org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate クラス

org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate の継承関係図

org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate 連携図

公開メンバ関数
	LDAPGroupMappingsUserDelegate (RealmModel realm, UserModel user, LDAPObject ldapUser)
boolean	hasRole (RoleModel role)
Set< GroupModel >	getGroups ()
void	joinGroup (GroupModel group)
void	leaveGroup (GroupModel group)
boolean	isMemberOf (GroupModel group)
String	getId ()
String	getUsername ()
void	setUsername (String username)
boolean	isEnabled ()
void	setEnabled (boolean enabled)
void	setSingleAttribute (String name, String value)
void	setAttribute (String name, List< String > values)
void	removeAttribute (String name)
String	getFirstAttribute (String name)
List< String >	getAttribute (String name)
Map< String, List< String > >	getAttributes ()
Set< String >	getRequiredActions ()
void	addRequiredAction (String action)
void	addRequiredAction (RequiredAction action)
void	removeRequiredAction (String action)
void	removeRequiredAction (RequiredAction action)
String	getFirstName ()
void	setFirstName (String firstName)
String	getLastName ()
void	setLastName (String lastName)
String	getEmail ()
void	setEmail (String email)
boolean	isEmailVerified ()
void	setEmailVerified (boolean verified)
Set< RoleModel >	getRealmRoleMappings ()
Set< RoleModel >	getClientRoleMappings (ClientModel app)
void	grantRole (RoleModel role)
Set< RoleModel >	getRoleMappings ()
void	deleteRoleMapping (RoleModel role)
String	getFederationLink ()
void	setFederationLink (String link)
String	getServiceAccountClientLink ()
void	setServiceAccountClientLink (String clientInternalId)
UserModel	getDelegate ()
Long	getCreatedTimestamp ()
void	setCreatedTimestamp (Long timestamp)
boolean	equals (Object o)
int	hashCode ()

公開変数類
String	USERNAME = "username"
String	LAST_NAME = "lastName"
String	FIRST_NAME = "firstName"
String	EMAIL = "email"
String	LOCALE = "locale"

限定公開メンバ関数
Set< GroupModel >	getLDAPGroupMappingsConverted ()

限定公開変数類
UserModel	delegate

非公開変数類
final RealmModel	realm
final LDAPObject	ldapUser
Set< GroupModel >	cachedLDAPGroupMappings

詳解

構築子と解体子

LDAPGroupMappingsUserDelegate()

org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.LDAPGroupMappingsUserDelegate ( RealmModel  realm, UserModel  user, LDAPObject  ldapUser  )

inline

                                                                                                    {
            super(user);
            this.realm = realm;
            this.ldapUser = ldapUser;
        }

関数詳解

addRequiredAction() [1/2]

void org.keycloak.models.utils.UserModelDelegate.addRequiredAction ( String  action )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                 {
        delegate.addRequiredAction(action);
    }

addRequiredAction() [2/2]

void org.keycloak.models.utils.UserModelDelegate.addRequiredAction ( RequiredAction  action )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                         {
        delegate.addRequiredAction(action);
    }

deleteRoleMapping()

void org.keycloak.models.utils.UserModelDelegate.deleteRoleMapping ( RoleModel  role )

inlineinherited

org.keycloak.models.RoleMapperModelを実装しています。

                                                  {
        delegate.deleteRoleMapping(role);
    }

equals()

boolean org.keycloak.models.utils.UserModelDelegate.equals ( Object  o )

inlineinherited

                                    {
        if (this == o) return true;
        if (!(o instanceof UserModel)) return false;

        UserModel that = (UserModel) o;

        return getDelegate() != null ? getDelegate().getId().equals(that.getId()) : false;
    }

getAttribute()

List<String> org.keycloak.models.utils.UserModelDelegate.getAttribute ( String  name )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                  {
        return delegate.getAttribute(name);
    }

getAttributes()

Map<String, List<String> > org.keycloak.models.utils.UserModelDelegate.getAttributes ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                     {
        return delegate.getAttributes();
    }

getClientRoleMappings()

Set<RoleModel> org.keycloak.models.utils.UserModelDelegate.getClientRoleMappings ( ClientModel  app )

inlineinherited

org.keycloak.models.RoleMapperModelを実装しています。

                                                                 {
        return delegate.getClientRoleMappings(app);
    }

getCreatedTimestamp()

Long org.keycloak.models.utils.UserModelDelegate.getCreatedTimestamp ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                     {
        return delegate.getCreatedTimestamp();
    }

getDelegate()

UserModel org.keycloak.models.utils.UserModelDelegate.getDelegate ( )

inlineinherited

                                   {
        return delegate;
    }

getEmail()

String org.keycloak.models.utils.UserModelDelegate.getEmail ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                             {
        return delegate.getEmail();
    }

getFederationLink()

String org.keycloak.models.utils.UserModelDelegate.getFederationLink ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                      {
        return delegate.getFederationLink();
    }

getFirstAttribute()

