Package org.springframework.security.web.server.header

Class StrictTransportSecurityServerHttpHeadersWriter

java.lang.Object
org.springframework.security.web.server.header.StrictTransportSecurityServerHttpHeadersWriter
All Implemented Interfaces:
ServerHttpHeadersWriter
public final class StrictTransportSecurityServerHttpHeadersWriter extends Object implements ServerHttpHeadersWriter
Writes the Strict-Transport-Security if the request is secure.
Since:
5.0

  • Field Details

  • Constructor Details

    • StrictTransportSecurityServerHttpHeadersWriter

      public StrictTransportSecurityServerHttpHeadersWriter()

  • Method Details

    • writeHttpHeaders

      public reactor.core.publisher.Mono<Void> writeHttpHeaders(org.springframework.web.server.ServerWebExchange exchange)
      Description copied from interface: ServerHttpHeadersWriter
      Write the headers to the response.
      Specified by:
      writeHttpHeaders in interface ServerHttpHeadersWriter
      Returns:
      A Mono which is returned to the Supplier of the ReactiveHttpOutputMessage.beforeCommit(Supplier).

    • setIncludeSubDomains

      public void setIncludeSubDomains(boolean includeSubDomains)
      Sets if subdomains should be included. Default is true
      Parameters:
      includeSubDomains - if subdomains should be included

    • setPreload

      public void setPreload(boolean preload)

      Sets if preload should be included. Default is false

      See Website hstspreload.org for additional details.

      Parameters:
      preload - if preload should be included
      Since:
      5.2.0

    • setMaxAge

      public void setMaxAge(Duration maxAge)
      Sets the max age of the header. Default is a year.
      Parameters:
      maxAge - the max age of the header