org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider< C extends OAuth2IdentityProviderConfig >.Endpoint 連携図

公開メンバ関数
	Endpoint (AuthenticationCallback callback, RealmModel realm, EventBuilder event)

Response	authResponse (@QueryParam(AbstractOAuth2IdentityProvider.OAUTH2_PARAMETER_STATE) String state, @QueryParam(AbstractOAuth2IdentityProvider.OAUTH2_PARAMETER_CODE) String authorizationCode, @QueryParam(OAuth2Constants.ERROR) String error)

SimpleHttp	generateTokenRequest (String authorizationCode)

限定公開変数類
AuthenticationCallback	callback

RealmModel	realm

EventBuilder	event

KeycloakSession	session

ClientConnection	clientConnection

HttpHeaders	headers

詳解

構築子と解体子

◆ Endpoint()

org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider< C extends OAuth2IdentityProviderConfig >.Endpoint.Endpoint	(	AuthenticationCallback	callback,
		RealmModel	realm,
		EventBuilder	event
	)

inline

                                                                                                {
             this.callback = callback;
             this.realm = realm;
             this.event = event;
         }

関数詳解

◆ authResponse()

Response org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider< C extends OAuth2IdentityProviderConfig >.Endpoint.authResponse	(	@QueryParam(AbstractOAuth2IdentityProvider.OAUTH2_PARAMETER_STATE) String	state,
		@QueryParam(AbstractOAuth2IdentityProvider.OAUTH2_PARAMETER_CODE) String	authorizationCode,
		@QueryParam(OAuth2Constants.ERROR) String	error
	)

inline

                                                                                       {
             if (error != null) {
                 //logger.error("Failed " + getConfig().getAlias() + " broker login: " + error);
                 if (error.equals(ACCESS_DENIED)) {
                     logger.error(ACCESS_DENIED + " for broker login " + getConfig().getProviderId());
                     return callback.cancelled(state);
                 } else {
                     logger.error(error + " for broker login " + getConfig().getProviderId());
                     return callback.error(state, Messages.IDENTITY_PROVIDER_UNEXPECTED_ERROR);
                 }
             }
 
             try {
 
                 if (authorizationCode != null) {
                     String response = generateTokenRequest(authorizationCode).asString();
 
                     BrokeredIdentityContext federatedIdentity = getFederatedIdentity(response);
 
                     if (getConfig().isStoreToken()) {
                         // make sure that token wasn't already set by getFederatedIdentity();
                         // want to be able to allow provider to set the token itself.
                         if (federatedIdentity.getToken() == null)federatedIdentity.setToken(response);
                     }
 
                     federatedIdentity.setIdpConfig(getConfig());
                     federatedIdentity.setIdp(AbstractOAuth2IdentityProvider.this);
                     federatedIdentity.setCode(state);
 
                     return callback.authenticated(federatedIdentity);
                 }
             } catch (WebApplicationException e) {
                 return e.getResponse();
             } catch (Exception e) {
                 logger.error("Failed to make identity provider oauth callback", e);
             }
             event.event(EventType.LOGIN);
             event.error(Errors.IDENTITY_PROVIDER_LOGIN_FAILURE);
             return ErrorPage.error(session, null, Response.Status.BAD_GATEWAY, Messages.IDENTITY_PROVIDER_UNEXPECTED_ERROR);
         }

◆ generateTokenRequest()

SimpleHttp org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider< C extends OAuth2IdentityProviderConfig >.Endpoint.generateTokenRequest ( String authorizationCode )

inline

                                                                          {
             return SimpleHttp.doPost(getConfig().getTokenUrl(), session)
                     .param(OAUTH2_PARAMETER_CODE, authorizationCode)
                     .param(OAUTH2_PARAMETER_CLIENT_ID, getConfig().getClientId())
                     .param(OAUTH2_PARAMETER_CLIENT_SECRET, getConfig().getClientSecret())
                     .param(OAUTH2_PARAMETER_REDIRECT_URI, session.getContext().getUri().getAbsolutePath().toString())
                     .param(OAUTH2_PARAMETER_GRANT_TYPE, OAUTH2_GRANT_TYPE_AUTHORIZATION_CODE);
         }