org.keycloak.keys.infinispan

Class InfinispanPublicKeyStorageProvider

java.lang.Object

org.keycloak.keys.infinispan.InfinispanPublicKeyStorageProvider

All Implemented Interfaces:

PublicKeyStorageProvider, Provider

public class InfinispanPublicKeyStorageProvider
extends Object
implements PublicKeyStorageProvider

Author:

Marek Posolda

Constructor Summary

Constructors

Constructor and Description
InfinispanPublicKeyStorageProvider(KeycloakSession session, org.infinispan.Cache<String,PublicKeysEntry> keys, Map<String,FutureTask<PublicKeysEntry>> tasksInProgress, int minTimeBetweenRequests)

Method Summary

Modifier and Type	Method and Description
void	clearCache() Clears all the cached public keys, so they need to be loaded again
void	close()
protected KeycloakTransaction	getAfterTransaction()
KeyWrapper	getFirstPublicKey(String modelKey, String algorithm, PublicKeyLoader loader) Get first found public key to verify messages signed by particular client having several public keys.
KeyWrapper	getPublicKey(String modelKey, String kid, PublicKeyLoader loader) Get public key to verify messages signed by particular client.
protected void	runInvalidations()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

InfinispanPublicKeyStorageProvider

public InfinispanPublicKeyStorageProvider(KeycloakSession session,
                                          org.infinispan.Cache<String,PublicKeysEntry> keys,
                                          Map<String,FutureTask<PublicKeysEntry>> tasksInProgress,
                                          int minTimeBetweenRequests)

Method Detail

clearCache

public void clearCache()

Description copied from interface: PublicKeyStorageProvider

Clears all the cached public keys, so they need to be loaded again

Specified by:

clearCache in interface PublicKeyStorageProvider

getAfterTransaction

protected KeycloakTransaction getAfterTransaction()

runInvalidations

protected void runInvalidations()

getPublicKey

public KeyWrapper getPublicKey(String modelKey,
                               String kid,
                               PublicKeyLoader loader)

Description copied from interface: PublicKeyStorageProvider

Get public key to verify messages signed by particular client. Used for example during JWT client authentication

Specified by:

getPublicKey in interface PublicKeyStorageProvider

Returns:

getFirstPublicKey

public KeyWrapper getFirstPublicKey(String modelKey,
                                    String algorithm,
                                    PublicKeyLoader loader)

Description copied from interface: PublicKeyStorageProvider

Get first found public key to verify messages signed by particular client having several public keys. Used for example during JWT client authentication or to encrypt content encryption key (CEK) by particular client. Used for example during encrypting a token in JWE

Specified by:

getFirstPublicKey in interface PublicKeyStorageProvider

Returns:

close

public void close()

Specified by:

close in interface Provider