org.keycloak.broker.oidc

Class AbstractOAuth2IdentityProvider<C extends OAuth2IdentityProviderConfig>

java.lang.Object

org.keycloak.broker.provider.AbstractIdentityProvider<C>

org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider<C>

All Implemented Interfaces:

IdentityProvider<C>, TokenExchangeTo, Provider

Direct Known Subclasses:

BitbucketIdentityProvider, FacebookIdentityProvider, GitHubIdentityProvider, LinkedInIdentityProvider, MicrosoftIdentityProvider, OIDCIdentityProvider, OpenshiftV3IdentityProvider, StackoverflowIdentityProvider

public abstract class AbstractOAuth2IdentityProvider<C extends OAuth2IdentityProviderConfig>
extends AbstractIdentityProvider<C>
implements TokenExchangeTo

Author:

Pedro Igor

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected class	AbstractOAuth2IdentityProvider.Endpoint

Nested classes/interfaces inherited from interface org.keycloak.broker.provider.IdentityProvider

IdentityProvider.AuthenticationCallback

Field Summary

Fields

Modifier and Type	Field and Description
static String	ACCESS_DENIED
static String	FEDERATED_ACCESS_TOKEN
static String	FEDERATED_REFRESH_TOKEN
static String	FEDERATED_TOKEN_EXPIRATION
protected static org.jboss.logging.Logger	logger
protected static com.fasterxml.jackson.databind.ObjectMapper	mapper
static String	OAUTH2_GRANT_TYPE_AUTHORIZATION_CODE
static String	OAUTH2_GRANT_TYPE_REFRESH_TOKEN
static String	OAUTH2_PARAMETER_ACCESS_TOKEN
static String	OAUTH2_PARAMETER_CLIENT_ID
static String	OAUTH2_PARAMETER_CLIENT_SECRET
static String	OAUTH2_PARAMETER_CODE
static String	OAUTH2_PARAMETER_GRANT_TYPE
static String	OAUTH2_PARAMETER_REDIRECT_URI
static String	OAUTH2_PARAMETER_RESPONSE_TYPE
static String	OAUTH2_PARAMETER_SCOPE
static String	OAUTH2_PARAMETER_STATE

Fields inherited from class org.keycloak.broker.provider.AbstractIdentityProvider

ACCOUNT_LINK_URL, session

Constructor Summary

Constructors

Constructor and Description
AbstractOAuth2IdentityProvider(KeycloakSession session, C config)

Method Summary

Modifier and Type	Method and Description
com.fasterxml.jackson.databind.JsonNode	asJsonNode(String json)
void	authenticationFinished(AuthenticationSessionModel authSession, BrokeredIdentityContext context)
Object	callback(RealmModel realm, IdentityProvider.AuthenticationCallback callback, EventBuilder event)
protected javax.ws.rs.core.UriBuilder	createAuthorizationUrl(AuthenticationRequest request)
protected BrokeredIdentityContext	doGetFederatedIdentity(String accessToken)
protected javax.ws.rs.core.Response	exchangeSessionToken(javax.ws.rs.core.UriInfo uriInfo, ClientModel authorizedClient, UserSessionModel tokenUserSession, UserModel tokenSubject, AccessToken token)
protected javax.ws.rs.core.Response	exchangeStoredToken(javax.ws.rs.core.UriInfo uriInfo, ClientModel authorizedClient, UserSessionModel tokenUserSession, UserModel tokenSubject, AccessToken token)
javax.ws.rs.core.Response	exchangeTo(javax.ws.rs.core.UriInfo uriInfo, ClientModel authorizedClient, UserSessionModel tokenUserSession, UserModel tokenSubject, AccessToken token, javax.ws.rs.core.MultivaluedMap<String,String> params)
protected String	extractTokenFromResponse(String response, String tokenName)
protected String	getAccessTokenResponseParameter()
C	getConfig()
protected abstract String	getDefaultScopes()
BrokeredIdentityContext	getFederatedIdentity(String response)
String	getJsonProperty(com.fasterxml.jackson.databind.JsonNode jsonNode, String name) Get JSON property as text.
javax.ws.rs.core.Response	performLogin(AuthenticationRequest request)
javax.ws.rs.core.Response	retrieveToken(KeycloakSession session, FederatedIdentityModel identity)

Methods inherited from class org.keycloak.broker.provider.AbstractIdentityProvider

backchannelLogout, close, exchangeErrorResponse, exchangeNotLinked, exchangeNotSupported, exchangeTokenExpired, exchangeUnsupportedRequiredType, export, getLinkingUrl, getMarshaller, importNewUser, keycloakInitiatedBrowserLogout, preprocessFederatedIdentity, updateBrokeredUser

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static final org.jboss.logging.Logger logger

OAUTH2_GRANT_TYPE_REFRESH_TOKEN

public static final String OAUTH2_GRANT_TYPE_REFRESH_TOKEN

See Also:

Constant Field Values

OAUTH2_GRANT_TYPE_AUTHORIZATION_CODE

public static final String OAUTH2_GRANT_TYPE_AUTHORIZATION_CODE

See Also:

Constant Field Values

FEDERATED_ACCESS_TOKEN

public static final String FEDERATED_ACCESS_TOKEN

See Also:

Constant Field Values

FEDERATED_REFRESH_TOKEN

public static final String FEDERATED_REFRESH_TOKEN

See Also:

