Package org.keycloak.protocol.oidc
Class OIDCAdvancedConfigWrapper
java.lang.Object
org.keycloak.protocol.oidc.AbstractClientConfigWrapper
org.keycloak.protocol.oidc.OIDCAdvancedConfigWrapper
- Author:
- Marek Posolda
-
Field Summary
Fields inherited from class org.keycloak.protocol.oidc.AbstractClientConfigWrapper
clientModel, clientRep -
Method Summary
Modifier and TypeMethodDescriptionstatic OIDCAdvancedConfigWrapperfromClientModel(ClientModel client) static OIDCAdvancedConfigWrapperfromClientRepresentation(ClientRepresentation clientRep) booleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanIf true, then Client Credentials Grant generates refresh token and creates user session.booleanbooleanvoidsetAllowRegexPatternComparison(boolean allowRegexPatternComparison) voidvoidvoidsetAuthorizationSignedResponseAlg(String algName) voidsetBackchannelLogoutRevokeOfflineTokens(boolean backchannelLogoutRevokeOfflineTokens) voidsetBackchannelLogoutSessionRequired(boolean backchannelLogoutSessionRequired) voidsetBackchannelLogoutUrl(String backchannelLogoutUrl) voidsetExcludeIssuerFromAuthResponse(boolean excludeIssuerFromAuthResponse) voidsetExcludeSessionStateFromAuthResponse(boolean excludeSessionStateFromAuthResponse) voidsetFrontChannelLogoutSessionRequired(boolean frontChannelLogoutSessionRequired) voidsetFrontChannelLogoutUrl(String frontChannelLogoutUrl) voidsetIdTokenEncryptedResponseAlg(String algName) voidsetIdTokenEncryptedResponseEnc(String encName) voidsetIdTokenSignedResponseAlg(String algName) voidsetJwksString(String jwksString) voidsetJwksUrl(String jwksUrl) voidsetLogoUri(String logoUri) voidsetPkceCodeChallengeMethod(String codeChallengeMethodName) voidsetPolicyUri(String policyUri) voidsetPostLogoutRedirectUris(List<String> postLogoutRedirectUris) voidsetRequestObjectEncryptionAlg(String algorithm) voidsetRequestObjectEncryptionEnc(String algorithm) voidsetRequestObjectRequired(String requestObjectRequired) voidsetRequestObjectSignatureAlg(String algorithm) voidsetRequestUris(List<String> requestUris) voidsetTlsClientAuthSubjectDn(String tls_client_auth_subject_dn) voidsetTokenEndpointAuthSigningAlg(String algName) voidvoidsetUseDPoP(boolean useDPoP) voidsetUseJwksString(boolean useJwksString) voidsetUseJwksUrl(boolean useJwksUrl) voidsetUseLowerCaseInTokenResponse(boolean useRefreshToken) voidsetUseMtlsHoKToken(boolean useUtlsHokToken) voidsetUseRefreshToken(boolean useRefreshToken) voidsetUseRefreshTokenForClientCredentialsGrant(boolean enable) voidsetUserInfoEncryptedResponseAlg(String algorithm) voidsetUserInfoEncryptedResponseEnc(String algorithm) voidsetUserInfoSignedResponseAlg(String algorithm) Methods inherited from class org.keycloak.protocol.oidc.AbstractClientConfigWrapper
getAttribute, getAttribute, getAttributeMultivalued, getAttributes, setAttribute, setAttributeMultivalued
-
Method Details
-
fromClientModel
-
fromClientRepresentation
-
getUserInfoSignedResponseAlg
-
setUserInfoSignedResponseAlg
-
isUserInfoSignatureRequired
public boolean isUserInfoSignatureRequired() -
setUserInfoEncryptedResponseAlg
-
getUserInfoEncryptedResponseAlg
-
getUserInfoEncryptedResponseEnc
-
setUserInfoEncryptedResponseEnc
-
isUserInfoEncryptionRequired
public boolean isUserInfoEncryptionRequired() -
getRequestObjectSignatureAlg
-
setRequestObjectSignatureAlg
-
setRequestObjectEncryptionAlg
-
getRequestObjectEncryptionAlg
-
getRequestObjectEncryptionEnc
-
setRequestObjectEncryptionEnc
-
getRequestObjectRequired
-
