Package org.keycloak.protocol.oidc.tokenexchange

Class TokenExchangeDelegationProvider

java.lang.Object

org.keycloak.protocol.oidc.tokenexchange.AbstractTokenExchangeProvider

org.keycloak.protocol.oidc.tokenexchange.StandardTokenExchangeProvider

org.keycloak.protocol.oidc.tokenexchange.TokenExchangeDelegationProvider

All Implemented Interfaces:

TokenExchangeProvider, Provider

public class TokenExchangeDelegationProvider
extends StandardTokenExchangeProvider

Author:

rmartinc

Nested Class Summary

Nested classes/interfaces inherited from class org.keycloak.protocol.oidc.tokenexchange.AbstractTokenExchangeProvider

AbstractTokenExchangeProvider.ExternalExchangeContext

Field Summary

Fields inherited from class org.keycloak.protocol.oidc.tokenexchange.AbstractTokenExchangeProvider

client, clientAuthAttributes, clientConnection, context, cors, event, formParams, headers, params, realm, session, tokenManager

Constructor Summary

Constructors

Constructor	Description
TokenExchangeDelegationProvider()

Method Summary

Modifier and Type	Method	Description
protected void	checkRequestedAudiences(TokenManager.AccessTokenResponseBuilder responseBuilder)
protected String	getRequestedTokenType()
boolean	supports(TokenExchangeContext context)	Check if exchange request is supported by this provider
protected jakarta.ws.rs.core.Response	tokenExchange()
protected void	validateMayAct(AccessToken subjectAccessToken, UserModel subjectUser, UserModel actorUser)

Methods inherited from class org.keycloak.protocol.oidc.tokenexchange.StandardTokenExchangeProvider

exchangeClientToOIDCClient, exchangeClientToSAML2Client, getRequestedScope, getSupportedOAuthResponseTokenTypes, processSubjectToken, validateAudience, validateConsents, validateSenderConstrainedToken

Methods inherited from class org.keycloak.protocol.oidc.tokenexchange.AbstractTokenExchangeProvider

close, createSessionModel, exchange, exchangeClientToClient, exchangeExternalToken, exchangeToIdentityProvider, forbiddenIfClientIsNotTokenHolder, forbiddenIfClientIsNotWithinTokenAudience, getSubjectIssuer, getTargetAudienceClients, importUserFromExternalIdentity, isExternalInternalTokenExchangeRequest, locateExchangeExternalTokenByAlias, setClientToContext, updateUserSessionFromClientAuth

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

TokenExchangeDelegationProvider

public TokenExchangeDelegationProvider()

Method Details

supports

public boolean supports(TokenExchangeContext context)

Description copied from interface: TokenExchangeProvider

Check if exchange request is supported by this provider

Specified by:

supports in interface TokenExchangeProvider

Overrides:

supports in class StandardTokenExchangeProvider

Parameters:

context - token exchange context

Returns:

true if the request is supported

tokenExchange

protected jakarta.ws.rs.core.Response tokenExchange()

Overrides:

tokenExchange in class StandardTokenExchangeProvider

getRequestedTokenType

protected String getRequestedTokenType()

Overrides:

getRequestedTokenType in class StandardTokenExchangeProvider

validateMayAct

protected void validateMayAct(AccessToken subjectAccessToken,
 UserModel subjectUser,
 UserModel actorUser)

checkRequestedAudiences

protected void checkRequestedAudiences(TokenManager.AccessTokenResponseBuilder responseBuilder)

Overrides:

checkRequestedAudiences in class StandardTokenExchangeProvider