Package org.keycloak.services.managers

Class AuthenticationManager

java.lang.Object
org.keycloak.services.managers.AuthenticationManager
Direct Known Subclasses:
AppAuthManager
public class AuthenticationManager extends Object
Stateless object that manages authentication
Version:
$Revision: 1 $
Author:
Bill Burke

  • Nested Class Summary

    Nested Classes
    Modifier and Type
    Class
    Description
    static enum 
    AuthenticationManager.AuthenticationStatus
     
    static final record 
    AuthenticationManager.AuthResult
     

  • Field Summary

    Fields
    Modifier and Type
    Field
    Description
    static final String
    AUTH_TIME
     
    static final String
    AUTH_TIME_BROKER
     
    static final String
    CLIENT_LOGOUT_STATE
    Auth session note on client logout state (when logging out)
    static final String
    END_AFTER_REQUIRED_ACTIONS
     
    static final String
    FORCED_REAUTHENTICATION
     
    static final String
    FORM_USERNAME
     
    static final String
    INITIATING_IDP_PARAM
     
    static final String
    INVALIDATE_ACTION_TOKEN
     
    static final String
    KEYCLOAK_LOGOUT_PROTOCOL
     
    static final String
    KEYCLOAK_SESSION_COOKIE
     
    protected static final org.jboss.logging.Logger
    logger
     
    static final String
    LOGOUT_INITIATING_IDP
     
    static final String
    NEW_USER_REGISTERED
     
    static final String
    PASSWORD_VALIDATED
     
    static final String
    SET_REDIRECT_URI_AFTER_REQUIRED_ACTIONS
     
    static final String
    SSO_AUTH
     
    static final String
    USER_SESSION_PERSISTENT_STATE
    Auth session note, which indicates if user session will be persistent (Saved to real persistent store) or transient (transient session will be scoped to single request and hence there is no need to save it in the underlying store)

  • Constructor Summary

    Constructors
    Constructor
    Description
    AuthenticationManager()
     

  • Method Summary

    Modifier and Type
    Method
    Description
    AuthenticationManager.AuthResult
    authenticateIdentityCookie(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm)
     
    static AuthenticationManager.AuthResult
    authenticateIdentityCookie(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, boolean checkActive)
     
    static BackchannelLogoutResponse
    backchannelLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, jakarta.ws.rs.core.HttpHeaders headers, boolean logoutBroker)
     
    static BackchannelLogoutResponse
    backchannelLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, jakarta.ws.rs.core.HttpHeaders headers, boolean logoutBroker, boolean offlineSession)
     
    static void
    backchannelLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.UserSessionModel userSession, boolean logoutBroker)
     
    static void
    backchannelLogoutUserFromClient(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, org.keycloak.models.ClientModel client, jakarta.ws.rs.core.UriInfo uriInfo, jakarta.ws.rs.core.HttpHeaders headers)
    Logout all clientSessions of this user and client
    static void
    backchannelLogoutUserSessionFromClient(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.ClientModel client, jakarta.ws.rs.core.UriInfo uriInfo, jakarta.ws.rs.core.HttpHeaders headers)
    Logout all clientSessions belonging to the the given user session
    static jakarta.ws.rs.core.Response
    browserLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, jakarta.ws.rs.core.HttpHeaders headers)
     
    static boolean
    compareSessionIdWithSessionCookie(org.keycloak.models.KeycloakSession session, String sessionId)
     
    static IdentityCookieToken
    createIdentityToken(org.keycloak.models.KeycloakSession keycloakSession, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, org.keycloak.models.UserSessionModel session, String issuer)
     
    static void
    createLoginCookie(org.keycloak.models.KeycloakSession keycloakSession, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, org.keycloak.models.UserSessionModel session, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection)
     
    static org.keycloak.sessions.AuthenticationSessionModel
    createOrJoinLogoutSession(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, AuthenticationSessionManager asm, org.keycloak.models.UserSessionModel userSession, boolean browserCookie, boolean initiateLogout)
     
    static void
    createRememberMeCookie(String username, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.models.KeycloakSession session)
     
