Package org.keycloak.services.util

Class MtlsHoKTokenUtil

java.lang.Object

org.keycloak.services.util.MtlsHoKTokenUtil

public class MtlsHoKTokenUtil
extends Object

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	MtlsHoKTokenUtil.MtlsHoKProtocolMapper	Protocol mapper that binds access tokens to the client's mTLS certificate by adding the "cnf" (confirmation) claim with a "x5t#S256" certificate thumbprint.

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CERT_VERIFY_ERROR_DESC
protected static final org.jboss.logging.Logger	logger

Constructor Summary

Constructors

Constructor	Description
MtlsHoKTokenUtil()

Method Summary

Modifier and Type	Method	Description
static org.keycloak.representations.AccessToken.Confirmation	bindTokenWithClientCertificate(org.keycloak.http.HttpRequest request, org.keycloak.models.KeycloakSession session)
static Stream<Map.Entry<org.keycloak.models.ProtocolMapperModel,org.keycloak.protocol.ProtocolMapper>>	getTransientProtocolMapper()
static boolean	verifyTokenBindingWithClientCertificate(org.keycloak.representations.AccessToken token, org.keycloak.http.HttpRequest request, org.keycloak.models.KeycloakSession session)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

logger

protected static final org.jboss.logging.Logger logger

CERT_VERIFY_ERROR_DESC

public static final String CERT_VERIFY_ERROR_DESC

See Also:

• Constant Field Values

Constructor Details

MtlsHoKTokenUtil

public MtlsHoKTokenUtil()

Method Details

getTransientProtocolMapper

public static Stream<Map.Entry<org.keycloak.models.ProtocolMapperModel,org.keycloak.protocol.ProtocolMapper>> getTransientProtocolMapper()

bindTokenWithClientCertificate

public static org.keycloak.representations.AccessToken.Confirmation bindTokenWithClientCertificate(org.keycloak.http.HttpRequest request,
 org.keycloak.models.KeycloakSession session)

verifyTokenBindingWithClientCertificate

public static boolean verifyTokenBindingWithClientCertificate(org.keycloak.representations.AccessToken token,
 org.keycloak.http.HttpRequest request,
 org.keycloak.models.KeycloakSession session)