Package org.keycloak.protocol.oidc.grants

Class OAuth2GrantTypeBase

java.lang.Object

org.keycloak.protocol.oidc.grants.OAuth2GrantTypeBase

All Implemented Interfaces:

OAuth2GrantType, Provider

Direct Known Subclasses:

AuthorizationCodeGrantType, CibaGrantType, ClientCredentialsGrantType, DeviceGrantType, PermissionGrantType, RefreshTokenGrantType, ResourceOwnerPasswordCredentialsGrantType, TokenExchangeGrantType

public abstract class OAuth2GrantTypeBase
extends Object
implements OAuth2GrantType

Base class for OAuth 2.0 grant types

Author:

Dmitry Telegin (et al.)

Nested Class Summary

Nested classes/interfaces inherited from interface org.keycloak.protocol.oidc.grants.OAuth2GrantType

OAuth2GrantType.Context

Field Summary

Fields

Modifier and Type	Field	Description
protected ClientModel	client
protected Map<String,String>	clientAuthAttributes
protected OIDCAdvancedConfigWrapper	clientConfig
protected ClientConnection	clientConnection
protected OAuth2GrantType.Context	context
protected Cors	cors
protected DPoP	dPoP
protected EventBuilder	event
protected jakarta.ws.rs.core.MultivaluedMap<String,String>	formParams
protected jakarta.ws.rs.core.HttpHeaders	headers
protected RealmModel	realm
protected HttpRequest	request
protected HttpResponse	response
protected KeycloakSession	session
protected TokenManager	tokenManager

Constructor Summary

Constructors

Constructor	Description
OAuth2GrantTypeBase()

Method Summary

Modifier and Type	Method	Description
protected void	checkAndBindDPoPToken(TokenManager.AccessTokenResponseBuilder responseBuilder, boolean useRefreshToken, boolean isDPoPSupported)
protected void	checkAndBindMtlsHoKToken(TokenManager.AccessTokenResponseBuilder responseBuilder, boolean useRefreshToken)
protected void	checkAndRetrieveDPoPProof(boolean isDPoPSupported)
protected void	checkClient()
void	close()
protected jakarta.ws.rs.core.Response	createTokenResponse(UserModel user, UserSessionModel userSession, ClientSessionContext clientSessionCtx, String scopeParam, boolean code, Function<TokenManager.AccessTokenResponseBuilder,ClientPolicyContext> clientPolicyContextGenerator)
protected String	getRequestedScopes()
protected void	setContext(OAuth2GrantType.Context context)
protected void	updateClientSession(AuthenticatedClientSessionModel clientSession)
protected void	updateUserSessionFromClientAuth(UserSessionModel userSession)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.protocol.oidc.grants.OAuth2GrantType

getEventType, process

Field Details

context

protected OAuth2GrantType.Context context

session

protected KeycloakSession session

realm

protected RealmModel realm

client

protected ClientModel client

clientConfig

protected OIDCAdvancedConfigWrapper clientConfig

clientConnection

protected ClientConnection clientConnection

clientAuthAttributes

protected Map<String,String> clientAuthAttributes

formParams

protected jakarta.ws.rs.core.MultivaluedMap<String,String> formParams

event

protected EventBuilder event

cors

protected Cors cors

tokenManager

protected TokenManager tokenManager

dPoP

protected DPoP dPoP

request

protected HttpRequest request

response

protected HttpResponse response

headers

protected jakarta.ws.rs.core.HttpHeaders headers

Constructor Details

OAuth2GrantTypeBase

public OAuth2GrantTypeBase()

Method Details

setContext

protected void setContext(OAuth2GrantType.Context context)

createTokenResponse

protected jakarta.ws.rs.core.Response createTokenResponse(UserModel user,
 UserSessionModel userSession,
 ClientSessionContext clientSessionCtx,
 String scopeParam,
 boolean code,
 Function<TokenManager.AccessTokenResponseBuilder,ClientPolicyContext> clientPolicyContextGenerator)

checkAndBindMtlsHoKToken

protected void checkAndBindMtlsHoKToken(TokenManager.AccessTokenResponseBuilder responseBuilder,
 boolean useRefreshToken)

checkAndBindDPoPToken

protected void checkAndBindDPoPToken(TokenManager.AccessTokenResponseBuilder responseBuilder,
 boolean useRefreshToken,
 boolean isDPoPSupported)

updateClientSession

protected void updateClientSession(AuthenticatedClientSessionModel clientSession)

updateUserSessionFromClientAuth

protected void updateUserSessionFromClientAuth(UserSessionModel userSession)

checkAndRetrieveDPoPProof

protected void checkAndRetrieveDPoPProof(boolean isDPoPSupported)

getRequestedScopes

protected String getRequestedScopes()

checkClient

protected void checkClient()

close

public void close()

Specified by:

close in interface Provider