Package org.keycloak.protocol.oidc
Class OIDCAdvancedConfigWrapper
java.lang.Object
org.keycloak.protocol.oidc.AbstractClientConfigWrapper
org.keycloak.protocol.oidc.OIDCAdvancedConfigWrapper
- Author:
- Marek Posolda
-
Nested Class Summary
Nested ClassesModifier and TypeClassDescriptionstatic enum -
Field Summary
Fields inherited from class org.keycloak.protocol.oidc.AbstractClientConfigWrapper
clientModel, clientRep -
Method Summary
Modifier and TypeMethodDescriptionstatic OIDCAdvancedConfigWrapperfromClientModel(ClientModel client) static OIDCAdvancedConfigWrapperfromClientRepresentation(ClientRepresentation clientRep) booleanbooleanintbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanbooleanIf true, then Client Credentials Grant generates refresh token and creates user session.booleanbooleanbooleanvoidsetAllowRegexPatternComparison(boolean allowRegexPatternComparison) voidvoidvoidsetAuthorizationSignedResponseAlg(String algName) voidsetBackchannelLogoutRevokeOfflineTokens(boolean backchannelLogoutRevokeOfflineTokens) voidsetBackchannelLogoutSessionRequired(boolean backchannelLogoutSessionRequired) voidsetBackchannelLogoutUrl(String backchannelLogoutUrl) voidsetExcludeIssuerFromAuthResponse(boolean excludeIssuerFromAuthResponse) voidsetExcludeSessionStateFromAuthResponse(boolean excludeSessionStateFromAuthResponse) voidsetFrontChannelLogoutSessionRequired(boolean frontChannelLogoutSessionRequired) voidsetFrontChannelLogoutUrl(String frontChannelLogoutUrl) voidsetIdTokenEncryptedResponseAlg(String algName) voidsetIdTokenEncryptedResponseEnc(String encName) voidsetIdTokenSignedResponseAlg(String algName) voidsetJwksString(String jwksString) voidsetJwksUrl(String jwksUrl) voidsetLogoUri(String logoUri) voidsetMinimumAcrValue(String minimumAcrValue) voidsetPkceCodeChallengeMethod(String codeChallengeMethodName) voidsetPolicyUri(String policyUri) voidsetPostLogoutRedirectUris(List<String> postLogoutRedirectUris) voidsetRequestObjectEncryptionAlg(String algorithm) voidsetRequestObjectEncryptionEnc(String algorithm) voidsetRequestObjectRequired(String requestObjectRequired) voidsetRequestObjectSignatureAlg(String algorithm) voidsetRequestUris(List<String> requestUris) voidsetStandardTokenExchangeEnabled(boolean enable) voidsetStandardTokenExchangeRefreshEnabled(OIDCAdvancedConfigWrapper.TokenExchangeRefreshTokenEnabled enable) voidsetTlsClientAuthSubjectDn(String tls_client_auth_subject_dn) voidsetTokenEndpointAuthSigningAlg(String algName) voidsetTokenEndpointAuthSigningMaxExp(int maxExp) voidvoidsetUseDPoP(boolean useDPoP) voidsetUseJwksString(boolean useJwksString) voidsetUseJwksUrl(boolean useJwksUrl) voidsetUseLowerCaseInTokenResponse(boolean useLowerCaseInTokenResponse) voidsetUseMtlsHoKToken(boolean useUtlsHokToken) voidsetUseRefreshToken(boolean useRefreshToken) voidsetUseRefreshTokenForClientCredentialsGrant(boolean enable) voidsetUseRfc9068AccessTokenHeaderType(boolean useRfc9068AccessTokenHeaderType) voidsetUserInfoEncryptedResponseAlg(String algorithm) voidsetUserInfoEncryptedResponseEnc(String algorithm) voidsetUserInfoSignedResponseAlg(String algorithm) Methods inherited from class org.keycloak.protocol.oidc.AbstractClientConfigWrapper
getAttribute, getAttribute, getAttributeMultivalued, getAttributes, setAttribute, setAttributeMultivalued
-
Method Details
-
fromClientModel
-
fromClientRepresentation
-
getUserInfoSignedResponseAlg
-
setUserInfoSignedResponseAlg
-
isUserInfoSignatureRequired
public boolean isUserInfoSignatureRequired() -
setUserInfoEncryptedResponseAlg
-
getUserInfoEncryptedResponseAlg
-
getUserInfoEncryptedResponseEnc
-
setUserInfoEncryptedResponseEnc
-
isUserInfoEncryptionRequired
public boolean isUserInfoEncryptionRequired() -
getRequestObjectSignatureAlg
-
setRequestObjectSignatureAlg
-
setRequestObjectEncryptionAlg
-
getRequestObjectEncryptionAlg
-
getRequestObjectEncryptionEnc
-
setRequestObjectEncryptionEnc
-
getRequestObjectRequired
-
setRequestObjectRequired
-
getRequestUris
-
setRequestUris
-
isUseJwksUrl
public boolean isUseJwksUrl() -
setUseJwksUrl
public void setUseJwksUrl(boolean useJwksUrl) -
getJwksUrl
-
setJwksUrl
-
isUseJwksString
public boolean isUseJwksString() -