String org.keycloak.models.utils.UserModelDelegate.getFirstAttribute ( String  name )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                 {
        return delegate.getFirstAttribute(name);
    }

getFirstName()

String org.keycloak.models.utils.UserModelDelegate.getFirstName ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                 {
        return delegate.getFirstName();
    }

getGroups()

Set<GroupModel> org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.getGroups ( )

inline

org.keycloak.models.UserModelを実装しています。

                                           {
            Set<GroupModel> ldapGroupMappings = getLDAPGroupMappingsConverted();
            if (config.getMode() == LDAPGroupMapperMode.LDAP_ONLY) {
                // Use just group mappings from LDAP
                return ldapGroupMappings;
            } else {
                // Merge mappings from both DB and LDAP
                Set<GroupModel> modelGroupMappings = super.getGroups();
                ldapGroupMappings.addAll(modelGroupMappings);
                return ldapGroupMappings;
            }
        }

getId()

String org.keycloak.models.utils.UserModelDelegate.getId ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                          {
        return delegate.getId();
    }

getLastName()

String org.keycloak.models.utils.UserModelDelegate.getLastName ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                {
        return delegate.getLastName();
    }

getLDAPGroupMappingsConverted()

Set<GroupModel> org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.getLDAPGroupMappingsConverted ( )

inlineprotected

                                                                  {
            if (cachedLDAPGroupMappings != null) {
                return new HashSet<>(cachedLDAPGroupMappings);
            }

            List<LDAPObject> ldapGroups = getLDAPGroupMappings(ldapUser);

            Set<GroupModel> result = new HashSet<>();
            for (LDAPObject ldapGroup : ldapGroups) {
                GroupModel kcGroup = findKcGroupOrSyncFromLDAP(realm, ldapGroup, this);
                if (kcGroup != null) {
                    result.add(kcGroup);
                }
            }

            cachedLDAPGroupMappings = new HashSet<>(result);

            return result;
        }

getRealmRoleMappings()

Set<RoleModel> org.keycloak.models.utils.UserModelDelegate.getRealmRoleMappings ( )

inlineinherited

org.keycloak.models.RoleMapperModelを実装しています。

                                                 {
        return delegate.getRealmRoleMappings();
    }

getRequiredActions()

Set<String> org.keycloak.models.utils.UserModelDelegate.getRequiredActions ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                            {
        return delegate.getRequiredActions();
    }

getRoleMappings()

Set<RoleModel> org.keycloak.models.utils.UserModelDelegate.getRoleMappings ( )

inlineinherited

org.keycloak.models.RoleMapperModelを実装しています。

                                            {
        return delegate.getRoleMappings();
    }

getServiceAccountClientLink()

String org.keycloak.models.utils.UserModelDelegate.getServiceAccountClientLink ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                {
        return delegate.getServiceAccountClientLink();
    }

getUsername()

String org.keycloak.models.utils.UserModelDelegate.getUsername ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                {
        return delegate.getUsername();
    }

grantRole()

void org.keycloak.models.utils.UserModelDelegate.grantRole ( RoleModel  role )

inlineinherited

org.keycloak.models.RoleMapperModelを実装しています。

                                          {
        delegate.grantRole(role);
    }

hashCode()

int org.keycloak.models.utils.UserModelDelegate.hashCode ( )

inlineinherited

                          {
        return getDelegate().getId().hashCode();
    }

hasRole()

boolean org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.hasRole ( RoleModel  role )

inline

org.keycloak.models.RoleMapperModelを実装しています。

                                               {
            return super.hasRole(role) || RoleUtils.hasRoleFromGroup(getGroups(), role, true);
        }

isEmailVerified()

boolean org.keycloak.models.utils.UserModelDelegate.isEmailVerified ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                     {
        return delegate.isEmailVerified();
    }

isEnabled()

boolean org.keycloak.models.utils.UserModelDelegate.isEnabled ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                               {
        return delegate.isEnabled();
    }

isMemberOf()

boolean org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.isMemberOf ( GroupModel  group )

inline

org.keycloak.models.UserModelを実装しています。

                                                    {
            Set<GroupModel> ldapGroupMappings = getGroups();
            return ldapGroupMappings.contains(group);
        }

joinGroup()

void org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.joinGroup ( GroupModel  group )

inline

org.keycloak.models.UserModelを実装しています。

                                                {
            if (config.getMode() == LDAPGroupMapperMode.LDAP_ONLY) {
                // We need to create new role mappings in LDAP
                cachedLDAPGroupMappings = null;
                addGroupMappingInLDAP(realm, group, ldapUser);
            } else {
                super.joinGroup(group);
            }
        }

leaveGroup()

void org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.leaveGroup ( GroupModel  group )

inline

org.keycloak.models.UserModelを実装しています。

                                                 {
            LDAPQuery ldapQuery = createGroupQuery(true);
            LDAPQueryConditionsBuilder conditionsBuilder = new LDAPQueryConditionsBuilder();
            Condition roleNameCondition = conditionsBuilder.equal(config.getGroupNameLdapAttribute(), group.getName());

