Package org.keycloak.models
Interface ClientModel
- All Superinterfaces:
ClientScopeModel,OrderedModel,ProtocolMapperContainerModel,RoleContainerModel,ScopeContainerModel
- All Known Implementing Classes:
AbstractClientStorageAdapter,AbstractReadOnlyClientStorageAdapter,ClientAdapter,ClientAdapter,ClientModelLazyDelegate,ClientModelLazyDelegate.WithId,OIDCClientSecretConfigWrapper.ReadOnlyRotatedSecretClientModel,TypeAwareClientModelDelegate,UnsupportedOperationsClientStorageAdapter
public interface ClientModel
extends ClientScopeModel, RoleContainerModel, ProtocolMapperContainerModel, ScopeContainerModel
- Version:
- $Revision: 1 $
- Author:
- Bill Burke
-
Nested Class Summary
Nested ClassesModifier and TypeInterfaceDescriptionstatic interfacestatic interfacestatic interfacestatic interfacestatic interfaceNested classes/interfaces inherited from interface org.keycloak.models.ClientScopeModel
ClientScopeModel.ClientScopeCreatedEvent, ClientScopeModel.ClientScopeRemovedEventNested classes/interfaces inherited from interface org.keycloak.models.OrderedModel
OrderedModel.OrderedModelComparator<OM extends OrderedModel>Nested classes/interfaces inherited from interface org.keycloak.models.RoleContainerModel
RoleContainerModel.RoleRemovedEvent -
Field Summary
FieldsModifier and TypeFieldDescriptionstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final Stringstatic final StringFields inherited from interface org.keycloak.models.ClientScopeModel
CONSENT_SCREEN_TEXT, DISPLAY_ON_CONSENT_SCREEN, DYNAMIC_SCOPE_REGEXP, GUI_ORDER, INCLUDE_IN_TOKEN_SCOPE, IS_DYNAMIC_SCOPE, VALUE_SEPARATOR -
Method Summary
Modifier and TypeMethodDescriptionvoidaddClientScope(ClientScopeModel clientScope, boolean defaultScope) Add clientScope with this client.voidaddClientScopes(Set<ClientScopeModel> clientScopes, boolean defaultScope) Add clientScopes with this client.voidaddRedirectUri(String redirectUri) voidaddWebOrigin(String webOrigin) getAttribute(String name) Get authentication flow binding override for this client.Returns client ID as defined by the user.getClientScopes(boolean defaultScope) Return all default scopes (if 'defaultScope' is true) or all optional scopes (if 'defaultScope' is false) linked with this clientdefault Stringdefault ClientScopeModelgetDynamicClientScope(String scope) Returns aClientScopeModelassociated with this client.getId()Returns client internal ID (UUID).getName()intintTime in seconds since epocgetRealm()default StringgetType()default booleanhasDirectScope(RoleModel role) Returnstrue, if this object has the given role directly in its scope.booleanbooleanbooleanbooleandefault booleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanvoidregisterNode(String nodeHost, int registrationTime) Register node or just update the 'lastReRegistration' time if this node is already registeredvoidremoveAttribute(String name) voidvoidremoveClientScope(ClientScopeModel clientScope) voidremoveRedirectUri(String redirectUri) voidremoveWebOrigin(String webOrigin) voidsetAlwaysDisplayInConsole(boolean alwaysDisplayInConsole) voidsetAttribute(String name, String value) voidsetAuthenticationFlowBindingOverride(String binding, String flowId) voidsetBaseUrl(String url) voidsetBearerOnly(boolean only) voidsetClientAuthenticatorType(String clientAuthenticatorType) voidsetClientId(String clientId) voidsetConsentRequired(boolean consentRequired) voidsetDescription(String description) voidsetDirectAccessGrantsEnabled(boolean directAccessGrantsEnabled) voidsetEnabled(boolean enabled) voidsetFrontchannelLogout(boolean flag) voidsetFullScopeAllowed(boolean value) voidsetImplicitFlowEnabled(boolean implicitFlowEnabled) voidsetManagementUrl(String url) voidvoidsetNodeReRegistrationTimeout(int timeout) voidsetNotBefore(int notBefore) voidsetProtocol(String