Package net.optionfactory.keycloak.onlineaccess

Class OnlineAccessEndpoints

java.lang.Object

net.optionfactory.keycloak.onlineaccess.OnlineAccessEndpoints

public class OnlineAccessEndpoints
extends Object

Author:

rferranti

Nested Class Summary

Nested Classes

Modifier and Type	Class	Description
static class	OnlineAccessEndpoints.Factory
static class	OnlineAccessEndpoints.HasOfflineAccessScope
static class	OnlineAccessEndpoints.IssuedForContainsAuthorizedClient
static final record	OnlineAccessEndpoints.OnlineSessionResponse

Field Summary

Fields

Modifier and Type	Field	Description
static final String	REQUIRED_ROLE

Constructor Summary

Constructors

Constructor	Description
OnlineAccessEndpoints(org.keycloak.models.KeycloakSession session, int tokenDurationInSeconds)

Method Summary

Modifier and Type	Method	Description
OnlineAccessEndpoints.OnlineSessionResponse	create(String at, String redirectUri)	Requesting client must have online-access role.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

REQUIRED_ROLE

public static final String REQUIRED_ROLE

See Also:

• Constant Field Values

Constructor Details

OnlineAccessEndpoints

public OnlineAccessEndpoints(org.keycloak.models.KeycloakSession session,
 int tokenDurationInSeconds)

Method Details

create

@POST
@Path("/action-token")
@Produces("application/json")
public OnlineAccessEndpoints.OnlineSessionResponse create(@HeaderParam("at")
 String at,
 @QueryParam("redirect_uri")
 String redirectUri)
                                                   throws Exception

Requesting client must have online-access role. If requesting client and the access_token client differ, online-access role, online-access role must have a possibly multi-values 'clients' attribute containing the access_token client id. Allowed redirect_uri are inherited from the at client, allowlist can be expanded by adding redirect_uri attributes to the online-access role.

Parameters:

at - the access token

redirectUri -

Returns:

a link to

Throws:

Exception