Uses of Class
org.keycloak.authorization.AuthorizationProvider
Package
Description
Fine-grained Authorization SPI.
Provides classes related with the evaluation of policies.
Provides classes and a SPI to plug different policy providers.
-
Uses of AuthorizationProvider in org.keycloak.authorization
Modifier and TypeMethodDescriptionAuthorizationProviderFactory.create
(KeycloakSession session, RealmModel realm) DefaultAuthorizationProviderFactory.create
(KeycloakSession session) DefaultAuthorizationProviderFactory.create
(KeycloakSession session, RealmModel realm) -
Uses of AuthorizationProvider in org.keycloak.authorization.admin
Modifier and TypeFieldDescriptionprotected final AuthorizationProvider
PolicyResourceService.authorization
protected final AuthorizationProvider
PolicyService.authorization
Modifier and TypeMethodDescriptionprotected void
PolicyEvaluationService.EvaluationDecisionCollector.grantPermission
(AuthorizationProvider authorizationProvider, Set<Permission> permissions, ResourcePermission permission, Collection<Scope> grantedScopes, ResourceServer resourceServer, AuthorizationRequest request, Result result) protected AbstractPolicyRepresentation
PermissionService.toRepresentation
(Policy policy, String fields, AuthorizationProvider authorization) protected AbstractPolicyRepresentation
PolicyResourceService.toRepresentation
(Policy policy, String fields, AuthorizationProvider authorization) protected AbstractPolicyRepresentation
PolicyService.toRepresentation
(Policy model, String fields, AuthorizationProvider authorization) protected AbstractPolicyRepresentation
PolicyTypeResourceService.toRepresentation
(Policy policy, String fields, AuthorizationProvider authorization) protected AbstractPolicyRepresentation
PolicyTypeService.toRepresentation
(Policy policy, String fields, AuthorizationProvider authorization) ModifierConstructorDescriptionEvaluationDecisionCollector
(AuthorizationProvider authorizationProvider, ResourceServer resourceServer, AuthorizationRequest request) PermissionService
(ResourceServer resourceServer, AuthorizationProvider authorization, AdminPermissionEvaluator auth, AdminEventBuilder adminEvent) PolicyResourceService
(Policy policy, ResourceServer resourceServer, AuthorizationProvider authorization, AdminPermissionEvaluator auth, AdminEventBuilder adminEvent) PolicyService
(ResourceServer resourceServer, AuthorizationProvider authorization, AdminPermissionEvaluator auth, AdminEventBuilder adminEvent) PolicyTypeResourceService
(Policy policy, ResourceServer resourceServer, AuthorizationProvider authorization, AdminPermissionEvaluator auth, AdminEventBuilder adminEvent) PolicyTypeService
(String type, ResourceServer resourceServer, AuthorizationProvider authorization, AdminPermissionEvaluator auth, AdminEventBuilder adminEvent) ResourceServerService
(AuthorizationProvider authorization, ResourceServer resourceServer, ClientModel client, AdminPermissionEvaluator auth, AdminEventBuilder adminEvent) ResourceSetService
(KeycloakSession session, ResourceServer resourceServer, AuthorizationProvider authorization, AdminPermissionEvaluator auth, AdminEventBuilder adminEvent) ScopeService
(KeycloakSession session, ResourceServer resourceServer, AuthorizationProvider authorization, AdminPermissionEvaluator auth, AdminEventBuilder adminEvent) -
Uses of AuthorizationProvider in org.keycloak.authorization.admin.representation
Modifier and TypeMethodDescriptionstatic PolicyEvaluationResponse
PolicyEvaluationResponseBuilder.build
(PolicyEvaluationService.EvaluationDecisionCollector decision, ResourceServer resourceServer, AuthorizationProvider authorization, KeycloakIdentity identity) -
Uses of AuthorizationProvider in org.keycloak.authorization.authorization
ModifierConstructorDescriptionKeycloakAuthorizationRequest
(AuthorizationProvider authorization, TokenManager tokenManager, EventBuilder event, HttpRequest request, Cors cors, ClientConnection clientConnection) -
Uses of AuthorizationProvider in org.keycloak.authorization.jpa.store
ModifierConstructorDescriptionJPAPermissionTicketStore
(jakarta.persistence.EntityManager entityManager, AuthorizationProvider provider) JPAPolicyStore
