Uses of Class
org.keycloak.common.VerificationException
-
-
Uses of VerificationException in org.keycloak
Methods in org.keycloak that throw VerificationException Modifier and Type Method Description JWSHeader
RSATokenVerifier. getHeader()
Deprecated.JWSHeader
TokenVerifier. getHeader()
AccessToken
RSATokenVerifier. getToken()
Deprecated.T
TokenVerifier. getToken()
RSATokenVerifier
RSATokenVerifier. parse()
Deprecated.TokenVerifier<T>
TokenVerifier. parse()
boolean
TokenVerifier.AudienceCheck. test(JsonWebToken t)
boolean
TokenVerifier.IssuedForCheck. test(JsonWebToken jsonWebToken)
boolean
TokenVerifier.Predicate. test(T t)
Performs a single check on the given token verifier.boolean
TokenVerifier.RealmUrlCheck. test(JsonWebToken t)
boolean
TokenVerifier.TokenTypeCheck. test(JsonWebToken t)
static void
KeyPairVerifier. verify(String privateKeyPem, String publicKeyPem)
RSATokenVerifier
RSATokenVerifier. verify()
Deprecated.TokenVerifier<T>
TokenVerifier. verify()
void
TokenVerifier. verifySignature()
static AccessToken
RSATokenVerifier. verifyToken(String tokenString, PublicKey publicKey, String realmUrl)
Deprecated.static AccessToken
RSATokenVerifier. verifyToken(String tokenString, PublicKey publicKey, String realmUrl, boolean checkActive, boolean checkTokenType)
Deprecated. -
Uses of VerificationException in org.keycloak.authentication
Subclasses of VerificationException in org.keycloak.authentication Modifier and Type Class Description class
ExplainedVerificationException
-
Uses of VerificationException in org.keycloak.authentication.actiontoken
Subclasses of VerificationException in org.keycloak.authentication.actiontoken Modifier and Type Class Description class
ExplainedTokenVerificationException
Token verification exception that bears an error to be logged via event system and a message to show to the user e.g.Methods in org.keycloak.authentication.actiontoken that throw VerificationException Modifier and Type Method Description AuthenticationSessionModel
ActionTokenHandler. startFreshAuthenticationSession(T token, ActionTokenContext<T> tokenContext)
Creates a fresh authentication session according to the information from the token. -
Uses of VerificationException in org.keycloak.broker.saml
Methods in org.keycloak.broker.saml that throw VerificationException Modifier and Type Method Description protected abstract void
SAMLEndpoint.Binding. verifySignature(String key, SAMLDocumentHolder documentHolder)
protected void
SAMLEndpoint.PostBinding. verifySignature(String key, SAMLDocumentHolder documentHolder)
protected void
SAMLEndpoint.RedirectBinding. verifySignature(String key, SAMLDocumentHolder documentHolder)
-
Uses of VerificationException in org.keycloak.crypto
Methods in org.keycloak.crypto that throw VerificationException Modifier and Type Method Description static void
SignatureProvider. checkKeyForVerification(KeyWrapper key, String algorithm, String type)
SignatureVerifierContext
AsymmetricClientSignatureVerifierProvider. verifier(ClientModel client, JWSInput input)
SignatureVerifierContext
AsymmetricSignatureProvider. verifier(String kid)
SignatureVerifierContext
AsymmetricSignatureProvider. verifier(KeyWrapper key)
SignatureVerifierContext
ClientSignatureVerifierProvider. verifier(ClientModel client, JWSInput input)
SignatureVerifierContext
ECDSAClientSignatureVerifierProvider. verifier(ClientModel client, JWSInput input)
SignatureVerifierContext
ECDSASignatureProvider. verifier(String kid)
SignatureVerifierContext
ECDSASignatureProvider. verifier(KeyWrapper key)
SignatureVerifierContext
MacSecretClientSignatureVerifierProvider. verifier(ClientModel client, JWSInput input)
SignatureVerifierContext
MacSecretSignatureProvider. verifier(String kid)
SignatureVerifierContext
MacSecretSignatureProvider. verifier(KeyWrapper key)
SignatureVerifierContext
SignatureProvider. verifier(String kid)
SignatureVerifierContext
SignatureProvider. verifier(KeyWrapper key)
boolean
AsymmetricSignatureVerifierContext. verify(byte[] data, byte[] signature)
boolean
ClientECDSASignatureVerifierContext. verify(byte[] data, byte[] signature)
boolean
MacSignatureVerifierContext. verify(byte[] data, byte[] signature)
boolean
ServerECDSASignatureVerifierContext. verify(byte[] data, byte[] signature)
boolean
SignatureVerifierContext. verify(byte[] data, byte[] signature)
Constructors in org.keycloak.crypto that throw VerificationException Constructor Description ClientAsymmetricSignatureVerifierContext(KeycloakSession session, ClientModel client, JWSInput input)
ClientECDSASignatureVerifierContext(KeycloakSession session, ClientModel client, JWSInput input)
ClientMacSignatureVerifierContext(KeycloakSession session, ClientModel client, String algorithm)
ServerAsymmetricSignatureVerifierContext(KeyWrapper key)
ServerAsymmetricSignatureVerifierContext(KeycloakSession session, String kid, String algorithm)
