org.keycloak.protocol.oidc

Class OIDCAdvancedConfigWrapper

java.lang.Object

org.keycloak.protocol.oidc.OIDCAdvancedConfigWrapper

public class OIDCAdvancedConfigWrapper
extends Object

Author:

Marek Posolda

Method Summary

Modifier and Type	Method and Description
static OIDCAdvancedConfigWrapper	fromClientModel(ClientModel client)
static OIDCAdvancedConfigWrapper	fromClientRepresentation(ClientRepresentation clientRep)
boolean	getBackchannelLogoutRevokeOfflineTokens()
String	getBackchannelLogoutUrl()
String	getIdTokenEncryptedResponseAlg()
String	getIdTokenEncryptedResponseEnc()
String	getIdTokenSignedResponseAlg()
String	getJwksUrl()
String	getPkceCodeChallengeMethod()
String	getRequestObjectRequired()
Algorithm	getRequestObjectSignatureAlg()
List<String>	getRequestUris()
String	getTlsClientAuthSubjectDn()
String	getTokenEndpointAuthSigningAlg()
Algorithm	getUserInfoSignedResponseAlg()
boolean	isBackchannelLogoutSessionRequired()
boolean	isExcludeSessionStateFromAuthResponse()
boolean	isUseJwksUrl()
boolean	isUseMtlsHokToken()
boolean	isUseRefreshTokenForClientCredentialsGrant() If true, then Client Credentials Grant generates refresh token and creates user session.
boolean	isUserInfoSignatureRequired()
void	setBackchannelLogoutRevokeOfflineTokens(boolean backchannelLogoutRevokeOfflineTokens)
void	setBackchannelLogoutSessionRequired(boolean backchannelLogoutSessionRequired)
void	setBackchannelLogoutUrl(String backchannelLogoutUrl)
void	setExcludeSessionStateFromAuthResponse(boolean excludeSessionStateFromAuthResponse)
void	setIdTokenEncryptedResponseAlg(String algName)
void	setIdTokenEncryptedResponseEnc(String encName)
void	setIdTokenSignedResponseAlg(String algName)
void	setJwksUrl(String jwksUrl)
void	setPkceCodeChallengeMethod(String codeChallengeMethodName)
void	setRequestObjectRequired(String requestObjectRequired)
void	setRequestObjectSignatureAlg(Algorithm alg)
void	setRequestUris(List<String> requestUris)
void	setTlsClientAuthSubjectDn(String tls_client_auth_subject_dn)
void	setTokenEndpointAuthSigningAlg(String algName)
void	setUseJwksUrl(boolean useJwksUrl)
void	setUseMtlsHoKToken(boolean useUtlsHokToken)
void	setUseRefreshTokenForClientCredentialsGrant(boolean enable)
void	setUserInfoSignedResponseAlg(Algorithm alg)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Method Detail

fromClientModel

public static OIDCAdvancedConfigWrapper fromClientModel(ClientModel client)

fromClientRepresentation

public static OIDCAdvancedConfigWrapper fromClientRepresentation(ClientRepresentation clientRep)

getUserInfoSignedResponseAlg

public Algorithm getUserInfoSignedResponseAlg()

setUserInfoSignedResponseAlg

public void setUserInfoSignedResponseAlg(Algorithm alg)

isUserInfoSignatureRequired

public boolean isUserInfoSignatureRequired()

getRequestObjectSignatureAlg

public Algorithm getRequestObjectSignatureAlg()

setRequestObjectSignatureAlg

public void setRequestObjectSignatureAlg(Algorithm alg)

getRequestObjectRequired

public String getRequestObjectRequired()

setRequestObjectRequired

public void setRequestObjectRequired(String requestObjectRequired)

getRequestUris

public List<String> getRequestUris()

setRequestUris

public void setRequestUris(List<String> requestUris)

isUseJwksUrl

public boolean isUseJwksUrl()

setUseJwksUrl

public void setUseJwksUrl(boolean useJwksUrl)

getJwksUrl

public String getJwksUrl()

setJwksUrl

public void setJwksUrl(String jwksUrl)

isExcludeSessionStateFromAuthResponse

public boolean isExcludeSessionStateFromAuthResponse()

setExcludeSessionStateFromAuthResponse

public void setExcludeSessionStateFromAuthResponse(boolean excludeSessionStateFromAuthResponse)

isUseMtlsHokToken

public boolean isUseMtlsHokToken()

setUseMtlsHoKToken

public void setUseMtlsHoKToken(boolean useUtlsHokToken)

isUseRefreshTokenForClientCredentialsGrant

public boolean isUseRefreshTokenForClientCredentialsGrant()

If true, then Client Credentials Grant generates refresh token and creates user session. This is not per specs, so it is false by default For the details @see https://tools.ietf.org/html/rfc6749#section-4.4.3

setUseRefreshTokenForClientCredentialsGrant

public void setUseRefreshTokenForClientCredentialsGrant(boolean enable)

getTlsClientAuthSubjectDn

public String getTlsClientAuthSubjectDn()

setTlsClientAuthSubjectDn

public void setTlsClientAuthSubjectDn(String tls_client_auth_subject_dn)

getPkceCodeChallengeMethod

public String getPkceCodeChallengeMethod()

setPkceCodeChallengeMethod

public void setPkceCodeChallengeMethod(String codeChallengeMethodName)

getIdTokenSignedResponseAlg

public String getIdTokenSignedResponseAlg()

setIdTokenSignedResponseAlg

public void setIdTokenSignedResponseAlg(String algName)

getIdTokenEncryptedResponseAlg

public String getIdTokenEncryptedResponseAlg()

setIdTokenEncryptedResponseAlg

public void setIdTokenEncryptedResponseAlg(String algName)

getIdTokenEncryptedResponseEnc

public String getIdTokenEncryptedResponseEnc()

setIdTokenEncryptedResponseEnc

public void setIdTokenEncryptedResponseEnc(String encName)

getTokenEndpointAuthSigningAlg

public String getTokenEndpointAuthSigningAlg()

setTokenEndpointAuthSigningAlg

public void setTokenEndpointAuthSigningAlg(String algName)

getBackchannelLogoutUrl

public String getBackchannelLogoutUrl()

setBackchannelLogoutUrl

public void setBackchannelLogoutUrl(String backchannelLogoutUrl)

isBackchannelLogoutSessionRequired

public boolean isBackchannelLogoutSessionRequired()

setBackchannelLogoutSessionRequired

public void setBackchannelLogoutSessionRequired(boolean backchannelLogoutSessionRequired)

getBackchannelLogoutRevokeOfflineTokens

public boolean getBackchannelLogoutRevokeOfflineTokens()

setBackchannelLogoutRevokeOfflineTokens

public void setBackchannelLogoutRevokeOfflineTokens(boolean backchannelLogoutRevokeOfflineTokens)