org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate クラス

org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate の継承関係図

org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate 連携図

公開メンバ関数
	LDAPRoleMappingsUserDelegate (RealmModel realm, UserModel user, LDAPObject ldapUser)
Set< RoleModel >	getRealmRoleMappings ()
Set< RoleModel >	getClientRoleMappings (ClientModel client)
boolean	hasRole (RoleModel role)
void	grantRole (RoleModel role)
Set< RoleModel >	getRoleMappings ()
void	deleteRoleMapping (RoleModel role)
String	getId ()
String	getUsername ()
void	setUsername (String username)
boolean	isEnabled ()
void	setEnabled (boolean enabled)
void	setSingleAttribute (String name, String value)
void	setAttribute (String name, List< String > values)
void	removeAttribute (String name)
String	getFirstAttribute (String name)
List< String >	getAttribute (String name)
Map< String, List< String > >	getAttributes ()
Set< String >	getRequiredActions ()
void	addRequiredAction (String action)
void	addRequiredAction (RequiredAction action)
void	removeRequiredAction (String action)
void	removeRequiredAction (RequiredAction action)
String	getFirstName ()
void	setFirstName (String firstName)
String	getLastName ()
void	setLastName (String lastName)
String	getEmail ()
void	setEmail (String email)
boolean	isEmailVerified ()
void	setEmailVerified (boolean verified)
String	getFederationLink ()
void	setFederationLink (String link)
String	getServiceAccountClientLink ()
void	setServiceAccountClientLink (String clientInternalId)
UserModel	getDelegate ()
Long	getCreatedTimestamp ()
void	setCreatedTimestamp (Long timestamp)
Set< GroupModel >	getGroups ()
void	joinGroup (GroupModel group)
void	leaveGroup (GroupModel group)
boolean	isMemberOf (GroupModel group)
boolean	equals (Object o)
int	hashCode ()

公開変数類
String	USERNAME = "username"
String	LAST_NAME = "lastName"
String	FIRST_NAME = "firstName"
String	EMAIL = "email"
String	LOCALE = "locale"

限定公開メンバ関数
Set< RoleModel >	getLDAPRoleMappingsConverted ()

限定公開変数類
UserModel	delegate

非公開変数類
final RealmModel	realm
final LDAPObject	ldapUser
final RoleContainerModel	roleContainer
Set< RoleModel >	cachedLDAPRoleMappings

詳解

構築子と解体子

LDAPRoleMappingsUserDelegate()

org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.LDAPRoleMappingsUserDelegate ( RealmModel  realm, UserModel  user, LDAPObject  ldapUser  )

inline

                                                                                                   {
            super(user);
            this.realm = realm;
            this.ldapUser = ldapUser;
            this.roleContainer = getTargetRoleContainer(realm);
        }

関数詳解

addRequiredAction() [1/2]

void org.keycloak.models.utils.UserModelDelegate.addRequiredAction ( String  action )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                 {
        delegate.addRequiredAction(action);
    }

addRequiredAction() [2/2]

void org.keycloak.models.utils.UserModelDelegate.addRequiredAction ( RequiredAction  action )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                         {
        delegate.addRequiredAction(action);
    }

deleteRoleMapping()

void org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.deleteRoleMapping ( RoleModel  role )

inline

org.keycloak.models.RoleMapperModelを実装しています。

                                                      {
            if (role.getContainer().equals(roleContainer)) {

                LDAPQuery ldapQuery = createRoleQuery(true);
                LDAPQueryConditionsBuilder conditionsBuilder = new LDAPQueryConditionsBuilder();
                Condition roleNameCondition = conditionsBuilder.equal(config.getRoleNameLdapAttribute(), role.getName());

                String membershipUserAttrName = getMembershipUserLdapAttribute();
                String membershipUserAttr = LDAPUtils.getMemberValueOfChildObject(ldapUser, config.getMembershipTypeLdapAttribute(), membershipUserAttrName);

