Package io.quarkus.keycloak.pep.runtime
Class KeycloakPolicyEnforcerTenantConfig.KeycloakConfigPolicyEnforcer
java.lang.Object
io.quarkus.keycloak.pep.runtime.KeycloakPolicyEnforcerTenantConfig.KeycloakConfigPolicyEnforcer
- Enclosing class:
- KeycloakPolicyEnforcerTenantConfig
-
Nested Class Summary
Modifier and TypeClassDescriptionstatic class
static class
static class
static class
-
Field Summary
Modifier and TypeFieldDescriptionDefines a set of one or more claims that must be resolved and pushed to the Keycloak server in order to make these claims available to policiesorg.keycloak.representations.adapters.config.PolicyEnforcerConfig.EnforcementMode
Specifies how policies are enforced.boolean
Specifies how scopes should be mapped to HTTP methods.boolean
Specifies how the adapter should fetch the server for resources associated with paths in your application.Defines how the policy enforcer should track associations between paths in your application and resources defined in Keycloak.Specifies the paths to protect. -
Constructor Summary
-
Method Summary
-
Field Details
-
enforcementMode
@ConfigItem(defaultValue="enforcing") public org.keycloak.representations.adapters.config.PolicyEnforcerConfig.EnforcementMode enforcementModeSpecifies how policies are enforced. -
paths
@ConfigItem public Map<String,KeycloakPolicyEnforcerTenantConfig.KeycloakConfigPolicyEnforcer.PathConfig> pathsSpecifies the paths to protect. -
pathCache
@ConfigItem public KeycloakPolicyEnforcerTenantConfig.KeycloakConfigPolicyEnforcer.PathCacheConfig pathCacheDefines how the policy enforcer should track associations between paths in your application and resources defined in Keycloak. The cache is needed to avoid unnecessary requests to a Keycloak server by caching associations between paths and protected resources -
lazyLoadPaths
@ConfigItem(defaultValue="true") public boolean lazyLoadPathsSpecifies how the adapter should fetch the server for resources associated with paths in your application. If true, the policy enforcer is going to fetch resources on-demand accordingly with the path being requested -
claimInformationPoint
@ConfigItem public KeycloakPolicyEnforcerTenantConfig.KeycloakConfigPolicyEnforcer.ClaimInformationPointConfig claimInformationPointDefines a set of one or more claims that must be resolved and pushed to the Keycloak server in order to make these claims available to policies -
httpMethodAsScope
@ConfigItem public boolean httpMethodAsScopeSpecifies how scopes should be mapped to HTTP methods. If set to true, the policy enforcer will use the HTTP method from the current request to check whether access should be granted
-
-
Constructor Details
-
KeycloakConfigPolicyEnforcer
public KeycloakConfigPolicyEnforcer()
-