Uses of Interface
org.keycloak.models.AuthenticatedClientSessionModel

Packages that use AuthenticatedClientSessionModel

Package	Description
org.keycloak.authentication.authenticators.util
org.keycloak.jose.jws
org.keycloak.models
org.keycloak.models.jpa.session
org.keycloak.models.map.storage.hotRod.userSession
org.keycloak.models.map.userSession
org.keycloak.models.session
org.keycloak.models.sessions.infinispan
org.keycloak.protocol
org.keycloak.protocol.docker
org.keycloak.protocol.docker.mapper
org.keycloak.protocol.oidc
org.keycloak.protocol.oidc.endpoints
org.keycloak.protocol.oidc.grants.device
org.keycloak.protocol.oidc.grants.device.clientpolicy.context
org.keycloak.protocol.oidc.mappers
org.keycloak.protocol.oidc.utils
org.keycloak.protocol.saml
org.keycloak.protocol.saml.mappers
org.keycloak.protocol.saml.preprocessor
org.keycloak.services.clientpolicy.context
org.keycloak.services.managers
org.keycloak.services.util

Uses of AuthenticatedClientSessionModel in org.keycloak.authentication.authenticators.util

Methods in org.keycloak.authentication.authenticators.util with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
static int	AcrStore.getCurrentLevelOfAuthentication(AuthenticatedClientSessionModel clientSession)
static int	LoAUtil.getCurrentLevelOfAuthentication(AuthenticatedClientSessionModel clientSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.jose.jws

Methods in org.keycloak.jose.jws with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
LogoutToken	DefaultTokenManager.initLogoutToken(ClientModel client, UserModel user, AuthenticatedClientSessionModel clientSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.models

Methods in org.keycloak.models that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	UserSessionProvider.createClientSession(RealmModel realm, ClientModel client, UserSessionModel userSession)
AuthenticatedClientSessionModel	UserSessionProvider.createOfflineClientSession(AuthenticatedClientSessionModel clientSession, UserSessionModel offlineUserSession)	Will automatically attach newly created offline client session to the offlineUserSession
default AuthenticatedClientSessionModel	UserSessionModel.getAuthenticatedClientSessionByClient(String clientUUID)	Returns a client session for the given client UUID.
AuthenticatedClientSessionModel	ClientSessionContext.getClientSession()
AuthenticatedClientSessionModel	UserSessionProvider.getClientSession(UserSessionModel userSession, ClientModel client, String clientSessionId, boolean offline)
default AuthenticatedClientSessionModel	UserSessionProvider.getClientSession(UserSessionModel userSession, ClientModel client, UUID clientSessionId, boolean offline)	Deprecated. Use UserSessionProvider.getClientSession(UserSessionModel, ClientModel, String, boolean) instead.

Methods in org.keycloak.models that return types with arguments of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
Map<String,AuthenticatedClientSessionModel>	UserSessionModel.getAuthenticatedClientSessions()	Returns map where key is ID of the client (its UUID) and value is ID respective AuthenticatedClientSessionModel object.

Methods in org.keycloak.models with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	UserSessionProvider.createOfflineClientSession(AuthenticatedClientSessionModel clientSession, UserSessionModel offlineUserSession)	Will automatically attach newly created offline client session to the offlineUserSession
LogoutToken	TokenManager.initLogoutToken(ClientModel client, UserModel user, AuthenticatedClientSessionModel clientSessionModel)

Uses of AuthenticatedClientSessionModel in org.keycloak.models.jpa.session

Methods in org.keycloak.models.jpa.session with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
void	JpaUserSessionPersisterProvider.createClientSession(AuthenticatedClientSessionModel clientSession, boolean offline)

Uses of AuthenticatedClientSessionModel in org.keycloak.models.map.storage.hotRod.userSession

Fields in org.keycloak.models.map.storage.hotRod.userSession with type parameters of type AuthenticatedClientSessionModel

Modifier and Type	Field	Description
static SearchableModelField<AuthenticatedClientSessionModel>	HotRodAuthenticatedClientSessionEntity.ID