(jakarta.persistence.EntityManager entityManager, AuthorizationProvider provider) JPAResourceServerStore
(jakarta.persistence.EntityManager entityManager, AuthorizationProvider provider) JPAResourceStore
(jakarta.persistence.EntityManager entityManager, AuthorizationProvider provider) JPAScopeStore
(jakarta.persistence.EntityManager entityManager, AuthorizationProvider provider) JPAStoreFactory
(jakarta.persistence.EntityManager entityManager, AuthorizationProvider provider) -
Uses of AuthorizationProvider in org.keycloak.authorization.permission
Modifier and TypeMethodDescriptionstatic void
Permissions.all
(ResourceServer resourceServer, Identity identity, AuthorizationProvider authorization, AuthorizationRequest request, Consumer<ResourcePermission> evaluator) Returns a list of permissions for all resources and scopes that belong to the givenresourceServer
andidentity
.static ResourcePermission
Permissions.createResourcePermissions
(Resource resource, ResourceServer resourceServer, Collection<Scope> requestedScopes, AuthorizationProvider authorization, AuthorizationRequest request) Permissions.resolveScopes
(Resource resource, ResourceServer resourceServer, Collection<Scope> requestedScopes, AuthorizationProvider authorization) -
Uses of AuthorizationProvider in org.keycloak.authorization.permission.evaluator
-
Uses of AuthorizationProvider in org.keycloak.authorization.policy.evaluation
Modifier and TypeMethodDescriptionDefaultEvaluation.getAuthorizationProvider()
Evaluation.getAuthorizationProvider()
Modifier and TypeMethodDescriptionvoid
DefaultPolicyEvaluator.evaluate
(ResourcePermission permission, AuthorizationProvider authorizationProvider, EvaluationContext executionContext, Decision decision, Map<Policy, Map<Object, Decision.Effect>> decisionCache) void
PolicyEvaluator.evaluate
(ResourcePermission permission, AuthorizationProvider authorizationProvider, EvaluationContext executionContext, Decision decision, Map<Policy, Map<Object, Decision.Effect>> decisionCache) Starts the evaluation of the configured authorization policies.protected void
DecisionPermissionCollector.grantPermission
(AuthorizationProvider authorizationProvider, Set<Permission> permissions, ResourcePermission permission, Collection<Scope> grantedScopes, ResourceServer resourceServer, AuthorizationRequest request, Result result) ModifierConstructorDescriptionDecisionPermissionCollector
(AuthorizationProvider authorizationProvider, ResourceServer resourceServer, AuthorizationRequest request) DefaultEvaluation
(ResourcePermission permission, EvaluationContext executionContext, Decision decision, AuthorizationProvider authorizationProvider) DefaultEvaluation
(ResourcePermission permission, EvaluationContext executionContext, Policy parentPolicy, Decision decision, AuthorizationProvider authorizationProvider, Map<Policy, Map<Object, Decision.Effect>> decisionCache) DefaultEvaluation
(ResourcePermission permission, EvaluationContext executionContext, Policy parentPolicy, Policy policy, Decision decision, AuthorizationProvider authorizationProvider, Map<Policy, Map<Object, Decision.Effect>> decisionCache) PermissionTicketAwareDecisionResultCollector
(AuthorizationRequest request, PermissionTicketToken ticket, Identity identity, ResourceServer resourceServer, AuthorizationProvider authorization) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider
Modifier and TypeMethodDescriptionPolicyProviderFactory.create
(AuthorizationProvider authorization) default PolicyProviderAdminService
PolicyProviderFactory.getAdminResource
(ResourceServer resourceServer, AuthorizationProvider authorization) default void
PolicyProviderFactory.onCreate
(Policy policy, R representation, AuthorizationProvider authorization) default void
PolicyProviderFactory.onExport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorizationProvider) default void
PolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) default void
PolicyProviderFactory.onRemove
(Policy policy, AuthorizationProvider authorization) default void
PolicyProviderFactory.onUpdate
(Policy policy, R representation, AuthorizationProvider authorization) PolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.aggregated
