org.keycloak.models.jpa

Class JpaUserProvider

java.lang.Object

org.keycloak.models.jpa.JpaUserProvider

All Implemented Interfaces:

UserCredentialStore, UserProvider, Provider, UserBulkUpdateProvider, UserLookupProvider, UserQueryProvider, UserRegistrationProvider

public class JpaUserProvider
extends Object
implements UserProvider, UserCredentialStore

Version:

$Revision: 1 $

Author:

Bill Burke

Field Summary

Fields

Modifier and Type	Field and Description
protected javax.persistence.EntityManager	em

Constructor Summary

Constructors

Constructor and Description
JpaUserProvider(KeycloakSession session, javax.persistence.EntityManager em)

Method Summary

Modifier and Type	Method and Description
void	addConsent(RealmModel realm, String userId, UserConsentModel consent)
void	addFederatedIdentity(RealmModel realm, UserModel user, FederatedIdentityModel identity)
UserModel	addUser(RealmModel realm, String username) All storage providers that implement this interface will be looped through.
UserModel	addUser(RealmModel realm, String id, String username, boolean addDefaultRoles, boolean addDefaultRequiredActions) only used for local storage
void	close()
CredentialModel	createCredential(RealmModel realm, UserModel user, CredentialModel cred)
protected void	ensureEmailConstraint(List<UserEntity> users, RealmModel realm)
UserConsentModel	getConsentByClient(RealmModel realm, String userId, String clientId)
List<UserConsentModel>	getConsents(RealmModel realm, String userId)
Set<FederatedIdentityModel>	getFederatedIdentities(UserModel user, RealmModel realm)
FederatedIdentityModel	getFederatedIdentity(UserModel user, String identityProvider, RealmModel realm)
List<UserModel>	getGroupMembers(RealmModel realm, GroupModel group) Get users that belong to a specific group.
List<UserModel>	getGroupMembers(RealmModel realm, GroupModel group, int firstResult, int maxResults) Get users that belong to a specific group.
int	getNotBeforeOfUser(RealmModel realm, UserModel user)
List<UserModel>	getRoleMembers(RealmModel realm, RoleModel role) Get users that belong to a specific role.
List<UserModel>	getRoleMembers(RealmModel realm, RoleModel role, int firstResult, int maxResults) Search for users that have a specific role with a specific roleId.
UserModel	getServiceAccount(ClientModel client)
CredentialModel	getStoredCredentialById(RealmModel realm, UserModel user, String id)
CredentialModel	getStoredCredentialByNameAndType(RealmModel realm, UserModel user, String name, String type)
List<CredentialModel>	getStoredCredentials(RealmModel realm, UserModel user)
List<CredentialModel>	getStoredCredentialsByType(RealmModel realm, UserModel user, String type)
UserModel	getUserByEmail(String email, RealmModel realm)
UserModel	getUserByFederatedIdentity(FederatedIdentityModel identity, RealmModel realm)
UserModel	getUserById(String id, RealmModel realm)
UserModel	getUserByUsername(String username, RealmModel realm)
List<UserModel>	getUsers(RealmModel realm)
List<UserModel>	getUsers(RealmModel realm, boolean includeServiceAccounts)
List<UserModel>	getUsers(RealmModel realm, int firstResult, int maxResults)
List<UserModel>	getUsers(RealmModel realm, int firstResult, int maxResults, boolean includeServiceAccounts)
int	getUsersCount(Map<String,String> params, RealmModel realm) Returns the number of users that match the given filter parameters.
int	getUsersCount(Map<String,String> params, RealmModel realm, Set<String> groupIds) Returns the number of users that match the given filter parameters and is in at least one of the given groups.
int	getUsersCount(RealmModel realm) Returns the number of users, without consider any service account.
int	getUsersCount(RealmModel realm, boolean includeServiceAccount) Returns the number of users.
int	getUsersCount(RealmModel realm, Set<String> groupIds) Returns the number of users that are in at least one of the groups given.
int	getUsersCount(String search, RealmModel realm) Returns the number of users that match the given criteria.
int	getUsersCount(String search, RealmModel realm, Set<String> groupIds) Returns the number of users that match the given criteria and are in at least one of the groups given.
void	grantToAllUsers(RealmModel realm, RoleModel role)
boolean	moveCredentialTo(RealmModel realm, UserModel user, String id, String newPreviousCredentialId)
void	preRemove(ClientScopeModel clientScope)
void	preRemove(ProtocolMapperModel protocolMapper)
void	preRemove(RealmModel realm)
void	preRemove(RealmModel realm, ClientModel client)
void	preRemove(RealmModel realm, ComponentModel component)
void	preRemove(RealmModel realm, GroupModel group)
void	preRemove(RealmModel realm, IdentityProviderModel provider)
void	preRemove(RealmModel realm, RoleModel role)
protected void	removeConsentByClientStorageProvider(RealmModel realm, String providerId)
boolean	removeFederatedIdentity(RealmModel realm, UserModel user, String identityProvider)
void	removeImportedUsers(RealmModel realm, String storageProviderId) Removes any imported users from a specific User Storage Provider.
boolean	removeStoredCredential(RealmModel realm, UserModel user, String id)
boolean	removeUser(RealmModel realm, UserModel user) Called if user originated from this provider.
boolean	revokeConsentForClient(RealmModel realm, String userId, String clientId)
List<UserModel>	searchForUser(Map<String,String> attributes, RealmModel realm) Search for user by parameter.
List<UserModel>	searchForUser(Map<String,String> attributes, RealmModel realm, int firstResult, int maxResults) Search for user by parameter.
List<UserModel>	searchForUser(String search, RealmModel realm) Search for users with username, email or first + last name that is like search string.
List<UserModel>	searchForUser(String search, RealmModel realm, int firstResult, int maxResults) Search for users with username, email or first + last name that is like search string.
List<UserModel>	searchForUserByUserAttribute(String attrName, String attrValue, RealmModel realm) Search for users that have a specific attribute with a specific value.
void	setNotBeforeForUser(RealmModel realm, UserModel user, int notBefore)
protected CredentialModel	toModel(CredentialEntity entity)
void	unlinkUsers(RealmModel realm, String storageProviderId) Set federation link to null to imported users of a specific User Storage Provider
void	updateConsent(RealmModel realm, String userId, UserConsentModel consent)
void	updateCredential(RealmModel realm, UserModel user, CredentialModel cred)
void	updateFederatedIdentity(RealmModel realm, UserModel federatedUser, FederatedIdentityModel federatedIdentityModel)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.storage.user.UserQueryProvider

