keycloak-service
公開メンバ関数 | 静的公開メンバ関数 | 静的公開変数類 | 非公開メンバ関数 | 静的非公開変数類 | 全メンバ一覧
org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken クラス
org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken の継承関係図
Inheritance graph
org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken 連携図
Collaboration graph

公開メンバ関数

 ExecuteActionsActionToken (String userId, int absoluteExpirationInSecs, List< String > requiredActions, String redirectUri, String clientId)
 
List< String > getRequiredActions ()
 
final void setRequiredActions (List< String > requiredActions)
 
String getRedirectUri ()
 
final void setRedirectUri (String redirectUri)
 
String getCompoundAuthenticationSessionId ()
 
final void setCompoundAuthenticationSessionId (String authenticationSessionId)
 
Map< String, String > getNotes ()
 
String getNote (String name)
 
final String setNote (String name, String value)
 
final String removeNote (String name)
 
String serialize (KeycloakSession session, RealmModel realm, UriInfo uri)
 
String getUserId ()
 
String getActionId ()
 
UUID getActionVerificationNonce ()
 

静的公開メンバ関数

static DefaultActionTokenKey from (String serializedKey)
 

静的公開変数類

static final String TOKEN_TYPE = "execute-actions"
 
static final String JSON_FIELD_AUTHENTICATION_SESSION_ID = "asid"
 
static final Predicate< DefaultActionTokenKeyACTION_TOKEN_BASIC_CHECKS
 
static final String ACTION_TOKEN_USER_ID = "ACTION_TOKEN_USER"
 
static final String JSON_FIELD_ACTION_VERIFICATION_NONCE = "nonce"
 

非公開メンバ関数

 ExecuteActionsActionToken ()
 

静的非公開変数類

static final String JSON_FIELD_REQUIRED_ACTIONS = "rqac"
 
static final String JSON_FIELD_REDIRECT_URI = "reduri"
 

詳解

著者
hmlnarik

構築子と解体子

◆ ExecuteActionsActionToken() [1/2]

org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.ExecuteActionsActionToken ( String  userId,
int  absoluteExpirationInSecs,
List< String >  requiredActions,
String  redirectUri,
String  clientId 
)
inline
34  {
35  super(userId, TOKEN_TYPE, absoluteExpirationInSecs, null);
36  setRequiredActions(requiredActions == null ? new LinkedList<>() : new LinkedList<>(requiredActions));
37  setRedirectUri(redirectUri);
38  this.issuedFor = clientId;
39  }
static final String TOKEN_TYPE
Definition: ExecuteActionsActionToken.java:30
final void setRedirectUri(String redirectUri)
Definition: ExecuteActionsActionToken.java:64
final void setRequiredActions(List< String > requiredActions)
Definition: ExecuteActionsActionToken.java:50

◆ ExecuteActionsActionToken() [2/2]

org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.ExecuteActionsActionToken ( )
inlineprivate
41  {
42  }

関数詳解

◆ from()

static DefaultActionTokenKey org.keycloak.authentication.actiontoken.DefaultActionTokenKey.from ( String  serializedKey)
inlinestaticinherited
74  {
75  if (serializedKey == null) {
76  return null;
77  }
78  String[] parsed = DOT.split(serializedKey, 4);
79  if (parsed.length != 4) {
80  return null;
81  }
82 
83  String userId;
84  try {
85  userId = new String(Base64.decode(parsed[0]), StandardCharsets.UTF_8);
86  } catch (IOException ex) {
87  userId = parsed[0];
88  }
89  return new DefaultActionTokenKey(userId, parsed[3], Integer.parseInt(parsed[1]), UUID.fromString(parsed[2]));
90  }
static final Pattern DOT
Definition: DefaultActionTokenKey.java:72
DefaultActionTokenKey()
Definition: DefaultActionTokenKey.java:45

◆ getActionId()

String org.keycloak.authentication.actiontoken.DefaultActionTokenKey.getActionId ( )
inlineinherited
63  {
64  return getType();
65  }

◆ getActionVerificationNonce()

UUID org.keycloak.authentication.actiontoken.DefaultActionTokenKey.getActionVerificationNonce ( )
inlineinherited
68  {
70  }
UUID actionVerificationNonce
Definition: DefaultActionTokenKey.java:43

◆ getCompoundAuthenticationSessionId()

String org.keycloak.authentication.actiontoken.DefaultActionToken.getCompoundAuthenticationSessionId ( )
inlineinherited
80  {
81  return (String) getOtherClaims().get(JSON_FIELD_AUTHENTICATION_SESSION_ID);
82  }
static final String JSON_FIELD_AUTHENTICATION_SESSION_ID
Definition: DefaultActionToken.java:39

◆ getNote()

String org.keycloak.authentication.actiontoken.DefaultActionToken.getNote ( String  name)
inlineinherited
100  {
101  Object res = getOtherClaims().get(name);
102  return res instanceof String ? (String) res : null;
103  }

◆ getNotes()

Map<String, String> org.keycloak.authentication.actiontoken.DefaultActionToken.getNotes ( )
inlineinherited
91  {
92  Map<String, String> res = new HashMap<>();
93  if (getCompoundAuthenticationSessionId() != null) {
95  }
96  return res;
97  }
static final String JSON_FIELD_AUTHENTICATION_SESSION_ID
Definition: DefaultActionToken.java:39
String getCompoundAuthenticationSessionId()
Definition: DefaultActionToken.java:80

◆ getRedirectUri()

