org.keycloak.protocol.oidc.endpoints.request.AuthorizationEndpointRequestParserProcessor クラス

org.keycloak.protocol.oidc.endpoints.request.AuthorizationEndpointRequestParserProcessor 連携図

静的公開メンバ関数
static AuthorizationEndpointRequest	parseRequest (EventBuilder event, KeycloakSession session, ClientModel client, MultivaluedMap< String, String > requestParams)

詳解

著者

Marek Posolda

関数詳解

parseRequest()

static AuthorizationEndpointRequest org.keycloak.protocol.oidc.endpoints.request.AuthorizationEndpointRequestParserProcessor.parseRequest ( EventBuilder  event, KeycloakSession  session, ClientModel  client, MultivaluedMap< String, String >  requestParams  )

inlinestatic

                                                                                                                                                                           {
        try {
            AuthorizationEndpointRequest request = new AuthorizationEndpointRequest();

            new AuthzEndpointQueryStringParser(requestParams).parseRequest(request);

            String requestParam = requestParams.getFirst(OIDCLoginProtocol.REQUEST_PARAM);
            String requestUriParam = requestParams.getFirst(OIDCLoginProtocol.REQUEST_URI_PARAM);

            if (requestParam != null && requestUriParam != null) {
                throw new RuntimeException("Illegal to use both 'request' and 'request_uri' parameters together");
            }

            String requestObjectRequired = OIDCAdvancedConfigWrapper.fromClientModel(client).getRequestObjectRequired();

            if (OIDCConfigAttributes.REQUEST_OBJECT_REQUIRED_REQUEST_OR_REQUEST_URI.equals(requestObjectRequired)
                    && requestParam == null && requestUriParam == null) {
                throw new RuntimeException("Client is required to use 'request' or 'request_uri' parameter.");
            } else if (OIDCConfigAttributes.REQUEST_OBJECT_REQUIRED_REQUEST.equals(requestObjectRequired)
                    && requestParam == null) {
                throw new RuntimeException("Client is required to use 'request' parameter.");
            } else if (OIDCConfigAttributes.REQUEST_OBJECT_REQUIRED_REQUEST_URI.equals(requestObjectRequired)
                    && requestUriParam == null) {
                throw new RuntimeException("Client is required to use 'request_uri' parameter.");
            }

            if (requestParam != null) {
                new AuthzEndpointRequestObjectParser(session, requestParam, client).parseRequest(request);
            } else if (requestUriParam != null) {
                InputStream is = session.getProvider(HttpClientProvider.class).get(requestUriParam);
                String retrievedRequest = StreamUtil.readString(is);

                new AuthzEndpointRequestObjectParser(session, retrievedRequest, client).parseRequest(request);
            }

            return request;

        } catch (Exception e) {
            ServicesLogger.LOGGER.invalidRequest(e);
            event.error(Errors.INVALID_REQUEST);
            throw new ErrorPageException(session, Response.Status.BAD_REQUEST, Messages.INVALID_REQUEST);
        }
    }

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/protocol/oidc/endpoints/request/AuthorizationEndpointRequestParserProcessor.java