Class DefaultTokenExchangeProvider

  • All Implemented Interfaces:
    org.keycloak.protocol.oidc.TokenExchangeProvider, org.keycloak.provider.Provider

    public class DefaultTokenExchangeProvider
    extends Object
    implements org.keycloak.protocol.oidc.TokenExchangeProvider
    Default token exchange implementation
    Author:
    Dmitry Telegin
    • Constructor Detail

      • DefaultTokenExchangeProvider

        public DefaultTokenExchangeProvider()
    • Method Detail

      • supports

        public boolean supports​(org.keycloak.protocol.oidc.TokenExchangeContext context)
        Specified by:
        supports in interface org.keycloak.protocol.oidc.TokenExchangeProvider
      • exchange

        public javax.ws.rs.core.Response exchange​(org.keycloak.protocol.oidc.TokenExchangeContext context)
        Specified by:
        exchange in interface org.keycloak.protocol.oidc.TokenExchangeProvider
      • close

        public void close()
        Specified by:
        close in interface org.keycloak.provider.Provider
      • tokenExchange

        protected javax.ws.rs.core.Response tokenExchange()
      • exchangeToIdentityProvider

        protected javax.ws.rs.core.Response exchangeToIdentityProvider​(org.keycloak.models.UserModel targetUser,
                                                                       org.keycloak.models.UserSessionModel targetUserSession,
                                                                       String requestedIssuer)
      • exchangeClientToClient

        protected javax.ws.rs.core.Response exchangeClientToClient​(org.keycloak.models.UserModel targetUser,
                                                                   org.keycloak.models.UserSessionModel targetUserSession,
                                                                   org.keycloak.representations.AccessToken token,
                                                                   boolean disallowOnHolderOfTokenMismatch)
      • exchangeClientToOIDCClient

        protected javax.ws.rs.core.Response exchangeClientToOIDCClient​(org.keycloak.models.UserModel targetUser,
                                                                       org.keycloak.models.UserSessionModel targetUserSession,
                                                                       String requestedTokenType,
                                                                       org.keycloak.models.ClientModel targetClient,
                                                                       String audience,
                                                                       String scope)
      • exchangeClientToSAML2Client

        protected javax.ws.rs.core.Response exchangeClientToSAML2Client​(org.keycloak.models.UserModel targetUser,
                                                                        org.keycloak.models.UserSessionModel targetUserSession,
                                                                        String requestedTokenType,
                                                                        org.keycloak.models.ClientModel targetClient)
      • exchangeExternalToken

        protected javax.ws.rs.core.Response exchangeExternalToken​(String issuer,
                                                                  String subjectToken)
      • importUserFromExternalIdentity

        protected org.keycloak.models.UserModel importUserFromExternalIdentity​(org.keycloak.broker.provider.BrokeredIdentityContext context)