org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator の継承関係図

org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator 連携図

クラス
class	CertificateValidatorConfigBuilder

class	UserIdentityExtractorBuilder

class	UserIdentityToModelMapperBuilder

公開メンバ関数
CertificateValidator.CertificateValidatorBuilder	certificateValidationParameters (X509AuthenticatorConfigModel config) throws Exception

void	close ()

UserIdentityExtractor	getUserIdentityExtractor (X509AuthenticatorConfigModel config)

UserIdentityToModelMapper	getUserIdentityToModelMapper (X509AuthenticatorConfigModel config)

boolean	requiresUser ()

boolean	configuredFor (KeycloakSession session, RealmModel realm, UserModel user)

void	setRequiredActions (KeycloakSession session, RealmModel realm, UserModel user)

静的公開変数類
static final String	DEFAULT_ATTRIBUTE_NAME = "usercertificate"

static final String	REGULAR_EXPRESSION = "x509-cert-auth.regular-expression"

static final String	ENABLE_CRL = "x509-cert-auth.crl-checking-enabled"

static final String	ENABLE_OCSP = "x509-cert-auth.ocsp-checking-enabled"

static final String	ENABLE_CRLDP = "x509-cert-auth.crldp-checking-enabled"

static final String	CRL_RELATIVE_PATH = "x509-cert-auth.crl-relative-path"

static final String	OCSPRESPONDER_URI = "x509-cert-auth.ocsp-responder-uri"

static final String	MAPPING_SOURCE_SELECTION = "x509-cert-auth.mapping-source-selection"

static final String	MAPPING_SOURCE_CERT_SUBJECTDN = "Match SubjectDN using regular expression"

static final String	MAPPING_SOURCE_CERT_SUBJECTDN_EMAIL = "Subject's e-mail"

static final String	MAPPING_SOURCE_CERT_SUBJECTALTNAME_EMAIL = "Subject's Alternative Name E-mail"

static final String	MAPPING_SOURCE_CERT_SUBJECTDN_CN = "Subject's Common Name"

static final String	MAPPING_SOURCE_CERT_ISSUERDN = "Match IssuerDN using regular expression"

static final String	MAPPING_SOURCE_CERT_ISSUERDN_EMAIL = "Issuer's e-mail"

static final String	MAPPING_SOURCE_CERT_ISSUERDN_CN = "Issuer's Common Name"

static final String	MAPPING_SOURCE_CERT_SERIALNUMBER = "Certificate Serial Number"

static final String	USER_MAPPER_SELECTION = "x509-cert-auth.mapper-selection"

static final String	USER_ATTRIBUTE_MAPPER = "Custom Attribute Mapper"

static final String	USERNAME_EMAIL_MAPPER = "Username or Email"

static final String	CUSTOM_ATTRIBUTE_NAME = "x509-cert-auth.mapper-selection.user-attribute-name"

static final String	CERTIFICATE_KEY_USAGE = "x509-cert-auth.keyusage"

static final String	CERTIFICATE_EXTENDED_KEY_USAGE = "x509-cert-auth.extendedkeyusage"

static final String	CONFIRMATION_PAGE_DISALLOWED = "x509-cert-auth.confirmation-page-disallowed"

限定公開メンバ関数
Response	createInfoResponse (AuthenticationFlowContext context, String infoMessage, Object ... parameters)

X509Certificate []	getCertificateChain (AuthenticationFlowContext context)

静的限定公開変数類
static ServicesLogger	logger = ServicesLogger.LOGGER

静的変数
static final String	DEFAULT_MATCH_ALL_EXPRESSION = "(.*?)(?:$)"

詳解

著者: Peter Nalyvayko

バージョン

Revision: 1

日付: 7/31/2016

関数詳解

◆ certificateValidationParameters()

CertificateValidator.CertificateValidatorBuilder org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.certificateValidationParameters ( X509AuthenticatorConfigModel config ) throws Exception

inline

                                                                                                                                                   {
         return CertificateValidatorConfigBuilder.fromConfig(config);
     }

◆ close()

void org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.close ( )

inline

                         {
 
     }

◆ configuredFor()

boolean org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.configuredFor	(	KeycloakSession	session,
		RealmModel	realm,
		UserModel	user
	)

inline

                                                                                             {
         return true;
     }

◆ createInfoResponse()