Constructor parameters in org.keycloak.models.map.storage.hotRod.userSession with type arguments of type AuthenticatedClientSessionModel

Constructor

Description

HotRodUserSessionTransaction(ConcurrentHashMapCrudOperations<MapUserSessionEntity,UserSessionModel> map, StringKeyConverter<K> keyConverter, DeepCloner cloner, Map<SearchableModelField<? super UserSessionModel>,MapModelCriteriaBuilder.UpdatePredicatesFunc<K,MapUserSessionEntity,UserSessionModel>> fieldPredicates, MapKeycloakTransaction<MapAuthenticatedClientSessionEntity,AuthenticatedClientSessionModel> clientSessionTransaction)

Uses of AuthenticatedClientSessionModel in org.keycloak.models.map.userSession

Classes in org.keycloak.models.map.userSession that implement AuthenticatedClientSessionModel

Modifier and Type	Class	Description
class	AbstractAuthenticatedClientSessionModel
class	MapAuthenticatedClientSessionAdapter

Methods in org.keycloak.models.map.userSession that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	MapUserSessionProvider.createClientSession(RealmModel realm, ClientModel client, UserSessionModel userSession)
AuthenticatedClientSessionModel	MapUserSessionProvider.createOfflineClientSession(AuthenticatedClientSessionModel clientSession, UserSessionModel offlineUserSession)
AuthenticatedClientSessionModel	MapUserSessionAdapter.getAuthenticatedClientSessionByClient(String clientUUID)
AuthenticatedClientSessionModel	MapUserSessionProvider.getClientSession(UserSessionModel userSession, ClientModel client, String clientSessionId, boolean offline)

Methods in org.keycloak.models.map.userSession that return types with arguments of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
Map<String,AuthenticatedClientSessionModel>	MapUserSessionAdapter.getAuthenticatedClientSessions()

Methods in org.keycloak.models.map.userSession with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	MapUserSessionProvider.createOfflineClientSession(AuthenticatedClientSessionModel clientSession, UserSessionModel offlineUserSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.models.session

Classes in org.keycloak.models.session that implement AuthenticatedClientSessionModel

Modifier and Type	Class	Description
class	PersistentAuthenticatedClientSessionAdapter

Methods in org.keycloak.models.session that return types with arguments of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
Map<String,AuthenticatedClientSessionModel>	PersistentUserSessionAdapter.getAuthenticatedClientSessions()

Methods in org.keycloak.models.session with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
void	DisabledUserSessionPersisterProvider.createClientSession(AuthenticatedClientSessionModel clientSession, boolean offline)
void	UserSessionPersisterProvider.createClientSession(AuthenticatedClientSessionModel clientSession, boolean offline)

Constructors in org.keycloak.models.session with parameters of type AuthenticatedClientSessionModel

Constructor	Description
PersistentAuthenticatedClientSessionAdapter(KeycloakSession session, AuthenticatedClientSessionModel clientSession)

Constructor parameters in org.keycloak.models.session with type arguments of type AuthenticatedClientSessionModel

Constructor	Description
PersistentUserSessionAdapter(KeycloakSession session, PersistentUserSessionModel model, RealmModel realm, String userId, Map<String,AuthenticatedClientSessionModel> clientSessions)

Uses of AuthenticatedClientSessionModel in org.keycloak.models.sessions.infinispan

Classes in org.keycloak.models.sessions.infinispan that implement AuthenticatedClientSessionModel

Modifier and Type	Class	Description
class	AuthenticatedClientSessionAdapter

Methods in org.keycloak.models.sessions.infinispan that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	InfinispanUserSessionProvider.createClientSession(RealmModel realm, ClientModel client, UserSessionModel userSession)
AuthenticatedClientSessionModel	InfinispanUserSessionProvider.createOfflineClientSession(AuthenticatedClientSessionModel clientSession, UserSessionModel offlineUserSession)
AuthenticatedClientSessionModel	UserSessionAdapter.getAuthenticatedClientSessionByClient(String clientUUID)

