org.keycloak.authorization.client.util.TokenCallable クラス

org.keycloak.authorization.client.util.TokenCallable の継承関係図

org.keycloak.authorization.client.util.TokenCallable 連携図

公開メンバ関数
	TokenCallable (String userName, String password, Http http, Configuration configuration, ServerConfiguration serverConfiguration)
	TokenCallable (Http http, Configuration configuration, ServerConfiguration serverConfiguration)
String	call ()
boolean	isTokenTimeToLiveSufficient (AccessToken token)

限定公開メンバ関数
boolean	isRetry ()

関数
AccessTokenResponse	obtainAccessToken ()
AccessTokenResponse	obtainAccessToken (String userName, String password)
Http	getHttp ()
Configuration	getConfiguration ()
ServerConfiguration	getServerConfiguration ()
void	clearToken ()

非公開変数類
final String	userName
final String	password
final Http	http
final Configuration	configuration
final ServerConfiguration	serverConfiguration
AccessTokenResponse	clientToken

静的非公開変数類
static Logger	log = Logger.getLogger(TokenCallable.class)

詳解

構築子と解体子

TokenCallable() [1/2]

org.keycloak.authorization.client.util.TokenCallable.TokenCallable ( String  userName, String  password, Http  http, Configuration  configuration, ServerConfiguration  serverConfiguration  )

inline

                                                                                                                                            {
        this.userName = userName;
        this.password = password;
        this.http = http;
        this.configuration = configuration;
        this.serverConfiguration = serverConfiguration;
    }

TokenCallable() [2/2]

org.keycloak.authorization.client.util.TokenCallable.TokenCallable ( Http  http, Configuration  configuration, ServerConfiguration  serverConfiguration  )

inline

                                                                                                          {
        this(null, null, http, configuration, serverConfiguration);
    }

関数詳解

call()

String org.keycloak.authorization.client.util.TokenCallable.call ( )

inline

                         {
        if (clientToken == null) {
            if (userName == null || password == null) {
                clientToken = obtainAccessToken();
            } else {
                clientToken = obtainAccessToken(userName, password);
            }
        } else {
            String refreshTokenValue = clientToken.getRefreshToken();
            try {
                RefreshToken refreshToken = JsonSerialization.readValue(new JWSInput(refreshTokenValue).getContent(), RefreshToken.class);
                if (!refreshToken.isActive() || !isTokenTimeToLiveSufficient(refreshToken)) {
                    log.debug("Refresh token is expired.");
                    if (userName == null || password == null) {
                        clientToken = obtainAccessToken();
                    } else {
                        clientToken = obtainAccessToken(userName, password);
                    }
                }
            } catch (Exception e) {
                clientToken = null;
                throw new RuntimeException(e);
            }
        }

        String token = clientToken.getToken();

        try {
            AccessToken accessToken = JsonSerialization.readValue(new JWSInput(token).getContent(), AccessToken.class);

            if (accessToken.isActive() && this.isTokenTimeToLiveSufficient(accessToken)) {
                return token;
            } else {
                log.debug("Access token is expired.");
            }

            clientToken = http.<AccessTokenResponse>post(serverConfiguration.getTokenEndpoint())
                    .authentication().client()
                    .form()
                    .param("grant_type", "refresh_token")
                    .param("refresh_token", clientToken.getRefreshToken())
                    .response()
                    .json(AccessTokenResponse.class)
                    .execute();
        } catch (Exception e) {
            clientToken = null;
            throw new RuntimeException(e);
        }

        return clientToken.getToken();
    }

clearToken()

void org.keycloak.authorization.client.util.TokenCallable.clearToken ( )

inlinepackage

                      {
        clientToken = null;
    }

getConfiguration()

Configuration org.keycloak.authorization.client.util.TokenCallable.getConfiguration ( )

inlinepackage

                                     {
        return configuration;
    }

getHttp()

Http org.keycloak.authorization.client.util.TokenCallable.getHttp ( )

inlinepackage

                   {
        return http;
    }

getServerConfiguration()

ServerConfiguration org.keycloak.authorization.client.util.TokenCallable.getServerConfiguration ( )

inlinepackage

                                                 {
        return serverConfiguration;
    }

isRetry()

boolean org.keycloak.authorization.client.util.TokenCallable.isRetry ( )

inlineprotected

                                {
        return true;
    }

isTokenTimeToLiveSufficient()

boolean org.keycloak.authorization.client.util.TokenCallable.isTokenTimeToLiveSufficient ( AccessToken  token )

inline

                                                                  {
        return token != null && (token.getExpiration() - getConfiguration().getTokenMinimumTimeToLive()) > Time.currentTime();
    }

obtainAccessToken() [1/2]

AccessTokenResponse org.keycloak.authorization.client.util.TokenCallable.obtainAccessToken ( )

inlinepackage

Obtains an access token using the client credentials.

戻り値

an AccessTokenResponse

                                            {
        return this.http.<AccessTokenResponse>post(this.serverConfiguration.getTokenEndpoint())
                .authentication()
                .client()
                .response()
                .json(AccessTokenResponse.class)
                .execute();
    }

obtainAccessToken() [2/2]

AccessTokenResponse org.keycloak.authorization.client.util.TokenCallable.obtainAccessToken ( String  userName, String  password  )

inlinepackage

Obtains an access token using the resource owner credentials.

戻り値

an AccessTokenResponse

                                                                            {
        return this.http.<AccessTokenResponse>post(this.serverConfiguration.getTokenEndpoint())
                .authentication()
                .oauth2ResourceOwnerPassword(userName, password)
                .response()
                .json(AccessTokenResponse.class)
                .execute();
    }

メンバ詳解

clientToken

AccessTokenResponse org.keycloak.authorization.client.util.TokenCallable.clientToken

private

configuration

final Configuration org.keycloak.authorization.client.util.TokenCallable.configuration

private

http

final Http org.keycloak.authorization.client.util.TokenCallable.http

private

log

Logger org.keycloak.authorization.client.util.TokenCallable.log = Logger.getLogger(TokenCallable.class)

staticprivate

password

final String org.keycloak.authorization.client.util.TokenCallable.password

private

serverConfiguration

final ServerConfiguration org.keycloak.authorization.client.util.TokenCallable.serverConfiguration

private

userName

final String org.keycloak.authorization.client.util.TokenCallable.userName

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/OpenId/keycloak/doxygen/src/authz/client/src/main/java/org/keycloak/authorization/client/util/TokenCallable.java