org.keycloak.services.resources.AbstractSecuredLocalService クラス

org.keycloak.services.resources.AbstractSecuredLocalService の継承関係図

org.keycloak.services.resources.AbstractSecuredLocalService 連携図

クラス
class	OAuthRedirect

公開メンバ関数
	AbstractSecuredLocalService (RealmModel realm, ClientModel client)
Response	loginRedirect (@QueryParam("code") String code, @QueryParam("state") String state, @QueryParam("error") String error, @QueryParam("path") String path, @QueryParam("referrer") String referrer, @Context HttpHeaders headers)

限定公開メンバ関数
abstract Set< String >	getValidPaths ()
abstract URI	getBaseRedirectUri ()
Response	login (String path)

限定公開変数類
final ClientModel	client
RealmModel	realm
HttpHeaders	headers
ClientConnection	clientConnection
String	stateChecker
KeycloakSession	session
HttpRequest	request
Auth	auth

静的非公開変数類
static final Logger	logger = Logger.getLogger(AbstractSecuredLocalService.class)

詳解

Helper class for securing local services. Provides login basics as well as CSRF check basics

著者

Bill Burke

バージョン

Revision

1

構築子と解体子

AbstractSecuredLocalService()

org.keycloak.services.resources.AbstractSecuredLocalService.AbstractSecuredLocalService ( RealmModel  realm, ClientModel  client  )

inline

                                                                             {
        this.realm = realm;
        this.client = client;
    }

関数詳解

getBaseRedirectUri()

abstract URI org.keycloak.services.resources.AbstractSecuredLocalService.getBaseRedirectUri ( )

abstractprotected

getValidPaths()

abstract Set<String> org.keycloak.services.resources.AbstractSecuredLocalService.getValidPaths ( )

abstractprotected

login()

Response org.keycloak.services.resources.AbstractSecuredLocalService.login ( String  path )

inlineprotected

                                          {
        OAuthRedirect oauth = new OAuthRedirect();
        String authUrl = OIDCLoginProtocolService.authUrl(session.getContext().getUri()).build(realm.getName()).toString();
        oauth.setAuthUrl(authUrl);

        oauth.setClientId(client.getClientId());

        oauth.setSecure(realm.getSslRequired().isRequired(clientConnection));

        UriBuilder uriBuilder = UriBuilder.fromUri(getBaseRedirectUri()).path("login-redirect");

        if (path != null) {
            uriBuilder.queryParam("path", path);
        }

        String referrer = session.getContext().getUri().getQueryParameters().getFirst("referrer");
        if (referrer != null) {
            uriBuilder.queryParam("referrer", referrer);
        }

        String referrerUri = session.getContext().getUri().getQueryParameters().getFirst("referrer_uri");
        if (referrerUri != null) {
            uriBuilder.queryParam("referrer_uri", referrerUri);
        }

        URI accountUri = uriBuilder.build(realm.getName());

        oauth.setStateCookiePath(accountUri.getRawPath());
        return oauth.redirect(session.getContext().getUri(), accountUri.toString());
    }

loginRedirect()

Response org.keycloak.services.resources.AbstractSecuredLocalService.loginRedirect ( @QueryParam("code") String  code, @QueryParam("state") String  state, @QueryParam("error") String  error, @QueryParam("path") String  path, @QueryParam("referrer") String  referrer, @Context HttpHeaders  headers  )

inline

                                                                {
        try {
            if (error != null) {
                if (OAuthErrorException.ACCESS_DENIED.equals(error)) {
                    // cased by CANCELLED_BY_USER or CONSENT_DENIED
                    session.getContext().setClient(client);
                    return session.getProvider(LoginFormsProvider.class).setError(Messages.NO_ACCESS).createErrorPage(Response.Status.FORBIDDEN);
                } else {
                    logger.debug("error from oauth");
                    throw new ForbiddenException("error");
                }
            }
            if (path != null && !getValidPaths().contains(path)) {
                throw new BadRequestException("Invalid path");
            }
            if (!realm.isEnabled()) {
                logger.debug("realm not enabled");
                throw new ForbiddenException();
            }
            if (!client.isEnabled()) {
                logger.debug("account management app not enabled");
                throw new ForbiddenException();
            }
            if (code == null) {
                logger.debug("code not specified");
                throw new BadRequestException("code not specified");
            }
            if (state == null) {
                logger.debug("state not specified");
                throw new BadRequestException("state not specified");
            }
            KeycloakUriBuilder redirect = KeycloakUriBuilder.fromUri(getBaseRedirectUri());
            if (path != null) {
                redirect.path(path);
            }
            if (referrer != null) {
                redirect.queryParam("referrer", referrer);
            }

            return Response.status(302).location(redirect.build()).build();
        } finally {
        }
    }

メンバ詳解

auth

Auth org.keycloak.services.resources.AbstractSecuredLocalService.auth

protected

client

final ClientModel org.keycloak.services.resources.AbstractSecuredLocalService.client

protected

clientConnection

ClientConnection org.keycloak.services.resources.AbstractSecuredLocalService.clientConnection

protected

headers

HttpHeaders org.keycloak.services.resources.AbstractSecuredLocalService.headers

protected

logger

final Logger org.keycloak.services.resources.AbstractSecuredLocalService.logger = Logger.getLogger(AbstractSecuredLocalService.class)

staticprivate

realm

RealmModel org.keycloak.services.resources.AbstractSecuredLocalService.realm

protected

request

HttpRequest org.keycloak.services.resources.AbstractSecuredLocalService.request

protected

session

KeycloakSession org.keycloak.services.resources.AbstractSecuredLocalService.session

protected

stateChecker

String org.keycloak.services.resources.AbstractSecuredLocalService.stateChecker

protected

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/services/resources/AbstractSecuredLocalService.java