Class ClientSideCredentialAccessBoundaryFactory.Builder (1.36.0)

Builder for ClientSideCredentialAccessBoundaryFactory.

Use this builder to create instances of ClientSideCredentialAccessBoundaryFactory with the desired configuration options.

Inheritance

Inherited Members

Creates a new ClientSideCredentialAccessBoundaryFactory instance based on the current builder configuration.

Set the clock for checking token expiry. Used for testing.

Sets the HTTP transport factory.

Sets the minimum acceptable lifetime for a generated downscoped access token.

This parameter ensures that any generated downscoped access token has a minimum validity period. If the time remaining before the underlying credentials expire is less than this value, the factory will perform a blocking refresh, meaning that it will wait until the credentials are refreshed before generating a new downscoped token. This guarantees that the generated token will be valid for at least minimumTokenLifetime. A reasonable value should be chosen based on the expected duration of operations using the downscoped token. If not set, the default value is defined by #DEFAULT_MINIMUM_TOKEN_LIFETIME.

Sets the refresh margin for the underlying credentials.

This duration specifies how far in advance of the credentials' expiration time an asynchronous refresh should be initiated. This refresh happens in the background, without blocking the main thread. If not provided, it will default to the value defined by #DEFAULT_REFRESH_MARGIN.

Note: The refreshMargin must be at least one minute longer than the minimumTokenLifetime.

Sets the required source credential.

Sets the optional universe domain.