Class AskHttpServerConstants
java.lang.Object
io.micronaut.aws.alexa.httpserver.AskHttpServerConstants
NOTICE: This class is forked from com.amazon.ask.servlet.ServletConstants https://github.com/alexa/alexa-skills-kit-sdk-for-java ask-sdk-servlet-support module
Helper class to hold package's constant values.
- Since:
- 2.0.0
- Author:
- sdelamo
-
Field Summary
Modifier and TypeFieldDescriptionstatic final String
The character encoding used.static final long
Default timestamp offset tolerance value in millis, used if a custom value is not provided through the "com.amazon.speech.speechlet.servlet.timestampTolerance" system property.static final String
The name of the system property that can be used to disable request signature verification.static final String
The domain name used by the Alexa Skills Kit API.static final long
Maximum allowed timestamp offset tolerance value in millis.static final String
The algorithm used to generate the signature.static final String
The name of the request header that contains the URL for the certificate chain needed to verify the request signature.static final String
The format of the certificate needed to verify the request signature.static final String
The name of the request header that contains the signature.static final String
The type of encryption key used to generate the signature.static final String
The name of the system property that can be used to configure the timestamp tolerance (in millis) of theSkillRequestTimestampVerifier
. -
Method Summary
-
Field Details
-
SIGNATURE_ALGORITHM
The algorithm used to generate the signature.- See Also:
-
CHARACTER_ENCODING
The character encoding used.- See Also:
-
SIGNATURE_CERTIFICATE_TYPE
The format of the certificate needed to verify the request signature.- See Also:
-
SIGNATURE_TYPE
The type of encryption key used to generate the signature.- See Also:
-
ECHO_API_DOMAIN_NAME
The domain name used by the Alexa Skills Kit API.- See Also:
-
SIGNATURE_REQUEST_HEADER
The name of the request header that contains the signature.- See Also:
-
SIGNATURE_CERTIFICATE_CHAIN_URL_REQUEST_HEADER
The name of the request header that contains the URL for the certificate chain needed to verify the request signature.- See Also:
-
DISABLE_REQUEST_SIGNATURE_CHECK_SYSTEM_PROPERTY
The name of the system property that can be used to disable request signature verification. This feature verifies the certificate authenticity using the configured TrustStore and the signature of the skill request, and will throw aSecurityException
if the signature does not pass verification. This feature should only be disabled in testing scenarios and never in a production environment.- See Also:
-
TIMESTAMP_TOLERANCE_SYSTEM_PROPERTY
The name of the system property that can be used to configure the timestamp tolerance (in millis) of theSkillRequestTimestampVerifier
. Requests with timestamps outside of this inclusive tolerance range, either in the past or future, are rejected. If this property is not provided the default value, 30000L, will be used.- See Also:
-
DEFAULT_TOLERANCE_MILLIS
public static final long DEFAULT_TOLERANCE_MILLISDefault timestamp offset tolerance value in millis, used if a custom value is not provided through the "com.amazon.speech.speechlet.servlet.timestampTolerance" system property.- See Also:
-
MAXIMUM_TOLERANCE_MILLIS
public static final long MAXIMUM_TOLERANCE_MILLISMaximum allowed timestamp offset tolerance value in millis.- See Also:
-