    static org.keycloak.authentication.RequiredActionProvider
    createRequiredAction(RequiredActionContextResult context)
     
    static void
    evaluateRequiredActionTriggers(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.http.HttpRequest request, org.keycloak.events.EventBuilder event, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user)
     
    protected static jakarta.ws.rs.core.Response
    executionActions(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.http.HttpRequest request, org.keycloak.events.EventBuilder event, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, Set<String> ignoredActions)
     
    static void
    expireAuthSessionCookie(org.keycloak.models.KeycloakSession session)
     
    static void
    expireIdentityCookie(org.keycloak.models.KeycloakSession session)
     
    static void
    expireRememberMeCookie(org.keycloak.models.KeycloakSession session)
     
    static boolean
    expireUserSessionCookie(org.keycloak.models.KeycloakSession session, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.RealmModel realm, jakarta.ws.rs.core.UriInfo uriInfo)
     
    static boolean
    expireUserSessionCookie(org.keycloak.models.KeycloakSession session, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.RealmModel realm, jakarta.ws.rs.core.UriInfo uriInfo, jakarta.ws.rs.core.HttpHeaders headers, org.keycloak.common.ClientConnection connection)
    Deprecated.
    Use expireUserSessionCookie(KeycloakSession session, UserSessionModel userSession, RealmModel realm, UriInfo uriInfo) instead.
    static jakarta.ws.rs.core.Response
    finishBrowserLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, jakarta.ws.rs.core.HttpHeaders headers)
     
    static jakarta.ws.rs.core.Response
    finishedRequiredActions(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.models.UserSessionModel userSession, org.keycloak.common.ClientConnection clientConnection, org.keycloak.http.HttpRequest request, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.events.EventBuilder event)
     
    static void
    finishUnconfirmedUserSession(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSessionModel)
     
    static String
    getAuthenticationCategory(org.keycloak.models.KeycloakSession session, String authenticator)
     
    static org.keycloak.sessions.CommonClientSessionModel.Action
    getClientLogoutAction(org.keycloak.sessions.AuthenticationSessionModel logoutAuthSession, String clientUuid)
    Returns the logout state of the particular client as per the logoutAuthSession
    static Stream<org.keycloak.rar.AuthorizationDetails>
    getClientScopeModelStream(org.keycloak.models.KeycloakSession session, org.keycloak.models.ClientModel client)
     
    static String
    getRealmCookiePath(org.keycloak.models.RealmModel realm, jakarta.ws.rs.core.UriInfo uriInfo)
     
    static String
    getRememberMeUsername(org.keycloak.models.KeycloakSession session)
     
    static String
    getRequestedScopes(org.keycloak.models.KeycloakSession session)
     
    static String
    getRequestedScopes(org.keycloak.models.KeycloakSession session, org.keycloak.models.ClientModel client)
     
    static boolean
    isClientSessionValid(org.keycloak.models.RealmModel realm, org.keycloak.models.ClientModel client, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.AuthenticatedClientSessionModel clientSession)
     
    static boolean
    isSessionValid(org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession)
     
    static boolean
    isSSOAuthentication(org.keycloak.models.AuthenticatedClientSessionModel clientSession)
     
    static void
    logSuccess(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession)
     
    static org.keycloak.models.UserModel
    lookupUserForBruteForceLog(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.sessions.AuthenticationSessionModel authenticationSession)
     
    static jakarta.ws.rs.core.Response
    nextActionAfterAuthentication(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.common.ClientConnection clientConnection, org.keycloak.http.HttpRequest request, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.events.EventBuilder event)
     
    static String
    nextRequiredAction(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.http.HttpRequest request, org.keycloak.events.EventBuilder event)
     
    static jakarta.ws.rs.core.Response
    redirectAfterSuccessfulFlow(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.ClientSessionContext clientSessionCtx, org.keycloak.http.HttpRequest request, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection clientConnection, org.keycloak.events.EventBuilder event, org.keycloak.sessions.AuthenticationSessionModel authSession)
     
