Package org.keycloak.models.map.keys
Class MapPublicKeyStorageProvider
- java.lang.Object
-
- org.keycloak.models.map.keys.MapPublicKeyStorageProvider
-
- All Implemented Interfaces:
PublicKeyStorageProvider
,Provider
public class MapPublicKeyStorageProvider extends Object implements PublicKeyStorageProvider
-
-
Constructor Summary
Constructors Constructor Description MapPublicKeyStorageProvider(KeycloakSession session, Map<String,FutureTask<PublicKeysWrapper>> tasksInProgress)
-
Method Summary
All Methods Instance Methods Concrete Methods Modifier and Type Method Description void
close()
KeyWrapper
getFirstPublicKey(String modelKey, String algorithm, PublicKeyLoader loader)
Get first found public key to verify messages signed by particular client having several public keys.KeyWrapper
getPublicKey(String modelKey, String kid, String algorithm, PublicKeyLoader loader)
Get public key to verify messages signed by particular client.
-
-
-
Constructor Detail
-
MapPublicKeyStorageProvider
public MapPublicKeyStorageProvider(KeycloakSession session, Map<String,FutureTask<PublicKeysWrapper>> tasksInProgress)
-
-
Method Detail
-
getFirstPublicKey
public KeyWrapper getFirstPublicKey(String modelKey, String algorithm, PublicKeyLoader loader)
Description copied from interface:PublicKeyStorageProvider
Get first found public key to verify messages signed by particular client having several public keys. Used for example during JWT client authentication or to encrypt content encryption key (CEK) by particular client. Used for example during encrypting a token in JWE- Specified by:
getFirstPublicKey
in interfacePublicKeyStorageProvider
- Returns:
-
getPublicKey
public KeyWrapper getPublicKey(String modelKey, String kid, String algorithm, PublicKeyLoader loader)
Description copied from interface:PublicKeyStorageProvider
Get public key to verify messages signed by particular client. Used for example during JWT client authentication- Specified by:
getPublicKey
in interfacePublicKeyStorageProvider
algorithm
- The returned key must match this algorithm (unless the algorithm is not set in the JWK)- Returns:
-
-