countUsersInGroups

Field Detail

em

protected javax.persistence.EntityManager em

Constructor Detail

JpaUserProvider

public JpaUserProvider(KeycloakSession session,
                       javax.persistence.EntityManager em)

Method Detail

addUser

public UserModel addUser(RealmModel realm,
                         String id,
                         String username,
                         boolean addDefaultRoles,
                         boolean addDefaultRequiredActions)

Description copied from interface: UserProvider

only used for local storage

Specified by:

addUser in interface UserProvider

Returns:

addUser

public UserModel addUser(RealmModel realm,
                         String username)

Description copied from interface: UserRegistrationProvider

All storage providers that implement this interface will be looped through. If this method returns null, then the next storage provider's addUser() method will be called. If no storage providers handle the add, then the user will be created in local storage. Returning null is useful when you want optional support for adding users. For example, our LDAP provider can enable and disable the ability to add users.

Specified by:

addUser in interface UserRegistrationProvider

Returns:

removeUser

public boolean removeUser(RealmModel realm,
                          UserModel user)

Description copied from interface: UserRegistrationProvider

Called if user originated from this provider. If a local user is linked to this provider, this method will be called before local storage's removeUser() method is invoked. If you are using an import strategy, and this is a local user linked to this provider, this method will be called before local storage's removeUser() method is invoked. Also, you DO NOT need to remove the imported user. The runtime will handle this for you.