protocol) voidsetPublicClient(boolean flag) voidsetRedirectUris(Set<String> redirectUris) voidsetRegistrationToken(String registrationToken) voidsetRootUrl(String url) voidvoidsetServiceAccountsEnabled(boolean serviceAccountsEnabled) voidsetStandardFlowEnabled(boolean standardFlowEnabled) voidsetSurrogateAuthRequired(boolean surrogateAuthRequired) default voidvoidsetWebOrigins(Set<String> webOrigins) voidunregisterNode(String nodeHost) voidDeprecated.Do not use, to be removedbooleanvalidateSecret(String secret) Methods inherited from interface org.keycloak.models.ClientScopeModel
getDynamicScopeRegexp, getGuiOrder, isDynamicScope, isIncludeInTokenScope, setConsentScreenText, setDisplayOnConsentScreen, setGuiOrder, setIncludeInTokenScope, setIsDynamicScopeMethods inherited from interface org.keycloak.models.ProtocolMapperContainerModel
addProtocolMapper, getProtocolMapperById, getProtocolMapperByName, getProtocolMapperByType, getProtocolMappersStream, removeProtocolMapper, updateProtocolMapperMethods inherited from interface org.keycloak.models.RoleContainerModel
addRole, addRole, getRole, getRolesStream, getRolesStream, removeRole, searchForRolesStreamMethods inherited from interface org.keycloak.models.ScopeContainerModel
addScopeMapping, deleteScopeMapping, getRealmScopeMappingsStream, getScopeMappingsStream, hasScope
-
Field Details
-
PRIVATE_KEY
- See Also:
-
PUBLIC_KEY
- See Also:
-
X509CERTIFICATE
- See Also:
-
LOGO_URI
- See Also:
-
POLICY_URI
- See Also:
-
TOS_URI
- See Also:
-
TYPE
- See Also:
-
-
Method Details
-
updateClient
void updateClient()Deprecated.Do not use, to be removedNotifies other providers that this client has been updated.After a client is updated, providers can register for
ClientModel.ClientUpdatedEvent. The setters in this model do not send an update for individual updates of the model. This method is here to allow for sending this event for this client, allowsing for to group multiple changes of a client and signal that all the changes in this client have been performed. -
getId
String getId()Returns client internal ID (UUID).- Specified by:
getIdin interfaceClientScopeModel- Specified by:
getIdin interfaceRoleContainerModel- Returns:
-
getClientId
String getClientId()Returns client ID as defined by the user.- Returns:
-
setClientId
-
getName
String getName()- Specified by:
getNamein interfaceClientScopeModel
-
setName
- Specified by:
setNamein interfaceClientScopeModel
-
getDescription
String getDescription()- Specified by:
getDescriptionin interfaceClientScopeModel
-
setDescription
- Specified by:
setDescriptionin interfaceClientScopeModel
-
getType
-
setType
-
isEnabled
boolean isEnabled() -
setEnabled
void setEnabled(boolean enabled) -
isAlwaysDisplayInConsole
boolean isAlwaysDisplayInConsole() -
setAlwaysDisplayInConsole
void setAlwaysDisplayInConsole(boolean alwaysDisplayInConsole) -
isSurrogateAuthRequired
boolean isSurrogateAuthRequired() -
setSurrogateAuthRequired
void setSurrogateAuthRequired(boolean surrogateAuthRequired) -
getWebOrigins
-
setWebOrigins
-
addWebOrigin
-
removeWebOrigin
-
getRedirectUris
-
setRedirectUris
-
addRedirectUri
-
removeRedirectUri
-
getManagementUrl
String getManagementUrl() -
setManagementUrl
-
getRootUrl
String getRootUrl() -
setRootUrl
-
getBaseUrl
String getBaseUrl() -
setBaseUrl
-
isBearerOnly
boolean isBearerOnly() -
setBearerOnly
void setBearerOnly(boolean only) -
getNodeReRegistrationTimeout
int getNodeReRegistrationTimeout() -
setNodeReRegistrationTimeout
void setNodeReRegistrationTimeout(int timeout) -
getClientAuthenticatorType
String getClientAuthenticatorType() -
setClientAuthenticatorType
-
validateSecret
-
getSecret
String getSecret() -
setSecret
-
getRegistrationToken
String getRegistrationToken() -
setRegistrationToken
-
getProtocol