    static jakarta.ws.rs.core.Response
    redirectAfterSuccessfulFlow(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.ClientSessionContext clientSessionCtx, org.keycloak.http.HttpRequest request, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection clientConnection, org.keycloak.events.EventBuilder event, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.protocol.LoginProtocol protocol)
     
    static jakarta.ws.rs.core.Response
    redirectToRequiredActions(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.sessions.AuthenticationSessionModel authSession, jakarta.ws.rs.core.UriInfo uriInfo, String requiredAction)
     
    static void
    resolveLightweightAccessTokenRoles(org.keycloak.models.KeycloakSession session, org.keycloak.representations.AccessToken accessToken, org.keycloak.models.RealmModel realm)
     
    static void
    setClientLogoutAction(org.keycloak.sessions.AuthenticationSessionModel logoutAuthSession, String clientUuid, org.keycloak.sessions.CommonClientSessionModel.Action action)
    Sets logout state of the particular client into the logoutAuthSession
    static void
    setClientScopesInSession(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession)
     
    static void
    setKcActionStatus(String executedProviderId, org.keycloak.authentication.RequiredActionContext.KcActionStatus status, org.keycloak.sessions.AuthenticationSessionModel authSession)
     
    static void
    setKcActionToEnforced(String executedProviderId, org.keycloak.sessions.AuthenticationSessionModel authSession)
     
    static String
    sha384UrlEncodedHash(String input)
     
    static AuthenticationManager.AuthResult
    verifyIdentityToken(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, boolean checkActive, boolean checkTokenType, String checkAudience, boolean isCookie, String tokenString, jakarta.ws.rs.core.HttpHeaders headers, Consumer<org.keycloak.TokenVerifier<org.keycloak.representations.AccessToken>> verifierConsumer)
     

    Methods inherited from class java.lang.Object

    clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

  • Field Details

  • Constructor Details

    • AuthenticationManager

      public AuthenticationManager()

  • Method Details

    • isSessionValid

      public static boolean isSessionValid(org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession)

    • isClientSessionValid

      public static boolean isClientSessionValid(org.keycloak.models.RealmModel realm, org.keycloak.models.ClientModel client, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.AuthenticatedClientSessionModel clientSession)

    • expireUserSessionCookie

      @Deprecated public static boolean expireUserSessionCookie(org.keycloak.models.KeycloakSession session, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.RealmModel realm, jakarta.ws.rs.core.UriInfo uriInfo, jakarta.ws.rs.core.HttpHeaders headers, org.keycloak.common.ClientConnection connection)
      Deprecated.
      Use expireUserSessionCookie(KeycloakSession session, UserSessionModel userSession, RealmModel realm, UriInfo uriInfo) instead.

    • expireUserSessionCookie

      public static boolean expireUserSessionCookie(org.keycloak.models.KeycloakSession session, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.RealmModel realm, jakarta.ws.rs.core.UriInfo uriInfo)

    • backchannelLogout

      public static void backchannelLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.UserSessionModel userSession, boolean logoutBroker)

    • backchannelLogout

      public static BackchannelLogoutResponse backchannelLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, jakarta.ws.rs.core.HttpHeaders headers, boolean logoutBroker)

    • backchannelLogout

      public static BackchannelLogoutResponse backchannelLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, jakarta.ws.rs.core.HttpHeaders headers, boolean logoutBroker, boolean offlineSession)
      Parameters:
      session -
      realm -
      userSession -
      uriInfo -
      connection -
      headers -
      logoutBroker -
      offlineSession -
      Returns:
      BackchannelLogoutResponse with logout information

    • createOrJoinLogoutSession

      public static org.keycloak.sessions.AuthenticationSessionModel createOrJoinLogoutSession(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, AuthenticationSessionManager asm, org.keycloak.models.UserSessionModel userSession, boolean browserCookie, boolean initiateLogout)

    • setClientLogoutAction

      public static void setClientLogoutAction(org.keycloak.sessions.AuthenticationSessionModel logoutAuthSession, String clientUuid, org.keycloak.sessions.CommonClientSessionModel.Action action)
      Sets logout state of the particular client into the logoutAuthSession
      Parameters:
      logoutAuthSession - logoutAuthSession. May be null in which case this is a no-op.
      clientUuid - Client. Must not be null
      action -