Modifier and TypeMethodDescriptionAggregatePolicyProviderFactory.create
(AuthorizationProvider authorization) void
AggregatePolicyProviderFactory.onCreate
(Policy policy, AggregatePolicyRepresentation representation, AuthorizationProvider authorization) void
AggregatePolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
AggregatePolicyProviderFactory.onRemove
(Policy policy, AuthorizationProvider authorization) void
AggregatePolicyProviderFactory.onUpdate
(Policy policy, AggregatePolicyRepresentation representation, AuthorizationProvider authorization) AggregatePolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.client
Modifier and TypeMethodDescriptionClientPolicyProviderFactory.create
(AuthorizationProvider authorization) void
ClientPolicyProviderFactory.onCreate
(Policy policy, ClientPolicyRepresentation representation, AuthorizationProvider authorization) void
ClientPolicyProviderFactory.onExport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
ClientPolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
ClientPolicyProviderFactory.onUpdate
(Policy policy, ClientPolicyRepresentation representation, AuthorizationProvider authorization) ClientPolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) ModifierConstructorDescriptionClientPolicyProvider
(BiFunction<Policy, AuthorizationProvider, ClientPolicyRepresentation> representationFunction) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.clientscope
Modifier and TypeMethodDescriptionClientScopePolicyProviderFactory.create
(AuthorizationProvider authorization) void
ClientScopePolicyProviderFactory.onCreate
(Policy policy, ClientScopePolicyRepresentation representation, AuthorizationProvider authorization) void
ClientScopePolicyProviderFactory.onExport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorizationProvider) void
ClientScopePolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
ClientScopePolicyProviderFactory.onUpdate
(Policy policy, ClientScopePolicyRepresentation representation, AuthorizationProvider authorization) ClientScopePolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) ModifierConstructorDescriptionClientScopePolicyProvider
(BiFunction<Policy, AuthorizationProvider, ClientScopePolicyRepresentation> representationFunction) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.group
Modifier and TypeMethodDescriptionGroupPolicyProviderFactory.create
(AuthorizationProvider authorization) void
GroupPolicyProviderFactory.onCreate
(Policy policy, GroupPolicyRepresentation representation, AuthorizationProvider authorization) void
GroupPolicyProviderFactory.onExport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
GroupPolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
GroupPolicyProviderFactory.onUpdate
(Policy policy, GroupPolicyRepresentation representation, AuthorizationProvider authorization) GroupPolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) ModifierConstructorDescriptionGroupPolicyProvider
(BiFunction<Policy, AuthorizationProvider, GroupPolicyRepresentation> representationFunction) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.js
Modifier and TypeMethodDescriptionJSPolicyProviderFactory.create
(AuthorizationProvider authorization) void
DeployedScriptPolicyFactory.onCreate
(Policy policy, JSPolicyRepresentation representation, AuthorizationProvider authorization) void
JSPolicyProviderFactory.onCreate
(Policy policy, JSPolicyRepresentation representation, AuthorizationProvider authorization) void
JSPolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
JSPolicyProviderFactory.onRemove
(Policy policy, AuthorizationProvider authorization) void
JSPolicyProviderFactory.onUpdate
(Policy policy, JSPolicyRepresentation representation, AuthorizationProvider authorization) DeployedScriptPolicyFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) JSPolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.permission
Modifier and TypeMethodDescriptionResourcePolicyProviderFactory.create
(AuthorizationProvider authorization) ScopePolicyProviderFactory.create
(AuthorizationProvider authorization) UMAPolicyProviderFactory.create
(AuthorizationProvider authorization) void
ResourcePolicyProviderFactory.onCreate
