Package org.keycloak.services.resources
Class IdentityBrokerService
java.lang.Object
org.keycloak.services.resources.IdentityBrokerService
- All Implemented Interfaces:
org.keycloak.broker.provider.UserAuthenticationIdentityProvider.AuthenticationCallback
public class IdentityBrokerService
extends Object
implements org.keycloak.broker.provider.UserAuthenticationIdentityProvider.AuthenticationCallback
-
Field Summary
Fields -
Constructor Summary
Constructors -
Method Summary
Modifier and TypeMethodDescriptionjakarta.ws.rs.core.ResponseafterFirstBrokerLogin(String code, String clientId, String clientData, String tabId) jakarta.ws.rs.core.ResponseafterPostBrokerLoginFlow(String code, String clientId, String clientData, String tabId) jakarta.ws.rs.core.Responseauthenticated(org.keycloak.broker.provider.BrokeredIdentityContext context) protected jakarta.ws.rs.core.ResponsebrowserAuthentication(org.keycloak.sessions.AuthenticationSessionModel authSession, String errorMessage, Object... parameters) jakarta.ws.rs.core.Responsecancelled(org.keycloak.models.IdentityProviderModel idpConfig) jakarta.ws.rs.core.ResponseclientInitiatedAccountLinking(String providerAlias, String redirectUri, String clientId, String nonce, String hash) Deprecated.jakarta.ws.rs.core.ResponseclientIntiatedAccountLinkingPreflight(String providerAlias) Closes off CORS preflight requests for account linkingjakarta.ws.rs.core.Responseorg.keycloak.sessions.AuthenticationSessionModelgetAndVerifyAuthenticationSession(String encodedCode) getEndpoint(String providerAlias) static org.keycloak.broker.provider.UserAuthenticationIdentityProvider<?>getIdentityProvider(org.keycloak.models.KeycloakSession session, String alias) static <T extends org.keycloak.broker.provider.IdentityProvider<?>>
TgetIdentityProvider(org.keycloak.models.KeycloakSession session, org.keycloak.models.IdentityProviderModel identityProviderModel, Class<T> type) voidinit()jakarta.ws.rs.core.ResponseperformClientInitiatedAccountLogin(String providerAlias, ClientSessionCode<org.keycloak.sessions.AuthenticationSessionModel> clientSessionCode) jakarta.ws.rs.core.ResponseperformLogin(String providerAlias, String code, String clientId, String tabId, String clientData, String loginHint) jakarta.ws.rs.core.ResponseperformPostLogin(String providerAlias, String code, String clientId, String clientData, String tabId, String loginHint) jakarta.ws.rs.core.Responsejakarta.ws.rs.core.ResponseretrieveTokenV1(String providerAlias) jakarta.ws.rs.core.ResponseretrieveTokenV2(String providerAlias) jakarta.ws.rs.core.ResponseretryLogin(org.keycloak.broker.provider.UserAuthenticationIdentityProvider<?> identityProvider, org.keycloak.sessions.AuthenticationSessionModel authSession) jakarta.ws.rs.core.ResponsevalidateUser(org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.models.UserModel user, org.keycloak.models.RealmModel realm)
-
Field Details
-
LINKING_IDENTITY_PROVIDER
- See Also:
-
-
Constructor Details
-
IdentityBrokerService
public IdentityBrokerService(org.keycloak.models.KeycloakSession session)
-
-
Method Details
-
init
public void init() -
clientIntiatedAccountLinkingPreflight
@OPTIONS @Path("/{provider_alias}/link") public jakarta.ws.rs.core.Response clientIntiatedAccountLinkingPreflight(@PathParam("provider_alias") String providerAlias) Closes off CORS preflight requests for account linking- Parameters:
providerAlias-- Returns:
-
clientInitiatedAccountLinking
@GET @Path("/{provider_alias}/link") @Deprecated public jakarta.ws.rs.core.Response clientInitiatedAccountLinking(@PathParam("provider_alias") String providerAlias, @QueryParam("redirect_uri") String redirectUri, @QueryParam("client_id") String clientId, @QueryParam("nonce") String nonce, @QueryParam("hash") String hash) Deprecated. -
