Package org.keycloak.federation.kerberos

Class KerberosFederationProvider

java.lang.Object

org.keycloak.federation.kerberos.KerberosFederationProvider

All Implemented Interfaces:

CredentialAuthentication, CredentialInputUpdater, CredentialInputValidator, Provider, ImportedUserValidation, UserLookupProvider, UserStorageProvider, UserProfileDecorator

public class KerberosFederationProvider
extends Object
implements UserStorageProvider, UserLookupProvider, CredentialInputValidator, CredentialInputUpdater, CredentialAuthentication, ImportedUserValidation, UserProfileDecorator

Author:

Marek Posolda

Nested Class Summary

Nested classes/interfaces inherited from interface org.keycloak.storage.UserStorageProvider

UserStorageProvider.EditMode

Field Summary

Fields

Modifier and Type	Field	Description
protected KerberosFederationProviderFactory	factory
static final String	KERBEROS_PRINCIPAL
protected KerberosConfig	kerberosConfig
protected UserStorageProviderModel	model
protected KeycloakSession	session

Constructor Summary

Constructors

Constructor	Description
KerberosFederationProvider(KeycloakSession session, UserStorageProviderModel model, KerberosFederationProviderFactory factory)

Method Summary

Modifier and Type	Method	Description
CredentialValidationOutput	authenticate(RealmModel realm, CredentialInput input)
void	close()
List<AttributeMetadata>	decorateUserProfile(String providerId, UserProfileMetadata metadata)
void	disableCredentialType(RealmModel realm, UserModel user, String credentialType)
protected UserModel	findOrCreateAuthenticatedUser(RealmModel realm, KerberosPrincipal kerberosPrincipal)	Called after successful authentication
Stream<String>	getDisableableCredentialTypesStream(RealmModel realm, UserModel user)
UserModel	getUserByEmail(RealmModel realm, String email)
UserModel	getUserById(RealmModel realm, String id)
UserModel	getUserByUsername(RealmModel realm, String username)
protected UserModel	importUserToKeycloak(RealmModel realm, KerberosPrincipal kerberosPrincipal)
boolean	isConfiguredFor(RealmModel realm, UserModel user, String credentialType)
boolean	isValid(RealmModel realm, UserModel user, CredentialInput input)
void	preRemove(RealmModel realm)
void	preRemove(RealmModel realm, GroupModel group)
void	preRemove(RealmModel realm, RoleModel role)
boolean	supportsCredentialAuthenticationFor(String type)
boolean	supportsCredentialType(String credentialType)
String	toString()
boolean	updateCredential(RealmModel realm, UserModel user, CredentialInput input)
UserModel	validate(RealmModel realm, UserModel user)
protected boolean	validPassword(String kerberosPrincipal, String password)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.keycloak.storage.user.UserLookupProvider

getUserByCredential

Field Details

KERBEROS_PRINCIPAL

public static final String KERBEROS_PRINCIPAL

See Also:

• Constant Field Values

session

protected KeycloakSession session

model

protected UserStorageProviderModel model

kerberosConfig

protected KerberosConfig kerberosConfig

factory

protected KerberosFederationProviderFactory factory

Constructor Details

KerberosFederationProvider

public KerberosFederationProvider(KeycloakSession session,
 UserStorageProviderModel model,
 KerberosFederationProviderFactory factory)

Method Details

validate

public UserModel validate(RealmModel realm,
 UserModel user)

Specified by:

validate in interface ImportedUserValidation

getUserByUsername

public UserModel getUserByUsername(RealmModel realm,
 String username)

Specified by:

getUserByUsername in interface UserLookupProvider

getUserByEmail

public UserModel getUserByEmail(RealmModel realm,
 String email)

Specified by:

getUserByEmail in interface UserLookupProvider

getUserById

public UserModel getUserById(RealmModel realm,
 String id)

Specified by:

getUserById in interface UserLookupProvider

preRemove

public void preRemove(RealmModel realm)

Specified by:

preRemove in interface UserStorageProvider

preRemove

public void preRemove(RealmModel realm,
 RoleModel role)

Specified by:

preRemove in interface UserStorageProvider

preRemove

public void preRemove(RealmModel realm,
 GroupModel group)

Specified by:

preRemove in interface UserStorageProvider

updateCredential

public boolean updateCredential(RealmModel realm,
 UserModel user,
 CredentialInput input)

Specified by:

updateCredential in interface CredentialInputUpdater

disableCredentialType

public void disableCredentialType(RealmModel realm,
 UserModel user,
 String credentialType)

Specified by:

disableCredentialType in interface CredentialInputUpdater

getDisableableCredentialTypesStream

public Stream<String> getDisableableCredentialTypesStream(RealmModel realm,
 UserModel user)

Specified by:

getDisableableCredentialTypesStream in interface CredentialInputUpdater

supportsCredentialType

public boolean supportsCredentialType(String credentialType)

Specified by:

supportsCredentialType in interface CredentialInputUpdater

Specified by:

supportsCredentialType in interface CredentialInputValidator

supportsCredentialAuthenticationFor

public boolean supportsCredentialAuthenticationFor(String type)

Specified by:

supportsCredentialAuthenticationFor in interface CredentialAuthentication

isConfiguredFor

public boolean isConfiguredFor(RealmModel realm,
 UserModel user,
 String credentialType)

Specified by:

isConfiguredFor in interface CredentialInputValidator

isValid

public boolean isValid(RealmModel realm,
 UserModel user,
 CredentialInput input)

Specified by:

isValid in interface CredentialInputValidator

validPassword

protected boolean validPassword(String kerberosPrincipal,
 String password)

authenticate

public CredentialValidationOutput authenticate(RealmModel realm,
 CredentialInput input)

Specified by:

authenticate in interface CredentialAuthentication

close

public void close()

Specified by:

close in interface Provider

findOrCreateAuthenticatedUser

protected UserModel findOrCreateAuthenticatedUser(RealmModel realm,
 KerberosPrincipal kerberosPrincipal)

Called after successful authentication

Parameters:

realm - realm

kerberosPrincipal -

Returns:

user if found or successfully created. Null if user with same username already exists, but is not linked to this provider

importUserToKeycloak

protected UserModel importUserToKeycloak(RealmModel realm,
 KerberosPrincipal kerberosPrincipal)

toString

public String toString()

Overrides:

toString in class Object

decorateUserProfile

public List<AttributeMetadata> decorateUserProfile(String providerId,
 UserProfileMetadata metadata)

Specified by:

decorateUserProfile in interface UserProfileDecorator