String org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.getRedirectUri ( )
inline
59  {
60  return (String) getOtherClaims().get(JSON_FIELD_REDIRECT_URI);
61  }
static final String JSON_FIELD_REDIRECT_URI
Definition: ExecuteActionsActionToken.java:32

◆ getRequiredActions()

List<String> org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.getRequiredActions ( )
inline
45  {
46  return (List<String>) getOtherClaims().get(JSON_FIELD_REQUIRED_ACTIONS);
47  }
static final String JSON_FIELD_REQUIRED_ACTIONS
Definition: ExecuteActionsActionToken.java:31

◆ getUserId()

String org.keycloak.authentication.actiontoken.DefaultActionTokenKey.getUserId ( )
inlineinherited
57  {
58  return getSubject();
59  }

◆ removeNote()

final String org.keycloak.authentication.actiontoken.DefaultActionToken.removeNote ( String  name)
inlineinherited

Removes given note, and returns original value (or

null

when no value was present)

戻り値
see description
120  {
121  Object res = getOtherClaims().remove(name);
122  return res instanceof String ? (String) res : null;
123  }

◆ serialize()

String org.keycloak.authentication.actiontoken.DefaultActionToken.serialize ( KeycloakSession  session,
RealmModel  realm,
UriInfo  uri 
)
inlineinherited

Updates the following fields and serializes this token into a signed JWT. The list of updated fields follows:

  • id
    : random nonce
  • issuedAt
    : Current time
  • issuer
    : URI of the given realm
  • audience
    : URI of the given realm (same as issuer)
引数
session
realm
uri
戻り値
139  {
140  String issuerUri = getIssuer(realm, uri);
141 
142  this
143  .issuedAt(Time.currentTime())
144  .id(getActionVerificationNonce().toString())
145  .issuer(issuerUri)
146  .audience(issuerUri);
147 
148  return session.tokens().encode(this);
149  }
UUID getActionVerificationNonce()
Definition: DefaultActionTokenKey.java:68
static String getIssuer(RealmModel realm, UriInfo uri)
Definition: DefaultActionToken.java:151

◆ setCompoundAuthenticationSessionId()

final void org.keycloak.authentication.actiontoken.DefaultActionToken.setCompoundAuthenticationSessionId ( String  authenticationSessionId)
inlineinherited
85  {
86  setOtherClaims(JSON_FIELD_AUTHENTICATION_SESSION_ID, authenticationSessionId);
87  }
static final String JSON_FIELD_AUTHENTICATION_SESSION_ID
Definition: DefaultActionToken.java:39

◆ setNote()

final String org.keycloak.authentication.actiontoken.DefaultActionToken.setNote ( String  name,
String  value 
)
inlineinherited

Sets value of the given note

戻り値
original value (or
null
when no value was present)
109  {
110  Object res = value == null
111  ? getOtherClaims().remove(name)
112  : getOtherClaims().put(name, value);
113  return res instanceof String ? (String) res : null;
114  }

◆ setRedirectUri()

final void org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.setRedirectUri ( String  redirectUri)
inline
64  {
65  if (redirectUri == null) {
66  getOtherClaims().remove(JSON_FIELD_REDIRECT_URI);
67  } else {
68  setOtherClaims(JSON_FIELD_REDIRECT_URI, redirectUri);
69  }
70  }
static final String JSON_FIELD_REDIRECT_URI
Definition: ExecuteActionsActionToken.java:32

◆ setRequiredActions()

final void org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.setRequiredActions ( List< String >  requiredActions)
inline
50  {
51  if (requiredActions == null) {
52  getOtherClaims().remove(JSON_FIELD_REQUIRED_ACTIONS);
53  } else {
54  setOtherClaims(JSON_FIELD_REQUIRED_ACTIONS, requiredActions);
55  }
56  }
static final String JSON_FIELD_REQUIRED_ACTIONS
Definition: ExecuteActionsActionToken.java:31

メンバ詳解

◆ ACTION_TOKEN_BASIC_CHECKS

final Predicate<DefaultActionTokenKey> org.keycloak.authentication.actiontoken.DefaultActionToken.ACTION_TOKEN_BASIC_CHECKS
staticinherited
初期値:
= t -> {
if (t.getActionVerificationNonce() == null) {
throw new VerificationException("Nonce not present.");
}
return true;
}

◆ ACTION_TOKEN_USER_ID

final String org.keycloak.authentication.actiontoken.DefaultActionTokenKey.ACTION_TOKEN_USER_ID = "ACTION_TOKEN_USER"
staticinherited

The authenticationSession note with ID of the user authenticated via the action token

◆ JSON_FIELD_ACTION_VERIFICATION_NONCE

final String org.keycloak.authentication.actiontoken.DefaultActionTokenKey.JSON_FIELD_ACTION_VERIFICATION_NONCE = "nonce"
staticinherited

◆ JSON_FIELD_AUTHENTICATION_SESSION_ID

final String org.keycloak.authentication.actiontoken.DefaultActionToken.JSON_FIELD_AUTHENTICATION_SESSION_ID = "asid"
staticinherited

◆ JSON_FIELD_REDIRECT_URI

final String org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.JSON_FIELD_REDIRECT_URI = "reduri"
staticprivate

◆ JSON_FIELD_REQUIRED_ACTIONS

final String org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.JSON_FIELD_REQUIRED_ACTIONS = "rqac"
staticprivate

◆ TOKEN_TYPE

final String org.keycloak.authentication.actiontoken.execactions.ExecuteActionsActionToken.TOKEN_TYPE = "execute-actions"
static

このクラス詳解は次のファイルから抽出されました: