org.keycloak.authorization.util

Class Permissions

java.lang.Object

org.keycloak.authorization.util.Permissions

public final class Permissions
extends Object

Author:

Pedro Igor

Constructor Summary

Constructors

Constructor and Description
Permissions()

Method Summary

Modifier and Type	Method and Description
static List<ResourcePermission>	all(ResourceServer resourceServer, Identity identity, AuthorizationProvider authorization, AuthorizationRequest request) Returns a list of permissions for all resources and scopes that belong to the given resourceServer and identity.
static ResourcePermission	createResourcePermissions(Resource resource, Set<String> requestedScopes, AuthorizationProvider authorization, AuthorizationRequest request)
static List<ResourcePermission>	createResourcePermissionsWithScopes(Resource resource, List<Scope> scopes, AuthorizationProvider authorization, AuthorizationRequest request)
static List<ResourcePermission>	permission(ResourceServer server, Resource resource, Scope scope)
static List<Permission>	permits(List<Result> evaluation, AuthorizationProvider authorizationProvider, ResourceServer resourceServer)
static List<Permission>	permits(List<Result> evaluation, AuthorizationRequest.Metadata metadata, AuthorizationProvider authorizationProvider, ResourceServer resourceServer)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Permissions

public Permissions()

Method Detail

permission

public static List<ResourcePermission> permission(ResourceServer server,
                                                  Resource resource,
                                                  Scope scope)

all

public static List<ResourcePermission> all(ResourceServer resourceServer,
                                           Identity identity,
                                           AuthorizationProvider authorization,
                                           AuthorizationRequest request)

Returns a list of permissions for all resources and scopes that belong to the given resourceServer and identity. TODO: review once we support caches

Parameters:

resourceServer -

identity -

authorization -

Returns:

createResourcePermissions

public static ResourcePermission createResourcePermissions(Resource resource,
                                                           Set<String> requestedScopes,
                                                           AuthorizationProvider authorization,
                                                           AuthorizationRequest request)

createResourcePermissionsWithScopes

public static List<ResourcePermission> createResourcePermissionsWithScopes(Resource resource,
                                                                           List<Scope> scopes,
                                                                           AuthorizationProvider authorization,
                                                                           AuthorizationRequest request)

permits

public static List<Permission> permits(List<Result> evaluation,
                                       AuthorizationProvider authorizationProvider,
                                       ResourceServer resourceServer)

permits

public static List<Permission> permits(List<Result> evaluation,
                                       AuthorizationRequest.Metadata metadata,
                                       AuthorizationProvider authorizationProvider,
                                       ResourceServer resourceServer)