Methods in org.keycloak.models.sessions.infinispan that return types with arguments of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
Map<String,AuthenticatedClientSessionModel>	UserSessionAdapter.getAuthenticatedClientSessions()

Methods in org.keycloak.models.sessions.infinispan with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	InfinispanUserSessionProvider.createOfflineClientSession(AuthenticatedClientSessionModel clientSession, UserSessionModel offlineUserSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol

Methods in org.keycloak.protocol with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
javax.ws.rs.core.Response	LoginProtocol.backchannelLogout(UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
javax.ws.rs.core.Response	LoginProtocol.frontchannelLogout(UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.docker

Methods in org.keycloak.protocol.docker with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
javax.ws.rs.core.Response	DockerAuthV2Protocol.backchannelLogout(UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
javax.ws.rs.core.Response	DockerAuthV2Protocol.frontchannelLogout(UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.docker.mapper

Methods in org.keycloak.protocol.docker.mapper with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
DockerResponseToken	AllowAllDockerProtocolMapper.transformDockerResponseToken(DockerResponseToken responseToken, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
DockerResponseToken	DockerAuthV2AttributeMapper.transformDockerResponseToken(DockerResponseToken responseToken, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.oidc

Methods in org.keycloak.protocol.oidc with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
javax.ws.rs.core.Response	OIDCLoginProtocol.backchannelLogout(UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
static FrontChannelLogoutHandler	FrontChannelLogoutHandler.currentOrCreate(KeycloakSession session, AuthenticatedClientSessionModel clientSession)
static void	TokenManager.dettachClientSession(AuthenticatedClientSessionModel clientSession)
javax.ws.rs.core.Response	OIDCLoginProtocol.frontchannelLogout(UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.oidc.endpoints

Methods in org.keycloak.protocol.oidc.endpoints with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
protected javax.ws.rs.core.Response	TokenEndpoint.TokenExchangeSamlProtocol.buildAuthenticatedResponse(AuthenticatedClientSessionModel clientSession, String redirectUri, Document samlDocument, JaxrsSAML2BindingBuilder bindingBuilder)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.oidc.grants.device

Methods in org.keycloak.protocol.oidc.grants.device with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
static javax.ws.rs.core.Response	DeviceGrantType.approveOAuth2DeviceAuthorization(AuthenticationSessionModel authSession, AuthenticatedClientSessionModel clientSession, KeycloakSession session)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.oidc.grants.device.clientpolicy.context

Methods in org.keycloak.protocol.oidc.grants.device.clientpolicy.context that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	DeviceTokenResponseContext.getClientSession()

Constructors in org.keycloak.protocol.oidc.grants.device.clientpolicy.context with parameters of type AuthenticatedClientSessionModel

Constructor	Description
DeviceTokenResponseContext(OAuth2DeviceCodeModel deviceCodeModel, javax.ws.rs.core.MultivaluedMap<String,String> requestParameters, AuthenticatedClientSessionModel clientSession, TokenManager.AccessTokenResponseBuilder accessTokenResponseBuilder)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.oidc.mappers

Methods in org.keycloak.protocol.oidc.mappers with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
protected String	AcrProtocolMapper.getAcr(AuthenticatedClientSessionModel clientSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.oidc.utils

Methods in org.keycloak.protocol.oidc.utils that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	OAuth2CodeParser.ParseResult.getClientSession()

Methods in org.keycloak.protocol.oidc.utils with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
static OIDCRedirectUriBuilder	OIDCRedirectUriBuilder.fromUri(String baseUri, OIDCResponseMode responseMode, KeycloakSession session, AuthenticatedClientSessionModel clientSession)
static String	OAuth2CodeParser.persistCode(KeycloakSession session, AuthenticatedClientSessionModel clientSession, OAuth2Code codeData)	Will persist the code to the cache and return the object with the codeData and code correctly set

