CacheDuration: validDuration,
 		IDPSSODescriptors: []IDPSSODescriptor{
 			{
 				SSODescriptor: SSODescriptor{