Package org.keycloak.models
Interface ClientModel
-
- All Superinterfaces:
ClientScopeModel,OrderedModel,ProtocolMapperContainerModel,RoleContainerModel,ScopeContainerModel
- All Known Implementing Classes:
AbstractClientModel,AbstractClientStorageAdapter,AbstractReadOnlyClientStorageAdapter,ClientAdapter,ClientAdapter,ClientModelLazyDelegate,ClientModelLazyDelegate.WithId,MapClientAdapter,OIDCClientSecretConfigWrapper.ReadOnlyRotatedSecretClientModel,OpenshiftSAClientAdapter,UnsupportedOperationsClientStorageAdapter
public interface ClientModel extends ClientScopeModel, RoleContainerModel, ProtocolMapperContainerModel, ScopeContainerModel
- Version:
- $Revision: 1 $
- Author:
- Bill Burke
-
-
Nested Class Summary
Nested Classes Modifier and Type Interface Description static interfaceClientModel.ClientCreationEventstatic interfaceClientModel.ClientIdChangeEventstatic interfaceClientModel.ClientProtocolUpdatedEventstatic interfaceClientModel.ClientRemovedEventstatic interfaceClientModel.ClientUpdatedEventstatic classClientModel.SearchableFields-
Nested classes/interfaces inherited from interface org.keycloak.models.ClientScopeModel
ClientScopeModel.ClientScopeRemovedEvent
-
Nested classes/interfaces inherited from interface org.keycloak.models.OrderedModel
OrderedModel.OrderedModelComparator<OM extends OrderedModel>
-
Nested classes/interfaces inherited from interface org.keycloak.models.RoleContainerModel
RoleContainerModel.RoleRemovedEvent
-
-
Field Summary
Fields Modifier and Type Field Description static StringLOGO_URIstatic StringPOLICY_URIstatic StringPRIVATE_KEYstatic StringPUBLIC_KEYstatic StringTOS_URIstatic StringX509CERTIFICATE-
Fields inherited from interface org.keycloak.models.ClientScopeModel
CONSENT_SCREEN_TEXT, DISPLAY_ON_CONSENT_SCREEN, DYNAMIC_SCOPE_REGEXP, GUI_ORDER, INCLUDE_IN_TOKEN_SCOPE, IS_DYNAMIC_SCOPE
-
-
Method Summary
All Methods Instance Methods Abstract Methods Default Methods Deprecated Methods Modifier and Type Method Description voidaddClientScope(ClientScopeModel clientScope, boolean defaultScope)Add clientScope with this client.voidaddClientScopes(Set<ClientScopeModel> clientScopes, boolean defaultScope)Add clientScopes with this client.voidaddRedirectUri(String redirectUri)voidaddWebOrigin(String webOrigin)StringgetAttribute(String name)Map<String,String>getAttributes()StringgetAuthenticationFlowBindingOverride(String binding)Get authentication flow binding override for this client.Map<String,String>getAuthenticationFlowBindingOverrides()StringgetBaseUrl()StringgetClientAuthenticatorType()StringgetClientId()Returns client ID as defined by the user.Map<String,ClientScopeModel>getClientScopes(boolean defaultScope)Return all default scopes (if 'defaultScope' is true) or all optional scopes (if 'defaultScope' is false) linked with this clientdefault StringgetConsentScreenText()StringgetDescription()default ClientScopeModelgetDynamicClientScope(String scope)Returns aClientScopeModelassociated with this client.StringgetId()Returns client internal ID (UUID).StringgetManagementUrl()StringgetName()intgetNodeReRegistrationTimeout()intgetNotBefore()Time in seconds since epocStringgetProtocol()RealmModelgetRealm()Set<String>getRedirectUris()Map<String,Integer>getRegisteredNodes()StringgetRegistrationToken()StringgetRootUrl()StringgetSecret()Set<String>getWebOrigins()default booleanhasDirectScope(RoleModel role)Returnstrue, if this object has the given role directly in its scope.booleanisAlwaysDisplayInConsole()booleanisBearerOnly()booleanisConsentRequired()booleanisDirectAccessGrantsEnabled()default booleanisDisplayOnConsentScreen()booleanisEnabled()booleanisFrontchannelLogout()booleanisFullScopeAllowed()booleanisImplicitFlowEnabled()booleanisPublicClient()booleanisServiceAccountsEnabled()booleanisStandardFlowEnabled()booleanisSurrogateAuthRequired()voidregisterNode(String