String getProtocol()- Specified by:
getProtocolin interfaceClientScopeModel
-
setProtocol
- Specified by:
setProtocolin interfaceClientScopeModel
-
setAttribute
- Specified by:
setAttributein interfaceClientScopeModel
-
removeAttribute
- Specified by:
removeAttributein interfaceClientScopeModel
-
getAttribute
- Specified by:
getAttributein interfaceClientScopeModel
-
getAttributes
- Specified by:
getAttributesin interfaceClientScopeModel
-
getAuthenticationFlowBindingOverride
Get authentication flow binding override for this client. Allows client to override an authentication flow binding.- Parameters:
binding- examples are "browser", "direct_grant"- Returns:
-
getAuthenticationFlowBindingOverrides
-
removeAuthenticationFlowBindingOverride
-
setAuthenticationFlowBindingOverride
-
isFrontchannelLogout
boolean isFrontchannelLogout() -
setFrontchannelLogout
void setFrontchannelLogout(boolean flag) -
isFullScopeAllowed
boolean isFullScopeAllowed() -
setFullScopeAllowed
void setFullScopeAllowed(boolean value) -
hasDirectScope
Description copied from interface:ScopeContainerModelReturnstrue, if this object has the given role directly in its scope.- Specified by:
hasDirectScopein interfaceScopeContainerModel- Parameters:
role- the role- Returns:
- see description
- See Also:
-
isPublicClient
boolean isPublicClient() -
setPublicClient
void setPublicClient(boolean flag) -
isConsentRequired
boolean isConsentRequired() -
setConsentRequired
void setConsentRequired(boolean consentRequired) -
isStandardFlowEnabled
boolean isStandardFlowEnabled() -
setStandardFlowEnabled
void setStandardFlowEnabled(boolean standardFlowEnabled) -
isImplicitFlowEnabled
boolean isImplicitFlowEnabled() -
setImplicitFlowEnabled
void setImplicitFlowEnabled(boolean implicitFlowEnabled) -
isDirectAccessGrantsEnabled
boolean isDirectAccessGrantsEnabled() -
setDirectAccessGrantsEnabled
void setDirectAccessGrantsEnabled(boolean directAccessGrantsEnabled) -
isServiceAccountsEnabled
boolean isServiceAccountsEnabled() -
setServiceAccountsEnabled
void setServiceAccountsEnabled(boolean serviceAccountsEnabled) -
getRealm
RealmModel getRealm()- Specified by:
getRealmin interfaceClientScopeModel
-
addClientScope
Add clientScope with this client. Add it as default scope (if parameter 'defaultScope' is true) or optional scope (if parameter 'defaultScope' is false)- Parameters:
clientScope-defaultScope-
-
addClientScopes
Add clientScopes with this client. Add as default scopes (if parameter 'defaultScope' is true) or optional scopes (if parameter 'defaultScope' is false)- Parameters:
clientScopes-defaultScope-
-
removeClientScope
-
getClientScopes
Return all default scopes (if 'defaultScope' is true) or all optional scopes (if 'defaultScope' is false) linked with this client- Parameters:
defaultScope-- Returns:
- map where key is the name of the clientScope, value is particular clientScope. Returns empty map if no scopes linked (never returns null).
-
getDynamicClientScope
Returns a
ClientScopeModelassociated with this client.This method is used as a fallback in order to let clients to resolve a
scopedynamically which is not listed as default or optional scope when calling#getClientScopes(boolean, boolean).- Parameters:
scope- the scope name- Returns:
- the client scope
-
getNotBefore
int getNotBefore()Time in seconds since epoc- Returns:
-
setNotBefore
void setNotBefore(int notBefore) -
getRegisteredNodes
-
registerNode
Register node or just update the 'lastReRegistration' time if this node is already registered- Parameters:
nodeHost-registrationTime-
-
unregisterNode
-
isDisplayOnConsentScreen
default boolean isDisplayOnConsentScreen()- Specified by:
isDisplayOnConsentScreenin interfaceClientScopeModel
-
getConsentScreenText
- Specified by:
getConsentScreenTextin interfaceClientScopeModel
-