Package org.keycloak.broker.provider

Interface JWTAuthorizationGrantProvider<C extends IdentityProviderModel>

All Superinterfaces:

IdentityProvider<C>, Provider

All Known Implementing Classes:

GitLabIdentityProvider, GoogleIdentityProvider, JWTAuthorizationGrantIdentityProvider, KeycloakOIDCIdentityProvider, LinkedInOIDCIdentityProvider, OIDCIdentityProvider

public interface JWTAuthorizationGrantProvider<C extends IdentityProviderModel>
extends IdentityProvider<C>

Method Summary

Modifier and Type	Method	Description
List<String>	getAllowedAudienceForJWTGrant()
int	getAllowedClockSkew()
String	getAssertionSignatureAlg()
int	getMaxAllowedExpiration()
boolean	isAssertionReuseAllowed()
BrokeredIdentityContext	validateAuthorizationGrantAssertion(JWTAuthorizationGrantValidationContext assertion)

Methods inherited from interface org.keycloak.broker.provider.IdentityProvider

export, getConfig, isMapperSupported, reloadKeys

Methods inherited from interface org.keycloak.provider.Provider

close

Method Details

validateAuthorizationGrantAssertion

BrokeredIdentityContext validateAuthorizationGrantAssertion(JWTAuthorizationGrantValidationContext assertion)
                                                     throws IdentityBrokerException

Throws:

IdentityBrokerException

getAllowedClockSkew

int getAllowedClockSkew()

isAssertionReuseAllowed

boolean isAssertionReuseAllowed()

getAllowedAudienceForJWTGrant

List<String> getAllowedAudienceForJWTGrant()

Returns:

list of allowed audience values. JWT assertion is considered valid if it's audience is one of the audiences returned from this method

getMaxAllowedExpiration

int getMaxAllowedExpiration()

getAssertionSignatureAlg

String getAssertionSignatureAlg()