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.saml

Methods in org.keycloak.protocol.saml that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
static AuthenticatedClientSessionModel	SamlSessionUtils.getClientSession(KeycloakSession session, RealmModel realm, String sessionIndex)

Methods in org.keycloak.protocol.saml with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
javax.ws.rs.core.Response	SamlProtocol.backchannelLogout(UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
String	ArtifactResolver.buildArtifact(AuthenticatedClientSessionModel clientSessionModel, String entityId, String artifactResponse)	Creates and stores an artifact
String	DefaultSamlArtifactResolver.buildArtifact(AuthenticatedClientSessionModel clientSessionModel, String entityId, String artifactResponse)
protected String	SamlProtocol.buildArtifactAndStoreResponse(SAML2Object saml2Object, AuthenticatedClientSessionModel clientSessionModel)
protected javax.ws.rs.core.Response	SamlProtocol.buildArtifactAuthenticatedResponse(AuthenticatedClientSessionModel clientSession, String redirectUri, SAML2Object samlDocument, JaxrsSAML2BindingBuilder bindingBuilder)	This method, instead of sending the actual response with the token sends the artifact message via post or redirect.
protected javax.ws.rs.core.Response	SamlProtocol.buildAuthenticatedResponse(AuthenticatedClientSessionModel clientSession, String redirectUri, Document samlDocument, JaxrsSAML2BindingBuilder bindingBuilder)
protected LogoutRequestType	SamlProtocol.createLogoutRequest(String logoutUrl, AuthenticatedClientSessionModel clientSession, ClientModel client, SamlProtocolExtensionsAwareBuilder.NodeGenerator... extensions)
javax.ws.rs.core.Response	SamlProtocol.frontchannelLogout(UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
protected String	SamlProtocol.getSAMLNameId(List<SamlProtocol.ProtocolMapperProcessor<SAMLNameIdMapper>> samlNameIdMappers, String nameIdFormat, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
static String	SamlSessionUtils.getSessionIndex(AuthenticatedClientSessionModel clientSession)
protected boolean	SamlProtocol.isLogoutPostBindingForClient(AuthenticatedClientSessionModel clientSession)
protected boolean	SamlProtocol.isPostBinding(AuthenticatedClientSessionModel clientSession)
AttributeStatementType	SamlProtocol.populateAttributeStatements(List<SamlProtocol.ProtocolMapperProcessor<SAMLAttributeStatementMapper>> attributeStatementMappers, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
String	ArtifactResolver.resolveArtifact(AuthenticatedClientSessionModel clientSessionModel, String artifact)	Returns a serialized Saml ArtifactResponse corresponding to the artifact that was created by buildArtifact
String	DefaultSamlArtifactResolver.resolveArtifact(AuthenticatedClientSessionModel clientSessionModel, String artifact)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.saml.mappers

Methods in org.keycloak.protocol.saml.mappers with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
String	SAMLNameIdMapper.mapperNameId(String nameIdFormat, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
String	UserAttributeNameIdMapper.mapperNameId(String nameIdFormat, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
void	GroupMembershipMapper.transformAttributeStatement(AttributeStatementType attributeStatement, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
void	HardcodedAttributeMapper.transformAttributeStatement(AttributeStatementType attributeStatement, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
void	SAMLAttributeStatementMapper.transformAttributeStatement(AttributeStatementType attributeStatement, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
void	ScriptBasedMapper.transformAttributeStatement(AttributeStatementType attributeStatement, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)	This method attaches one or many attributes to the passed attribute statement.
void	UserAttributeStatementMapper.transformAttributeStatement(AttributeStatementType attributeStatement, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
void	UserPropertyAttributeStatementMapper.transformAttributeStatement(AttributeStatementType attributeStatement, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)
void	UserSessionNoteStatementMapper.transformAttributeStatement(AttributeStatementType attributeStatement, ProtocolMapperModel mappingModel, KeycloakSession session, UserSessionModel userSession, AuthenticatedClientSessionModel clientSession)

Uses of AuthenticatedClientSessionModel in org.keycloak.protocol.saml.preprocessor