(Policy policy, ResourcePermissionRepresentation representation, AuthorizationProvider authorization) void
ScopePolicyProviderFactory.onCreate
(Policy policy, ScopePermissionRepresentation representation, AuthorizationProvider authorization) void
UMAPolicyProviderFactory.onCreate
(Policy policy, UmaPermissionRepresentation representation, AuthorizationProvider authorization) void
UMAPolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
ResourcePolicyProviderFactory.onRemove
(Policy policy, AuthorizationProvider authorization) void
UMAPolicyProviderFactory.onRemove
(Policy policy, AuthorizationProvider authorization) void
ResourcePolicyProviderFactory.onUpdate
(Policy policy, ResourcePermissionRepresentation representation, AuthorizationProvider authorization) void
ScopePolicyProviderFactory.onUpdate
(Policy policy, ScopePermissionRepresentation representation, AuthorizationProvider authorization) void
UMAPolicyProviderFactory.onUpdate
(Policy policy, UmaPermissionRepresentation representation, AuthorizationProvider authorization) ResourcePolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) ScopePolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) UMAPolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.regex
Modifier and TypeMethodDescriptionRegexPolicyProviderFactory.create
(AuthorizationProvider authorization) void
RegexPolicyProviderFactory.onCreate
(Policy policy, RegexPolicyRepresentation representation, AuthorizationProvider authorization) void
RegexPolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
RegexPolicyProviderFactory.onUpdate
(Policy policy, RegexPolicyRepresentation representation, AuthorizationProvider authorization) RegexPolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) ModifierConstructorDescriptionRegexPolicyProvider
(BiFunction<Policy, AuthorizationProvider, RegexPolicyRepresentation> representationFunction) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.role
Modifier and TypeMethodDescriptionRolePolicyProviderFactory.create
(AuthorizationProvider authorization) void
RolePolicyProviderFactory.onCreate
(Policy policy, RolePolicyRepresentation representation, AuthorizationProvider authorization) void
RolePolicyProviderFactory.onExport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorizationProvider) void
RolePolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
RolePolicyProviderFactory.onUpdate
(Policy policy, RolePolicyRepresentation representation, AuthorizationProvider authorization) RolePolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) ModifierConstructorDescriptionRolePolicyProvider
(BiFunction<Policy, AuthorizationProvider, RolePolicyRepresentation> representationFunction) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.time
Modifier and TypeMethodDescriptionTimePolicyProviderFactory.create
(AuthorizationProvider authorization) void
TimePolicyProviderFactory.onCreate
(Policy policy, TimePolicyRepresentation representation, AuthorizationProvider authorization) void
TimePolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
TimePolicyProviderFactory.onRemove
(Policy policy, AuthorizationProvider authorization) void
TimePolicyProviderFactory.onUpdate
(Policy policy, TimePolicyRepresentation representation, AuthorizationProvider authorization) TimePolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) -
Uses of AuthorizationProvider in org.keycloak.authorization.policy.provider.user
Modifier and TypeMethodDescriptionUserPolicyProviderFactory.create
(AuthorizationProvider authorization) void
UserPolicyProviderFactory.onCreate
(Policy policy, UserPolicyRepresentation representation, AuthorizationProvider authorization) void
UserPolicyProviderFactory.onExport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorizationProvider) void
UserPolicyProviderFactory.onImport
(Policy policy, PolicyRepresentation representation, AuthorizationProvider authorization) void
UserPolicyProviderFactory.onUpdate
(Policy policy, UserPolicyRepresentation representation, AuthorizationProvider authorization) UserPolicyProviderFactory.toRepresentation
(Policy policy, AuthorizationProvider authorization) ModifierConstructorDescriptionUserPolicyProvider
(BiFunction<Policy, AuthorizationProvider, UserPolicyRepresentation> representationFunction) -
