Package org.keycloak.protocol.oidc.grants

Class JWTAuthorizationGrantType

java.lang.Object

org.keycloak.protocol.oidc.grants.OAuth2GrantTypeBase

org.keycloak.protocol.oidc.grants.JWTAuthorizationGrantType

All Implemented Interfaces:

OAuth2GrantType, Provider

public class JWTAuthorizationGrantType
extends OAuth2GrantTypeBase

Nested Class Summary

Nested classes/interfaces inherited from interface org.keycloak.protocol.oidc.grants.OAuth2GrantType

OAuth2GrantType.Context

Field Summary

Fields inherited from class org.keycloak.protocol.oidc.grants.OAuth2GrantTypeBase

client, clientAuthAttributes, clientConfig, clientConnection, context, cors, event, formParams, headers, realm, request, response, session, tokenManager

Constructor Summary

Constructors

Constructor	Description
JWTAuthorizationGrantType()

Method Summary

Modifier and Type	Method	Description
protected AuthenticationSessionModel	createSessionModel(RootAuthenticationSessionModel rootAuthSession, UserModel targetUser, ClientModel client, String scope)
EventType	getEventType()	Returns the event type associated with this OAuth 2.0 grant type.
Set<String>	getTokenParameterNames()	Name of the "token" parameters, which this grant type supports.
protected UserModel	lookupUserByFederatedIdentity(FederatedIdentityModel federatedIdentityModel, ClientAssertionState clientAssertionState)
jakarta.ws.rs.core.Response	process(OAuth2GrantType.Context context)	Processes grant request.
protected boolean	useRefreshToken()

Methods inherited from class org.keycloak.protocol.oidc.grants.OAuth2GrantTypeBase

addCustomTokenResponseClaims, afterAuthorizationDetailsProcessed, checkAndBindMtlsHoKToken, checkClient, close, createTokenResponse, createTokenResponse, createTokenResponseBuilder, getRequestedScopes, handleMissingAuthorizationDetails, processAuthorizationDetails, processStoredAuthorizationDetails, setContext, updateClientSession, updateUserSessionFromClientAuth

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.protocol.oidc.grants.OAuth2GrantType

getSupportedMultivaluedRequestParameters, isTokenAllowed, preProcess

Constructor Details

JWTAuthorizationGrantType

public JWTAuthorizationGrantType()

Method Details

process

public jakarta.ws.rs.core.Response process(OAuth2GrantType.Context context)

Description copied from interface: OAuth2GrantType

Processes grant request.

Parameters:

context - grant request context

Returns:

token response

lookupUserByFederatedIdentity

protected UserModel lookupUserByFederatedIdentity(FederatedIdentityModel federatedIdentityModel,
 ClientAssertionState clientAssertionState)

createSessionModel

protected AuthenticationSessionModel createSessionModel(RootAuthenticationSessionModel rootAuthSession,
 UserModel targetUser,
 ClientModel client,
 String scope)

useRefreshToken

protected boolean useRefreshToken()

Overrides:

useRefreshToken in class OAuth2GrantTypeBase

getEventType

public EventType getEventType()

Description copied from interface: OAuth2GrantType

Returns the event type associated with this OAuth 2.0 grant type.

Returns:

event type

getTokenParameterNames

public Set<String> getTokenParameterNames()

Description copied from interface: OAuth2GrantType

Name of the "token" parameters, which this grant type supports. As 'token' parameter is considered a parameter containing possibly long token (for example big JWT or SAML assertion) with unbounded data (For example possibly big amount of roles inside JWT). Example of such parameter is for example 'subject_token' parameter case of token exchange grant.

Returns:

set of strings with the "token" parameters supported by this grant type