org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation クラス

org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation の継承関係図

org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation 連携図

公開メンバ関数
Response	generateInstallation (KeycloakSession session, RealmModel realm, ClientModel client, URI baseUri)
String	getProtocol ()
String	getDisplayType ()
String	getHelpText ()
void	close ()
ClientInstallationProvider	create (KeycloakSession session)
void	init (Config.Scope config)
void	postInit (KeycloakSessionFactory factory)
String	getId ()
boolean	isDownloadOnly ()
String	getFilename ()
String	getMediaType ()
default int	order ()

静的公開メンバ関数
static Map< String, Object >	getClientCredentialsAdapterConfig (KeycloakSession session, ClientModel client)
static boolean	showClientCredentialsAdapterConfig (ClientModel client)

静的関数
static boolean	showVerifyTokenAudience (ClientModel client)

非公開メンバ関数
void	configureAuthorizationSettings (KeycloakSession session, ClientModel client, ClientManager.InstallationAdapterConfig rep)

詳解

著者

Bill Burke

バージョン

Revision

1

関数詳解

close()

void org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.close ( )

inline

org.keycloak.provider.Providerを実装しています。

                        {

    }

configureAuthorizationSettings()

void org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.configureAuthorizationSettings ( KeycloakSession  session, ClientModel  client, ClientManager.InstallationAdapterConfig  rep  )

inlineprivate

                                                                                                                                          {
        if (new AuthorizationService(session, client, null, null).isEnabled()) {
            PolicyEnforcerConfig enforcerConfig = new PolicyEnforcerConfig();

            enforcerConfig.setEnforcementMode(null);
            enforcerConfig.setLazyLoadPaths(null);

            rep.setEnforcerConfig(enforcerConfig);

            Set<RoleModel> clientRoles = client.getRoles();

            if (clientRoles.size() == 1) {
                if (clientRoles.iterator().next().getName().equals(Constants.AUTHZ_UMA_PROTECTION)) {
                    rep.setUseResourceRoleMappings(null);
                }
            }
        }
    }

create()

ClientInstallationProvider org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.create ( KeycloakSession  session )

inline

org.keycloak.provider.ProviderFactory< T extends Provider >を実装しています。

                                                                      {
        return this;
    }

generateInstallation()

Response org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.generateInstallation ( KeycloakSession  session, RealmModel  realm, ClientModel  client, URI  baseUri  )

inline

org.keycloak.protocol.ClientInstallationProviderを実装しています。

                                                                                                                     {
        ClientManager.InstallationAdapterConfig rep = new ClientManager.InstallationAdapterConfig();
        rep.setAuthServerUrl(baseUri.toString());
        rep.setRealm(realm.getName());
        rep.setSslRequired(realm.getSslRequired().name().toLowerCase());

        if (client.isPublicClient() && !client.isBearerOnly()) rep.setPublicClient(true);
        if (client.isBearerOnly()) rep.setBearerOnly(true);
        if (client.getRoles().size() > 0) rep.setUseResourceRoleMappings(true);

        rep.setResource(client.getClientId());

        if (showClientCredentialsAdapterConfig(client)) {
            Map<String, Object> adapterConfig = getClientCredentialsAdapterConfig(session, client);
            rep.setCredentials(adapterConfig);
        }

        if (showVerifyTokenAudience(client)) {
            rep.setVerifyTokenAudience(true);
        }

        configureAuthorizationSettings(session, client, rep);

        String json = null;
        try {
            json = JsonSerialization.writeValueAsPrettyString(rep);
        } catch (IOException e) {
            throw new RuntimeException(e);
        }
        return Response.ok(json, MediaType.TEXT_PLAIN_TYPE).build();
    }

getClientCredentialsAdapterConfig()

static Map<String, Object> org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getClientCredentialsAdapterConfig ( KeycloakSession  session, ClientModel  client  )

inlinestatic

                                                                                                                     {
        String clientAuthenticator = client.getClientAuthenticatorType();
        ClientAuthenticatorFactory authenticator = (ClientAuthenticatorFactory) session.getKeycloakSessionFactory().getProviderFactory(ClientAuthenticator.class, clientAuthenticator);
        return authenticator.getAdapterConfiguration(client);
    }

getDisplayType()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getDisplayType ( )

inline

org.keycloak.protocol.ClientInstallationProviderを実装しています。

                                   {
        return "Keycloak OIDC JSON";
    }

getFilename()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getFilename ( )

inline

org.keycloak.protocol.ClientInstallationProviderを実装しています。

                                {
        return "keycloak.json";
    }

getHelpText()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getHelpText ( )

inline

org.keycloak.protocol.ClientInstallationProviderを実装しています。

                                {
        return "keycloak.json file used by the Keycloak OIDC client adapter to configure clients.  This must be saved to a keycloak.json file and put in your WEB-INF directory of your WAR file.  You may also want to tweak this file after you download it.";
    }

getId()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getId ( )

inline

org.keycloak.provider.ProviderFactory< T extends Provider >を実装しています。

                          {
        return "keycloak-oidc-keycloak-json";
    }

getMediaType()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getMediaType ( )

inline

org.keycloak.protocol.ClientInstallationProviderを実装しています。

                                 {
        return MediaType.APPLICATION_JSON;
    }

getProtocol()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getProtocol ( )

inline

org.keycloak.protocol.ClientInstallationProviderを実装しています。

                                {
        return OIDCLoginProtocol.LOGIN_PROTOCOL;
    }

init()

void org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.init ( Config.Scope  config )

inline

org.keycloak.provider.ProviderFactory< T extends Provider >を実装しています。

                                          {

    }

isDownloadOnly()

boolean org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.isDownloadOnly ( )

inline

org.keycloak.protocol.ClientInstallationProviderを実装しています。

                                    {
        return false;
    }

order()

default int org.keycloak.provider.ProviderFactory< T extends Provider >.order ( )

inlineinherited

org.keycloak.protocol.docker.DockerAuthV2ProtocolFactory, org.keycloak.urls.HostnameProviderFactory, org.keycloak.protocol.oidc.ext.OIDCExtProviderFactoryで実装されています。

                        {
        return 0;
    }

postInit()

void org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.postInit ( KeycloakSessionFactory  factory )

inline

org.keycloak.provider.ProviderFactory< T extends Provider >を実装しています。

                                                         {

    }

showClientCredentialsAdapterConfig()

static boolean org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.showClientCredentialsAdapterConfig ( ClientModel  client )

inlinestatic

                                                                                 {
        if (client.isPublicClient()) {
            return false;
        }

        if (client.isBearerOnly() && !client.isServiceAccountsEnabled() && client.getNodeReRegistrationTimeout() <= 0) {
            return false;
        }

        return true;
    }

showVerifyTokenAudience()

static boolean org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.showVerifyTokenAudience ( ClientModel  client )

inlinestaticpackage

                                                               {
        String clientId = client.getClientId();
        ClientScopeModel clientScope = KeycloakModelUtils.getClientScopeByName(client.getRealm(), clientId);
        if (clientScope == null) {
            return false;
        }

        for (ProtocolMapperModel protocolMapper : clientScope.getProtocolMappers()) {
            if (AudienceProtocolMapper.PROVIDER_ID.equals(protocolMapper.getProtocolMapper()) && (clientId.equals(protocolMapper.getConfig().get(AudienceProtocolMapper.INCLUDED_CLIENT_AUDIENCE)))) {
                return true;
            }
        }

        return false;
    }

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/src/keycloak/src/main/java/org/keycloak/protocol/oidc/installation/KeycloakOIDCClientInstallation.java