Package org.keycloak.broker.trust

Class DefaultTrustIdentityProvider

java.lang.Object

org.keycloak.broker.trust.DefaultTrustIdentityProvider

All Implemented Interfaces:

IdentityProvider<DefaultTrustIdentityProviderConfig>, TrustMaterialIdentityProvider<DefaultTrustIdentityProviderConfig>, Provider

public class DefaultTrustIdentityProvider
extends Object
implements TrustMaterialIdentityProvider<DefaultTrustIdentityProviderConfig>

Constructor Summary

Constructors

Constructor	Description
DefaultTrustIdentityProvider(KeycloakSession session, DefaultTrustIdentityProviderConfig config)

Method Summary

Modifier and Type	Method	Description
void	close()
DefaultTrustIdentityProviderConfig	getConfig()
boolean	reloadKeys()	Reload keys for the identity provider if permitted in it.For example OIDC or SAML providers will reload the keys from the jwks or metadata endpoint.
Stream<JWK>	resolveKeys(TrustMaterialRequest request)
Stream<X509TrustMaterial>	resolveX509Trust(TrustMaterialRequest request)	Resolves X.509 trust anchors and policy.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.broker.provider.IdentityProvider

export, isMapperSupported, isType

Constructor Details

DefaultTrustIdentityProvider

public DefaultTrustIdentityProvider(KeycloakSession session,
 DefaultTrustIdentityProviderConfig config)

Method Details

getConfig

public DefaultTrustIdentityProviderConfig getConfig()

Specified by:

getConfig in interface IdentityProvider<DefaultTrustIdentityProviderConfig>

resolveKeys

public Stream<JWK> resolveKeys(TrustMaterialRequest request)

Specified by:

resolveKeys in interface TrustMaterialIdentityProvider<DefaultTrustIdentityProviderConfig>

resolveX509Trust

public Stream<X509TrustMaterial> resolveX509Trust(TrustMaterialRequest request)

Description copied from interface: TrustMaterialIdentityProvider

Resolves X.509 trust anchors and policy. Providers that only expose JWKs do not need to implement this method.

Specified by:

resolveX509Trust in interface TrustMaterialIdentityProvider<DefaultTrustIdentityProviderConfig>

reloadKeys

public boolean reloadKeys()

Description copied from interface: IdentityProvider

Reload keys for the identity provider if permitted in it.For example OIDC or SAML providers will reload the keys from the jwks or metadata endpoint.

Specified by:

reloadKeys in interface IdentityProvider<DefaultTrustIdentityProviderConfig>

Returns:

true if reloaded, false if not

close

public void close()

Specified by:

close in interface Provider