nodeHost, int registrationTime)Register node or just update the 'lastReRegistration' time if this node is already registeredvoidremoveAttribute(String name)voidremoveAuthenticationFlowBindingOverride(String binding)voidremoveClientScope(ClientScopeModel clientScope)voidremoveRedirectUri(String redirectUri)voidremoveWebOrigin(String webOrigin)voidsetAlwaysDisplayInConsole(boolean alwaysDisplayInConsole)voidsetAttribute(String name, String value)voidsetAuthenticationFlowBindingOverride(String binding, String flowId)voidsetBaseUrl(String url)voidsetBearerOnly(boolean only)voidsetClientAuthenticatorType(String clientAuthenticatorType)voidsetClientId(String clientId)voidsetConsentRequired(boolean consentRequired)voidsetDescription(String description)voidsetDirectAccessGrantsEnabled(boolean directAccessGrantsEnabled)voidsetEnabled(boolean enabled)voidsetFrontchannelLogout(boolean flag)voidsetFullScopeAllowed(boolean value)voidsetImplicitFlowEnabled(boolean implicitFlowEnabled)voidsetManagementUrl(String url)voidsetName(String name)voidsetNodeReRegistrationTimeout(int timeout)voidsetNotBefore(int notBefore)voidsetProtocol(String protocol)voidsetPublicClient(boolean flag)voidsetRedirectUris(Set<String> redirectUris)voidsetRegistrationToken(String registrationToken)voidsetRootUrl(String url)voidsetSecret(String secret)voidsetServiceAccountsEnabled(boolean serviceAccountsEnabled)voidsetStandardFlowEnabled(boolean standardFlowEnabled)voidsetSurrogateAuthRequired(boolean surrogateAuthRequired)voidsetWebOrigins(Set<String> webOrigins)voidunregisterNode(String nodeHost)voidupdateClient()Deprecated.Do not use, to be removedbooleanvalidateSecret(String secret)-
Methods inherited from interface org.keycloak.models.ClientScopeModel
getDynamicScopeRegexp, getGuiOrder, isDynamicScope, isIncludeInTokenScope, setConsentScreenText, setDisplayOnConsentScreen, setGuiOrder, setIncludeInTokenScope, setIsDynamicScope
-
Methods inherited from interface org.keycloak.models.ProtocolMapperContainerModel
addProtocolMapper, getProtocolMapperById, getProtocolMapperByName, getProtocolMappersStream, removeProtocolMapper, updateProtocolMapper
-
Methods inherited from interface org.keycloak.models.RoleContainerModel
addDefaultRole, addRole, addRole, getDefaultRoles, getDefaultRolesStream, getRole, getRolesStream, getRolesStream, removeDefaultRoles, removeRole, searchForRolesStream, updateDefaultRoles
-
Methods inherited from interface org.keycloak.models.ScopeContainerModel
addScopeMapping, deleteScopeMapping, getRealmScopeMappingsStream, getScopeMappingsStream, hasScope
-
-
-
-
Field Detail
-
PRIVATE_KEY
static final String PRIVATE_KEY
- See Also:
- Constant Field Values
-
PUBLIC_KEY
static final String PUBLIC_KEY
- See Also:
- Constant Field Values
-
X509CERTIFICATE
static final String X509CERTIFICATE
- See Also:
- Constant Field Values
-
LOGO_URI
static final String LOGO_URI
- See Also:
- Constant Field Values
-
POLICY_URI
static final String POLICY_URI
- See Also:
- Constant Field Values
-
TOS_URI
static final String TOS_URI
- See Also:
- Constant Field Values
-
-
Method Detail
-
updateClient
void updateClient()
Deprecated.Do not use, to be removedNotifies other providers that this client has been updated.After a client is updated, providers can register for
ClientModel.ClientUpdatedEvent. The setters in this model do not send an update for individual updates of the model. This method is here to allow for sending this event for this client, allowsing for to group multiple changes of a client and signal that all the changes in this client have been performed.