Response org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.createInfoResponse	(	AuthenticationFlowContext	context,
		String	infoMessage,
		Object ...	parameters
	)

inlineprotected

                                                                                                                         {
         LoginFormsProvider form = context.form();
         return form.setInfo(infoMessage, parameters).createInfoPage();
     }

◆ getCertificateChain()

X509Certificate [] org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.getCertificateChain ( AuthenticationFlowContext context )

inlineprotected

                                                                                        {
         try {
             // Get a x509 client certificate
             X509ClientCertificateLookup provider = context.getSession().getProvider(X509ClientCertificateLookup.class);
             if (provider == null) {
                 logger.errorv("\"{0}\" Spi is not available, did you forget to update the configuration?",
                         X509ClientCertificateLookup.class);
                 return null;
             }
 
             X509Certificate[] certs = provider.getCertificateChain(context.getHttpRequest());
 
             if (certs != null) {
                 for (X509Certificate cert : certs) {
                     logger.tracev("\"{0}\"", cert.getSubjectDN().getName());
                 }
             }
 
             return certs;
         }
         catch (GeneralSecurityException e) {
             logger.error(e.getMessage(), e);
         }
         return null;
     }

◆ getUserIdentityExtractor()

UserIdentityExtractor org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.getUserIdentityExtractor ( X509AuthenticatorConfigModel config )

inline

                                                                                                {
         return UserIdentityExtractorBuilder.fromConfig(config);
     }

◆ getUserIdentityToModelMapper()

UserIdentityToModelMapper org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.getUserIdentityToModelMapper ( X509AuthenticatorConfigModel config )

inline

                                                                                                        {
         return UserIdentityToModelMapperBuilder.fromConfig(config);
     }

◆ requiresUser()

boolean org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.requiresUser ( )

inline

                                   {
         return false;
     }

◆ setRequiredActions()

void org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.setRequiredActions	(	KeycloakSession	session,
		RealmModel	realm,
		UserModel	user
	)

inline

240 {

241 }

メンバ詳解

◆ CERTIFICATE_EXTENDED_KEY_USAGE

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.CERTIFICATE_EXTENDED_KEY_USAGE = "x509-cert-auth.extendedkeyusage"

static

◆ CERTIFICATE_KEY_USAGE

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.CERTIFICATE_KEY_USAGE = "x509-cert-auth.keyusage"

static

◆ CONFIRMATION_PAGE_DISALLOWED

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.CONFIRMATION_PAGE_DISALLOWED = "x509-cert-auth.confirmation-page-disallowed"

static

◆ CRL_RELATIVE_PATH

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.CRL_RELATIVE_PATH = "x509-cert-auth.crl-relative-path"

static

◆ CUSTOM_ATTRIBUTE_NAME

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.CUSTOM_ATTRIBUTE_NAME = "x509-cert-auth.mapper-selection.user-attribute-name"

static

◆ DEFAULT_ATTRIBUTE_NAME

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.DEFAULT_ATTRIBUTE_NAME = "usercertificate"

static

◆ DEFAULT_MATCH_ALL_EXPRESSION

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.DEFAULT_MATCH_ALL_EXPRESSION = "(.*?)(?:$)"

staticpackage

◆ ENABLE_CRL

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.ENABLE_CRL = "x509-cert-auth.crl-checking-enabled"

static

◆ ENABLE_CRLDP

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.ENABLE_CRLDP = "x509-cert-auth.crldp-checking-enabled"

static

◆ ENABLE_OCSP

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.ENABLE_OCSP = "x509-cert-auth.ocsp-checking-enabled"

static

◆ logger

ServicesLogger org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.logger = ServicesLogger.LOGGER

staticprotected

◆ MAPPING_SOURCE_CERT_ISSUERDN

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_CERT_ISSUERDN = "Match IssuerDN using regular expression"