                Condition membershipCondition = conditionsBuilder.equal(config.getMembershipLdapAttribute(), membershipUserAttr);

                ldapQuery.addWhereCondition(roleNameCondition).addWhereCondition(membershipCondition);
                LDAPObject ldapRole = ldapQuery.getFirstResult();

                if (ldapRole == null) {
                    // Role mapping doesn't exist in LDAP. For LDAP_ONLY mode, we don't need to do anything. For READ_ONLY, delete it in local DB.
                    if (config.getMode() == LDAPGroupMapperMode.READ_ONLY) {
                        super.deleteRoleMapping(role);
                    }
                } else {
                    // Role mappings exists in LDAP. For LDAP_ONLY mode, we can just delete it in LDAP. For READ_ONLY we can't delete it -> throw error
                    if (config.getMode() == LDAPGroupMapperMode.READ_ONLY) {
                        throw new ModelException("Not possible to delete LDAP role mappings as mapper mode is READ_ONLY");
                    } else {
                        // Delete ldap role mappings
                        cachedLDAPRoleMappings = null;
                        deleteRoleMappingInLDAP(ldapUser, ldapRole);
                    }
                }
            } else {
                super.deleteRoleMapping(role);
            }
        }

equals()

boolean org.keycloak.models.utils.UserModelDelegate.equals ( Object  o )

inlineinherited

                                    {
        if (this == o) return true;
        if (!(o instanceof UserModel)) return false;

        UserModel that = (UserModel) o;

        return getDelegate() != null ? getDelegate().getId().equals(that.getId()) : false;
    }

getAttribute()

List<String> org.keycloak.models.utils.UserModelDelegate.getAttribute ( String  name )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                  {
        return delegate.getAttribute(name);
    }

getAttributes()

Map<String, List<String> > org.keycloak.models.utils.UserModelDelegate.getAttributes ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                     {
        return delegate.getAttributes();
    }

getClientRoleMappings()

Set<RoleModel> org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.getClientRoleMappings ( ClientModel  client )

inline

org.keycloak.models.RoleMapperModelを実装しています。

                                                                        {
            if (roleContainer.equals(client)) {
                Set<RoleModel> ldapRoleMappings = getLDAPRoleMappingsConverted();

                if (config.getMode() == LDAPGroupMapperMode.LDAP_ONLY) {
                    // Use just role mappings from LDAP
                    return ldapRoleMappings;
                } else {
                    // Merge mappings from both DB and LDAP
                    Set<RoleModel> modelRoleMappings = super.getClientRoleMappings(client);
                    ldapRoleMappings.addAll(modelRoleMappings);
                    return ldapRoleMappings;
                }
            } else {
                return super.getClientRoleMappings(client);
            }
        }

getCreatedTimestamp()

Long org.keycloak.models.utils.UserModelDelegate.getCreatedTimestamp ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                     {
        return delegate.getCreatedTimestamp();
    }

getDelegate()

UserModel org.keycloak.models.utils.UserModelDelegate.getDelegate ( )

inlineinherited

                                   {
        return delegate;
    }

getEmail()

String org.keycloak.models.utils.UserModelDelegate.getEmail ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                             {
        return delegate.getEmail();
    }

getFederationLink()

String org.keycloak.models.utils.UserModelDelegate.getFederationLink ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                      {
        return delegate.getFederationLink();
    }

getFirstAttribute()

String org.keycloak.models.utils.UserModelDelegate.getFirstAttribute ( String  name )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                 {
        return delegate.getFirstAttribute(name);
    }

getFirstName()

String org.keycloak.models.utils.UserModelDelegate.getFirstName ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                 {
        return delegate.getFirstName();
    }

getGroups()

Set<GroupModel> org.keycloak.models.utils.UserModelDelegate.getGroups ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                       {
        return delegate.getGroups();
    }

getId()

String org.keycloak.models.utils.UserModelDelegate.getId ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                          {
        return delegate.getId();
    }

getLastName()

String org.keycloak.models.utils.UserModelDelegate.getLastName ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                {
        return delegate.getLastName();
    }

getLDAPRoleMappingsConverted()

Set<RoleModel> org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.getLDAPRoleMappingsConverted ( )

inlineprotected

                                                                {
            if (cachedLDAPRoleMappings != null) {
                return new HashSet<>(cachedLDAPRoleMappings);
            }

            List<LDAPObject> ldapRoles = getLDAPRoleMappings(ldapUser);

            Set<RoleModel> roles = new HashSet<>();
            String roleNameLdapAttr = config.getRoleNameLdapAttribute();
            for (LDAPObject role : ldapRoles) {
                String roleName = role.getAttributeAsString(roleNameLdapAttr);
                RoleModel modelRole = roleContainer.getRole(roleName);
                if (modelRole == null) {
                    // Add role to local DB
                    modelRole = roleContainer.addRole(roleName);
                }
                roles.add(modelRole);
            }

            cachedLDAPRoleMappings = new HashSet<>(roles);

            return roles;
        }

getRealmRoleMappings()

Set<RoleModel> org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.getRealmRoleMappings ( )

inline

org.keycloak.models.RoleMapperModelを実装しています。

                                                     {
            if (roleContainer.equals(realm)) {
                Set<RoleModel> ldapRoleMappings = getLDAPRoleMappingsConverted();

                if (config.getMode() == LDAPGroupMapperMode.LDAP_ONLY) {
                    // Use just role mappings from LDAP
                    return ldapRoleMappings;
                } else {
                    // Merge mappings from both DB and LDAP
                    Set<RoleModel> modelRoleMappings = super.getRealmRoleMappings();
                    ldapRoleMappings.addAll(modelRoleMappings);
                    return ldapRoleMappings;
                }
            } else {
                return super.getRealmRoleMappings();
            }
        }

getRequiredActions()

Set<String> org.keycloak.models.utils.UserModelDelegate.getRequiredActions ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                            {
        return delegate.getRequiredActions();
    }

getRoleMappings()

Set<RoleModel> org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.getRoleMappings ( )

inline

org.keycloak.models.RoleMapperModelを実装しています。

                                                {
            Set<RoleModel> modelRoleMappings = super.getRoleMappings();

            Set<RoleModel> ldapRoleMappings = getLDAPRoleMappingsConverted();

            if (config.getMode() == LDAPGroupMapperMode.LDAP_ONLY) {
                // For LDAP-only we want to retrieve role mappings of target container just from LDAP
                Set<RoleModel> modelRolesCopy = new HashSet<>(modelRoleMappings);
                for (RoleModel role : modelRolesCopy) {
                    if (role.getContainer().equals(roleContainer)) {
                        modelRoleMappings.remove(role);
                    }
                }
            }

            modelRoleMappings.addAll(ldapRoleMappings);
            return modelRoleMappings;
        }

getServiceAccountClientLink()

String org.keycloak.models.utils.UserModelDelegate.getServiceAccountClientLink ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                {
        return delegate.getServiceAccountClientLink();
    }

getUsername()

String org.keycloak.models.utils.UserModelDelegate.getUsername ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                {
        return delegate.getUsername();
    }

grantRole()

void org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.grantRole ( RoleModel  role )

inline

org.keycloak.models.RoleMapperModelを実装しています。

                                              {
            if (config.getMode() == LDAPGroupMapperMode.LDAP_ONLY) {

                if (role.getContainer().equals(roleContainer)) {

                    // We need to create new role mappings in LDAP
                    cachedLDAPRoleMappings = null;
                    addRoleMappingInLDAP(role.getName(), ldapUser);
                } else {
                    super.grantRole(role);
                }
            } else {
                super.grantRole(role);
            }
        }

hashCode()

int org.keycloak.models.utils.UserModelDelegate.hashCode ( )

inlineinherited

                          {
        return getDelegate().getId().hashCode();
    }

hasRole()

boolean org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.hasRole ( RoleModel  role )

inline

org.keycloak.models.RoleMapperModelを実装しています。

                                               {
            Set<RoleModel> roles = getRoleMappings();
            return RoleUtils.hasRole(roles, role)
              || RoleUtils.hasRoleFromGroup(getGroups(), role, true);
        }

isEmailVerified()

boolean org.keycloak.models.utils.UserModelDelegate.isEmailVerified ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                     {
        return delegate.isEmailVerified();
    }

isEnabled()

boolean org.keycloak.models.utils.UserModelDelegate.isEnabled ( )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                               {
        return delegate.isEnabled();
    }

isMemberOf()

boolean org.keycloak.models.utils.UserModelDelegate.isMemberOf ( GroupModel  group )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                {
        return delegate.isMemberOf(group);
    }

joinGroup()

void org.keycloak.models.utils.UserModelDelegate.joinGroup ( GroupModel  group )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                            {
        delegate.joinGroup(group);

