JWTClientSecretAuthenticator (Keycloak REST Services 21.0.0 API)

java.lang.Object
- org.keycloak.authentication.authenticators.client.AbstractClientAuthenticator
- - org.keycloak.authentication.authenticators.client.JWTClientSecretAuthenticator

All Implemented Interfaces:

org.keycloak.authentication.ClientAuthenticator, org.keycloak.authentication.ClientAuthenticatorFactory, org.keycloak.authentication.ConfigurableAuthenticatorFactory, org.keycloak.provider.ConfiguredProvider, org.keycloak.provider.Provider, org.keycloak.provider.ProviderFactory<org.keycloak.authentication.ClientAuthenticator>
```
public class JWTClientSecretAuthenticator
extends AbstractClientAuthenticator
```
Client authentication based on JWT signed by client secret instead of private key . See specs for more details.
This is server side, which verifies JWT from client_assertion parameter, where the assertion was created on adapter side by org.keycloak.adapters.authentication.JWTClientSecretCredentialsProvider
TODO: Try to create abstract superclass to be shared with JWTClientAuthenticator. Most of the code can be reused

Field Summary

Fields
Modifier and Type Field Description

static String PROVIDER_ID
- Fields inherited from interface org.keycloak.authentication.ConfigurableAuthenticatorFactory
  REQUIREMENT_CHOICES

Constructor Summary

Constructors
Constructor Description

JWTClientSecretAuthenticator()

Method Summary

All Methods Instance Methods Concrete Methods
Modifier and Type	Method	Description
`void`	`authenticateClient(org.keycloak.authentication.ClientAuthenticationFlowContext context)`
`Map<String,Object>`	`getAdapterConfiguration(org.keycloak.models.ClientModel client)`
`List<org.keycloak.provider.ProviderConfigProperty>`	`getConfigProperties()`
`List<org.keycloak.provider.ProviderConfigProperty>`	`getConfigPropertiesPerClient()`
`String`	`getDisplayType()`
`String`	`getHelpText()`
`String`	`getId()`
`Set<String>`	`getProtocolAuthenticatorMethods(String loginProtocol)`
`org.keycloak.models.AuthenticationExecutionModel.Requirement[]`	`getRequirementChoices()`
`boolean`	`isConfigurable()`
`boolean`	`supportsSecret()`

Methods inherited from class org.keycloak.authentication.authenticators.client.AbstractClientAuthenticator
close, create, create, getReferenceCategory, init, isFormDataRequest, isUserSetupAllowed, postInit

Methods inherited from class java.lang.Object
clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.provider.ConfiguredProvider
getConfig

Methods inherited from interface org.keycloak.provider.ProviderFactory
getConfigMetadata, order

Field Detail
- PROVIDER_ID
```
public static final String PROVIDER_ID
```
  See Also:
  
  Constant Field Values

Constructor Detail
- JWTClientSecretAuthenticator
```
public JWTClientSecretAuthenticator()
```

Method Detail

authenticateClient

public void authenticateClient(org.keycloak.authentication.ClientAuthenticationFlowContext context)

isConfigurable
```
public boolean isConfigurable()
```

getConfigPropertiesPerClient

public List<org.keycloak.provider.ProviderConfigProperty> getConfigPropertiesPerClient()

getAdapterConfiguration

public Map<String,Object> getAdapterConfiguration(org.keycloak.models.ClientModel client)

getProtocolAuthenticatorMethods

public Set<String> getProtocolAuthenticatorMethods(String loginProtocol)

supportsSecret
```
public boolean supportsSecret()
```

getId
```
public String getId()
```

getDisplayType
```
public String getDisplayType()
```

getRequirementChoices

public org.keycloak.models.AuthenticationExecutionModel.Requirement[] getRequirementChoices()

getHelpText
```
public String getHelpText()
```

getConfigProperties

public List<org.keycloak.provider.ProviderConfigProperty> getConfigProperties()