static

◆ MAPPING_SOURCE_CERT_ISSUERDN_CN

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_CERT_ISSUERDN_CN = "Issuer's Common Name"

static

◆ MAPPING_SOURCE_CERT_ISSUERDN_EMAIL

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_CERT_ISSUERDN_EMAIL = "Issuer's e-mail"

static

◆ MAPPING_SOURCE_CERT_SERIALNUMBER

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_CERT_SERIALNUMBER = "Certificate Serial Number"

static

◆ MAPPING_SOURCE_CERT_SUBJECTALTNAME_EMAIL

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_CERT_SUBJECTALTNAME_EMAIL = "Subject's Alternative Name E-mail"

static

◆ MAPPING_SOURCE_CERT_SUBJECTDN

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_CERT_SUBJECTDN = "Match SubjectDN using regular expression"

static

◆ MAPPING_SOURCE_CERT_SUBJECTDN_CN

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_CERT_SUBJECTDN_CN = "Subject's Common Name"

static

◆ MAPPING_SOURCE_CERT_SUBJECTDN_EMAIL

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_CERT_SUBJECTDN_EMAIL = "Subject's e-mail"

static

◆ MAPPING_SOURCE_SELECTION

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.MAPPING_SOURCE_SELECTION = "x509-cert-auth.mapping-source-selection"

static

◆ OCSPRESPONDER_URI

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.OCSPRESPONDER_URI = "x509-cert-auth.ocsp-responder-uri"

static

◆ REGULAR_EXPRESSION

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.REGULAR_EXPRESSION = "x509-cert-auth.regular-expression"

static

◆ USER_ATTRIBUTE_MAPPER

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.USER_ATTRIBUTE_MAPPER = "Custom Attribute Mapper"

static

◆ USER_MAPPER_SELECTION

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.USER_MAPPER_SELECTION = "x509-cert-auth.mapper-selection"

static

◆ USERNAME_EMAIL_MAPPER

final String org.keycloak.authentication.authenticators.x509.AbstractX509ClientCertificateAuthenticator.USERNAME_EMAIL_MAPPER = "Username or Email"

static

このクラス詳解は次のファイルから抽出されました:

D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/authentication/authenticators/x509/AbstractX509ClientCertificateAuthenticator.java

クラス

公開メンバ関数

静的公開変数類

限定公開メンバ関数

静的限定公開変数類

静的変数

詳解

関数詳解

◆ certificateValidationParameters()

◆ close()

◆ configuredFor()

◆ createInfoResponse()

◆ getCertificateChain()

◆ getUserIdentityExtractor()

◆ getUserIdentityToModelMapper()

◆ requiresUser()

◆ setRequiredActions()

メンバ詳解

◆ CERTIFICATE_EXTENDED_KEY_USAGE

◆ CERTIFICATE_KEY_USAGE

◆ CONFIRMATION_PAGE_DISALLOWED

◆ CRL_RELATIVE_PATH

◆ CUSTOM_ATTRIBUTE_NAME

◆ DEFAULT_ATTRIBUTE_NAME

◆ DEFAULT_MATCH_ALL_EXPRESSION

◆ ENABLE_CRL

◆ ENABLE_CRLDP

◆ ENABLE_OCSP

◆ logger

◆ MAPPING_SOURCE_CERT_ISSUERDN

◆ MAPPING_SOURCE_CERT_ISSUERDN_CN

◆ MAPPING_SOURCE_CERT_ISSUERDN_EMAIL

◆ MAPPING_SOURCE_CERT_SERIALNUMBER

◆ MAPPING_SOURCE_CERT_SUBJECTALTNAME_EMAIL

◆ MAPPING_SOURCE_CERT_SUBJECTDN

◆ MAPPING_SOURCE_CERT_SUBJECTDN_CN

◆ MAPPING_SOURCE_CERT_SUBJECTDN_EMAIL

◆ MAPPING_SOURCE_SELECTION

◆ OCSPRESPONDER_URI

◆ REGULAR_EXPRESSION

◆ USER_ATTRIBUTE_MAPPER

◆ USER_MAPPER_SELECTION

◆ USERNAME_EMAIL_MAPPER