Specified by:

removeUser in interface UserRegistrationProvider

Returns:

addFederatedIdentity

public void addFederatedIdentity(RealmModel realm,
                                 UserModel user,
                                 FederatedIdentityModel identity)

Specified by:

addFederatedIdentity in interface UserProvider

updateFederatedIdentity

public void updateFederatedIdentity(RealmModel realm,
                                    UserModel federatedUser,
                                    FederatedIdentityModel federatedIdentityModel)

Specified by:

updateFederatedIdentity in interface UserProvider

removeFederatedIdentity

public boolean removeFederatedIdentity(RealmModel realm,
                                       UserModel user,
                                       String identityProvider)

Specified by:

removeFederatedIdentity in interface UserProvider

preRemove

public void preRemove(RealmModel realm,
                      IdentityProviderModel provider)

Specified by:

preRemove in interface UserProvider

addConsent

public void addConsent(RealmModel realm,
                       String userId,
                       UserConsentModel consent)

Specified by:

addConsent in interface UserProvider

getConsentByClient

public UserConsentModel getConsentByClient(RealmModel realm,
                                           String userId,
                                           String clientId)

Specified by:

getConsentByClient in interface UserProvider

getConsents

public List<UserConsentModel> getConsents(RealmModel realm,
                                          String userId)

Specified by:

getConsents in interface UserProvider

updateConsent

public void updateConsent(RealmModel realm,
                          String userId,
                          UserConsentModel consent)

Specified by:

updateConsent in interface UserProvider

revokeConsentForClient

public boolean revokeConsentForClient(RealmModel realm,
                                      String userId,
                                      String clientId)

Specified by:

revokeConsentForClient in interface UserProvider

setNotBeforeForUser

public void setNotBeforeForUser(RealmModel realm,
                                UserModel user,
                                int notBefore)

Specified by:

setNotBeforeForUser in interface UserProvider

getNotBeforeOfUser

public int getNotBeforeOfUser(RealmModel realm,
                              UserModel user)

Specified by:

getNotBeforeOfUser in interface UserProvider

grantToAllUsers

public void grantToAllUsers(RealmModel realm,
                            RoleModel role)

Specified by:

grantToAllUsers in interface UserBulkUpdateProvider

preRemove

public void preRemove(RealmModel realm)

Specified by:

preRemove in interface UserProvider

removeImportedUsers

public void removeImportedUsers(RealmModel realm,
                                String storageProviderId)

Description copied from interface: UserProvider

Removes any imported users from a specific User Storage Provider.

Specified by:

removeImportedUsers in interface UserProvider

unlinkUsers

public void unlinkUsers(RealmModel realm,
                        String storageProviderId)

Description copied from interface: UserProvider

Set federation link to null to imported users of a specific User Storage Provider

Specified by:

unlinkUsers in interface UserProvider

preRemove

public void preRemove(RealmModel realm,
                      RoleModel role)

Specified by:

preRemove in interface UserProvider

preRemove

public void preRemove(RealmModel realm,
                      ClientModel client)

Specified by:

preRemove in interface UserProvider

preRemove

public void preRemove(ProtocolMapperModel protocolMapper)

Specified by:

preRemove in interface UserProvider

preRemove

public void preRemove(ClientScopeModel clientScope)

Specified by:

preRemove in interface UserProvider

getGroupMembers

public List<UserModel> getGroupMembers(RealmModel realm,
                                       GroupModel group)

Description copied from interface: UserQueryProvider

Get users that belong to a specific group. Implementations do not have to search in UserFederatedStorageProvider as this is done automatically.

Specified by:

getGroupMembers in interface UserQueryProvider

Returns:

See Also:

UserFederatedStorageProvider

getRoleMembers

public List<UserModel> getRoleMembers(RealmModel realm,
                                      RoleModel role)

Description copied from interface: UserQueryProvider

Get users that belong to a specific role.

Specified by:

getRoleMembers in interface UserQueryProvider

Returns:

preRemove

public void preRemove(RealmModel realm,
                      GroupModel group)

Specified by:

preRemove in interface UserProvider

getUserById

public UserModel getUserById(String id,
                             RealmModel realm)

Specified by:

getUserById in interface UserLookupProvider

getUserByUsername

public UserModel getUserByUsername(String username,
                                   RealmModel realm)

Specified by:

getUserByUsername in interface UserLookupProvider

getUserByEmail

public UserModel getUserByEmail(String email,
                                RealmModel realm)

Specified by:

getUserByEmail in interface UserLookupProvider

close

public void close()

Specified by:

close in interface UserProvider

Specified by:

close in interface Provider

getUserByFederatedIdentity

public UserModel getUserByFederatedIdentity(FederatedIdentityModel identity,
                                            RealmModel realm)

Specified by:

getUserByFederatedIdentity in interface UserProvider

getServiceAccount

public UserModel getServiceAccount(ClientModel client)

Specified by:

getServiceAccount in interface UserProvider

getUsers

public List<UserModel> getUsers(RealmModel realm,
                                boolean includeServiceAccounts)

Specified by:

getUsers in interface UserProvider

getUsersCount

public int getUsersCount(RealmModel realm,
                         boolean includeServiceAccount)

Description copied from interface: UserQueryProvider

Returns the number of users.