    }

leaveGroup()

void org.keycloak.models.utils.UserModelDelegate.leaveGroup ( GroupModel  group )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                             {
        delegate.leaveGroup(group);

    }

removeAttribute()

void org.keycloak.models.utils.UserModelDelegate.removeAttribute ( String  name )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                             {
        delegate.removeAttribute(name);
    }

removeRequiredAction() [1/2]

void org.keycloak.models.utils.UserModelDelegate.removeRequiredAction ( String  action )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                    {
        delegate.removeRequiredAction(action);
    }

removeRequiredAction() [2/2]

void org.keycloak.models.utils.UserModelDelegate.removeRequiredAction ( RequiredAction  action )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                            {
        delegate.removeRequiredAction(action);
    }

setAttribute()

void org.keycloak.models.utils.UserModelDelegate.setAttribute ( String  name, List< String >  values  )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                               {
        delegate.setAttribute(name, values);
    }

setCreatedTimestamp()

void org.keycloak.models.utils.UserModelDelegate.setCreatedTimestamp ( Long  timestamp )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                   {
        delegate.setCreatedTimestamp(timestamp);
    }

setEmail()

void org.keycloak.models.utils.UserModelDelegate.setEmail ( String  email )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                       {
        delegate.setEmail(email);
    }

setEmailVerified()

void org.keycloak.models.utils.UserModelDelegate.setEmailVerified ( boolean  verified )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                   {
        delegate.setEmailVerified(verified);
    }

setEnabled()

void org.keycloak.models.utils.UserModelDelegate.setEnabled ( boolean  enabled )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                            {
        delegate.setEnabled(enabled);
    }

setFederationLink()

void org.keycloak.models.utils.UserModelDelegate.setFederationLink ( String  link )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                               {
        delegate.setFederationLink(link);
    }

setFirstName()

void org.keycloak.models.utils.UserModelDelegate.setFirstName ( String  firstName )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                               {
        delegate.setFirstName(firstName);
    }

setLastName()

void org.keycloak.models.utils.UserModelDelegate.setLastName ( String  lastName )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                             {
        delegate.setLastName(lastName);
    }

setServiceAccountClientLink()

void org.keycloak.models.utils.UserModelDelegate.setServiceAccountClientLink ( String  clientInternalId )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                                     {
        delegate.setServiceAccountClientLink(clientInternalId);
    }

setSingleAttribute()

void org.keycloak.models.utils.UserModelDelegate.setSingleAttribute ( String  name, String  value  )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                                              {
        delegate.setSingleAttribute(name, value);
    }

setUsername()

void org.keycloak.models.utils.UserModelDelegate.setUsername ( String  username )

inlineinherited

org.keycloak.models.UserModelを実装しています。

                                             {
        delegate.setUsername(username);
    }

メンバ詳解

cachedLDAPRoleMappings

Set<RoleModel> org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.cachedLDAPRoleMappings

private

delegate

UserModel org.keycloak.models.utils.UserModelDelegate.delegate

protectedinherited

EMAIL

String org.keycloak.models.UserModel.EMAIL = "email"

inherited

FIRST_NAME

String org.keycloak.models.UserModel.FIRST_NAME = "firstName"

inherited

LAST_NAME

String org.keycloak.models.UserModel.LAST_NAME = "lastName"

inherited

ldapUser

final LDAPObject org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.ldapUser

private

LOCALE

String org.keycloak.models.UserModel.LOCALE = "locale"

inherited

realm

final RealmModel org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.realm

private

roleContainer

final RoleContainerModel org.keycloak.storage.ldap.mappers.membership.role.RoleLDAPStorageMapper.LDAPRoleMappingsUserDelegate.roleContainer

private

USERNAME

String org.keycloak.models.UserModel.USERNAME = "username"

inherited

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/src/keycloak/src/main/java/org/keycloak/storage/ldap/mappers/membership/role/RoleLDAPStorageMapper.java