setUseJwksString
public void setUseJwksString(boolean useJwksString) -
getJwksString
-
setJwksString
-
isExcludeSessionStateFromAuthResponse
public boolean isExcludeSessionStateFromAuthResponse() -
setExcludeSessionStateFromAuthResponse
public void setExcludeSessionStateFromAuthResponse(boolean excludeSessionStateFromAuthResponse) -
isExcludeIssuerFromAuthResponse
public boolean isExcludeIssuerFromAuthResponse() -
setExcludeIssuerFromAuthResponse
public void setExcludeIssuerFromAuthResponse(boolean excludeIssuerFromAuthResponse) -
isUseDPoP
public boolean isUseDPoP() -
setUseDPoP
public void setUseDPoP(boolean useDPoP) -
isUseMtlsHokToken
public boolean isUseMtlsHokToken() -
setUseMtlsHoKToken
public void setUseMtlsHoKToken(boolean useUtlsHokToken) -
isUseRefreshToken
public boolean isUseRefreshToken() -
setUseRefreshToken
public void setUseRefreshToken(boolean useRefreshToken) -
isUseLowerCaseInTokenResponse
public boolean isUseLowerCaseInTokenResponse() -
setUseLowerCaseInTokenResponse
public void setUseLowerCaseInTokenResponse(boolean useLowerCaseInTokenResponse) -
isUseRfc9068AccessTokenHeaderType
public boolean isUseRfc9068AccessTokenHeaderType() -
setUseRfc9068AccessTokenHeaderType
public void setUseRfc9068AccessTokenHeaderType(boolean useRfc9068AccessTokenHeaderType) -
isUseRefreshTokenForClientCredentialsGrant
public boolean isUseRefreshTokenForClientCredentialsGrant()If true, then Client Credentials Grant generates refresh token and creates user session. This is not per specs, so it is false by default For the details @see https://tools.ietf.org/html/rfc6749#section-4.4.3 -
setUseRefreshTokenForClientCredentialsGrant
public void setUseRefreshTokenForClientCredentialsGrant(boolean enable) -
isStandardTokenExchangeEnabled
public boolean isStandardTokenExchangeEnabled() -
setStandardTokenExchangeEnabled
public void setStandardTokenExchangeEnabled(boolean enable) -
getStandardTokenExchangeRefreshEnabled
public OIDCAdvancedConfigWrapper.TokenExchangeRefreshTokenEnabled getStandardTokenExchangeRefreshEnabled() -
setStandardTokenExchangeRefreshEnabled
public void setStandardTokenExchangeRefreshEnabled(OIDCAdvancedConfigWrapper.TokenExchangeRefreshTokenEnabled enable) -
getTlsClientAuthSubjectDn
-
setTlsClientAuthSubjectDn
-
getAllowRegexPatternComparison
public boolean getAllowRegexPatternComparison() -
setAllowRegexPatternComparison
public void setAllowRegexPatternComparison(boolean allowRegexPatternComparison) -
getPkceCodeChallengeMethod
-
setPkceCodeChallengeMethod
-
getIdTokenSignedResponseAlg
-
setIdTokenSignedResponseAlg
-
getIdTokenEncryptedResponseAlg
-
setIdTokenEncryptedResponseAlg
-
getIdTokenEncryptedResponseEnc
-
setIdTokenEncryptedResponseEnc
-
getAuthorizationSignedResponseAlg
-
setAuthorizationSignedResponseAlg
-
getAuthorizationEncryptedResponseAlg
-
setAuthorizationEncryptedResponseAlg
-
getAuthorizationEncryptedResponseEnc
-
setAuthorizationEncryptedResponseEnc
-
getTokenEndpointAuthSigningAlg
-
setTokenEndpointAuthSigningAlg
-
getTokenEndpointAuthSigningMaxExp
public int getTokenEndpointAuthSigningMaxExp() -
setTokenEndpointAuthSigningMaxExp
public void setTokenEndpointAuthSigningMaxExp(int maxExp) -
getBackchannelLogoutUrl
-
setBackchannelLogoutUrl
-
isBackchannelLogoutSessionRequired
public boolean isBackchannelLogoutSessionRequired() -
setBackchannelLogoutSessionRequired
public void setBackchannelLogoutSessionRequired(boolean backchannelLogoutSessionRequired) -
getBackchannelLogoutRevokeOfflineTokens
public boolean getBackchannelLogoutRevokeOfflineTokens() -
setBackchannelLogoutRevokeOfflineTokens
public void setBackchannelLogoutRevokeOfflineTokens(boolean backchannelLogoutRevokeOfflineTokens) -
setFrontChannelLogoutUrl
-
isFrontChannelLogoutEnabled
public boolean isFrontChannelLogoutEnabled() -
getFrontChannelLogoutUrl
-
isFrontChannelLogoutSessionRequired
public boolean isFrontChannelLogoutSessionRequired() -
setFrontChannelLogoutSessionRequired
public void setFrontChannelLogoutSessionRequired(boolean frontChannelLogoutSessionRequired) -
setLogoUri
-
setPolicyUri
-
setTosUri
-
getPostLogoutRedirectUris
-
setPostLogoutRedirectUris
-
getMinimumAcrValue
-
setMinimumAcrValue
-