Package org.keycloak.protocol.oid4vc.issuance

Class TimeClaimNormalizer

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.TimeClaimNormalizer

public class TimeClaimNormalizer
extends Object

Utility to apply correlation-mitigation to time-related claims by either randomizing within a window or rounding to a unit.

Configuration via realm attributes (all optional): - oid4vci.time.claims.strategy: off | randomize | round (default: off) - oid4vci.time.randomize.window.seconds: integer seconds (default: 86400) - oid4vci.time.round.unit: SECOND | MINUTE | HOUR | DAY (default: SECOND)

Author:

Rodrick Awambeng

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static enum	TimeClaimNormalizer.RoundUnit
static enum	TimeClaimNormalizer.Strategy

Field Summary

Fields

Modifier and Type	Field	Description
static final long	DEFAULT_RANDOMIZE_WINDOW
static final TimeClaimNormalizer.RoundUnit	DEFAULT_ROUND_UNIT
static final TimeClaimNormalizer.Strategy	DEFAULT_STRATEGY

Constructor Summary

Constructors

Constructor	Description
TimeClaimNormalizer(KeycloakSession session)
TimeClaimNormalizer(RealmModel realm)

Method Summary

Modifier and Type	Method	Description
Instant	normalize(Instant original)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

DEFAULT_RANDOMIZE_WINDOW

public static final long DEFAULT_RANDOMIZE_WINDOW

See Also:

• Constant Field Values

DEFAULT_STRATEGY

public static final TimeClaimNormalizer.Strategy DEFAULT_STRATEGY

DEFAULT_ROUND_UNIT

public static final TimeClaimNormalizer.RoundUnit DEFAULT_ROUND_UNIT

Constructor Details

TimeClaimNormalizer

public TimeClaimNormalizer(KeycloakSession session)

TimeClaimNormalizer

public TimeClaimNormalizer(RealmModel realm)

Method Details

normalize

public Instant normalize(Instant original)