org.keycloak.services.clientregistration.policy.DefaultClientRegistrationPolicies クラス

org.keycloak.services.clientregistration.policy.DefaultClientRegistrationPolicies 連携図

静的公開メンバ関数
static void	addDefaultPolicies (RealmModel realm)

静的非公開メンバ関数
static ComponentModel	createModelInstance (String name, RealmModel realm, String providerId, String policyType)
static void	addAnonymousPolicies (RealmModel realm, String policyTypeKey)
static void	addAuthPolicies (RealmModel realm, String policyTypeKey)
static void	addGenericPolicies (RealmModel realm, String policyTypeKey)

静的非公開変数類
static String []	DEFAULT_ALLOWED_PROTOCOL_MAPPERS

詳解

著者

Marek Posolda

関数詳解

addAnonymousPolicies()

static void org.keycloak.services.clientregistration.policy.DefaultClientRegistrationPolicies.addAnonymousPolicies ( RealmModel  realm, String  policyTypeKey  )

inlinestaticprivate

                                                                                     {
        ComponentModel trustedHostModel = createModelInstance("Trusted Hosts", realm, TrustedHostClientRegistrationPolicyFactory.PROVIDER_ID, policyTypeKey);

        // Not any trusted hosts by default
        trustedHostModel.getConfig().put(TrustedHostClientRegistrationPolicyFactory.TRUSTED_HOSTS, Collections.emptyList());
        trustedHostModel.getConfig().putSingle(TrustedHostClientRegistrationPolicyFactory.HOST_SENDING_REGISTRATION_REQUEST_MUST_MATCH, "true");
        trustedHostModel.getConfig().putSingle(TrustedHostClientRegistrationPolicyFactory.CLIENT_URIS_MUST_MATCH, "true");
        realm.addComponentModel(trustedHostModel);

        ComponentModel consentRequiredModel = createModelInstance("Consent Required", realm, ConsentRequiredClientRegistrationPolicyFactory.PROVIDER_ID, policyTypeKey);
        realm.addComponentModel(consentRequiredModel);

        ComponentModel scopeModel = createModelInstance("Full Scope Disabled", realm, ScopeClientRegistrationPolicyFactory.PROVIDER_ID, policyTypeKey);
        realm.addComponentModel(scopeModel);

        ComponentModel maxClientsModel = createModelInstance("Max Clients Limit", realm, MaxClientsClientRegistrationPolicyFactory.PROVIDER_ID, policyTypeKey);
        maxClientsModel.put(MaxClientsClientRegistrationPolicyFactory.MAX_CLIENTS, MaxClientsClientRegistrationPolicyFactory.DEFAULT_MAX_CLIENTS);
        realm.addComponentModel(maxClientsModel);

        addGenericPolicies(realm, policyTypeKey);
    }

addAuthPolicies()

static void org.keycloak.services.clientregistration.policy.DefaultClientRegistrationPolicies.addAuthPolicies ( RealmModel  realm, String  policyTypeKey  )

inlinestaticprivate

                                                                                {
        addGenericPolicies(realm, policyTypeKey);
    }

addDefaultPolicies()

static void org.keycloak.services.clientregistration.policy.DefaultClientRegistrationPolicies.addDefaultPolicies ( RealmModel  realm )

inlinestatic

                                                            {
        String anonPolicyType = ClientRegistrationPolicyManager.getComponentTypeKey(RegistrationAuth.ANONYMOUS);
        String authPolicyType = ClientRegistrationPolicyManager.getComponentTypeKey(RegistrationAuth.AUTHENTICATED);
        List<ComponentModel> policies = realm.getComponents(realm.getId(), ClientRegistrationPolicy.class.getName());

        // Probably an issue if admin removes all policies intentionally...
        if (policies == null ||policies.isEmpty()) {
            addAnonymousPolicies(realm, anonPolicyType);
            addAuthPolicies(realm, authPolicyType);
        }
    }

addGenericPolicies()

static void org.keycloak.services.clientregistration.policy.DefaultClientRegistrationPolicies.addGenericPolicies ( RealmModel  realm, String  policyTypeKey  )

inlinestaticprivate

                                                                                   {
        ComponentModel protMapperModel = createModelInstance("Allowed Protocol Mapper Types", realm, ProtocolMappersClientRegistrationPolicyFactory.PROVIDER_ID, policyTypeKey);
        protMapperModel.getConfig().put(ProtocolMappersClientRegistrationPolicyFactory.ALLOWED_PROTOCOL_MAPPER_TYPES, Arrays.asList(DEFAULT_ALLOWED_PROTOCOL_MAPPERS));
        realm.addComponentModel(protMapperModel);

        ComponentModel clientTemplatesModel = createModelInstance("Allowed Client Scopes", realm, ClientScopesClientRegistrationPolicyFactory.PROVIDER_ID, policyTypeKey);
        clientTemplatesModel.getConfig().put(ClientScopesClientRegistrationPolicyFactory.ALLOWED_CLIENT_SCOPES, Collections.emptyList());
        clientTemplatesModel.put(ClientScopesClientRegistrationPolicyFactory.ALLOW_DEFAULT_SCOPES, true);
        realm.addComponentModel(clientTemplatesModel);
    }

createModelInstance()

static ComponentModel org.keycloak.services.clientregistration.policy.DefaultClientRegistrationPolicies.createModelInstance ( String  name, RealmModel  realm, String  providerId, String  policyType  )

inlinestaticprivate

                                                                                                                           {
        ComponentModel model = new ComponentModel();
        model.setName(name);
        model.setParentId(realm.getId());
        model.setProviderId(providerId);
        model.setProviderType(ClientRegistrationPolicy.class.getName());
        model.setSubType(policyType);
        return model;
    }

メンバ詳解

DEFAULT_ALLOWED_PROTOCOL_MAPPERS

String [] org.keycloak.services.clientregistration.policy.DefaultClientRegistrationPolicies.DEFAULT_ALLOWED_PROTOCOL_MAPPERS

staticprivate

初期値:

= {
            UserAttributeStatementMapper.PROVIDER_ID,
            UserAttributeMapper.PROVIDER_ID,
            UserPropertyAttributeStatementMapper.PROVIDER_ID,
            UserPropertyMapper.PROVIDER_ID,
            FullNameMapper.PROVIDER_ID,
            AddressMapper.PROVIDER_ID,
            new SHA256PairwiseSubMapper().getId(),
            RoleListMapper.PROVIDER_ID
    }

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/services/clientregistration/policy/DefaultClientRegistrationPolicies.java