keycloak-oidc-service
|
公開メンバ関数 | |
List< ProviderConfigProperty > | getConfigProperties () |
String | getDisplayCategory () |
String | getDisplayType () |
String | getHelpText () |
void | preprocessFederatedIdentity (KeycloakSession session, RealmModel realm, IdentityProviderMapperModel mapperModel, BrokeredIdentityContext context) |
void | updateBrokeredUser (KeycloakSession session, RealmModel realm, UserModel user, IdentityProviderMapperModel mapperModel, BrokeredIdentityContext context) |
void | close () |
IdentityProviderMapper | create (KeycloakSession session) |
void | init (org.keycloak.Config.Scope config) |
void | init (Config.Scope config) |
void | postInit (KeycloakSessionFactory factory) |
void | importNewUser (KeycloakSession session, RealmModel realm, UserModel user, IdentityProviderMapperModel mapperModel, BrokeredIdentityContext context) |
String [] | getCompatibleProviders () |
String | getId () |
default int | order () |
静的公開メンバ関数 | |
static void | storeUserProfileForMapper (BrokeredIdentityContext user, JsonNode profile, String provider) |
static Object | getJsonValue (JsonNode baseNode, String fieldPath) |
静的公開変数類 | |
static final String | CONF_JSON_FIELD = "jsonField" |
static final String | CONF_USER_ATTRIBUTE = "userAttribute" |
static final String | CONTEXT_JSON_NODE = OIDCIdentityProvider.USER_INFO |
static final String | ANY_PROVIDER = "*" |
静的限定公開メンバ関数 | |
static Object | getJsonValue (IdentityProviderMapperModel mapperModel, BrokeredIdentityContext context) |
静的限定公開変数類 | |
static final Logger | logger = Logger.getLogger(AbstractJsonUserAttributeMapper.class) |
static final Logger | LOGGER_DUMP_USER_PROFILE = Logger.getLogger("org.keycloak.social.user_profile_dump") |
静的関数 | |
[static initializer] | |
静的非公開変数類 | |
static final String | JSON_PATH_DELIMITER = "." |
static final List< ProviderConfigProperty > | configProperties = new ArrayList<ProviderConfigProperty>() |
Abstract class for Social Provider mappers which allow mapping of JSON user profile field into Keycloak user attribute. Concrete mapper classes with own ID and provider mapping must be implemented for each social provider who uses JsonNode user profile.
|
inlinestaticpackage |
|
inlineinherited |
org.keycloak.provider.Providerを実装しています。
|
inlineinherited |
|
inherited |
org.keycloak.broker.oidc.mappers.ClaimToRoleMapper, org.keycloak.broker.oidc.mappers.UserAttributeMapper, org.keycloak.broker.provider.HardcodedAttributeMapper, org.keycloak.broker.provider.HardcodedUserSessionAttributeMapper, org.keycloak.broker.oidc.mappers.ExternalKeycloakRoleToRoleMapper, org.keycloak.broker.provider.HardcodedRoleMapper, org.keycloak.broker.oidc.mappers.UsernameTemplateMapperで実装されています。
|
inline |
org.keycloak.provider.ConfiguredProviderを実装しています。
|
inline |
|
inline |
|
inline |
|
inherited |
org.keycloak.protocol.oidc.OIDCLoginProtocolFactory, org.keycloak.authentication.authenticators.client.JWTClientAuthenticator, org.keycloak.authentication.forms.RegistrationUserCreation, org.keycloak.authentication.authenticators.resetcred.ResetCredentialEmail, org.keycloak.authentication.forms.RegistrationRecaptcha, org.keycloak.authentication.authenticators.resetcred.ResetCredentialChooseUser, org.keycloak.authentication.authenticators.client.JWTClientSecretAuthenticator, org.keycloak.authentication.authenticators.client.ClientIdAndSecretAuthenticator, org.keycloak.authentication.forms.RegistrationProfile, org.keycloak.authentication.authenticators.client.X509ClientAuthenticator, org.keycloak.authentication.forms.RegistrationPassword, org.keycloak.authentication.requiredactions.UpdateProfile, org.keycloak.authentication.requiredactions.UpdatePassword, org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation, org.keycloak.authentication.authenticators.directgrant.ValidateUsername, org.keycloak.authentication.authenticators.directgrant.ValidateOTP, org.keycloak.keys.GeneratedRsaKeyProviderFactory, org.keycloak.authentication.requiredactions.VerifyEmail, org.keycloak.authentication.requiredactions.UpdateTotp, org.keycloak.policy.BlacklistPasswordPolicyProviderFactory, org.keycloak.connections.httpclient.DefaultHttpClientFactory, org.keycloak.protocol.oidc.mappers.AbstractPairwiseSubMapper, org.keycloak.protocol.oidc.installation.KeycloakOIDCJbossSubsystemClientInstallation, org.keycloak.authentication.authenticators.directgrant.ValidatePassword, org.keycloak.truststore.FileTruststoreProviderFactory, org.keycloak.authentication.forms.RegistrationPage, org.keycloak.authentication.authenticators.browser.IdentityProviderAuthenticatorFactory, org.keycloak.keys.ImportedRsaKeyProviderFactory, org.keycloak.services.clientregistration.policy.impl.ClientScopesClientRegistrationPolicyFactory, org.keycloak.protocol.oidc.mappers.AddressMapper, org.keycloak.protocol.oidc.mappers.ScriptBasedOIDCProtocolMapper, org.keycloak.executors.DefaultExecutorsProviderFactory, org.keycloak.theme.ClasspathThemeProviderFactory, org.keycloak.keys.JavaKeystoreKeyProviderFactory, org.keycloak.authentication.authenticators.browser.SpnegoAuthenticatorFactory, org.keycloak.keys.GeneratedEcdsaKeyProviderFactory, org.keycloak.authentication.authenticators.browser.ScriptBasedAuthenticatorFactory, org.keycloak.protocol.oidc.mappers.UserClientRoleMappingMapper, org.keycloak.services.clientregistration.policy.impl.ProtocolMappersClientRegistrationPolicyFactory, org.keycloak.protocol.oidc.mappers.AudienceProtocolMapper, org.keycloak.authentication.authenticators.browser.ConditionalOtpFormAuthenticatorFactory, org.keycloak.events.email.EmailEventListenerProviderFactory, org.keycloak.broker.oidc.mappers.ClaimToRoleMapper, org.keycloak.broker.oidc.mappers.UserAttributeMapper, org.keycloak.broker.provider.HardcodedAttributeMapper, org.keycloak.broker.provider.HardcodedUserSessionAttributeMapper, org.keycloak.broker.oidc.mappers.ExternalKeycloakRoleToRoleMapper, org.keycloak.authentication.authenticators.browser.OTPFormAuthenticatorFactory, org.keycloak.authentication.authenticators.browser.UsernamePasswordFormFactory, org.keycloak.protocol.oidc.mappers.RoleNameMapper, org.keycloak.services.clientregistration.policy.impl.MaxClientsClientRegistrationPolicyFactory, org.keycloak.protocol.oidc.mappers.UserAttributeMapper, org.keycloak.authentication.authenticators.browser.CookieAuthenticatorFactory, org.keycloak.broker.provider.HardcodedRoleMapper, org.keycloak.policy.LowerCasePasswordPolicyProviderFactory, org.keycloak.policy.SpecialCharsPasswordPolicyProviderFactory, org.keycloak.policy.UpperCasePasswordPolicyProviderFactory, org.keycloak.services.clientregistration.policy.impl.TrustedHostClientRegistrationPolicyFactory, org.keycloak.exportimport.KeycloakClientDescriptionConverter, org.keycloak.broker.oidc.mappers.UsernameTemplateMapper, org.keycloak.protocol.oidc.mappers.UserRealmRoleMappingMapper, org.keycloak.protocol.oidc.mappers.GroupMembershipMapper, org.keycloak.protocol.oidc.mappers.HardcodedClaim, org.keycloak.authentication.authenticators.broker.IdpReviewProfileAuthenticatorFactory, org.keycloak.authentication.authenticators.x509.X509ClientCertificateAuthenticatorFactory, org.keycloak.protocol.oidc.mappers.HardcodedRole, org.keycloak.authentication.requiredactions.TermsAndConditions, org.keycloak.authorization.DefaultAuthorizationProviderFactory, org.keycloak.models.session.DisabledUserSessionPersisterProvider, org.keycloak.services.x509.DefaultClientCertificateLookupFactory, org.keycloak.authentication.authenticators.broker.IdpCreateUserIfUniqueAuthenticatorFactory, org.keycloak.authentication.authenticators.cli.CliUsernamePasswordAuthenticatorFactory, org.keycloak.timer.basic.BasicTimerProviderFactory, org.keycloak.authentication.authenticators.challenge.BasicAuthAuthenticatorFactory, org.keycloak.authentication.authenticators.challenge.BasicAuthOTPAuthenticatorFactory, org.keycloak.authentication.authenticators.challenge.NoCookieFlowRedirectAuthenticatorFactory, org.keycloak.authentication.authenticators.console.ConsoleUsernamePasswordAuthenticatorFactory, org.keycloak.authentication.authenticators.x509.ValidateX509CertificateUsernameFactory, org.keycloak.events.log.JBossLoggingEventListenerProviderFactory, org.keycloak.protocol.oidc.mappers.UserPropertyMapper, org.keycloak.protocol.oidc.mappers.UserSessionNoteMapper, org.keycloak.transaction.JBossJtaTransactionManagerLookup, org.keycloak.authentication.authenticators.broker.IdpConfirmLinkAuthenticatorFactory, org.keycloak.authentication.authenticators.broker.IdpEmailVerificationAuthenticatorFactory, org.keycloak.storage.UserStorageProviderFactory< T