Class DefaultClaimsToGrantedAuthoritiesPolicy
- java.lang.Object
-
- com.xebialabs.platform.sso.oidc.policy.impl.DefaultClaimsToGrantedAuthoritiesPolicy
-
- All Implemented Interfaces:
ClaimsToGrantedAuthoritiesPolicy
public class DefaultClaimsToGrantedAuthoritiesPolicy extends java.lang.Object implements ClaimsToGrantedAuthoritiesPolicy
Provides default behavior for case when a group claim is bound to granted authorities.
-
-
Constructor Summary
Constructors Constructor Description DefaultClaimsToGrantedAuthoritiesPolicy(java.lang.String rolesClaimName)
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description java.util.List<org.springframework.security.core.GrantedAuthority>claimsToGrantedAuthorities(java.util.Map<java.lang.String,java.lang.Object> oidcClaims)Derive theGrantedAuthoritys from the claims provided by the IDP.
-
-
-
Method Detail
-
claimsToGrantedAuthorities
public java.util.List<org.springframework.security.core.GrantedAuthority> claimsToGrantedAuthorities(java.util.Map<java.lang.String,java.lang.Object> oidcClaims)
Description copied from interface:ClaimsToGrantedAuthoritiesPolicyDerive theGrantedAuthoritys from the claims provided by the IDP.It seems there's no real standard claim for groups/roles. In Okta it seems to be named 'groups' in KeyCloak it can be configured and filled with Groups or Roles.
- Specified by:
claimsToGrantedAuthoritiesin interfaceClaimsToGrantedAuthoritiesPolicy- Parameters:
oidcClaims- a map with the claims (Values can be strings, integers, ..)- Returns:
- the list with
GrantedAuthoritys
-
-