org.keycloak.adapters.authorization

Class AbstractPolicyEnforcer

java.lang.Object

org.keycloak.adapters.authorization.AbstractPolicyEnforcer

Direct Known Subclasses:

KeycloakAdapterPolicyEnforcer

public abstract class AbstractPolicyEnforcer
extends Object

Author:

Pedro Igor

Constructor Summary

Constructors

Modifier	Constructor and Description
protected	AbstractPolicyEnforcer(PolicyEnforcer policyEnforcer)

Method Summary

Modifier and Type	Method and Description
AuthorizationContext	authorize(OIDCHttpFacade httpFacade)
protected abstract boolean	challenge(PolicyEnforcerConfig.PathConfig pathConfig, PolicyEnforcerConfig.MethodConfig methodConfig, OIDCHttpFacade facade)
protected AuthzClient	getAuthzClient()
protected PolicyEnforcerConfig	getEnforcerConfig()
protected PolicyEnforcer	getPolicyEnforcer()
protected void	handleAccessDenied(OIDCHttpFacade httpFacade)
protected boolean	isAuthorized(PolicyEnforcerConfig.PathConfig actualPathConfig, PolicyEnforcerConfig.MethodConfig methodConfig, AccessToken accessToken, OIDCHttpFacade httpFacade, Map<String,List<String>> claims)
protected Map<String,List<String>>	resolveClaims(PolicyEnforcerConfig.PathConfig pathConfig, OIDCHttpFacade httpFacade)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

AbstractPolicyEnforcer

protected AbstractPolicyEnforcer(PolicyEnforcer policyEnforcer)

Method Detail

authorize

public AuthorizationContext authorize(OIDCHttpFacade httpFacade)

challenge

protected abstract boolean challenge(PolicyEnforcerConfig.PathConfig pathConfig,
                                     PolicyEnforcerConfig.MethodConfig methodConfig,
                                     OIDCHttpFacade facade)

isAuthorized

protected boolean isAuthorized(PolicyEnforcerConfig.PathConfig actualPathConfig,
                               PolicyEnforcerConfig.MethodConfig methodConfig,
                               AccessToken accessToken,
                               OIDCHttpFacade httpFacade,
                               Map<String,List<String>> claims)

handleAccessDenied

protected void handleAccessDenied(OIDCHttpFacade httpFacade)

getAuthzClient

protected AuthzClient getAuthzClient()

getEnforcerConfig

protected PolicyEnforcerConfig getEnforcerConfig()

getPolicyEnforcer

protected PolicyEnforcer getPolicyEnforcer()

resolveClaims

protected Map<String,List<String>> resolveClaims(PolicyEnforcerConfig.PathConfig pathConfig,
                                                 OIDCHttpFacade httpFacade)