extends UserStorageProvider >, org.keycloak.theme.FolderThemeProviderFactory, org.keycloak.authentication.authenticators.broker.IdpAutoLinkAuthenticatorFactory, org.keycloak.authentication.authenticators.resetcred.ResetPassword, org.keycloak.exportimport.singlefile.SingleFileImportProviderFactory, org.keycloak.protocol.oidc.mappers.FullNameMapper, org.keycloak.protocol.oidc.OIDCClientDescriptionConverterFactory, org.keycloak.scripting.DefaultScriptingProviderFactory, org.keycloak.authentication.authenticators.resetcred.ResetOTP, org.keycloak.exportimport.dir.DirExportProviderFactory, org.keycloak.exportimport.singlefile.SingleFileExportProviderFactory, org.keycloak.storage.client.ClientStorageProviderFactory< T extends ClientStorageProvider >, org.keycloak.policy.HashAlgorithmPasswordPolicyProviderFactory, org.keycloak.services.managers.DefaultBruteForceProtectorFactory, org.keycloak.theme.ExtendingThemeManagerFactory, org.keycloak.authorization.config.UmaWellKnownProviderFactory, org.keycloak.email.freemarker.FreeMarkerEmailTemplateProviderFactory, org.keycloak.exportimport.dir.DirImportProviderFactory, org.keycloak.forms.account.freemarker.FreeMarkerAccountProviderFactory, org.keycloak.forms.login.freemarker.FreeMarkerLoginFormsProviderFactory, org.keycloak.policy.ForceExpiredPasswordPolicyProviderFactory, org.keycloak.protocol.oidc.AccessTokenIntrospectionProviderFactory, org.keycloak.services.clientregistration.policy.impl.ClientDisabledClientRegistrationPolicyFactory, org.keycloak.services.clientregistration.policy.impl.ConsentRequiredClientRegistrationPolicyFactory, org.keycloak.services.clientregistration.policy.impl.ScopeClientRegistrationPolicyFactory, org.keycloak.services.migration.DefaultMigrationProviderFactory, org.keycloak.authorization.protection.introspect.RPTIntrospectionProviderFactory, org.keycloak.protocol.oidc.OIDCWellKnownProviderFactory, org.keycloak.services.clientregistration.oidc.OIDCClientRegistrationProviderFactory, org.keycloak.credential.hash.Pbkdf2PasswordHashProviderFactory, org.keycloak.email.DefaultEmailSenderProviderFactory, org.keycloak.policy.DefaultPasswordPolicyManagerProviderFactory, org.keycloak.policy.HashIterationsPasswordPolicyProviderFactory, org.keycloak.services.clientregistration.AdapterInstallationClientRegistrationProviderFactory, org.keycloak.services.clientregistration.DefaultClientRegistrationProviderFactory, org.keycloak.locale.DefaultLocaleSelectorProviderFactory, org.keycloak.services.x509.ApacheProxySslClientCertificateLookupFactory, org.keycloak.authentication.authenticators.broker.IdpUsernamePasswordFormFactory, org.keycloak.services.x509.HaProxySslClientCertificateLookupFactory, org.keycloak.theme.ClasspathThemeResourceProviderFactory, org.keycloak.credential.CredentialProviderFactory< T extends CredentialProvider >, org.keycloak.protocol.oidc.RefreshTokenIntrospectionProviderFactory, org.keycloak.credential.hash.Pbkdf2Sha256PasswordHashProviderFactory, org.keycloak.credential.hash.Pbkdf2Sha512PasswordHashProviderFactory, org.keycloak.policy.HistoryPasswordPolicyProviderFactory, org.keycloak.policy.DigitsPasswordPolicyProviderFactory, org.keycloak.policy.LengthPasswordPolicyProviderFactory, org.keycloak.policy.NotUsernamePasswordPolicyProviderFactory, org.keycloak.policy.RegexPatternsPasswordPolicyProviderFactory, org.keycloak.url.FixedHostnameProviderFactory, org.keycloak.theme.DefaultThemeSelectorProviderFactory, org.keycloak.crypto.ES256SignatureProviderFactory, org.keycloak.crypto.ES384SignatureProviderFactory, org.keycloak.crypto.ES512SignatureProviderFactory, org.keycloak.crypto.HS256SignatureProviderFactory, org.keycloak.crypto.HS384SignatureProviderFactory, org.keycloak.crypto.HS512SignatureProviderFactory, org.keycloak.crypto.RS256SignatureProviderFactory, org.keycloak.crypto.RS384SignatureProviderFactory, org.keycloak.crypto.RS512SignatureProviderFactory, org.keycloak.url.RequestHostnameProviderFactory (計145項目)で実装されています。
