Package org.keycloak.protocol.oidc.grants.ciba.endpoints.request

Class BackchannelAuthenticationEndpointRequestParser

java.lang.Object

org.keycloak.protocol.oidc.grants.ciba.endpoints.request.BackchannelAuthenticationEndpointRequestParser

public abstract class BackchannelAuthenticationEndpointRequestParser
extends Object

Author:

Takashi Norimatsu

Field Summary

Fields

Modifier and Type	Field	Description
static final int	ADDITIONAL_REQ_PARAMS_MAX_MUMBER	Max number of additional req params copied into client session note to prevent DoS attacks
static final int	ADDITIONAL_REQ_PARAMS_MAX_SIZE	Max size of additional req param value copied into client session note to prevent DoS attacks - params with longer value are ignored
static final String	CIBA_SIGNED_AUTHENTICATION_REQUEST
static final Set<String>	DISABLED_REQ_PARAMS	Reserved protocol claim names that map to server-controlled top-level CIBAAuthenticationRequest claims.
static final Set<String>	KNOWN_REQ_PARAMS	Set of known protocol POST params not to be stored into additionalReqParams}

Constructor Summary

Constructors

Constructor	Description
BackchannelAuthenticationEndpointRequestParser()

Method Summary

Modifier and Type	Method	Description
protected void	extractAdditionalReqParams(Map<String,String> additionalReqParams)
protected abstract Integer	getIntParameter(String paramName)
protected abstract String	getParameter(String paramName)
protected abstract Set<String>	keySet()
void	parseRequest(BackchannelAuthenticationEndpointRequest request)
protected <T> T	replaceIfNotNull(T previousVal, T newVal)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

ADDITIONAL_REQ_PARAMS_MAX_MUMBER

public static final int ADDITIONAL_REQ_PARAMS_MAX_MUMBER

Max number of additional req params copied into client session note to prevent DoS attacks

See Also:

• Constant Field Values

ADDITIONAL_REQ_PARAMS_MAX_SIZE

public static final int ADDITIONAL_REQ_PARAMS_MAX_SIZE

Max size of additional req param value copied into client session note to prevent DoS attacks - params with longer value are ignored

See Also:

• Constant Field Values

CIBA_SIGNED_AUTHENTICATION_REQUEST

public static final String CIBA_SIGNED_AUTHENTICATION_REQUEST

See Also:

• Constant Field Values

KNOWN_REQ_PARAMS

public static final Set<String> KNOWN_REQ_PARAMS

Set of known protocol POST params not to be stored into additionalReqParams}

DISABLED_REQ_PARAMS

public static final Set<String> DISABLED_REQ_PARAMS

Reserved protocol claim names that map to server-controlled top-level CIBAAuthenticationRequest claims. Supplied as request parameters they would be serialized as top-level claims and could overwrite server-controlled claims (or forge initially unset ones) when the authentication request is deserialized, so they are never copied into the additional request parameters.

Constructor Details

BackchannelAuthenticationEndpointRequestParser

public BackchannelAuthenticationEndpointRequestParser()

Method Details

parseRequest

public void parseRequest(BackchannelAuthenticationEndpointRequest request)

extractAdditionalReqParams

protected void extractAdditionalReqParams(Map<String,String> additionalReqParams)

replaceIfNotNull

protected <T> T replaceIfNotNull(T previousVal,
 T newVal)

getParameter

protected abstract String getParameter(String paramName)

getIntParameter

protected abstract Integer getIntParameter(String paramName)

keySet

protected abstract Set<String> keySet()