Package org.keycloak.protocol.oauth2.cimd.clientpolicy.executor

Class AbstractClientIdMetadataDocumentExecutorFactory

java.lang.Object

org.keycloak.protocol.oauth2.cimd.clientpolicy.executor.AbstractClientIdMetadataDocumentExecutorFactory

All Implemented Interfaces:

org.keycloak.provider.ConfiguredProvider, org.keycloak.provider.EnvironmentDependentProviderFactory, org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>, org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProviderFactory

Direct Known Subclasses:

ClientIdMetadataDocumentExecutorFactory

public abstract class AbstractClientIdMetadataDocumentExecutorFactory
extends Object
implements org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProviderFactory, org.keycloak.provider.EnvironmentDependentProviderFactory

The abstract class is the factory class of AbstractClientIdMetadataDocumentExecutor.

It provides the following configurations:

• Client ID Verification / Client Metadata Verification (URL related)
• Allow http scheme: allows http scheme of a URI (for development environment)<
• Client ID Validation
• Trusted domains: only allow a URI whose hostname is under the one of the permitted domain (wildcard * can be used)
• Client Metadata Validation
• Restrict same domain: only allow {client_id} and {redirect_uri} parameter of an authorization request whose hostname is under the one of the permitted domain (wildcard * can be used)
• Required properties: only allow a client metadata that includes all required properties

Author:

Takashi Norimatsu

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ALLOW_HTTP_SCHEME
static final String	CONFIG_CIMD_PROVIDER_NAME
static final String	CONFIG_MAX_CACHE_TIME
static final String	CONFIG_MIN_CACHE_TIME
static final String	CONFIG_UPPER_LIMIT_METADATA_BYTES
protected ClientIdMetadataDocumentExecutorFactoryProviderConfig	providerConfig
static final String	REQUIRED_PROPERTIES
static final String	RESTRICT_SAME_DOMAIN
static final String	TRUSTED_DOMAINS

Constructor Summary

Constructors

Constructor	Description
AbstractClientIdMetadataDocumentExecutorFactory()

Method Summary

Modifier and Type	Method	Description
protected static void	addCommonConfigProperties(List<org.keycloak.provider.ProviderConfigProperty> configProperties)
void	close()
List<org.keycloak.provider.ProviderConfigProperty>	getConfigMetadata()
String	getHelpText()
void	init(org.keycloak.Config.Scope config)
boolean	isSupported(org.keycloak.Config.Scope config)
void	postInit(org.keycloak.models.KeycloakSessionFactory factory)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.provider.ConfiguredProvider

getConfig, getConfigProperties

Methods inherited from interface org.keycloak.provider.ProviderFactory

create, dependsOn, getId, order

Field Details

ALLOW_HTTP_SCHEME

public static final String ALLOW_HTTP_SCHEME

See Also:

• Constant Field Values

TRUSTED_DOMAINS

public static final String TRUSTED_DOMAINS

See Also:

• Constant Field Values

REQUIRED_PROPERTIES

public static final String REQUIRED_PROPERTIES

See Also:

• Constant Field Values

RESTRICT_SAME_DOMAIN

public static final String RESTRICT_SAME_DOMAIN

See Also:

• Constant Field Values

CONFIG_CIMD_PROVIDER_NAME

public static final String CONFIG_CIMD_PROVIDER_NAME

See Also:

• Constant Field Values

CONFIG_MIN_CACHE_TIME

public static final String CONFIG_MIN_CACHE_TIME

See Also:

• Constant Field Values

CONFIG_MAX_CACHE_TIME

public static final String CONFIG_MAX_CACHE_TIME

See Also:

• Constant Field Values

CONFIG_UPPER_LIMIT_METADATA_BYTES

public static final String CONFIG_UPPER_LIMIT_METADATA_BYTES

See Also:

• Constant Field Values

providerConfig

protected ClientIdMetadataDocumentExecutorFactoryProviderConfig providerConfig

Constructor Details

AbstractClientIdMetadataDocumentExecutorFactory

public AbstractClientIdMetadataDocumentExecutorFactory()

Method Details

init

public void init(org.keycloak.Config.Scope config)

Specified by:

init in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

postInit

public void postInit(org.keycloak.models.KeycloakSessionFactory factory)

Specified by:

postInit in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

close

public void close()

Specified by:

close in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

getHelpText

public String getHelpText()

Specified by:

getHelpText in interface org.keycloak.provider.ConfiguredProvider

addCommonConfigProperties

protected static void addCommonConfigProperties(List<org.keycloak.provider.ProviderConfigProperty> configProperties)

getConfigMetadata

public List<org.keycloak.provider.ProviderConfigProperty> getConfigMetadata()

Specified by:

getConfigMetadata in interface org.keycloak.provider.ProviderFactory<org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProvider>

isSupported

public boolean isSupported(org.keycloak.Config.Scope config)

Specified by:

isSupported in interface org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProviderFactory

Specified by:

isSupported in interface org.keycloak.provider.EnvironmentDependentProviderFactory