JWTAuthorizationGrantProvider (Keycloak Server Private SPI 26.7.0 API)

All Superinterfaces:: IdentityProvider<C>, org.keycloak.provider.Provider

public interface JWTAuthorizationGrantProvider<C extends org.keycloak.models.IdentityProviderModel> extends IdentityProvider<C>

Method Summary

Modifier and Type

Method

Description

List<String>

getAllowedAudienceForJWTGrant()

int

getAllowedClockSkew()

String

getAssertionSignatureAlg()

int

getMaxAllowedExpiration()

boolean

isAssertionReuseAllowed()

boolean

isLimitAccessTokenExpiration()

BrokeredIdentityContext

validateAuthorizationGrantAssertion(JWTAuthorizationGrantValidationContext assertion)

Methods inherited from interface org.keycloak.broker.provider.IdentityProvider
export, getConfig, isMapperSupported, isType, reloadKeys

Methods inherited from interface org.keycloak.provider.Provider
close

Method Details
- validateAuthorizationGrantAssertion
  
  BrokeredIdentityContext validateAuthorizationGrantAssertion(JWTAuthorizationGrantValidationContext assertion) throws IdentityBrokerException
  
  Throws:
  
  IdentityBrokerException
- getAllowedClockSkew
  
  int getAllowedClockSkew()
- isAssertionReuseAllowed
  
  boolean isAssertionReuseAllowed()
- getAllowedAudienceForJWTGrant
  
  List<String> getAllowedAudienceForJWTGrant()
  
  Returns:
  
  list of allowed audience values. JWT assertion is considered valid if it's audience is one of the audiences returned from this method
- getMaxAllowedExpiration
  
  int getMaxAllowedExpiration()
- getAssertionSignatureAlg
  
  String getAssertionSignatureAlg()
- isLimitAccessTokenExpiration
  
  boolean isLimitAccessTokenExpiration()