Interface MemorySamlRequestStoreOptions

Most pending requests held at once. The login route is unauthenticated, so without a cap a flood of GET …/login grows the map for the whole pending lifetime. Past the cap the OLDEST pending request is evicted — its login fails closed and is retried — so memory stays bounded and new logins keep working. Defaults to DEFAULT_MAX_PENDING_SAML_REQUESTS; must be a positive integer. Rate-limit the login route as well.