Class DefaultClaimsToGrantedAuthoritiesPolicy

    • Method Summary

      All Methods Instance Methods Concrete Methods 
      Modifier and Type Method Description
      java.util.List<org.springframework.security.core.GrantedAuthority> claimsToGrantedAuthorities​(java.util.Map<java.lang.String,​java.lang.Object> oidcClaims)
      Derive the GrantedAuthoritys from the claims provided by the IDP.
      • Methods inherited from class java.lang.Object

        clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
    • Constructor Detail

      • DefaultClaimsToGrantedAuthoritiesPolicy

        public DefaultClaimsToGrantedAuthoritiesPolicy​(java.lang.String rolesClaimName)
    • Method Detail

      • claimsToGrantedAuthorities

        public java.util.List<org.springframework.security.core.GrantedAuthority> claimsToGrantedAuthorities​(java.util.Map<java.lang.String,​java.lang.Object> oidcClaims)
        Description copied from interface: ClaimsToGrantedAuthoritiesPolicy
        Derive the GrantedAuthoritys from the claims provided by the IDP.

        It seems there's no real standard claim for groups/roles. In Okta it seems to be named 'groups' in KeyCloak it can be configured and filled with Groups or Roles.

        Specified by:
        claimsToGrantedAuthorities in interface ClaimsToGrantedAuthoritiesPolicy
        Parameters:
        oidcClaims - a map with the claims (Values can be strings, integers, ..)
        Returns:
        the list with GrantedAuthoritys