Class AudienceResolveProtocolMapper

  • All Implemented Interfaces:
    OIDCAccessTokenMapper, org.keycloak.protocol.ProtocolMapper, org.keycloak.provider.ConfiguredProvider, org.keycloak.provider.Provider, org.keycloak.provider.ProviderFactory<org.keycloak.protocol.ProtocolMapper>

    public class AudienceResolveProtocolMapper
    extends AbstractOIDCProtocolMapper
    implements OIDCAccessTokenMapper
    Protocol mapper, which adds all client_ids of "allowed" clients to the audience field of the token. Allowed client means the client for which user has at least one client role
    Author:
    Marek Posolda
    • Constructor Detail

      • AudienceResolveProtocolMapper

        public AudienceResolveProtocolMapper()
    • Method Detail

      • getConfigProperties

        public List<org.keycloak.provider.ProviderConfigProperty> getConfigProperties()
        Specified by:
        getConfigProperties in interface org.keycloak.provider.ConfiguredProvider
      • getId

        public String getId()
        Specified by:
        getId in interface org.keycloak.provider.ProviderFactory<org.keycloak.protocol.ProtocolMapper>
      • getDisplayType

        public String getDisplayType()
        Specified by:
        getDisplayType in interface org.keycloak.protocol.ProtocolMapper
      • getDisplayCategory

        public String getDisplayCategory()
        Specified by:
        getDisplayCategory in interface org.keycloak.protocol.ProtocolMapper
      • getHelpText

        public String getHelpText()
        Specified by:
        getHelpText in interface org.keycloak.provider.ConfiguredProvider
      • getPriority

        public int getPriority()
        Specified by:
        getPriority in interface org.keycloak.protocol.ProtocolMapper
      • transformAccessToken

        public org.keycloak.representations.AccessToken transformAccessToken​(org.keycloak.representations.AccessToken token,
                                                                             org.keycloak.models.ProtocolMapperModel mappingModel,
                                                                             org.keycloak.models.KeycloakSession session,
                                                                             org.keycloak.models.UserSessionModel userSession,
                                                                             org.keycloak.models.ClientSessionContext clientSessionCtx)
        Specified by:
        transformAccessToken in interface OIDCAccessTokenMapper
        Overrides:
        transformAccessToken in class AbstractOIDCProtocolMapper
      • createClaimMapper

        public static org.keycloak.models.ProtocolMapperModel createClaimMapper​(String name)