org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation クラス

org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation の継承関係図

org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation 連携図

公開メンバ関数
Response	generateInstallation (KeycloakSession session, RealmModel realm, ClientModel client, URI baseUri)
String	getProtocol ()
String	getDisplayType ()
String	getHelpText ()
void	close ()
ClientInstallationProvider	create (KeycloakSession session)
void	init (Config.Scope config)
void	postInit (KeycloakSessionFactory factory)
String	getId ()
boolean	isDownloadOnly ()
String	getFilename ()
String	getMediaType ()

静的公開メンバ関数
static Map< String, Object >	getClientCredentialsAdapterConfig (KeycloakSession session, ClientModel client)
static boolean	showClientCredentialsAdapterConfig (ClientModel client)

静的関数
static boolean	showVerifyTokenAudience (ClientModel client)

非公開メンバ関数
void	configureAuthorizationSettings (KeycloakSession session, ClientModel client, ClientManager.InstallationAdapterConfig rep)

詳解

著者

Bill Burke

バージョン

Revision

1

関数詳解

close()

void org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.close ( )

inline

                        {

    }

configureAuthorizationSettings()

void org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.configureAuthorizationSettings ( KeycloakSession  session, ClientModel  client, ClientManager.InstallationAdapterConfig  rep  )

inlineprivate

                                                                                                                                          {
        if (new AuthorizationService(session, client, null, null).isEnabled()) {
            PolicyEnforcerConfig enforcerConfig = new PolicyEnforcerConfig();

            enforcerConfig.setEnforcementMode(null);
            enforcerConfig.setLazyLoadPaths(null);

            rep.setEnforcerConfig(enforcerConfig);

            Set<RoleModel> clientRoles = client.getRoles();

            if (clientRoles.size() == 1) {
                if (clientRoles.iterator().next().getName().equals(Constants.AUTHZ_UMA_PROTECTION)) {
                    rep.setUseResourceRoleMappings(null);
                }
            }
        }
    }

create()

ClientInstallationProvider org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.create ( KeycloakSession  session )

inline

                                                                      {
        return this;
    }

generateInstallation()

Response org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.generateInstallation ( KeycloakSession  session, RealmModel  realm, ClientModel  client, URI  baseUri  )

inline

                                                                                                                     {
        ClientManager.InstallationAdapterConfig rep = new ClientManager.InstallationAdapterConfig();
        rep.setAuthServerUrl(baseUri.toString());
        rep.setRealm(realm.getName());
        rep.setSslRequired(realm.getSslRequired().name().toLowerCase());

        if (client.isPublicClient() && !client.isBearerOnly()) rep.setPublicClient(true);
        if (client.isBearerOnly()) rep.setBearerOnly(true);
        if (client.getRoles().size() > 0) rep.setUseResourceRoleMappings(true);

        rep.setResource(client.getClientId());

        if (showClientCredentialsAdapterConfig(client)) {
            Map<String, Object> adapterConfig = getClientCredentialsAdapterConfig(session, client);
            rep.setCredentials(adapterConfig);
        }

        if (showVerifyTokenAudience(client)) {
            rep.setVerifyTokenAudience(true);
        }

        configureAuthorizationSettings(session, client, rep);

        String json = null;
        try {
            json = JsonSerialization.writeValueAsPrettyString(rep);
        } catch (IOException e) {
            throw new RuntimeException(e);
        }
        return Response.ok(json, MediaType.TEXT_PLAIN_TYPE).build();
    }

getClientCredentialsAdapterConfig()

static Map<String, Object> org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getClientCredentialsAdapterConfig ( KeycloakSession  session, ClientModel  client  )

inlinestatic

                                                                                                                     {
        String clientAuthenticator = client.getClientAuthenticatorType();
        ClientAuthenticatorFactory authenticator = (ClientAuthenticatorFactory) session.getKeycloakSessionFactory().getProviderFactory(ClientAuthenticator.class, clientAuthenticator);
        return authenticator.getAdapterConfiguration(client);
    }

getDisplayType()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getDisplayType ( )

inline

                                   {
        return "Keycloak OIDC JSON";
    }

getFilename()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getFilename ( )

inline

                                {
        return "keycloak.json";
    }

getHelpText()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getHelpText ( )

inline

                                {
        return "keycloak.json file used by the Keycloak OIDC client adapter to configure clients.  This must be saved to a keycloak.json file and put in your WEB-INF directory of your WAR file.  You may also want to tweak this file after you download it.";
    }

getId()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getId ( )

inline

                          {
        return "keycloak-oidc-keycloak-json";
    }

getMediaType()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getMediaType ( )

inline

                                 {
        return MediaType.APPLICATION_JSON;
    }

getProtocol()

String org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.getProtocol ( )

inline

                                {
        return OIDCLoginProtocol.LOGIN_PROTOCOL;
    }

init()

void org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.init ( Config.Scope  config )

inline

                                          {

    }

isDownloadOnly()

boolean org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.isDownloadOnly ( )

inline

                                    {
        return false;
    }

postInit()

void org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.postInit ( KeycloakSessionFactory  factory )

inline

                                                         {

    }

showClientCredentialsAdapterConfig()

static boolean org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.showClientCredentialsAdapterConfig ( ClientModel  client )

inlinestatic

                                                                                 {
        if (client.isPublicClient()) {
            return false;
        }

        if (client.isBearerOnly() && !client.isServiceAccountsEnabled() && client.getNodeReRegistrationTimeout() <= 0) {
            return false;
        }

        return true;
    }

showVerifyTokenAudience()

static boolean org.keycloak.protocol.oidc.installation.KeycloakOIDCClientInstallation.showVerifyTokenAudience ( ClientModel  client )

inlinestaticpackage

                                                               {
        String clientId = client.getClientId();
        ClientScopeModel clientScope = KeycloakModelUtils.getClientScopeByName(client.getRealm(), clientId);
        if (clientScope == null) {
            return false;
        }

        for (ProtocolMapperModel protocolMapper : clientScope.getProtocolMappers()) {
            if (AudienceProtocolMapper.PROVIDER_ID.equals(protocolMapper.getProtocolMapper()) && (clientId.equals(protocolMapper.getConfig().get(AudienceProtocolMapper.INCLUDED_CLIENT_AUDIENCE)))) {
                return true;
            }
        }

        return false;
    }

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/protocol/oidc/installation/KeycloakOIDCClientInstallation.java