keycloak
公開メンバ関数 | 非公開変数類 | 全メンバ一覧
org.keycloak.authorization.client.ClientAuthorizationContext クラス
org.keycloak.authorization.client.ClientAuthorizationContext の継承関係図
Inheritance graph
org.keycloak.authorization.client.ClientAuthorizationContext 連携図
Collaboration graph

公開メンバ関数

 ClientAuthorizationContext (AccessToken authzToken, PolicyEnforcerConfig.PathConfig current, AuthzClient client)
 
 ClientAuthorizationContext (AuthzClient client)
 
AuthzClient getClient ()
 
boolean hasPermission (String resourceName, String scopeName)
 
boolean hasResourcePermission (String resourceName)
 
boolean hasScopePermission (String scopeName)
 
List< PermissiongetPermissions ()
 
boolean isGranted ()
 

非公開変数類

final AuthzClient client
 

詳解

著者
Pedro Igor

構築子と解体子

◆ ClientAuthorizationContext() [1/2]

org.keycloak.authorization.client.ClientAuthorizationContext.ClientAuthorizationContext ( AccessToken  authzToken,
PolicyEnforcerConfig.PathConfig  current,
AuthzClient  client 
)
inline
33  {
34  super(authzToken, current);
35  this.client = client;
36  }
final PathConfig current
Definition: AuthorizationContext.java:35
final AccessToken authzToken
Definition: AuthorizationContext.java:34
final AuthzClient client
Definition: ClientAuthorizationContext.java:31

◆ ClientAuthorizationContext() [2/2]

org.keycloak.authorization.client.ClientAuthorizationContext.ClientAuthorizationContext ( AuthzClient  client)
inline
38  {
39  this.client = client;
40  }
final AuthzClient client
Definition: ClientAuthorizationContext.java:31

関数詳解

◆ getClient()

AuthzClient org.keycloak.authorization.client.ClientAuthorizationContext.getClient ( )
inline
42  {
43  return client;
44  }
final AuthzClient client
Definition: ClientAuthorizationContext.java:31

◆ getPermissions()

List<Permission> org.keycloak.AuthorizationContext.getPermissions ( )
inlineinherited
105  {
106  if (this.authzToken == null) {
107  return Collections.emptyList();
108  }
109 
110  Authorization authorization = this.authzToken.getAuthorization();
111 
112  if (authorization == null) {
113  return Collections.emptyList();
114  }
115 
116  return Collections.unmodifiableList(new ArrayList<>(authorization.getPermissions()));
117  }
Authorization getAuthorization()
Definition: AccessToken.java:250
final AccessToken authzToken
Definition: AuthorizationContext.java:34

◆ hasPermission()

boolean org.keycloak.AuthorizationContext.hasPermission ( String  resourceName,
String  scopeName 
)
inlineinherited
49  {
50  if (this.authzToken == null) {
51  return false;
52  }
53 
54  Authorization authorization = this.authzToken.getAuthorization();
55 
56  if (authorization == null) {
57  return false;
58  }
59 
60  for (Permission permission : authorization.getPermissions()) {
61  if (resourceName.equalsIgnoreCase(permission.getResourceName()) || resourceName.equalsIgnoreCase(permission.getResourceId())) {
62  if (scopeName == null) {
63  return true;
64  }
65 
66  if (permission.getScopes().contains(scopeName)) {
67  return true;
68  }
69  }
70  }
71 
72  if (current != null) {
73  if (current.getName().equals(resourceName)) {
74  return true;
75  }
76  }
77 
78  return false;
79  }
Authorization getAuthorization()
Definition: AccessToken.java:250
final PathConfig current
Definition: AuthorizationContext.java:35
String getName()
Definition: PolicyEnforcerConfig.java:193
final AccessToken authzToken
Definition: AuthorizationContext.java:34

◆ hasResourcePermission()

boolean org.keycloak.AuthorizationContext.hasResourcePermission ( String  resourceName)
inlineinherited
81  {
82  return hasPermission(resourceName, null);
83  }
boolean hasPermission(String resourceName, String scopeName)
Definition: AuthorizationContext.java:49

◆ hasScopePermission()

boolean org.keycloak.AuthorizationContext.hasScopePermission ( String  scopeName)
inlineinherited
85  {
86  if (this.authzToken == null) {
87  return false;
88  }
89 
90  Authorization authorization = this.authzToken.getAuthorization();
91 
92  if (authorization == null) {
93  return false;
94  }
95 
96  for (Permission permission : authorization.getPermissions()) {
97  if (permission.getScopes().contains(scopeName)) {
98  return true;
99  }
100  }
101 
102  return false;
103  }
Authorization getAuthorization()
Definition: AccessToken.java:250
final AccessToken authzToken
Definition: AuthorizationContext.java:34

◆ isGranted()

boolean org.keycloak.AuthorizationContext.isGranted ( )
inlineinherited
119  {
120  return granted;
121  }
boolean granted
Definition: AuthorizationContext.java:36

メンバ詳解

◆ client

final AuthzClient org.keycloak.authorization.client.ClientAuthorizationContext.client
private

このクラス詳解は次のファイルから抽出されました: