org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser クラス

org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser の継承関係図

org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser 連携図

公開メンバ関数
void	parseRequest (AuthorizationEndpointRequest request)

静的公開変数類
static final int	ADDITIONAL_REQ_PARAMS_MAX_MUMBER = 5
static final int	ADDITIONAL_REQ_PARAMS_MAX_SIZE = 200

限定公開メンバ関数
void	extractAdditionalReqParams (Map< String, String > additionalReqParams)
abstract String	getParameter (String paramName)
abstract Integer	getIntParameter (String paramName)
abstract Set< String >	keySet ()

関数
protected< T > T	replaceIfNotNull (T previousVal, T newVal)

静的関数
	[static initializer]

静的非公開変数類
static final Logger	logger = Logger.getLogger(AuthzEndpointRequestParser.class)
static final Set< String >	KNOWN_REQ_PARAMS = new HashSet<>()

詳解

著者

Marek Posolda

関数詳解

[static initializer]()

org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.[static initializer] ( )

inlinestaticpackage

extractAdditionalReqParams()

void org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.extractAdditionalReqParams ( Map< String, String >  additionalReqParams )

inlineprotected

                                                                                       {
        for (String paramName : keySet()) {
            if (!KNOWN_REQ_PARAMS.contains(paramName)) {
                String value = getParameter(paramName);
                if (value != null && value.trim().isEmpty()) {
                    value = null;
                }
                if (value != null && value.length() <= ADDITIONAL_REQ_PARAMS_MAX_SIZE) {
                    if (additionalReqParams.size() >= ADDITIONAL_REQ_PARAMS_MAX_MUMBER) {
                        logger.debug("Maximal number of additional OIDC params (" + ADDITIONAL_REQ_PARAMS_MAX_MUMBER + ") exceeded, ignoring rest of them!");
                        break;
                    }
                    additionalReqParams.put(paramName, value);
                } else {
                    logger.debug("OIDC Additional param " + paramName + " ignored because value is empty or longer than " + ADDITIONAL_REQ_PARAMS_MAX_SIZE);
                }
            }

        }
    }

getIntParameter()

abstract Integer org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.getIntParameter ( String  paramName )

abstractprotected

getParameter()

abstract String org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.getParameter ( String  paramName )

abstractprotected

keySet()

abstract Set<String> org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.keySet ( )

abstractprotected

parseRequest()

void org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.parseRequest ( AuthorizationEndpointRequest  request )

inline

                                                                   {
        String clientId = getParameter(OIDCLoginProtocol.CLIENT_ID_PARAM);

        if (request.clientId != null && !request.clientId.equals(clientId)) {
            throw new IllegalArgumentException("The client_id parameter doesn't match the one from OIDC 'request' or 'request_uri'");
        }

        request.clientId = clientId;
        request.responseType = replaceIfNotNull(request.responseType, getParameter(OIDCLoginProtocol.RESPONSE_TYPE_PARAM));
        request.responseMode = replaceIfNotNull(request.responseMode, getParameter(OIDCLoginProtocol.RESPONSE_MODE_PARAM));
        request.redirectUriParam = replaceIfNotNull(request.redirectUriParam, getParameter(OIDCLoginProtocol.REDIRECT_URI_PARAM));
        request.state = replaceIfNotNull(request.state, getParameter(OIDCLoginProtocol.STATE_PARAM));
        request.scope = replaceIfNotNull(request.scope, getParameter(OIDCLoginProtocol.SCOPE_PARAM));
        request.loginHint = replaceIfNotNull(request.loginHint, getParameter(OIDCLoginProtocol.LOGIN_HINT_PARAM));
        request.prompt = replaceIfNotNull(request.prompt, getParameter(OIDCLoginProtocol.PROMPT_PARAM));
        request.idpHint = replaceIfNotNull(request.idpHint, getParameter(AdapterConstants.KC_IDP_HINT));
        request.nonce = replaceIfNotNull(request.nonce, getParameter(OIDCLoginProtocol.NONCE_PARAM));
        request.maxAge = replaceIfNotNull(request.maxAge, getIntParameter(OIDCLoginProtocol.MAX_AGE_PARAM));
        request.claims = replaceIfNotNull(request.claims, getParameter(OIDCLoginProtocol.CLAIMS_PARAM));
        request.acr = replaceIfNotNull(request.acr, getParameter(OIDCLoginProtocol.ACR_PARAM));
        request.display = replaceIfNotNull(request.display, getParameter(OAuth2Constants.DISPLAY));

        // https://tools.ietf.org/html/rfc7636#section-6.1
        request.codeChallenge = replaceIfNotNull(request.codeChallenge, getParameter(OIDCLoginProtocol.CODE_CHALLENGE_PARAM));
        request.codeChallengeMethod = replaceIfNotNull(request.codeChallengeMethod, getParameter(OIDCLoginProtocol.CODE_CHALLENGE_METHOD_PARAM));

        extractAdditionalReqParams(request.additionalReqParams);
    }

replaceIfNotNull()

protected<T> T org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.replaceIfNotNull ( T  previousVal, T  newVal  )

inlinepackage

                                                              {
        return newVal==null ? previousVal : newVal;
    }

メンバ詳解

ADDITIONAL_REQ_PARAMS_MAX_MUMBER

final int org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.ADDITIONAL_REQ_PARAMS_MAX_MUMBER = 5

static

Max number of additional req params copied into client session note to prevent DoS attacks

ADDITIONAL_REQ_PARAMS_MAX_SIZE

final int org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.ADDITIONAL_REQ_PARAMS_MAX_SIZE = 200

static

Max size of additional req param value copied into client session note to prevent DoS attacks - params with longer value are ignored

KNOWN_REQ_PARAMS

final Set<String> org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.KNOWN_REQ_PARAMS = new HashSet<>()

staticprivate

Set of known protocol GET params not to be stored into additionalReqParams}

logger

final Logger org.keycloak.protocol.oidc.endpoints.request.AuthzEndpointRequestParser.logger = Logger.getLogger(AuthzEndpointRequestParser.class)

staticprivate

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/protocol/oidc/endpoints/request/AuthzEndpointRequestParser.java