Package io.quarkus.oidc.runtime

Interface OidcTenantConfig.Roles

All Known Implementing Classes:

OidcTenantConfig.Roles

Enclosing interface:

OidcTenantConfig

public static interface OidcTenantConfig.Roles

Nested Class Summary

Nested Classes

Modifier and Type	Interface	Description
static enum	OidcTenantConfig.Roles.Source

Method Summary

Modifier and Type	Method	Description
Optional<List<String>>	roleClaimPath()	A list of paths to claims containing an array of groups.
Optional<String>	roleClaimSeparator()	The separator for splitting strings that contain multiple group values.
Optional<OidcTenantConfig.Roles.Source>	source()	Source of the principal roles.

Method Details

roleClaimPath

Optional<List<String>> roleClaimPath()

A list of paths to claims containing an array of groups. Each path starts from the top level JWT JSON object and can contain multiple segments. Each segment represents a JSON object name only; for example: "realm/groups". Use double quotes with the namespace-qualified claim names. This property can be used if a token has no `groups` claim but has the groups set in one or more different claims.

roleClaimSeparator

Optional<String> roleClaimSeparator()

The separator for splitting strings that contain multiple group values. It is only used if the "role-claim-path" property points to one or more custom claims whose values are strings. A single space is used by default because the standard `scope` claim can contain a space-separated sequence.

source

Optional<OidcTenantConfig.Roles.Source> source()

Source of the principal roles.