org.keycloak.storage.ldap.mappers.membership.UserRolesRetrieveStrategy.LoadRolesByMemberRecursively の継承関係図

org.keycloak.storage.ldap.mappers.membership.UserRolesRetrieveStrategy.LoadRolesByMemberRecursively 連携図

公開メンバ関数
List< LDAPObject >	getLDAPRoleMappings (CommonLDAPGroupMapper roleOrGroupMapper, LDAPObject ldapUser, LDAPConfig ldapConfig)

void	beforeUserLDAPQuery (CommonLDAPGroupMapper roleOrGroupMapper, LDAPQuery query)

限定公開メンバ関数
Condition	getMembershipCondition (String membershipAttr, String userMembership)

詳解

Extension specific to Active Directory. Roles of user will be retrieved by sending LDAP query to retrieve all roles where "member" is our user. The query will be able to retrieve memberships recursively with usage of AD specific extension LDAP_MATCHING_RULE_IN_CHAIN, so likely doesn't work on other LDAP servers

関数詳解

◆ beforeUserLDAPQuery()

void org.keycloak.storage.ldap.mappers.membership.UserRolesRetrieveStrategy.LoadRolesByMember.beforeUserLDAPQuery	(	CommonLDAPGroupMapper	roleOrGroupMapper,
		LDAPQuery	query
	)

inlineinherited

org.keycloak.storage.ldap.mappers.membership.UserRolesRetrieveStrategyを実装しています。

69 {

70 }

◆ getLDAPRoleMappings()

List<LDAPObject> org.keycloak.storage.ldap.mappers.membership.UserRolesRetrieveStrategy.LoadRolesByMember.getLDAPRoleMappings	(	CommonLDAPGroupMapper	roleOrGroupMapper,
		LDAPObject	ldapUser,
		LDAPConfig	ldapConfig
	)

inlineinherited

org.keycloak.storage.ldap.mappers.membership.UserRolesRetrieveStrategyを実装しています。

                                                                                                                                          {
             LDAPQuery ldapQuery = roleOrGroupMapper.createLDAPGroupQuery();
             String membershipAttr = roleOrGroupMapper.getConfig().getMembershipLdapAttribute();
 
             String membershipUserAttrName = roleOrGroupMapper.getConfig().getMembershipUserLdapAttribute(ldapConfig);
             String userMembership = LDAPUtils.getMemberValueOfChildObject(ldapUser, roleOrGroupMapper.getConfig().getMembershipTypeLdapAttribute(), membershipUserAttrName);
 
             Condition membershipCondition = getMembershipCondition(membershipAttr, userMembership);
             ldapQuery.addWhereCondition(membershipCondition);
             return ldapQuery.getResultList();
         }

◆ getMembershipCondition()

Condition org.keycloak.storage.ldap.mappers.membership.UserRolesRetrieveStrategy.LoadRolesByMemberRecursively.getMembershipCondition	(	String	membershipAttr,
		String	userMembership
	)

inlineprotected

                                                                                                  {
             return new LDAPQueryConditionsBuilder().equal(membershipAttr + LDAPConstants.LDAP_MATCHING_RULE_IN_CHAIN, userMembership);
         }

このクラス詳解は次のファイルから抽出されました:

D:/AppData/doxygen/keycloak/federation/src/federation/ldap/src/main/java/org/keycloak/storage/ldap/mappers/membership/UserRolesRetrieveStrategy.java

公開メンバ関数

限定公開メンバ関数

詳解

関数詳解

◆ beforeUserLDAPQuery()

◆ getLDAPRoleMappings()

◆ getMembershipCondition()