Package org.keycloak.broker.jwtauthorizationgrant

Class JWTAuthorizationGrantIdentityProvider

java.lang.Object

org.keycloak.broker.jwtauthorizationgrant.JWTAuthorizationGrantIdentityProvider

All Implemented Interfaces:

org.keycloak.broker.provider.IdentityProvider<JWTAuthorizationGrantIdentityProviderConfig>, org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>, org.keycloak.provider.Provider

public class JWTAuthorizationGrantIdentityProvider
extends Object
implements org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>

Constructor Summary

Constructors

Constructor	Description
JWTAuthorizationGrantIdentityProvider(org.keycloak.models.KeycloakSession session, JWTAuthorizationGrantConfig config)

Method Summary

Modifier and Type	Method	Description
void	close()
List<String>	getAllowedAudienceForJWTGrant()
int	getAllowedClockSkew()
String	getAssertionSignatureAlg()
JWTAuthorizationGrantIdentityProviderConfig	getConfig()
int	getMaxAllowedExpiration()
boolean	isAssertionReuseAllowed()
boolean	isLimitAccessTokenExpiration()
org.keycloak.broker.provider.BrokeredIdentityContext	validateAuthorizationGrantAssertion(org.keycloak.protocol.oidc.JWTAuthorizationGrantValidationContext context)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.broker.provider.IdentityProvider

export, isMapperSupported, isType, reloadKeys

Constructor Details

JWTAuthorizationGrantIdentityProvider

public JWTAuthorizationGrantIdentityProvider(org.keycloak.models.KeycloakSession session,
 JWTAuthorizationGrantConfig config)

Method Details

validateAuthorizationGrantAssertion

public org.keycloak.broker.provider.BrokeredIdentityContext validateAuthorizationGrantAssertion(org.keycloak.protocol.oidc.JWTAuthorizationGrantValidationContext context)
                                                                                         throws org.keycloak.broker.provider.IdentityBrokerException

Specified by:

validateAuthorizationGrantAssertion in interface org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>

Throws:

org.keycloak.broker.provider.IdentityBrokerException

getAllowedClockSkew

public int getAllowedClockSkew()

Specified by:

getAllowedClockSkew in interface org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>

isAssertionReuseAllowed

public boolean isAssertionReuseAllowed()

Specified by:

isAssertionReuseAllowed in interface org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>

getAllowedAudienceForJWTGrant

public List<String> getAllowedAudienceForJWTGrant()

Specified by:

getAllowedAudienceForJWTGrant in interface org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>

getMaxAllowedExpiration

public int getMaxAllowedExpiration()

Specified by:

getMaxAllowedExpiration in interface org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>

getAssertionSignatureAlg

public String getAssertionSignatureAlg()

Specified by:

getAssertionSignatureAlg in interface org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>

isLimitAccessTokenExpiration

public boolean isLimitAccessTokenExpiration()

Specified by:

isLimitAccessTokenExpiration in interface org.keycloak.broker.provider.JWTAuthorizationGrantProvider<JWTAuthorizationGrantIdentityProviderConfig>

getConfig

public JWTAuthorizationGrantIdentityProviderConfig getConfig()

Specified by:

getConfig in interface org.keycloak.broker.provider.IdentityProvider<JWTAuthorizationGrantIdentityProviderConfig>

close

public void close()

Specified by:

close in interface org.keycloak.provider.Provider