Package org.keycloak.protocol.oid4vc.issuance.mappers

Class OID4VCGeneratedIdMapper

java.lang.Object

org.keycloak.protocol.oid4vc.issuance.mappers.OID4VCMapper

org.keycloak.protocol.oid4vc.issuance.mappers.OID4VCGeneratedIdMapper

All Implemented Interfaces:

OID4VCEnvironmentProviderFactory, ProtocolMapper, ConfiguredProvider, EnvironmentDependentProviderFactory, Provider, ProviderFactory<ProtocolMapper>

public class OID4VCGeneratedIdMapper
extends OID4VCMapper

Adds a generated ID to the credential (as a configurable property).

Author:

Ingrid Kamga

Field Summary

Fields

Modifier and Type	Field	Description
static final String	MAPPER_ID

Fields inherited from class org.keycloak.protocol.oid4vc.issuance.mappers.OID4VCMapper

CLAIM_NAME, format, MAPPER_MISSING_MDOC_NAMESPACE_ERROR, MAPPER_RESERVED_CLAIM_ERROR, mapperModel, MDOC_NAMESPACE, USER_ATTRIBUTE_KEY

Constructor Summary

Constructors

Constructor	Description
OID4VCGeneratedIdMapper()

Method Summary

Modifier and Type	Method	Description
ProtocolMapper	create(KeycloakSession session)
protected Set<String>	getAllowedReservedClaims()	Returns the reserved, issuer-controlled claims this mapper is allowed to write.
protected List<String>	getClaimLookupPath()	Returns the raw claim lookup path in the intermediate map populated by OID4VCMapper.setClaim(Map, UserSessionModel).
String	getDisplayType()
String	getHelpText()
String	getId()
protected List<ProviderConfigProperty>	getIndividualConfigProperties()
List<String>	getMetadataAttributePath()	Returns the externally visible claim path used in credential metadata and authorization_details validation.
boolean	includeInMetadata()	this claim is not added by default to the metadata
void	setClaim(Map<String,Object> claims, UserSessionModel userSessionModel)	Set the claims to the credential subject.
void	setClaim(VerifiableCredential verifiableCredential, UserSessionModel userSessionModel)	Set the claims to credential, like f.e. the context

Methods inherited from class org.keycloak.protocol.oid4vc.issuance.mappers.OID4VCMapper

close, getAttributePrefix, getClaimLookupPath, getClaimName, getClaimName, getConfigProperties, getDisplayCategory, getMapperName, getMetadataAttributePath, getProtocol, init, passesMappingGuards, postInit, prefixMetadataAttributePath, resolveClaimName, setClaimWithMetadataPrefix, setMapperModel, supportsCredentialFormat, validate, validateAgainstSensitiveMappings, validateConfig, validateMdocNamespace

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.provider.ConfiguredProvider

getConfig

Methods inherited from interface org.keycloak.protocol.oid4vc.OID4VCEnvironmentProviderFactory

isSupported

Methods inherited from interface org.keycloak.protocol.ProtocolMapper

getEffectiveModel, getPriority

Methods inherited from interface org.keycloak.provider.ProviderFactory

dependsOn, getConfigMetadata, order

Field Details

MAPPER_ID

public static final String MAPPER_ID

See Also:

• Constant Field Values

Constructor Details

OID4VCGeneratedIdMapper

public OID4VCGeneratedIdMapper()

Method Details

getIndividualConfigProperties

protected List<ProviderConfigProperty> getIndividualConfigProperties()

Specified by:

getIndividualConfigProperties in class OID4VCMapper

includeInMetadata

public boolean includeInMetadata()

this claim is not added by default to the metadata

Overrides:

includeInMetadata in class OID4VCMapper

getAllowedReservedClaims

protected Set<String> getAllowedReservedClaims()

Description copied from class: OID4VCMapper

Returns the reserved, issuer-controlled claims this mapper is allowed to write. A mapper may only target a reserved claim listed here; every other reserved claim is rejected. Mappers are denied all reserved claims by default; subclasses that legitimately write a specific issuer-controlled claim (e.g. the generated-id mapper writing 'jti') override this to allow just that claim.

Overrides:

getAllowedReservedClaims in class OID4VCMapper

getMetadataAttributePath

public List<String> getMetadataAttributePath()

Description copied from class: OID4VCMapper

Returns the externally visible claim path used in credential metadata and authorization_details validation. JSON credentials use their normal credentialSubject/top-level paths; mDoc prepends the configured namespace because OID4VCI mDoc paths address namespace -> data element -> optional nested value.

Overrides:

getMetadataAttributePath in class OID4VCMapper

getClaimLookupPath

protected List<String> getClaimLookupPath()

Description copied from class: OID4VCMapper

Returns the raw claim lookup path in the intermediate map populated by OID4VCMapper.setClaim(Map, UserSessionModel). This is intentionally separate from OID4VCMapper.getMetadataAttributePath(): mDoc metadata paths add a namespace that is not present in the raw mapper output, and simple mappers may write a dotted claim name as one literal key.

Overrides:

getClaimLookupPath in class OID4VCMapper

setClaim

public void setClaim(VerifiableCredential verifiableCredential,
 UserSessionModel userSessionModel)

Description copied from class: OID4VCMapper

Set the claims to credential, like f.e. the context

Specified by:

setClaim in class OID4VCMapper

setClaim

public void setClaim(Map<String,Object> claims,
 UserSessionModel userSessionModel)

Description copied from class: OID4VCMapper

Set the claims to the credential subject.

Specified by:

setClaim in class OID4VCMapper

getDisplayType

public String getDisplayType()

getHelpText

public String getHelpText()

create

public ProtocolMapper create(KeycloakSession session)

getId

public String getId()