This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git
The following commit(s) were added to refs/heads/master by this push:
new d7d6fb0e2 Javadoc updates
d7d6fb0e2 is described below
commit d7d6fb0e2557786454fcf8835704fd7bed144b9f
Author: Colm O hEigeartaigh <[email protected]>
AuthorDate: Fri Sep 18 17:17:14 2026 +0100
Javadoc updates
---
.../apache/wss4j/common/ConfigurationConstants.java | 18 ++++++++++++------
1 file changed, 12 insertions(+), 6 deletions(-)
diff --git
a/ws-security-common/src/main/java/org/apache/wss4j/common/ConfigurationConstants.java
b/ws-security-common/src/main/java/org/apache/wss4j/common/ConfigurationConstants.java
index 9461fcb2c..cbff5719e 100644
---
a/ws-security-common/src/main/java/org/apache/wss4j/common/ConfigurationConstants.java
+++
b/ws-security-common/src/main/java/org/apache/wss4j/common/ConfigurationConstants.java
@@ -956,21 +956,27 @@ public class ConfigurationConstants {
public static final String VALIDATOR_MAP = "validatorMap";
/**
- * This holds a reference to a ReplayCache instance used to cache
UsernameToken nonces. The
- * default instance that is used is the EHCacheReplayCache.
+ * This holds a reference to a ReplayCache instance used to cache
UsernameToken nonces.
+ * WSS4J core does not create a default ReplayCache: integrations such as
Apache CXF configure
+ * an EHCacheReplayCache for inbound recipient messages, and applications
using WSS4J directly
+ * must configure one themselves for replay detection to take place at all.
*/
public static final String NONCE_CACHE_INSTANCE = "nonceCacheInstance";
/**
- * This holds a reference to a ReplayCache instance used to cache
Timestamp Created Strings. The
- * default instance that is used is the EHCacheReplayCache.
+ * This holds a reference to a ReplayCache instance used to cache
Timestamp Created Strings.
+ * WSS4J core does not create a default ReplayCache: integrations such as
Apache CXF configure
+ * an EHCacheReplayCache for inbound recipient messages, and applications
using WSS4J directly
+ * must configure one themselves for replay detection to take place at all.
*/
public static final String TIMESTAMP_CACHE_INSTANCE =
"timestampCacheInstance";
/**
* This holds a reference to a ReplayCache instance used to cache SAML2
Token Identifier
- * Strings (if the token contains a OneTimeUse Condition). The default
instance that is
- * used is the EHCacheReplayCache.
+ * Strings (if the token contains a OneTimeUse Condition). WSS4J core does
not create a default
+ * ReplayCache: integrations such as Apache CXF configure an
EHCacheReplayCache for inbound
+ * recipient messages, and applications using WSS4J directly must
configure one themselves for
+ * replay detection to take place at all.
*/
public static final String SAML_ONE_TIME_USE_CACHE_INSTANCE =
"samlOneTimeUseCacheInstance";