Constant Field Values

FEDERATED_TOKEN_EXPIRATION

public static final String FEDERATED_TOKEN_EXPIRATION

See Also:

Constant Field Values

ACCESS_DENIED

public static final String ACCESS_DENIED

See Also:

Constant Field Values

mapper

protected static com.fasterxml.jackson.databind.ObjectMapper mapper

OAUTH2_PARAMETER_ACCESS_TOKEN

public static final String OAUTH2_PARAMETER_ACCESS_TOKEN

See Also:

Constant Field Values

OAUTH2_PARAMETER_SCOPE

public static final String OAUTH2_PARAMETER_SCOPE

See Also:

Constant Field Values

OAUTH2_PARAMETER_STATE

public static final String OAUTH2_PARAMETER_STATE

See Also:

Constant Field Values

OAUTH2_PARAMETER_RESPONSE_TYPE

public static final String OAUTH2_PARAMETER_RESPONSE_TYPE

See Also:

Constant Field Values

OAUTH2_PARAMETER_REDIRECT_URI

public static final String OAUTH2_PARAMETER_REDIRECT_URI

See Also:

Constant Field Values

OAUTH2_PARAMETER_CODE

public static final String OAUTH2_PARAMETER_CODE

See Also:

Constant Field Values

OAUTH2_PARAMETER_CLIENT_ID

public static final String OAUTH2_PARAMETER_CLIENT_ID

See Also:

Constant Field Values

OAUTH2_PARAMETER_CLIENT_SECRET

public static final String OAUTH2_PARAMETER_CLIENT_SECRET

See Also:

Constant Field Values

OAUTH2_PARAMETER_GRANT_TYPE

public static final String OAUTH2_PARAMETER_GRANT_TYPE

See Also:

Constant Field Values

Constructor Detail

AbstractOAuth2IdentityProvider

public AbstractOAuth2IdentityProvider(KeycloakSession session,
                                      C config)

Method Detail

callback

public Object callback(RealmModel realm,
                       IdentityProvider.AuthenticationCallback callback,
                       EventBuilder event)

Specified by:

callback in interface IdentityProvider<C extends OAuth2IdentityProviderConfig>

Overrides:

callback in class AbstractIdentityProvider<C extends OAuth2IdentityProviderConfig>

performLogin

public javax.ws.rs.core.Response performLogin(AuthenticationRequest request)

Specified by:

performLogin in interface IdentityProvider<C extends OAuth2IdentityProviderConfig>

Overrides:

performLogin in class AbstractIdentityProvider<C extends OAuth2IdentityProviderConfig>

retrieveToken

public javax.ws.rs.core.Response retrieveToken(KeycloakSession session,
                                               FederatedIdentityModel identity)

Specified by:

retrieveToken in interface IdentityProvider<C extends OAuth2IdentityProviderConfig>

getConfig

public C getConfig()

Overrides:

getConfig in class AbstractIdentityProvider<C extends OAuth2IdentityProviderConfig>

extractTokenFromResponse

protected String extractTokenFromResponse(String response,
                                          String tokenName)

exchangeTo

public javax.ws.rs.core.Response exchangeTo(javax.ws.rs.core.UriInfo uriInfo,
                                            ClientModel authorizedClient,
                                            UserSessionModel tokenUserSession,
                                            UserModel tokenSubject,
                                            AccessToken token,
                                            javax.ws.rs.core.MultivaluedMap<String,String> params)

Specified by:

exchangeTo in interface TokenExchangeTo

exchangeStoredToken

protected javax.ws.rs.core.Response exchangeStoredToken(javax.ws.rs.core.UriInfo uriInfo,
                                                        ClientModel authorizedClient,
                                                        UserSessionModel tokenUserSession,
                                                        UserModel tokenSubject,
                                                        AccessToken token)

exchangeSessionToken

protected javax.ws.rs.core.Response exchangeSessionToken(javax.ws.rs.core.UriInfo uriInfo,
                                                         ClientModel authorizedClient,
                                                         UserSessionModel tokenUserSession,
                                                         UserModel tokenSubject,
                                                         AccessToken token)

getFederatedIdentity

public BrokeredIdentityContext getFederatedIdentity(String response)

getAccessTokenResponseParameter

protected String getAccessTokenResponseParameter()

doGetFederatedIdentity

protected BrokeredIdentityContext doGetFederatedIdentity(String accessToken)

createAuthorizationUrl

protected javax.ws.rs.core.UriBuilder createAuthorizationUrl(AuthenticationRequest request)

getJsonProperty

public String getJsonProperty(com.fasterxml.jackson.databind.JsonNode jsonNode,
                              String name)

Get JSON property as text. JSON numbers and booleans are converted to text. Empty string is converted to null.

Parameters:

jsonNode - to get property from

name - of property to get

Returns:

string value of the property or null.

asJsonNode

public com.fasterxml.jackson.databind.JsonNode asJsonNode(String json)
                                                   throws IOException

Throws:

IOException

getDefaultScopes

protected abstract String getDefaultScopes()

authenticationFinished

public void authenticationFinished(AuthenticationSessionModel authSession,
                                   BrokeredIdentityContext context)

Specified by:

authenticationFinished in interface IdentityProvider<C extends OAuth2IdentityProviderConfig>

Overrides:

authenticationFinished in class AbstractIdentityProvider<C extends OAuth2IdentityProviderConfig>