Uses of AuthorizationProvider in org.keycloak.authorization.protection
-
Uses of AuthorizationProvider in org.keycloak.authorization.protection.permission
ModifierConstructorDescriptionAbstractPermissionService
(KeycloakIdentity identity, ResourceServer resourceServer, AuthorizationProvider authorization) PermissionService
(KeycloakIdentity identity, ResourceServer resourceServer, AuthorizationProvider authorization) PermissionTicketService
(KeycloakIdentity identity, ResourceServer resourceServer, AuthorizationProvider authorization) -
Uses of AuthorizationProvider in org.keycloak.authorization.protection.policy
ModifierConstructorDescriptionUserManagedPermissionService
(KeycloakIdentity identity, ResourceServer resourceServer, AuthorizationProvider authorization, AdminEventBuilder eventBuilder) -
Uses of AuthorizationProvider in org.keycloak.models.map.authorization
ModifierConstructorDescriptionMapAuthorizationStore
(MapStorage<MapPermissionTicketEntity, PermissionTicket> permissionTicketStore, MapStorage<MapPolicyEntity, Policy> policyStore, MapStorage<MapResourceServerEntity, ResourceServer> resourceServerStore, MapStorage<MapResourceEntity, Resource> resourceStore, MapStorage<MapScopeEntity, Scope> scopeStore, AuthorizationProvider provider) MapPermissionTicketStore
(MapStorage<MapPermissionTicketEntity, PermissionTicket> permissionTicketStore, AuthorizationProvider provider) MapPolicyStore
(MapStorage<MapPolicyEntity, Policy> policyStore, AuthorizationProvider provider) MapResourceServerStore
(MapStorage<MapResourceServerEntity, ResourceServer> resourceServerStore, AuthorizationProvider provider) MapResourceStore
(MapStorage<MapResourceEntity, Resource> resourceStore, AuthorizationProvider provider) MapScopeStore
(MapStorage<MapScopeEntity, Scope> scopeStore, AuthorizationProvider provider) -
Uses of AuthorizationProvider in org.keycloak.models.utils
Modifier and TypeMethodDescriptionstatic Policy
RepresentationToModel.toModel
(AbstractPolicyRepresentation representation, AuthorizationProvider authorization, Policy model) static PermissionTicket
RepresentationToModel.toModel
(PermissionTicketRepresentation representation, ResourceServer resourceServer, AuthorizationProvider authorization) static Resource
RepresentationToModel.toModel
(ResourceRepresentation resource, ResourceServer resourceServer, AuthorizationProvider authorization) static ResourceServer
RepresentationToModel.toModel
(ResourceServerRepresentation rep, AuthorizationProvider authorization, ClientModel client) static Scope
RepresentationToModel.toModel
(ScopeRepresentation scope, ResourceServer resourceServer, AuthorizationProvider authorization) static Scope
RepresentationToModel.toModel
(ScopeRepresentation scope, ResourceServer resourceServer, AuthorizationProvider authorization, boolean updateIfExists) ModelToRepresentation.toRepresentation
(PermissionTicket ticket, AuthorizationProvider authorization) ModelToRepresentation.toRepresentation
(PermissionTicket ticket, AuthorizationProvider authorization, boolean returnNames) static <R extends AbstractPolicyRepresentation>
RModelToRepresentation.toRepresentation
(Policy policy, AuthorizationProvider authorization) static <R extends AbstractPolicyRepresentation>
RModelToRepresentation.toRepresentation
(Policy policy, AuthorizationProvider authorization, boolean genericRepresentation, boolean export) static <R extends AbstractPolicyRepresentation>
RModelToRepresentation.toRepresentation
(Policy policy, AuthorizationProvider authorization, boolean genericRepresentation, boolean export, boolean allFields) static ResourceRepresentation
ModelToRepresentation.toRepresentation
(Resource model, ResourceServer resourceServer, AuthorizationProvider authorization) static ResourceRepresentation
ModelToRepresentation.toRepresentation
(Resource model, ResourceServer resourceServer, AuthorizationProvider authorization, Boolean deep) -
Uses of AuthorizationProvider in org.keycloak.services.resources.account.resources
Modifier and TypeFieldDescriptionprotected final AuthorizationProvider
AbstractResourceService.provider
-
Uses of AuthorizationProvider in org.keycloak.services.resources.admin.permissions