-
getId
String getId()
Returns client internal ID (UUID).- Specified by:
getIdin interfaceClientScopeModel- Specified by:
getIdin interfaceRoleContainerModel- Returns:
-
getClientId
String getClientId()
Returns client ID as defined by the user.- Returns:
-
setClientId
void setClientId(String clientId)
-
getName
String getName()
- Specified by:
getNamein interfaceClientScopeModel
-
setName
void setName(String name)
- Specified by:
setNamein interfaceClientScopeModel
-
getDescription
String getDescription()
- Specified by:
getDescriptionin interfaceClientScopeModel
-
setDescription
void setDescription(String description)
- Specified by:
setDescriptionin interfaceClientScopeModel
-
isEnabled
boolean isEnabled()
-
setEnabled
void setEnabled(boolean enabled)
-
isAlwaysDisplayInConsole
boolean isAlwaysDisplayInConsole()
-
setAlwaysDisplayInConsole
void setAlwaysDisplayInConsole(boolean alwaysDisplayInConsole)
-
isSurrogateAuthRequired
boolean isSurrogateAuthRequired()
-
setSurrogateAuthRequired
void setSurrogateAuthRequired(boolean surrogateAuthRequired)
-
addWebOrigin
void addWebOrigin(String webOrigin)
-
removeWebOrigin
void removeWebOrigin(String webOrigin)
-
addRedirectUri
void addRedirectUri(String redirectUri)
-
removeRedirectUri
void removeRedirectUri(String redirectUri)
-
getManagementUrl
String getManagementUrl()
-
setManagementUrl
void setManagementUrl(String url)
-
getRootUrl
String getRootUrl()
-
setRootUrl
void setRootUrl(String url)
-
getBaseUrl
String getBaseUrl()
-
setBaseUrl
void setBaseUrl(String url)
-
isBearerOnly
boolean isBearerOnly()
-
setBearerOnly
void setBearerOnly(boolean only)
-
getNodeReRegistrationTimeout
int getNodeReRegistrationTimeout()
-
setNodeReRegistrationTimeout
void setNodeReRegistrationTimeout(int timeout)
-
getClientAuthenticatorType
String getClientAuthenticatorType()
-
setClientAuthenticatorType
void setClientAuthenticatorType(String clientAuthenticatorType)
-
validateSecret
boolean validateSecret(String secret)
-
getSecret
String getSecret()
-
setSecret
void setSecret(String secret)
-
getRegistrationToken
String getRegistrationToken()
-
setRegistrationToken
void setRegistrationToken(String registrationToken)
-
getProtocol
String getProtocol()
- Specified by:
getProtocolin interfaceClientScopeModel
-
setProtocol
void setProtocol(String protocol)
- Specified by:
setProtocolin interfaceClientScopeModel
-
setAttribute
void setAttribute(String name, String value)
- Specified by:
setAttributein interfaceClientScopeModel
-
removeAttribute
void removeAttribute(String name)
- Specified by:
removeAttributein interfaceClientScopeModel
-
getAttribute
String getAttribute(String name)
- Specified by:
getAttributein interfaceClientScopeModel
-
getAttributes
Map<String,String> getAttributes()
- Specified by:
getAttributesin interfaceClientScopeModel
-
getAuthenticationFlowBindingOverride
String getAuthenticationFlowBindingOverride(String binding)
Get authentication flow binding override for this client. Allows client to override an authentication flow binding.- Parameters:
binding- examples are "browser", "direct_grant"- Returns:
-
removeAuthenticationFlowBindingOverride
void removeAuthenticationFlowBindingOverride(String binding)
-
setAuthenticationFlowBindingOverride
void setAuthenticationFlowBindingOverride(String binding, String flowId)
-
isFrontchannelLogout
boolean isFrontchannelLogout()
-
setFrontchannelLogout
void setFrontchannelLogout(boolean flag)
-
isFullScopeAllowed
