Package org.keycloak.models.map.keys

Class MapPublicKeyStorageProvider

java.lang.Object

org.keycloak.models.map.keys.MapPublicKeyStorageProvider

All Implemented Interfaces:

PublicKeyStorageProvider, Provider

public class MapPublicKeyStorageProvider
extends Object
implements PublicKeyStorageProvider

Constructor Summary

Constructors

Constructor	Description
MapPublicKeyStorageProvider(KeycloakSession session, Map<String,FutureTask<PublicKeysWrapper>> tasksInProgress)

Method Summary

Modifier and Type	Method	Description
void	close()
KeyWrapper	getFirstPublicKey(String modelKey, String algorithm, PublicKeyLoader loader)	Get first found public key to verify messages signed by particular client having several public keys.
KeyWrapper	getPublicKey(String modelKey, String kid, String algorithm, PublicKeyLoader loader)	Get public key to verify messages signed by particular client.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

MapPublicKeyStorageProvider

public MapPublicKeyStorageProvider(KeycloakSession session,
                                   Map<String,FutureTask<PublicKeysWrapper>> tasksInProgress)

Method Detail

getFirstPublicKey

public KeyWrapper getFirstPublicKey(String modelKey,
                                    String algorithm,
                                    PublicKeyLoader loader)

Description copied from interface: PublicKeyStorageProvider

Get first found public key to verify messages signed by particular client having several public keys. Used for example during JWT client authentication or to encrypt content encryption key (CEK) by particular client. Used for example during encrypting a token in JWE

Specified by:

getFirstPublicKey in interface PublicKeyStorageProvider

Returns:

getPublicKey

public KeyWrapper getPublicKey(String modelKey,
                               String kid,
                               String algorithm,
                               PublicKeyLoader loader)

Description copied from interface: PublicKeyStorageProvider

Get public key to verify messages signed by particular client. Used for example during JWT client authentication

Specified by:

getPublicKey in interface PublicKeyStorageProvider

algorithm - The returned key must match this algorithm (unless the algorithm is not set in the JWK)

Returns:

close

public void close()

Specified by:

close in interface Provider