Package org.keycloak.services.clientpolicy.executor

Class DownscopeAssertionGrantEnforcerExecutorFactory

java.lang.Object

org.keycloak.services.clientpolicy.executor.DownscopeAssertionGrantEnforcerExecutorFactory

All Implemented Interfaces:

ConfiguredProvider, EnvironmentDependentProviderFactory, ProviderFactory<ClientPolicyExecutorProvider>, ClientPolicyExecutorProviderFactory

public class DownscopeAssertionGrantEnforcerExecutorFactory
extends Object
implements ClientPolicyExecutorProviderFactory

Factory that enforces the grant to only use scopes that are already present in the initial assertion. For the moment it can only be used in the Token Exchange context.

Author:

rmartinc

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PROVIDER_ID

Constructor Summary

Constructors

Constructor	Description
DownscopeAssertionGrantEnforcerExecutorFactory()

Method Summary

Modifier and Type	Method	Description
void	close()	This is called when the server shuts down.
ClientPolicyExecutorProvider	create(KeycloakSession session)
List<ProviderConfigProperty>	getConfigProperties()
String	getHelpText()
String	getId()
void	init(Config.Scope config)	Only called once when the factory is first created.
void	postInit(KeycloakSessionFactory factory)	Called after all provider factories have been initialized

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.services.clientpolicy.executor.ClientPolicyExecutorProviderFactory

isSupported

Methods inherited from interface org.keycloak.provider.ConfiguredProvider

getConfig

Methods inherited from interface org.keycloak.provider.ProviderFactory

dependsOn, getConfigMetadata, order

Field Details

PROVIDER_ID

public static final String PROVIDER_ID

See Also:

• Constant Field Values

Constructor Details

DownscopeAssertionGrantEnforcerExecutorFactory

public DownscopeAssertionGrantEnforcerExecutorFactory()

Method Details

create

public ClientPolicyExecutorProvider create(KeycloakSession session)

Specified by:

create in interface ProviderFactory<ClientPolicyExecutorProvider>

init

public void init(Config.Scope config)

Description copied from interface: ProviderFactory

Only called once when the factory is first created.

Specified by:

init in interface ProviderFactory<ClientPolicyExecutorProvider>

postInit

public void postInit(KeycloakSessionFactory factory)

Description copied from interface: ProviderFactory

Called after all provider factories have been initialized

Specified by:

postInit in interface ProviderFactory<ClientPolicyExecutorProvider>

close

public void close()

Description copied from interface: ProviderFactory

This is called when the server shuts down.

Specified by:

close in interface ProviderFactory<ClientPolicyExecutorProvider>

getId

public String getId()

Specified by:

getId in interface ProviderFactory<ClientPolicyExecutorProvider>

getHelpText

public String getHelpText()

Specified by:

getHelpText in interface ConfiguredProvider

getConfigProperties

public List<ProviderConfigProperty> getConfigProperties()

Specified by:

getConfigProperties in interface ConfiguredProvider