|
inlinestaticprotected |
|
inlinestatic |
|
inlineinherited |
|
inherited |
Only called once when the factory is first created. This config is pulled from keycloak_server.json
config |
org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticatorFactory, org.keycloak.authentication.forms.RegistrationUserCreation, org.keycloak.authentication.authenticators.resetcred.ResetCredentialEmail, org.keycloak.authentication.forms.RegistrationRecaptcha, org.keycloak.authentication.authenticators.resetcred.ResetCredentialChooseUser, org.keycloak.authentication.forms.RegistrationProfile, org.keycloak.authentication.forms.RegistrationPassword, org.keycloak.authentication.requiredactions.UpdateProfile, org.keycloak.authentication.requiredactions.UpdatePassword, org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation, org.keycloak.connections.httpclient.DefaultHttpClientFactory, org.keycloak.authentication.requiredactions.VerifyEmail, org.keycloak.authentication.requiredactions.UpdateTotp, org.keycloak.protocol.oidc.installation.KeycloakOIDCJbossSubsystemClientInstallation, org.keycloak.policy.BlacklistPasswordPolicyProviderFactory, org.keycloak.authentication.forms.RegistrationPage, org.keycloak.authentication.authenticators.browser.IdentityProviderAuthenticatorFactory, org.keycloak.authentication.authenticators.resetcred.AbstractSetRequiredActionAuthenticator, org.keycloak.theme.ClasspathThemeProviderFactory, org.keycloak.executors.DefaultExecutorsProviderFactory, org.keycloak.authentication.authenticators.browser.ScriptBasedAuthenticatorFactory, org.keycloak.authentication.authenticators.browser.ConditionalOtpFormAuthenticatorFactory, org.keycloak.storage.UserStorageProviderFactory< T extends UserStorageProvider >, org.keycloak.storage.client.ClientStorageProviderFactory< T extends ClientStorageProvider >, org.keycloak.authentication.authenticators.directgrant.AbstractDirectGrantAuthenticator, org.keycloak.authentication.authenticators.browser.OTPFormAuthenticatorFactory, org.keycloak.authentication.authenticators.browser.UsernamePasswordFormFactory, org.keycloak.exportimport.KeycloakClientDescriptionConverter, org.keycloak.authentication.authenticators.browser.SpnegoAuthenticatorFactory, org.keycloak.protocol.oidc.mappers.AbstractOIDCProtocolMapper, org.keycloak.authentication.authenticators.browser.CookieAuthenticatorFactory, org.keycloak.authentication.requiredactions.TermsAndConditions, org.keycloak.events.email.EmailEventListenerProviderFactory, org.keycloak.authentication.authenticators.broker.IdpReviewProfileAuthenticatorFactory, org.keycloak.models.session.DisabledUserSessionPersisterProvider, org.keycloak.services.x509.DefaultClientCertificateLookupFactory, org.keycloak.authentication.authenticators.broker.IdpCreateUserIfUniqueAuthenticatorFactory, org.keycloak.authentication.authenticators.cli.CliUsernamePasswordAuthenticatorFactory, org.keycloak.authentication.authenticators.client.AbstractClientAuthenticator, org.keycloak.theme.JarThemeProviderFactory, org.keycloak.authentication.authenticators.challenge.BasicAuthAuthenticatorFactory, org.keycloak.authentication.authenticators.challenge.BasicAuthOTPAuthenticatorFactory, org.keycloak.authentication.authenticators.challenge.NoCookieFlowRedirectAuthenticatorFactory, org.keycloak.timer.basic.BasicTimerProviderFactory, org.keycloak.truststore.FileTruststoreProviderFactory, org.keycloak.authentication.authenticators.console.ConsoleUsernamePasswordAuthenticatorFactory, org.keycloak.events.log.JBossLoggingEventListenerProviderFactory, org.keycloak.protocol.oidc.OIDCClientDescriptionConverterFactory, org.keycloak.authentication.authenticators.broker.IdpConfirmLinkAuthenticatorFactory, org.keycloak.authentication.authenticators.broker.IdpEmailVerificationAuthenticatorFactory, org.keycloak.exportimport.singlefile.SingleFileImportProviderFactory, org.keycloak.services.x509.AbstractClientCertificateFromHttpHeadersLookupFactory, org.keycloak.theme.ClasspathThemeResourceProviderFactory, org.keycloak.exportimport.dir.DirExportProviderFactory, org.keycloak.exportimport.singlefile.SingleFileExportProviderFactory, org.keycloak.policy.HashAlgorithmPasswordPolicyProviderFactory, org.keycloak.policy.HistoryPasswordPolicyProviderFactory, org.keycloak.authentication.authenticators.broker.IdpAutoLinkAuthenticatorFactory, org.keycloak.policy.DigitsPasswordPolicyProviderFactory, org.keycloak.policy.LengthPasswordPolicyProviderFactory, org.keycloak.policy.NotUsernamePasswordPolicyProviderFactory, org.keycloak.policy.RegexPatternsPasswordPolicyProviderFactory, org.keycloak.scripting.DefaultScriptingProviderFactory, org.keycloak.credential.hash.Pbkdf2PasswordHashProviderFactory, org.keycloak.exportimport.dir.DirImportProviderFactory, org.keycloak.transaction.JBossJtaTransactionManagerLookup, org.keycloak.email.freemarker.FreeMarkerEmailTemplateProviderFactory, org.keycloak.forms.account.freemarker.FreeMarkerAccountProviderFactory, org.keycloak.forms.login.freemarker.FreeMarkerLoginFormsProviderFactory, org.keycloak.policy.ForceExpiredPasswordPolicyProviderFactory, org.keycloak.keys.KeyProviderFactory< T extends KeyProvider >, org.keycloak.policy.HashIterationsPasswordPolicyProviderFactory, org.keycloak.protocol.oidc.OIDCWellKnownProviderFactory, org.keycloak.services.clientregistration.oidc.OIDCClientRegistrationProviderFactory, org.keycloak.theme.ExtendingThemeManagerFactory, org.keycloak.theme.FolderThemeProviderFactory, org.keycloak.credential.CredentialProviderFactory< T extends CredentialProvider >, org.keycloak.services.clientregistration.policy.AbstractClientRegistrationPolicyFactory, org.keycloak.policy.LowerCasePasswordPolicyProviderFactory, org.keycloak.policy.SpecialCharsPasswordPolicyProviderFactory, org.keycloak.policy.UpperCasePasswordPolicyProviderFactory, org.keycloak.protocol.oidc.AccessTokenIntrospectionProviderFactory, org.keycloak.services.managers.DefaultBruteForceProtectorFactory, org.keycloak.services.migration.DefaultMigrationProviderFactory, org.keycloak.email.DefaultEmailSenderProviderFactory, org.keycloak.policy.DefaultPasswordPolicyManagerProviderFactory, org.keycloak.protocol.AbstractLoginProtocolFactory, org.keycloak.services.clientregistration.AdapterInstallationClientRegistrationProviderFactory, org.keycloak.services.clientregistration.DefaultClientRegistrationProviderFactory, org.keycloak.locale.DefaultLocaleSelectorProviderFactory, org.keycloak.urls.HostnameProviderFactory, org.keycloak.credential.hash.Pbkdf2Sha256PasswordHashProviderFactory, org.keycloak.credential.hash.Pbkdf2Sha512PasswordHashProviderFactory, org.keycloak.crypto.SignatureProviderFactory, org.keycloak.url.FixedHostnameProviderFactory, org.keycloak.theme.DefaultThemeSelectorProviderFactory, org.keycloak.protocol.oidc.ext.OIDCExtProviderFactory (計97項目)で実装されています。
|
inlineinherited |
|
inlineinherited |
|
inlineinherited |
|
inline |
org.keycloak.broker.provider.IdentityProviderMapperを実装しています。
|
inlinestatic |
Store used profile JsonNode into user context for later use by this mapper. Profile data are dumped into special logger if enabled also to allow investigation of the structure.
user | context to store profile data into |
profile | to store into context |
provider | identification of social provider to be used in log dump |
|
inline |
|
staticinherited |
|
static |
Config param where name of mapping source JSON User Profile field is stored.
|
static |
Config param where name of mapping target USer attribute is stored.
|
staticprivate |
|
static |
Key in BrokeredIdentityContext#getContextData() where JsonNode with user profile is stored.
|
staticprivate |
|
staticprotected |
|
staticprotected |