Package org.keycloak.authentication.authenticators.client

Class JWTClientAuthenticator

java.lang.Object

org.keycloak.authentication.authenticators.client.AbstractClientAuthenticator

org.keycloak.authentication.authenticators.client.JWTClientAuthenticator

All Implemented Interfaces:

org.keycloak.authentication.ClientAuthenticator, org.keycloak.authentication.ClientAuthenticatorFactory, org.keycloak.authentication.ConfigurableAuthenticatorFactory, org.keycloak.provider.ConfiguredPerClientProvider, org.keycloak.provider.ConfiguredProvider, org.keycloak.provider.Provider, org.keycloak.provider.ProviderFactory<org.keycloak.authentication.ClientAuthenticator>

public class JWTClientAuthenticator
extends AbstractClientAuthenticator

Client authentication based on JWT signed by client private key . See specs for more details. This is server side, which verifies JWT from client_assertion parameter, where the assertion was created on adapter side by org.keycloak.adapters.authentication.JWTClientCredentialsProvider

Author:

Marek Posolda

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ATTR_PREFIX
static final String	CERTIFICATE_ATTR
static final String	PROVIDER_ID

Fields inherited from class org.keycloak.authentication.authenticators.client.AbstractClientAuthenticator

logger

Fields inherited from interface org.keycloak.authentication.ConfigurableAuthenticatorFactory

REQUIREMENT_CHOICES

Constructor Summary

Constructors

Constructor	Description
JWTClientAuthenticator()

Method Summary

Modifier and Type	Method	Description
void	authenticateClient(org.keycloak.authentication.ClientAuthenticationFlowContext context)
Map<String,Object>	getAdapterConfiguration(org.keycloak.models.KeycloakSession session, org.keycloak.models.ClientModel client)
List<org.keycloak.provider.ProviderConfigProperty>	getConfigProperties()
List<org.keycloak.provider.ProviderConfigProperty>	getConfigPropertiesPerClient()
String	getDisplayType()
String	getHelpText()
String	getId()
Set<String>	getProtocolAuthenticatorMethods(String loginProtocol)
org.keycloak.models.AuthenticationExecutionModel.Requirement[]	getRequirementChoices()
protected PublicKey	getSignatureValidationKey(org.keycloak.models.ClientModel client, org.keycloak.authentication.ClientAuthenticationFlowContext context, org.keycloak.jose.jws.JWSInput jws)
boolean	isConfigurable()
boolean	verifySignature(AbstractJWTClientValidator validator)

Methods inherited from class org.keycloak.authentication.authenticators.client.AbstractClientAuthenticator

close, create, create, getReferenceCategory, init, isUserSetupAllowed, postInit

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.authentication.ClientAuthenticatorFactory

getProtocolAuthenticatorMethod, setClientAuthenticationMethod, supportsSecret

Methods inherited from interface org.keycloak.authentication.ConfigurableAuthenticatorFactory

getOptionalReferenceCategories

Methods inherited from interface org.keycloak.provider.ConfiguredProvider

getConfig

Methods inherited from interface org.keycloak.provider.ProviderFactory

dependsOn, getConfigMetadata, order

Field Details

PROVIDER_ID

public static final String PROVIDER_ID

See Also:

• Constant Field Values

ATTR_PREFIX

public static final String ATTR_PREFIX

See Also:

• Constant Field Values

CERTIFICATE_ATTR

public static final String CERTIFICATE_ATTR

See Also:

• Constant Field Values

Constructor Details

JWTClientAuthenticator

public JWTClientAuthenticator()

Method Details

authenticateClient

public void authenticateClient(org.keycloak.authentication.ClientAuthenticationFlowContext context)

verifySignature

public boolean verifySignature(AbstractJWTClientValidator validator)

getSignatureValidationKey

protected PublicKey getSignatureValidationKey(org.keycloak.models.ClientModel client,
 org.keycloak.authentication.ClientAuthenticationFlowContext context,
 org.keycloak.jose.jws.JWSInput jws)

getDisplayType

public String getDisplayType()

isConfigurable

public boolean isConfigurable()

getRequirementChoices

public org.keycloak.models.AuthenticationExecutionModel.Requirement[] getRequirementChoices()

getHelpText

public String getHelpText()

getConfigProperties

public List<org.keycloak.provider.ProviderConfigProperty> getConfigProperties()

getConfigPropertiesPerClient

public List<org.keycloak.provider.ProviderConfigProperty> getConfigPropertiesPerClient()

getAdapterConfiguration

public Map<String,Object> getAdapterConfiguration(org.keycloak.models.KeycloakSession session,
 org.keycloak.models.ClientModel client)

getId

public String getId()

getProtocolAuthenticatorMethods

public Set<String> getProtocolAuthenticatorMethods(String loginProtocol)