    • getClientLogoutAction

      public static org.keycloak.sessions.CommonClientSessionModel.Action getClientLogoutAction(org.keycloak.sessions.AuthenticationSessionModel logoutAuthSession, String clientUuid)
      Returns the logout state of the particular client as per the logoutAuthSession
      Parameters:
      logoutAuthSession - logoutAuthSession. May be null in which case this is a no-op.
      clientUuid - Internal ID of the client. Must not be null
      Returns:
      State if it can be determined, null otherwise.

    • backchannelLogoutUserSessionFromClient

      public static void backchannelLogoutUserSessionFromClient(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.ClientModel client, jakarta.ws.rs.core.UriInfo uriInfo, jakarta.ws.rs.core.HttpHeaders headers)
      Logout all clientSessions belonging to the the given user session
      Parameters:
      session -
      realm -
      userSession -
      client -
      uriInfo -
      headers -

    • backchannelLogoutUserFromClient

      public static void backchannelLogoutUserFromClient(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, org.keycloak.models.ClientModel client, jakarta.ws.rs.core.UriInfo uriInfo, jakarta.ws.rs.core.HttpHeaders headers)
      Logout all clientSessions of this user and client
      Parameters:
      session -
      realm -
      user -
      client -
      uriInfo -
      headers -

    • browserLogout

      public static jakarta.ws.rs.core.Response browserLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, jakarta.ws.rs.core.HttpHeaders headers)

    • finishBrowserLogout

      public static jakarta.ws.rs.core.Response finishBrowserLogout(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, jakarta.ws.rs.core.HttpHeaders headers)

    • finishUnconfirmedUserSession

      public static void finishUnconfirmedUserSession(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSessionModel)

    • createIdentityToken

      public static IdentityCookieToken createIdentityToken(org.keycloak.models.KeycloakSession keycloakSession, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, org.keycloak.models.UserSessionModel session, String issuer)

    • createLoginCookie

      public static void createLoginCookie(org.keycloak.models.KeycloakSession keycloakSession, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, org.keycloak.models.UserSessionModel session, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection)

    • createRememberMeCookie

      public static void createRememberMeCookie(String username, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.models.KeycloakSession session)

    • getRememberMeUsername

      public static String getRememberMeUsername(org.keycloak.models.KeycloakSession session)

    • expireIdentityCookie

      public static void expireIdentityCookie(org.keycloak.models.KeycloakSession session)

    • expireRememberMeCookie

      public static void expireRememberMeCookie(org.keycloak.models.KeycloakSession session)

    • expireAuthSessionCookie

      public static void expireAuthSessionCookie(org.keycloak.models.KeycloakSession session)

    • getRealmCookiePath

      public static String getRealmCookiePath(org.keycloak.models.RealmModel realm, jakarta.ws.rs.core.UriInfo uriInfo)

    • authenticateIdentityCookie

      public AuthenticationManager.AuthResult authenticateIdentityCookie(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm)

    • authenticateIdentityCookie

      public static AuthenticationManager.AuthResult authenticateIdentityCookie(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, boolean checkActive)

    • redirectAfterSuccessfulFlow

      public static jakarta.ws.rs.core.Response redirectAfterSuccessfulFlow(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.ClientSessionContext clientSessionCtx, org.keycloak.http.HttpRequest request, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection clientConnection, org.keycloak.events.EventBuilder event, org.keycloak.sessions.AuthenticationSessionModel authSession)

    • redirectAfterSuccessfulFlow

      public static jakarta.ws.rs.core.Response redirectAfterSuccessfulFlow(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.models.UserSessionModel userSession, org.keycloak.models.ClientSessionContext clientSessionCtx, org.keycloak.http.HttpRequest request, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection clientConnection, org.keycloak.events.EventBuilder event, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.protocol.LoginProtocol protocol)