performClientInitiatedAccountLogin
public jakarta.ws.rs.core.Response performClientInitiatedAccountLogin(String providerAlias, ClientSessionCode<org.keycloak.sessions.AuthenticationSessionModel> clientSessionCode) -
performPostLogin
@POST @Path("/{provider_alias}/login") public jakarta.ws.rs.core.Response performPostLogin(@PathParam("provider_alias") String providerAlias, @QueryParam("session_code") String code, @QueryParam("client_id") String clientId, @QueryParam("client_data") String clientData, @QueryParam("tab_id") String tabId, @QueryParam("login_hint") String loginHint) -
performLogin
@GET @Path("/{provider_alias}/login") public jakarta.ws.rs.core.Response performLogin(@PathParam("provider_alias") String providerAlias, @QueryParam("session_code") String code, @QueryParam("client_id") String clientId, @QueryParam("tab_id") String tabId, @QueryParam("client_data") String clientData, @QueryParam("login_hint") String loginHint) -
retryLogin
public jakarta.ws.rs.core.Response retryLogin(org.keycloak.broker.provider.UserAuthenticationIdentityProvider<?> identityProvider, org.keycloak.sessions.AuthenticationSessionModel authSession) - Specified by:
retryLoginin interfaceorg.keycloak.broker.provider.UserAuthenticationIdentityProvider.AuthenticationCallback
-
getEndpoint
-
retrieveTokenPreflight
@Path("{provider_alias}/token") @OPTIONS public jakarta.ws.rs.core.Response retrieveTokenPreflight() -
retrieveTokenV1
@GET @Path("{provider_alias}/token") public jakarta.ws.rs.core.Response retrieveTokenV1(@PathParam("provider_alias") String providerAlias) -
retrieveTokenV2
@POST @Path("{provider_alias}/token") public jakarta.ws.rs.core.Response retrieveTokenV2(@PathParam("provider_alias") String providerAlias) -
authenticated
public jakarta.ws.rs.core.Response authenticated(org.keycloak.broker.provider.BrokeredIdentityContext context) - Specified by:
authenticatedin interfaceorg.keycloak.broker.provider.UserAuthenticationIdentityProvider.AuthenticationCallback
-
validateUser
public jakarta.ws.rs.core.Response validateUser(org.keycloak.sessions.AuthenticationSessionModel authSession, org.keycloak.models.UserModel user, org.keycloak.models.RealmModel realm) -
afterFirstBrokerLogin
-
afterPostBrokerLoginFlow
-
cancelled
public jakarta.ws.rs.core.Response cancelled(org.keycloak.models.IdentityProviderModel idpConfig) - Specified by:
cancelledin interfaceorg.keycloak.broker.provider.UserAuthenticationIdentityProvider.AuthenticationCallback
-
error
public jakarta.ws.rs.core.Response error(org.keycloak.models.IdentityProviderModel idpConfig, String message) - Specified by:
errorin interfaceorg.keycloak.broker.provider.UserAuthenticationIdentityProvider.AuthenticationCallback
-
getAndVerifyAuthenticationSession
public org.keycloak.sessions.AuthenticationSessionModel getAndVerifyAuthenticationSession(String encodedCode) - Specified by:
getAndVerifyAuthenticationSessionin interfaceorg.keycloak.broker.provider.UserAuthenticationIdentityProvider.AuthenticationCallback
-
browserAuthentication
-
getIdentityProvider
public static org.keycloak.broker.provider.UserAuthenticationIdentityProvider<?> getIdentityProvider(org.keycloak.models.KeycloakSession session, String alias) -
getIdentityProvider
public static <T extends org.keycloak.broker.provider.IdentityProvider<?>> T getIdentityProvider(org.keycloak.models.KeycloakSession session, org.keycloak.models.IdentityProviderModel identityProviderModel, Class<T> type)
-