Package org.keycloak.protocol.oidc.rar

Interface AuthorizationRequestParserProvider

All Superinterfaces:

Provider

All Known Implementing Classes:

ClientScopeAuthorizationRequestParser

public interface AuthorizationRequestParserProvider
extends Provider

Author:

Daniel Gozalo

Method Summary

Modifier and Type	Method	Description
AuthorizationRequestContext	parseScopes(ClientModel client, String scopeParam)
default AuthorizationRequestContext	parseScopes(UserModel user, ClientModel client, String scopeParam)
default AuthorizationRequestContext	parseScopes(UserModel user, ClientModel client, AuthenticatedClientSessionModel clientSession, String scopeParam)	Same as parseScopes(UserModel, ClientModel, String), but also given the client session scopes are being resolved for, when one already exists (e.g.

Methods inherited from interface org.keycloak.provider.Provider

close

Method Details

parseScopes

AuthorizationRequestContext parseScopes(@Nonnull
 ClientModel client,
 @Nullable
 String scopeParam)

parseScopes

default AuthorizationRequestContext parseScopes(@Nullable
 UserModel user,
 @Nonnull
 ClientModel client,
 @Nullable
 String scopeParam)

parseScopes

default AuthorizationRequestContext parseScopes(@Nullable
 UserModel user,
 @Nonnull
 ClientModel client,
 @Nullable
 AuthenticatedClientSessionModel clientSession,
 @Nullable
 String scopeParam)

Same as parseScopes(UserModel, ClientModel, String), but also given the client session scopes are being resolved for, when one already exists (e.g. null before any client/user session exists, such as a consent screen preview). Needed for validations with side effects tied to that client session (e.g. identity pinning).

Parameters:

clientSession - the client session scopes are being resolved for, or null