Creates a memory store.
Bounds; see MemorySamlRequestStoreOptions
Claims an assertion id until retainUntil; false while an earlier claim is held.
Removes and returns a pending request in one synchronous step; null when absent or expired.
Reads a pending request without consuming it; null when absent or expired.
Records a pending request, dropping expired ones and evicting the oldest past the cap.
Single-process memory default for
ISamlRequestStore.Suitable for tests and one-replica deployments only: a second replica holds its own map, so a login started on one and answered on the other is refused. Pending requests are capped (oldest evicted first) and expire after a fixed lifetime, so they are kept in expiry order and swept from the front — a write costs O(expired), never a walk of the whole map. Assertion claims need a validly signed assertion each, and are swept when their map has doubled since the last sweep.
Since
0.8.0