Specified by:

getUsersCount in interface UserQueryProvider

Parameters:

realm - the realm

includeServiceAccount - if true, the number of users will also include service accounts. Otherwise, only the number of users.

Returns:

the number of users

getUsersCount

public int getUsersCount(RealmModel realm)

Description copied from interface: UserQueryProvider

Returns the number of users, without consider any service account.

Specified by:

getUsersCount in interface UserQueryProvider

Parameters:

realm - the realm

Returns:

the number of users

getUsersCount

public int getUsersCount(RealmModel realm,
                         Set<String> groupIds)

Description copied from interface: UserQueryProvider

Returns the number of users that are in at least one of the groups given.

Specified by:

getUsersCount in interface UserQueryProvider

Parameters:

realm - the realm

groupIds - set of groups id to check for

Returns:

the number of users that are in at least one of the groups

getUsersCount

public int getUsersCount(String search,
                         RealmModel realm)

Description copied from interface: UserQueryProvider

Returns the number of users that match the given criteria.

Specified by:

getUsersCount in interface UserQueryProvider

Parameters:

search - search criteria

realm - the realm

Returns:

number of users that match the search

getUsersCount

public int getUsersCount(String search,
                         RealmModel realm,
                         Set<String> groupIds)

Description copied from interface: UserQueryProvider

Returns the number of users that match the given criteria and are in at least one of the groups given.

Specified by:

getUsersCount in interface UserQueryProvider

Parameters:

search - search criteria

realm - the realm

groupIds - set of groups to check for

Returns:

number of users that match the search and given groups

getUsersCount

public int getUsersCount(Map<String,String> params,
                         RealmModel realm)

Description copied from interface: UserQueryProvider

Returns the number of users that match the given filter parameters.

Specified by:

getUsersCount in interface UserQueryProvider

Parameters:

params - filter parameters

realm - the realm

Returns:

number of users that match the given filters

getUsersCount

public int getUsersCount(Map<String,String> params,
                         RealmModel realm,
                         Set<String> groupIds)

Description copied from interface: UserQueryProvider

Returns the number of users that match the given filter parameters and is in at least one of the given groups.

Specified by:

getUsersCount in interface UserQueryProvider

Parameters:

params - filter parameters

realm - the realm

groupIds - set if groups to check for

Returns:

number of users that match the given filters and groups

getUsers

public List<UserModel> getUsers(RealmModel realm)

Specified by:

getUsers in interface UserQueryProvider

getUsers

public List<UserModel> getUsers(RealmModel realm,
                                int firstResult,
                                int maxResults)

Specified by:

getUsers in interface UserQueryProvider

getUsers

public List<UserModel> getUsers(RealmModel realm,
                                int firstResult,
                                int maxResults,
                                boolean includeServiceAccounts)

Specified by:

getUsers in interface UserProvider

getGroupMembers

public List<UserModel> getGroupMembers(RealmModel realm,
                                       GroupModel group,
                                       int firstResult,
                                       int maxResults)

Description copied from interface: UserQueryProvider

Get users that belong to a specific group. Implementations do not have to search in UserFederatedStorageProvider as this is done automatically.

Specified by:

getGroupMembers in interface UserQueryProvider

Returns:

See Also:

UserFederatedStorageProvider

getRoleMembers

public List<UserModel> getRoleMembers(RealmModel realm,
                                      RoleModel role,
                                      int firstResult,
                                      int maxResults)

Description copied from interface: UserQueryProvider

Search for users that have a specific role with a specific roleId.