Methods in org.keycloak.protocol.saml.preprocessor with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
default LogoutRequestType	SamlAuthenticationPreprocessor.beforeProcessingLogoutRequest(LogoutRequestType logoutRequest, UserSessionModel authSession, AuthenticatedClientSessionModel clientSession)	Called before a logout request is processed.
default LogoutRequestType	SamlAuthenticationPreprocessor.beforeSendingLogoutRequest(LogoutRequestType logoutRequest, UserSessionModel authSession, AuthenticatedClientSessionModel clientSession)	Called before a logout request is sent.
default StatusResponseType	SamlAuthenticationPreprocessor.beforeSendingResponse(StatusResponseType statusResponse, AuthenticatedClientSessionModel clientSession)	Called before a response is sent back to the client.

Uses of AuthenticatedClientSessionModel in org.keycloak.services.clientpolicy.context

Methods in org.keycloak.services.clientpolicy.context that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	ServiceAccountTokenRequestContext.getClientSession()
AuthenticatedClientSessionModel	ServiceAccountTokenResponseContext.getClientSession()

Constructors in org.keycloak.services.clientpolicy.context with parameters of type AuthenticatedClientSessionModel

Constructor	Description
ServiceAccountTokenRequestContext(javax.ws.rs.core.MultivaluedMap<String,String> params, AuthenticatedClientSessionModel clientSession)
ServiceAccountTokenResponseContext(javax.ws.rs.core.MultivaluedMap<String,String> params, AuthenticatedClientSessionModel clientSession, TokenManager.AccessTokenResponseBuilder accessTokenResponseBuilder)

Uses of AuthenticatedClientSessionModel in org.keycloak.services.managers

Methods in org.keycloak.services.managers that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	Auth.getClientSession()

Methods in org.keycloak.services.managers with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
void	UserSessionManager.createOrUpdateOfflineSession(AuthenticatedClientSessionModel clientSession, UserSessionModel userSession)
static boolean	AuthenticationManager.isSSOAuthentication(AuthenticatedClientSessionModel clientSession)
javax.ws.rs.core.Response	ResourceAdminManager.logoutClientSession(RealmModel realm, ClientModel resource, AuthenticatedClientSessionModel clientSession)
javax.ws.rs.core.Response	ResourceAdminManager.logoutClientSessionWithBackchannelLogoutUrl(ClientModel resource, AuthenticatedClientSessionModel clientSession)
protected javax.ws.rs.core.Response	ResourceAdminManager.sendBackChannelLogoutRequestToClientUri(ClientModel resource, AuthenticatedClientSessionModel clientSessionModel, String managementUrl)
void	Auth.setClientSession(AuthenticatedClientSessionModel clientSession)

Method parameters in org.keycloak.services.managers with type arguments of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
protected javax.ws.rs.core.Response	ResourceAdminManager.logoutClientSessions(RealmModel realm, ClientModel resource, List<AuthenticatedClientSessionModel> clientSessions)

Uses of AuthenticatedClientSessionModel in org.keycloak.services.util

Methods in org.keycloak.services.util that return AuthenticatedClientSessionModel

Modifier and Type	Method	Description
AuthenticatedClientSessionModel	DefaultClientSessionContext.getClientSession()

Methods in org.keycloak.services.util with parameters of type AuthenticatedClientSessionModel

Modifier and Type	Method	Description
static DefaultClientSessionContext	DefaultClientSessionContext.fromClientSessionAndClientScopeIds(AuthenticatedClientSessionModel clientSession, Set<String> clientScopeIds, KeycloakSession session)
static DefaultClientSessionContext	DefaultClientSessionContext.fromClientSessionAndScopeParameter(AuthenticatedClientSessionModel clientSession, String scopeParam, KeycloakSession session)
static DefaultClientSessionContext	DefaultClientSessionContext.fromClientSessionScopeParameter(AuthenticatedClientSessionModel clientSession, KeycloakSession session)	Useful if we want to "re-compute" client scopes based on the scope parameter