org.keycloak.broker.oidc.KeycloakOIDCIdentityProvider.KeycloakEndpoint クラス

org.keycloak.broker.oidc.KeycloakOIDCIdentityProvider.KeycloakEndpoint の継承関係図

org.keycloak.broker.oidc.KeycloakOIDCIdentityProvider.KeycloakEndpoint 連携図

公開メンバ関数
	KeycloakEndpoint (AuthenticationCallback callback, RealmModel realm, EventBuilder event)
Response	backchannelLogout (String input)
SimpleHttp	generateTokenRequest (String authorizationCode)
Response	logoutResponse (@QueryParam("state") String state)

限定公開メンバ関数
boolean	validateAction (AdminAction action)

詳解

構築子と解体子

KeycloakEndpoint()

org.keycloak.broker.oidc.KeycloakOIDCIdentityProvider.KeycloakEndpoint.KeycloakEndpoint ( AuthenticationCallback  callback, RealmModel  realm, EventBuilder  event  )

inline

                                                                                                       {
            super(callback, realm, event);
        }

関数詳解

backchannelLogout()

Response org.keycloak.broker.oidc.KeycloakOIDCIdentityProvider.KeycloakEndpoint.backchannelLogout ( String  input )

inline

                                                        {
            JWSInput token = null;
            try {
                token = new JWSInput(input);
            } catch (JWSInputException e) {
                logger.warn("Failed to verify logout request");
                return Response.status(400).build();
            }

            if (!verify(token)) {
                logger.warn("Failed to verify logout request");
                return Response.status(400).build();
            }

            LogoutAction action = null;
            try {
                action = JsonSerialization.readValue(token.getContent(), LogoutAction.class);
            } catch (IOException e) {
                throw new RuntimeException(e);
            }
            if (!validateAction(action)) return Response.status(400).build();
            if (action.getKeycloakSessionIds() != null) {
                for (String sessionId : action.getKeycloakSessionIds()) {
                    String brokerSessionId = getConfig().getAlias() + "." + sessionId;
                    UserSessionModel userSession = session.sessions().getUserSessionByBrokerSessionId(realm, brokerSessionId);
                    if (userSession != null
                            && userSession.getState() != UserSessionModel.State.LOGGING_OUT
                            && userSession.getState() != UserSessionModel.State.LOGGED_OUT
                            ) {
                        AuthenticationManager.backchannelLogout(session, realm, userSession, session.getContext().getUri(), clientConnection, headers, false);
                    }
                }

            }
            return Response.ok().build();
        }

generateTokenRequest()

SimpleHttp org.keycloak.broker.oidc.KeycloakOIDCIdentityProvider.KeycloakEndpoint.generateTokenRequest ( String  authorizationCode )

inline

                                                                         {
            return super.generateTokenRequest(authorizationCode)
                    .param(AdapterConstants.CLIENT_SESSION_STATE, "n/a");  // hack to get backchannel logout to work

        }

logoutResponse()

Response org.keycloak.broker.oidc.OIDCIdentityProvider.OIDCEndpoint.logoutResponse ( @QueryParam("state") String  state )

inlineinherited

                                                                          {
            UserSessionModel userSession = session.sessions().getUserSession(realm, state);
            if (userSession == null) {
                logger.error("no valid user session");
                EventBuilder event = new EventBuilder(realm, session, clientConnection);
                event.event(EventType.LOGOUT);
                event.error(Errors.USER_SESSION_NOT_FOUND);
                return ErrorPage.error(session, null, Response.Status.BAD_REQUEST, Messages.IDENTITY_PROVIDER_UNEXPECTED_ERROR);
            }
            if (userSession.getState() != UserSessionModel.State.LOGGING_OUT) {
                logger.error("usersession in different state");
                EventBuilder event = new EventBuilder(realm, session, clientConnection);
                event.event(EventType.LOGOUT);
                event.error(Errors.USER_SESSION_NOT_FOUND);
                return ErrorPage.error(session, null, Response.Status.BAD_REQUEST, Messages.SESSION_NOT_ACTIVE);
            }
            return AuthenticationManager.finishBrowserLogout(session, realm, userSession, session.getContext().getUri(), clientConnection, headers);
        }

validateAction()

boolean org.keycloak.broker.oidc.KeycloakOIDCIdentityProvider.KeycloakEndpoint.validateAction ( AdminAction  action )

inlineprotected

                                                              {
            if (!action.validate()) {
                logger.warn("admin request failed, not validated" + action.getAction());
                return false;
            }
            if (action.isExpired()) {
                logger.warn("admin request failed, expired token");
                return false;
            }
            if (!getConfig().getClientId().equals(action.getResource())) {
                logger.warn("Resource name does not match");
                return false;

            }
            return true;
        }

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/broker/oidc/KeycloakOIDCIdentityProvider.java