Package org.keycloak.protocol.oidc.grants.ciba.channel

Class HttpAuthenticationChannelProvider

java.lang.Object

org.keycloak.protocol.oidc.grants.ciba.channel.HttpAuthenticationChannelProvider

All Implemented Interfaces:

AuthenticationChannelProvider, org.keycloak.provider.Provider

public class HttpAuthenticationChannelProvider
extends Object
implements AuthenticationChannelProvider

Author:

Takashi Norimatsu

Field Summary

Fields

Modifier and Type	Field	Description
static String	AUTHENTICATION_CHANNEL_ID
protected Map<String,String>	clientAuthAttributes
protected Cors	cors
protected javax.ws.rs.core.MultivaluedMap<String,String>	formParams
protected String	httpAuthenticationChannelUri
protected org.keycloak.models.RealmModel	realm
protected org.keycloak.models.KeycloakSession	session

Constructor Summary

Constructors

Constructor	Description
HttpAuthenticationChannelProvider(org.keycloak.models.KeycloakSession session, String httpAuthenticationRequestUri)

Method Summary

Modifier and Type	Method	Description
protected void	checkAuthenticationChannel()
void	close()
protected org.keycloak.broker.provider.util.SimpleHttp	completeDecoupledAuthnRequest(org.keycloak.broker.provider.util.SimpleHttp simpleHttp, AuthenticationChannelRequest channelRequest)	Extension point to allow subclass to override this method in order to add data to post to decoupled server.
boolean	requestAuthentication(CIBAAuthenticationRequest request, String infoUsedByAuthenticator)	Request the authentication(AuthN) and authorization(AuthZ) by an authentication device (AD) to the external entity via Authentication Channel.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AUTHENTICATION_CHANNEL_ID

public static final String AUTHENTICATION_CHANNEL_ID

See Also:

Constant Field Values

session

protected org.keycloak.models.KeycloakSession session

formParams

protected javax.ws.rs.core.MultivaluedMap<String,String> formParams

realm

protected org.keycloak.models.RealmModel realm

clientAuthAttributes

protected Map<String,String> clientAuthAttributes

cors

protected Cors cors

httpAuthenticationChannelUri

protected final String httpAuthenticationChannelUri

Constructor Detail

HttpAuthenticationChannelProvider

public HttpAuthenticationChannelProvider(org.keycloak.models.KeycloakSession session,
                                         String httpAuthenticationRequestUri)

Method Detail

requestAuthentication

public boolean requestAuthentication(CIBAAuthenticationRequest request,
                                     String infoUsedByAuthenticator)

Description copied from interface: AuthenticationChannelProvider

Request the authentication(AuthN) and authorization(AuthZ) by an authentication device (AD) to the external entity via Authentication Channel.

Specified by:

requestAuthentication in interface AuthenticationChannelProvider

Parameters:

request - the representation of Authentication Request received on Backchannel Authentication Endpoint

infoUsedByAuthenticator - some value to help the AD to identify the user

Returns:

checkAuthenticationChannel

protected void checkAuthenticationChannel()

completeDecoupledAuthnRequest

protected org.keycloak.broker.provider.util.SimpleHttp completeDecoupledAuthnRequest(org.keycloak.broker.provider.util.SimpleHttp simpleHttp,
                                                                                     AuthenticationChannelRequest channelRequest)

Extension point to allow subclass to override this method in order to add data to post to decoupled server.

close

public void close()

Specified by:

close in interface org.keycloak.provider.Provider