org.keycloak.forms.account.freemarker.model.ApplicationsBean クラス

org.keycloak.forms.account.freemarker.model.ApplicationsBean 連携図

クラス
class	ApplicationEntry
class	ClientRoleEntry

公開メンバ関数
	ApplicationsBean (KeycloakSession session, RealmModel realm, UserModel user)
List< ApplicationEntry >	getApplications ()

非公開メンバ関数
void	processRoles (Set< RoleModel > inputRoles, List< RoleModel > realmRoles, MultivaluedHashMap< String, ClientRoleEntry > clientRoles)

非公開変数類
List< ApplicationEntry >	applications = new LinkedList<ApplicationEntry>()

詳解

著者

Marek Posolda

構築子と解体子

ApplicationsBean()

org.keycloak.forms.account.freemarker.model.ApplicationsBean.ApplicationsBean ( KeycloakSession  session, RealmModel  realm, UserModel  user  )

inline

                                                                                       {

        Set<ClientModel> offlineClients = new UserSessionManager(session).findClientsWithOfflineToken(realm, user);

        List<ClientModel> realmClients = realm.getClients();
        for (ClientModel client : realmClients) {
            // Don't show bearerOnly clients
            if (client.isBearerOnly()) {
                continue;
            }

            Set<RoleModel> availableRoles = new HashSet<>();
            if (client.getClientId().equals(Constants.ADMIN_CLI_CLIENT_ID)
                    || client.getClientId().equals(Constants.ADMIN_CONSOLE_CLIENT_ID)) {
                if (!AdminPermissions.realms(session, realm, user).isAdmin()) continue;

            } else {
                // Construct scope parameter with all optional scopes to see all potentially available roles
                Set<ClientScopeModel> allClientScopes = new HashSet<>(client.getClientScopes(true, true).values());
                allClientScopes.addAll(client.getClientScopes(false, true).values());
                allClientScopes.add(client);

                availableRoles = TokenManager.getAccess(user, client, allClientScopes);
            }
            List<RoleModel> realmRolesAvailable = new LinkedList<RoleModel>();
            MultivaluedHashMap<String, ClientRoleEntry> resourceRolesAvailable = new MultivaluedHashMap<String, ClientRoleEntry>();
            processRoles(availableRoles, realmRolesAvailable, resourceRolesAvailable);

            List<ClientScopeModel> orderedScopes = new ArrayList<>();
            if (client.isConsentRequired()) {
                UserConsentModel consent = session.users().getConsentByClient(realm, user.getId(), client.getId());

                if (consent != null) {
                    orderedScopes.addAll(consent.getGrantedClientScopes());
                    orderedScopes.sort(new OrderedModel.OrderedModelComparator<>());
                }
            }
            List<String> clientScopesGranted = orderedScopes.stream()
                    .map(ClientScopeModel::getConsentScreenText)
                    .collect(Collectors.toList());

            List<String> additionalGrants = new ArrayList<>();
            if (offlineClients.contains(client)) {
                additionalGrants.add("${offlineToken}");
            }

            ApplicationEntry appEntry = new ApplicationEntry(realmRolesAvailable, resourceRolesAvailable, client,
                    clientScopesGranted, additionalGrants);
            applications.add(appEntry);
        }
    }

関数詳解

getApplications()

List<ApplicationEntry> org.keycloak.forms.account.freemarker.model.ApplicationsBean.getApplications ( )

inline

                                                    {
        return applications;
    }

processRoles()

void org.keycloak.forms.account.freemarker.model.ApplicationsBean.processRoles ( Set< RoleModel >  inputRoles, List< RoleModel >  realmRoles, MultivaluedHashMap< String, ClientRoleEntry >  clientRoles  )

inlineprivate

                                                                                                                                              {
        for (RoleModel role : inputRoles) {
            if (role.getContainer() instanceof RealmModel) {
                realmRoles.add(role);
            } else {
                ClientModel currentClient = (ClientModel) role.getContainer();
                ClientRoleEntry clientRole = new ClientRoleEntry(currentClient.getClientId(), currentClient.getName(),
                        role.getName(), role.getDescription());
                clientRoles.add(currentClient.getClientId(), clientRole);
            }
        }
    }

メンバ詳解

applications

List<ApplicationEntry> org.keycloak.forms.account.freemarker.model.ApplicationsBean.applications = new LinkedList<ApplicationEntry>()

private

---

このクラス詳解は次のファイルから抽出されました:

• D:/AppData/doxygen/keycloak/rest-service/src/services/src/main/java/org/keycloak/forms/account/freemarker/model/ApplicationsBean.java