    • compareSessionIdWithSessionCookie

      public static boolean compareSessionIdWithSessionCookie(org.keycloak.models.KeycloakSession session, String sessionId)
      Parameters:
      session - keycloak session
      sessionId - in plain-text
      Returns:
      true if sessionId matches with the session from KEYCLOAK_SESSION_COOKIE

    • isSSOAuthentication

      public static boolean isSSOAuthentication(org.keycloak.models.AuthenticatedClientSessionModel clientSession)

    • nextActionAfterAuthentication

      public static jakarta.ws.rs.core.Response nextActionAfterAuthentication(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.common.ClientConnection clientConnection, org.keycloak.http.HttpRequest request, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.events.EventBuilder event)

    • redirectToRequiredActions

      public static jakarta.ws.rs.core.Response redirectToRequiredActions(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.sessions.AuthenticationSessionModel authSession, jakarta.ws.rs.core.UriInfo uriInfo, String requiredAction)

    • finishedRequiredActions

      public static jakarta.ws.rs.core.Response finishedRequiredActions(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.models.UserSessionModel userSession, org.keycloak.common.ClientConnection clientConnection, org.keycloak.http.HttpRequest request, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.events.EventBuilder event)

    • nextRequiredAction

      public static String nextRequiredAction(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.http.HttpRequest request, org.keycloak.events.EventBuilder event)

    • getClientScopeModelStream

      public static Stream<org.keycloak.rar.AuthorizationDetails> getClientScopeModelStream(org.keycloak.models.KeycloakSession session, org.keycloak.models.ClientModel client)

    • setClientScopesInSession

      public static void setClientScopesInSession(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession)

    • createRequiredAction

      public static org.keycloak.authentication.RequiredActionProvider createRequiredAction(RequiredActionContextResult context)

    • executionActions

      protected static jakarta.ws.rs.core.Response executionActions(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.http.HttpRequest request, org.keycloak.events.EventBuilder event, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user, Set<String> ignoredActions)

    • evaluateRequiredActionTriggers

      public static void evaluateRequiredActionTriggers(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.http.HttpRequest request, org.keycloak.events.EventBuilder event, org.keycloak.models.RealmModel realm, org.keycloak.models.UserModel user)

    • verifyIdentityToken

      public static AuthenticationManager.AuthResult verifyIdentityToken(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, jakarta.ws.rs.core.UriInfo uriInfo, org.keycloak.common.ClientConnection connection, boolean checkActive, boolean checkTokenType, String checkAudience, boolean isCookie, String tokenString, jakarta.ws.rs.core.HttpHeaders headers, Consumer<org.keycloak.TokenVerifier<org.keycloak.representations.AccessToken>> verifierConsumer)

    • resolveLightweightAccessTokenRoles

      public static void resolveLightweightAccessTokenRoles(org.keycloak.models.KeycloakSession session, org.keycloak.representations.AccessToken accessToken, org.keycloak.models.RealmModel realm)

    • setKcActionStatus

      public static void setKcActionStatus(String executedProviderId, org.keycloak.authentication.RequiredActionContext.KcActionStatus status, org.keycloak.sessions.AuthenticationSessionModel authSession)

    • setKcActionToEnforced

      public static void setKcActionToEnforced(String executedProviderId, org.keycloak.sessions.AuthenticationSessionModel authSession)

    • logSuccess

      public static void logSuccess(org.keycloak.models.KeycloakSession session, org.keycloak.sessions.AuthenticationSessionModel authSession)

    • getAuthenticationCategory

      public static String getAuthenticationCategory(org.keycloak.models.KeycloakSession session, String authenticator)

    • lookupUserForBruteForceLog

      public static org.keycloak.models.UserModel lookupUserForBruteForceLog(org.keycloak.models.KeycloakSession session, org.keycloak.models.RealmModel realm, org.keycloak.sessions.AuthenticationSessionModel authenticationSession)

    • sha384UrlEncodedHash

      public static String sha384UrlEncodedHash(String input)

    • getRequestedScopes

      public static String getRequestedScopes(org.keycloak.models.KeycloakSession session)

    • getRequestedScopes

      public static String getRequestedScopes(org.keycloak.models.KeycloakSession session, org.keycloak.models.ClientModel client)