public class SamlService extends AuthorizationEndpointBase
Modifier and Type | Class and Description |
---|---|
class |
SamlService.BindingProtocol |
protected class |
SamlService.PostBindingProtocol |
protected class |
SamlService.RedirectBindingProtocol |
Modifier and Type | Field and Description |
---|---|
protected static org.jboss.logging.Logger |
logger |
APP_INITIATED_FLOW, authManager, clientConnection, event, headers, httpRequest, realm, session
Constructor and Description |
---|
SamlService(RealmModel realm,
EventBuilder event,
DestinationValidator destinationValidator) |
Modifier and Type | Method and Description |
---|---|
String |
getDescriptor() |
static String |
getIDPMetadataDescriptor(javax.ws.rs.core.UriInfo uriInfo,
KeycloakSession session,
RealmModel realm) |
AuthenticationSessionModel |
getOrCreateLoginSessionForIdpInitiatedSso(KeycloakSession session,
RealmModel realm,
ClientModel client,
String relayState)
Creates a client session object for SAML IdP-initiated SSO session.
|
javax.ws.rs.core.Response |
idpInitiatedSSO(String clientUrlName,
String relayState) |
protected javax.ws.rs.core.Response |
newBrowserAuthentication(AuthenticationSessionModel authSession,
boolean isPassive,
boolean redirectToAuthentication) |
protected javax.ws.rs.core.Response |
newBrowserAuthentication(AuthenticationSessionModel authSession,
boolean isPassive,
boolean redirectToAuthentication,
SamlProtocol samlProtocol) |
javax.ws.rs.core.Response |
postBinding(String samlRequest,
String samlResponse,
String relayState) |
javax.ws.rs.core.Response |
redirectBinding(String samlRequest,
String samlResponse,
String relayState) |
javax.ws.rs.core.Response |
soapBinding(InputStream inputStream) |
checkRealm, checkSsl, createAuthenticationSession, createProcessor, getAuthenticationFlow, handleBrowserAuthenticationRequest
public SamlService(RealmModel realm, EventBuilder event, DestinationValidator destinationValidator)
protected javax.ws.rs.core.Response newBrowserAuthentication(AuthenticationSessionModel authSession, boolean isPassive, boolean redirectToAuthentication)
protected javax.ws.rs.core.Response newBrowserAuthentication(AuthenticationSessionModel authSession, boolean isPassive, boolean redirectToAuthentication, SamlProtocol samlProtocol)
@GET public javax.ws.rs.core.Response redirectBinding(@QueryParam(value="SAMLRequest") String samlRequest, @QueryParam(value="SAMLResponse") String samlResponse, @QueryParam(value="RelayState") String relayState)
@POST @Consumes(value="application/x-www-form-urlencoded") public javax.ws.rs.core.Response postBinding(@FormParam(value="SAMLRequest") String samlRequest, @FormParam(value="SAMLResponse") String samlResponse, @FormParam(value="RelayState") String relayState)
@GET @Path(value="descriptor") @Produces(value="application/xml") public String getDescriptor() throws Exception
Exception
public static String getIDPMetadataDescriptor(javax.ws.rs.core.UriInfo uriInfo, KeycloakSession session, RealmModel realm)
@GET @Path(value="clients/{client}") @Produces(value="text/html; charset=utf-8") public javax.ws.rs.core.Response idpInitiatedSSO(@PathParam(value="client") String clientUrlName, @QueryParam(value="RelayState") String relayState)
public AuthenticationSessionModel getOrCreateLoginSessionForIdpInitiatedSso(KeycloakSession session, RealmModel realm, ClientModel client, String relayState)
session
- KC sessionrealm
- Realm to create client session inclient
- Client to create client session forrelayState
- Optional relay state - free field as per SAML specification@POST @Consumes(value={"application/soap+xml","text/xml"}) public javax.ws.rs.core.Response soapBinding(InputStream inputStream)
Copyright © 2020 JBoss by Red Hat. All rights reserved.