org.springframework.security.config.web.server

Class ServerHttpSecurity.HeaderSpec.HstsSpec

java.lang.Object

org.springframework.security.config.web.server.ServerHttpSecurity.HeaderSpec.HstsSpec

Enclosing class:

ServerHttpSecurity.HeaderSpec

public class ServerHttpSecurity.HeaderSpec.HstsSpec
extends java.lang.Object

Configures Strict Transport Security response header

See Also:

ServerHttpSecurity.HeaderSpec.hsts()

Method Summary

Modifier and Type	Method and Description
ServerHttpSecurity.HeaderSpec	and() Allows method chaining to continue configuring the ServerHttpSecurity
ServerHttpSecurity.HeaderSpec	disable() Disables strict transport security response header
void	includeSubdomains(boolean includeSubDomains) Configures if subdomains should be included.
void	maxAge(java.time.Duration maxAge) Configures the max age.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

maxAge

public void maxAge(java.time.Duration maxAge)

Configures the max age. Default is one year.

Parameters:

maxAge - the max age

includeSubdomains

public void includeSubdomains(boolean includeSubDomains)

Configures if subdomains should be included. Default is true

Parameters:

includeSubDomains - if subdomains should be included

and

public ServerHttpSecurity.HeaderSpec and()

Allows method chaining to continue configuring the ServerHttpSecurity

Returns:

the ServerHttpSecurity.HeaderSpec to continue configuring

disable

public ServerHttpSecurity.HeaderSpec disable()

Disables strict transport security response header

Returns:

the ServerHttpSecurity to continue configuring