ServerECDSASignatureVerifierContext(KeycloakSession session, String kid, String algorithm)
ServerMacSignatureVerifierContext(KeyWrapper key)
ServerMacSignatureVerifierContext(KeycloakSession session, String kid, String algorithm)
-
Uses of VerificationException in org.keycloak.exceptions
Subclasses of VerificationException in org.keycloak.exceptions Modifier and Type Class Description class
TokenNotActiveException
Exception thrown for cases when token is invalid due to time constraints (expired, or not yet valid).class
TokenSignatureInvalidException
Thrown when token signature is invalid.class
TokenVerificationException
Exception thrown on failed verification of a token. -
Uses of VerificationException in org.keycloak.protocol.oidc
Methods in org.keycloak.protocol.oidc that throw VerificationException Modifier and Type Method Description boolean
TokenManager.NotBeforeCheck. test(JsonWebToken t)
-
Uses of VerificationException in org.keycloak.protocol.saml
Methods in org.keycloak.protocol.saml that throw VerificationException Modifier and Type Method Description static PublicKey
SamlProtocolUtils. getEncryptionKey(ClientModel client)
Returns public part of SAML encryption key from the client settings.static PublicKey
SamlProtocolUtils. getPublicKey(ClientModel client, String attribute)
static PublicKey
SamlProtocolUtils. getSignatureValidationKey(ClientModel client)
Returns public part of SAML signing key from the client settings.static void
SamlProtocolUtils. verifyDocumentSignature(ClientModel client, Document document)
Verifies a signature of the given SAML document using settings for the given client.static void
SamlProtocolUtils. verifyDocumentSignature(Document document, KeyLocator keyLocator)
Verifies a signature of the given SAML document using keys obtained from the given key locator.static void
SamlProtocolUtils. verifyRedirectSignature(SAMLDocumentHolder documentHolder, KeyLocator locator, javax.ws.rs.core.MultivaluedMap<String,String> encodedParams, String paramKey)
static void
SamlProtocolUtils. verifyRedirectSignature(SAMLDocumentHolder documentHolder, KeyLocator locator, javax.ws.rs.core.UriInfo uriInformation, String paramKey)
protected abstract void
SamlService.BindingProtocol. verifySignature(SAMLDocumentHolder documentHolder, ClientModel client)
protected void
SamlService.PostBindingProtocol. verifySignature(SAMLDocumentHolder documentHolder, ClientModel client)
protected void
SamlService.RedirectBindingProtocol. verifySignature(SAMLDocumentHolder documentHolder, ClientModel client)
-
Uses of VerificationException in org.keycloak.services.resources
Subclasses of VerificationException in org.keycloak.services.resources Modifier and Type Class Description class
LoginActionsServiceException
Methods in org.keycloak.services.resources that throw VerificationException Modifier and Type Method Description static void
LoginActionsServiceChecks. checkIsClientValid(KeycloakSession session, ClientModel client)
Verifies whether the client denoted by client ID in token'siss
(issuedFor
) field both exists and is enabled.static <T extends JsonWebToken>
voidLoginActionsServiceChecks. checkIsClientValid(T token, ActionTokenContext<T> context)
Verifies whether the client denoted by client ID in token'siss
(issuedFor
) field both exists and is enabled.static void
LoginActionsServiceChecks. checkIsUserValid(KeycloakSession session, RealmModel realm, String userId, Consumer<UserModel> userSetter)
Verifies whether the user given by ID both exists in the current realm.static <T extends JsonWebToken & SingleUseObjectKeyModel>
voidLoginActionsServiceChecks. checkIsUserValid(T token, ActionTokenContext<T> context)
Verifies whether the user given by ID both exists in the current realm.static <T extends JsonWebToken>
voidLoginActionsServiceChecks. checkNotLoggedInYet(ActionTokenContext<T> context, AuthenticationSessionModel authSessionFromCookie, String authSessionId)
Verifies that the authentication session has not yet been converted to user session, in other words that the user has not yet completed authentication and logged in.static <T extends JsonWebToken & SingleUseObjectKeyModel>
voidLoginActionsServiceChecks. checkTokenWasNotUsedYet(T token, ActionTokenContext<T> context)
static <T extends JsonWebToken>
booleanLoginActionsServiceChecks. doesAuthenticationSessionFromCookieMatchOneFromToken(ActionTokenContext<T> context, AuthenticationSessionModel authSessionFromCookie, String authSessionCompoundIdFromToken)
This check verifies that current authentication session is consistent with the one specified in token.boolean
LoginActionsServiceChecks.AuthenticationSessionUserIdMatchesOneFromToken. test(JsonWebToken t)
boolean
LoginActionsServiceChecks.IsActionRequired. test(JsonWebToken t)
boolean
LoginActionsServiceChecks.IsRedirectValid. test(JsonWebToken t)
-