            String membershipUserLdapAttrName = getMembershipUserLdapAttribute();
            String membershipUserAttr = LDAPUtils.getMemberValueOfChildObject(ldapUser, config.getMembershipTypeLdapAttribute(), membershipUserLdapAttrName);
            Condition membershipCondition = conditionsBuilder.equal(config.getMembershipLdapAttribute(), membershipUserAttr);

            ldapQuery.addWhereCondition(roleNameCondition).addWhereCondition(membershipCondition);
            LDAPObject ldapGroup = ldapQuery.getFirstResult();

            if (ldapGroup == null) {
                // Group mapping doesn't exist in LDAP. For LDAP_ONLY mode, we don't need to do anything. For READ_ONLY, delete it in local DB.
                if (config.getMode() == LDAPGroupMapperMode.READ_ONLY) {
                    super.leaveGroup(group);
                }
            } else {
                // Group mappings exists in LDAP. For LDAP_ONLY mode, we can just delete it in LDAP. For READ_ONLY we can't delete it -> throw error
                if (config.getMode() == LDAPGroupMapperMode.READ_ONLY) {
                    throw new ModelException("Not possible to delete LDAP group mappings as mapper mode is READ_ONLY");
                } else {
                    // Delete ldap role mappings
                    cachedLDAPGroupMappings = null;
                    deleteGroupMappingInLDAP(ldapUser, ldapGroup);
                }
            }
        }

removeAttribute()

void org.keycloak.models.utils.UserModelDelegate.removeAttribute ( String  name )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                             {
        delegate.removeAttribute(name);
    }

removeRequiredAction() [1/2]

void org.keycloak.models.utils.UserModelDelegate.removeRequiredAction ( String  action )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                    {
        delegate.removeRequiredAction(action);
    }

removeRequiredAction() [2/2]

void org.keycloak.models.utils.UserModelDelegate.removeRequiredAction ( RequiredAction  action )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                            {
        delegate.removeRequiredAction(action);
    }

setAttribute()

void org.keycloak.models.utils.UserModelDelegate.setAttribute ( String  name, List< String >  values  )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                               {
        delegate.setAttribute(name, values);
    }

setCreatedTimestamp()

void org.keycloak.models.utils.UserModelDelegate.setCreatedTimestamp ( Long  timestamp )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                   {
        delegate.setCreatedTimestamp(timestamp);
    }

setEmail()

void org.keycloak.models.utils.UserModelDelegate.setEmail ( String  email )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                       {
        delegate.setEmail(email);
    }

setEmailVerified()

void org.keycloak.models.utils.UserModelDelegate.setEmailVerified ( boolean  verified )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                   {
        delegate.setEmailVerified(verified);
    }

setEnabled()

void org.keycloak.models.utils.UserModelDelegate.setEnabled ( boolean  enabled )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                            {
        delegate.setEnabled(enabled);
    }

setFederationLink()

void org.keycloak.models.utils.UserModelDelegate.setFederationLink ( String  link )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                               {
        delegate.setFederationLink(link);
    }

setFirstName()

void org.keycloak.models.utils.UserModelDelegate.setFirstName ( String  firstName )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                               {
        delegate.setFirstName(firstName);
    }

setLastName()

void org.keycloak.models.utils.UserModelDelegate.setLastName ( String  lastName )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                             {
        delegate.setLastName(lastName);
    }

setServiceAccountClientLink()

void org.keycloak.models.utils.UserModelDelegate.setServiceAccountClientLink ( String  clientInternalId )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                                     {
        delegate.setServiceAccountClientLink(clientInternalId);
    }

setSingleAttribute()

void org.keycloak.models.utils.UserModelDelegate.setSingleAttribute ( String  name, String  value  )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                              {
        delegate.setSingleAttribute(name, value);
    }

setUsername()

void org.keycloak.models.utils.UserModelDelegate.setUsername ( String  username )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                             {
        delegate.setUsername(username);
    }

メンバ詳解

cachedLDAPGroupMappings

Set<GroupModel> org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.cachedLDAPGroupMappings

private

delegate

UserModel org.keycloak.models.utils.UserModelDelegate.delegate

protectedinherited

EMAIL

String org.keycloak.models.UserModel.EMAIL = "email"

inherited

FIRST_NAME

String org.keycloak.models.UserModel.FIRST_NAME = "firstName"

inherited

LAST_NAME

String org.keycloak.models.UserModel.LAST_NAME = "lastName"

inherited

ldapUser

final LDAPObject org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.ldapUser

private

LOCALE

String org.keycloak.models.UserModel.LOCALE = "locale"

inherited

realm

final RealmModel org.keycloak.storage.ldap.mappers.membership.group.GroupLDAPStorageMapper.LDAPGroupMappingsUserDelegate.realm

private

USERNAME

String org.keycloak.models.UserModel.USERNAME = "username"

inherited

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/src/keycloak/src/main/java/org/keycloak/storage/ldap/mappers/membership/group/GroupLDAPStorageMapper.java