boolean isFullScopeAllowed()
-
setFullScopeAllowed
void setFullScopeAllowed(boolean value)
-
hasDirectScope
default boolean hasDirectScope(RoleModel role)
Description copied from interface:ScopeContainerModelReturnstrue, if this object has the given role directly in its scope.- Specified by:
hasDirectScopein interfaceScopeContainerModel- Parameters:
role- the role- Returns:
- see description
- See Also:
if you want to check whether this object has the given role directly or indirectly in its scope
-
isPublicClient
boolean isPublicClient()
-
setPublicClient
void setPublicClient(boolean flag)
-
isConsentRequired
boolean isConsentRequired()
-
setConsentRequired
void setConsentRequired(boolean consentRequired)
-
isStandardFlowEnabled
boolean isStandardFlowEnabled()
-
setStandardFlowEnabled
void setStandardFlowEnabled(boolean standardFlowEnabled)
-
isImplicitFlowEnabled
boolean isImplicitFlowEnabled()
-
setImplicitFlowEnabled
void setImplicitFlowEnabled(boolean implicitFlowEnabled)
-
isDirectAccessGrantsEnabled
boolean isDirectAccessGrantsEnabled()
-
setDirectAccessGrantsEnabled
void setDirectAccessGrantsEnabled(boolean directAccessGrantsEnabled)
-
isServiceAccountsEnabled
boolean isServiceAccountsEnabled()
-
setServiceAccountsEnabled
void setServiceAccountsEnabled(boolean serviceAccountsEnabled)
-
getRealm
RealmModel getRealm()
- Specified by:
getRealmin interfaceClientScopeModel
-
addClientScope
void addClientScope(ClientScopeModel clientScope, boolean defaultScope)
Add clientScope with this client. Add it as default scope (if parameter 'defaultScope' is true) or optional scope (if parameter 'defaultScope' is false)- Parameters:
clientScope-defaultScope-
-
addClientScopes
void addClientScopes(Set<ClientScopeModel> clientScopes, boolean defaultScope)
Add clientScopes with this client. Add as default scopes (if parameter 'defaultScope' is true) or optional scopes (if parameter 'defaultScope' is false)- Parameters:
clientScopes-defaultScope-
-
removeClientScope
void removeClientScope(ClientScopeModel clientScope)
-
getClientScopes
Map<String,ClientScopeModel> getClientScopes(boolean defaultScope)
Return all default scopes (if 'defaultScope' is true) or all optional scopes (if 'defaultScope' is false) linked with this client- Parameters:
defaultScope-- Returns:
- map where key is the name of the clientScope, value is particular clientScope. Returns empty map if no scopes linked (never returns null).
-
getDynamicClientScope
default ClientScopeModel getDynamicClientScope(String scope)
Returns a
ClientScopeModelassociated with this client.This method is used as a fallback in order to let clients to resolve a
scopedynamically which is not listed as default or optional scope when calling#getClientScopes(boolean, boolean).- Parameters:
scope- the scope name- Returns:
- the client scope
-
getNotBefore
int getNotBefore()
Time in seconds since epoc- Returns:
-
setNotBefore
void setNotBefore(int notBefore)
-
registerNode
void registerNode(String nodeHost, int registrationTime)
Register node or just update the 'lastReRegistration' time if this node is already registered- Parameters:
nodeHost-registrationTime-
-
unregisterNode
void unregisterNode(String nodeHost)
-
isDisplayOnConsentScreen
default boolean isDisplayOnConsentScreen()
- Specified by:
isDisplayOnConsentScreenin interfaceClientScopeModel
-
getConsentScreenText
default String getConsentScreenText()
- Specified by:
getConsentScreenTextin interfaceClientScopeModel
-
-