Specified by:

getRoleMembers in interface UserQueryProvider

Returns:

searchForUser

public List<UserModel> searchForUser(String search,
                                     RealmModel realm)

Description copied from interface: UserQueryProvider

Search for users with username, email or first + last name that is like search string. If possible, implementations should treat the parameter values as partial match patterns i.e. in RDMBS terms use LIKE. This method is used by the admin console search box

Specified by:

searchForUser in interface UserQueryProvider

Returns:

searchForUser

public List<UserModel> searchForUser(String search,
                                     RealmModel realm,
                                     int firstResult,
                                     int maxResults)

Description copied from interface: UserQueryProvider

Search for users with username, email or first + last name that is like search string. If possible, implementations should treat the parameter values as partial match patterns i.e. in RDMBS terms use LIKE. This method is used by the admin console search box

Specified by:

searchForUser in interface UserQueryProvider

Returns:

searchForUser

public List<UserModel> searchForUser(Map<String,String> attributes,
                                     RealmModel realm)

Description copied from interface: UserQueryProvider

Search for user by parameter. Valid parameters are: "first" - first name "last" - last name "email" - email "username" - username If possible, implementations should treat the parameter values as partial match patterns i.e. in RDMBS terms use LIKE. This method is used by the REST API when querying users.

Specified by:

searchForUser in interface UserQueryProvider

Returns:

searchForUser

public List<UserModel> searchForUser(Map<String,String> attributes,
                                     RealmModel realm,
                                     int firstResult,
                                     int maxResults)

Description copied from interface: UserQueryProvider

Search for user by parameter. Valid parameters are: "first" - first name "last" - last name "email" - email "username" - username "enabled" - is user enabled (true/false) If possible, implementations should treat the parameter values as patterns i.e. in RDMBS terms use LIKE. This method is used by the REST API when querying users.

Specified by:

searchForUser in interface UserQueryProvider

Returns:

searchForUserByUserAttribute

public List<UserModel> searchForUserByUserAttribute(String attrName,
                                                    String attrValue,
                                                    RealmModel realm)

Description copied from interface: UserQueryProvider

Search for users that have a specific attribute with a specific value. Implementations do not have to search in UserFederatedStorageProvider as this is done automatically.

Specified by:

searchForUserByUserAttribute in interface UserQueryProvider

Returns:

See Also:

UserFederatedStorageProvider

getFederatedIdentities

public Set<FederatedIdentityModel> getFederatedIdentities(UserModel user,
                                                          RealmModel realm)

Specified by:

getFederatedIdentities in interface UserProvider

getFederatedIdentity

public FederatedIdentityModel getFederatedIdentity(UserModel user,
                                                   String identityProvider,
                                                   RealmModel realm)

Specified by:

getFederatedIdentity in interface UserProvider

preRemove

public void preRemove(RealmModel realm,
                      ComponentModel component)

Specified by:

preRemove in interface UserProvider

removeConsentByClientStorageProvider

protected void removeConsentByClientStorageProvider(RealmModel realm,
                                                    String providerId)

updateCredential

public void updateCredential(RealmModel realm,
                             UserModel user,
                             CredentialModel cred)

Specified by:

updateCredential in interface UserCredentialStore

createCredential

public CredentialModel createCredential(RealmModel realm,
                                        UserModel user,
                                        CredentialModel cred)

Specified by:

createCredential in interface UserCredentialStore

removeStoredCredential

public boolean removeStoredCredential(RealmModel realm,
                                      UserModel user,
                                      String id)

Specified by:

removeStoredCredential in interface UserCredentialStore

getStoredCredentialById

public CredentialModel getStoredCredentialById(RealmModel realm,
                                               UserModel user,
                                               String id)

Specified by:

getStoredCredentialById in interface UserCredentialStore

toModel

protected CredentialModel toModel(CredentialEntity entity)

getStoredCredentials

public List<CredentialModel> getStoredCredentials(RealmModel realm,
                                                  UserModel user)

Specified by:

getStoredCredentials in interface UserCredentialStore

getStoredCredentialsByType

public List<CredentialModel> getStoredCredentialsByType(RealmModel realm,
                                                        UserModel user,
                                                        String type)

Specified by:

getStoredCredentialsByType in interface UserCredentialStore

getStoredCredentialByNameAndType

public CredentialModel getStoredCredentialByNameAndType(RealmModel realm,
                                                        UserModel user,
                                                        String name,
                                                        String type)

Specified by:

getStoredCredentialByNameAndType in interface UserCredentialStore

moveCredentialTo

public boolean moveCredentialTo(RealmModel realm,
                                UserModel user,
                                String id,
                                String newPreviousCredentialId)

Specified by:

moveCredentialTo in interface UserCredentialStore

ensureEmailConstraint

protected void ensureEmailConstraint(List<UserEntity> users,
                                     RealmModel realm)