org.keycloak.models.utils.RoleUtils クラス

org.keycloak.models.utils.RoleUtils 連携図

静的公開メンバ関数
static boolean	isMember (Set< GroupModel > groups, GroupModel targetGroup)
static boolean	hasRole (Set< RoleModel > roles, RoleModel targetRole)
static boolean	hasRoleFromGroup (GroupModel group, RoleModel targetRole, boolean checkParentGroup)
static boolean	hasRoleFromGroup (Iterable< GroupModel > groups, RoleModel targetRole, boolean checkParentGroup)
static Stream< RoleModel >	expandCompositeRolesStream (RoleModel role)

詳解

著者

Stian Thorgersen

関数詳解

expandCompositeRolesStream()

static Stream<RoleModel> org.keycloak.models.utils.RoleUtils.expandCompositeRolesStream ( RoleModel  role )

inlinestatic

Recursively expands composite roles into their composite.

引数

role

戻り値

Stream of containing all of the composite roles and their components.

                                                                               {
        Stream.Builder<RoleModel> sb = Stream.builder();
        Set<RoleModel> roles = new HashSet<>();

        Deque<RoleModel> stack = new ArrayDeque<>();
        stack.add(role);

        while (! stack.isEmpty()) {
            RoleModel current = stack.pop();
            sb.add(current);

            if (current.isComposite()) {
                current.getComposites().stream()
                  .filter(r -> ! roles.contains(r))
                  .forEach(r -> {
                    roles.add(r);
                    stack.add(r);
                  });
            }
        }

        return sb.build();
    }

hasRole()

static boolean org.keycloak.models.utils.RoleUtils.hasRole ( Set< RoleModel >  roles, RoleModel  targetRole  )

inlinestatic

引数

roles
targetRole

戻り値

true if targetRole is in roles (directly or indirectly via composite role)

                                                                              {
        if (roles.contains(targetRole)) return true;

        for (RoleModel mapping : roles) {
            if (mapping.hasRole(targetRole)) return true;
        }
        return false;
    }

hasRoleFromGroup() [1/2]

static boolean org.keycloak.models.utils.RoleUtils.hasRoleFromGroup ( GroupModel  group, RoleModel  targetRole, boolean  checkParentGroup  )

inlinestatic

Checks whether the

targetRole 

is contained in the given group or its parents (if requested)

引数

group	Group to check role for
targetRole
checkParentGroup	When true , also parent group is recursively checked for role

戻り値

true if targetRole is in roles (directly or indirectly via composite role)

                                                                                                             {
        if (group.hasRole(targetRole))
            return true;

        if (checkParentGroup) {
            GroupModel parent = group.getParent();
            return parent != null && hasRoleFromGroup(parent, targetRole, true);
        }

        return false;
    }

hasRoleFromGroup() [2/2]

static boolean org.keycloak.models.utils.RoleUtils.hasRoleFromGroup ( Iterable< GroupModel >  groups, RoleModel  targetRole, boolean  checkParentGroup  )

inlinestatic

Checks whether the

targetRole 

is contained in any of the

groups 

or their parents (if requested)

引数

groups
targetRole
checkParentGroup	When true , also parent group is recursively checked for role

戻り値

true if targetRole is in roles (directly or indirectly via composite role)

                                                                                                                        {
        if (groups == null) {
            return false;
        }

        return StreamSupport.stream(groups.spliterator(), false)
                .anyMatch(group -> hasRoleFromGroup(group, targetRole, checkParentGroup));
    }

isMember()

static boolean org.keycloak.models.utils.RoleUtils.isMember ( Set< GroupModel >  groups, GroupModel  targetGroup  )

inlinestatic

引数

groups
targetGroup

戻り値

true if targetGroup is in groups (directly or indirectly via parent child relationship)

                                                                                   {
        if (groups.contains(targetGroup)) return true;

        for (GroupModel mapping : groups) {
            GroupModel child = mapping;
            while(child.getParent() != null) {
                if (child.getParent().equals(targetGroup)) return true;
                child = child.getParent();
            }
        }
        return false;
    }

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/oidc-service/src/main/java/org/keycloak/models/utils/RoleUtils.java