setRequestObjectRequired
-
getRequestUris
-
setRequestUris
-
isUseJwksUrl
public boolean isUseJwksUrl() -
setUseJwksUrl
public void setUseJwksUrl(boolean useJwksUrl) -
getJwksUrl
-
setJwksUrl
-
isUseJwksString
public boolean isUseJwksString() -
setUseJwksString
public void setUseJwksString(boolean useJwksString) -
getJwksString
-
setJwksString
-
isExcludeSessionStateFromAuthResponse
public boolean isExcludeSessionStateFromAuthResponse() -
setExcludeSessionStateFromAuthResponse
public void setExcludeSessionStateFromAuthResponse(boolean excludeSessionStateFromAuthResponse) -
isExcludeIssuerFromAuthResponse
public boolean isExcludeIssuerFromAuthResponse() -
setExcludeIssuerFromAuthResponse
public void setExcludeIssuerFromAuthResponse(boolean excludeIssuerFromAuthResponse) -
isUseDPoP
public boolean isUseDPoP() -
setUseDPoP
public void setUseDPoP(boolean useDPoP) -
isUseMtlsHokToken
public boolean isUseMtlsHokToken() -
setUseMtlsHoKToken
public void setUseMtlsHoKToken(boolean useUtlsHokToken) -
isUseRefreshToken
public boolean isUseRefreshToken() -
setUseRefreshToken
public void setUseRefreshToken(boolean useRefreshToken) -
isUseLowerCaseInTokenResponse
public boolean isUseLowerCaseInTokenResponse() -
setUseLowerCaseInTokenResponse
public void setUseLowerCaseInTokenResponse(boolean useRefreshToken) -
isUseRefreshTokenForClientCredentialsGrant
public boolean isUseRefreshTokenForClientCredentialsGrant()If true, then Client Credentials Grant generates refresh token and creates user session. This is not per specs, so it is false by default For the details @see https://tools.ietf.org/html/rfc6749#section-4.4.3 -
setUseRefreshTokenForClientCredentialsGrant
public void setUseRefreshTokenForClientCredentialsGrant(boolean enable) -
getTlsClientAuthSubjectDn
-
setTlsClientAuthSubjectDn
-
getAllowRegexPatternComparison
public boolean getAllowRegexPatternComparison() -
setAllowRegexPatternComparison
public void setAllowRegexPatternComparison(boolean allowRegexPatternComparison) -
getPkceCodeChallengeMethod
-
setPkceCodeChallengeMethod
-
getIdTokenSignedResponseAlg
-
setIdTokenSignedResponseAlg
-
getIdTokenEncryptedResponseAlg
-
setIdTokenEncryptedResponseAlg
-
getIdTokenEncryptedResponseEnc
-
setIdTokenEncryptedResponseEnc
-
getAuthorizationSignedResponseAlg
-
setAuthorizationSignedResponseAlg
-
getAuthorizationEncryptedResponseAlg
-
setAuthorizationEncryptedResponseAlg
-
getAuthorizationEncryptedResponseEnc
-
setAuthorizationEncryptedResponseEnc
-
getTokenEndpointAuthSigningAlg
-
setTokenEndpointAuthSigningAlg
-
getBackchannelLogoutUrl
-
setBackchannelLogoutUrl
-
isBackchannelLogoutSessionRequired
public boolean isBackchannelLogoutSessionRequired() -
setBackchannelLogoutSessionRequired
public void setBackchannelLogoutSessionRequired(boolean backchannelLogoutSessionRequired) -
getBackchannelLogoutRevokeOfflineTokens
public boolean getBackchannelLogoutRevokeOfflineTokens() -
setBackchannelLogoutRevokeOfflineTokens
public void setBackchannelLogoutRevokeOfflineTokens(boolean backchannelLogoutRevokeOfflineTokens) -
setFrontChannelLogoutUrl
-
isFrontChannelLogoutEnabled
public boolean isFrontChannelLogoutEnabled() -
getFrontChannelLogoutUrl
-
isFrontChannelLogoutSessionRequired
public boolean isFrontChannelLogoutSessionRequired() -
setFrontChannelLogoutSessionRequired
public void setFrontChannelLogoutSessionRequired(boolean frontChannelLogoutSessionRequired) -
setLogoUri
-
setPolicyUri
-
setTosUri
-
getPostLogoutRedirectUris
-
setPostLogoutRedirectUris
-