Package org.keycloak.social.linkedin

Class LinkedInOIDCIdentityProviderFactory

java.lang.Object

org.keycloak.broker.provider.AbstractIdentityProviderFactory<LinkedInOIDCIdentityProvider>

org.keycloak.social.linkedin.LinkedInOIDCIdentityProviderFactory

All Implemented Interfaces:

IdentityProviderFactory<LinkedInOIDCIdentityProvider>, SocialIdentityProviderFactory<LinkedInOIDCIdentityProvider>, ConfiguredProvider, ProviderFactory<LinkedInOIDCIdentityProvider>

public class LinkedInOIDCIdentityProviderFactory
extends AbstractIdentityProviderFactory<LinkedInOIDCIdentityProvider>
implements SocialIdentityProviderFactory<LinkedInOIDCIdentityProvider>

Specific OIDC LinkedIn provider for Sign In with LinkedIn using OpenID Connect product app. LinkedIn currently has two issues with default OIDC provider implementation:

1. The jwks endpoint does not contain use claim for the signature key.
2. The nonce in the authentication request is not returned back in the ID Token.

This factory workarounds the default provider to overcome the issues.

Author:

rmartinc

Field Summary

Fields

Modifier and Type	Field	Description
static final String	PROVIDER_ID
static final String	WELL_KNOWN_URL

Constructor Summary

Constructors

Constructor	Description
LinkedInOIDCIdentityProviderFactory()

Method Summary

Modifier and Type	Method	Description
LinkedInOIDCIdentityProvider	create(KeycloakSession session, IdentityProviderModel model)	Creates an IdentityProvider based on the configuration contained in model.
OIDCIdentityProviderConfig	createConfig()	Creates a provider specific IdentityProviderModel instance.
List<ProviderConfigProperty>	getConfigProperties()
String	getId()
String	getName()	A friendly name for this factory.

Methods inherited from class org.keycloak.broker.provider.AbstractIdentityProviderFactory

close, create, init, parseConfig, postInit

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface org.keycloak.provider.ConfiguredProvider

getConfig

Methods inherited from interface org.keycloak.broker.provider.IdentityProviderFactory

getHelpText, parseConfig

Methods inherited from interface org.keycloak.provider.ProviderFactory

close, create, getConfigMetadata, init, order, postInit

Field Details

PROVIDER_ID

public static final String PROVIDER_ID

See Also:

• Constant Field Values

WELL_KNOWN_URL

public static final String WELL_KNOWN_URL

See Also:

• Constant Field Values

Constructor Details

LinkedInOIDCIdentityProviderFactory

public LinkedInOIDCIdentityProviderFactory()

Method Details

getName

public String getName()

Description copied from interface: IdentityProviderFactory

A friendly name for this factory.

Specified by:

getName in interface IdentityProviderFactory<LinkedInOIDCIdentityProvider>

Returns:

getId

public String getId()

Specified by:

getId in interface ProviderFactory<LinkedInOIDCIdentityProvider>

create

public LinkedInOIDCIdentityProvider create(KeycloakSession session,
 IdentityProviderModel model)

Description copied from interface: IdentityProviderFactory

Creates an IdentityProvider based on the configuration contained in model.

Specified by:

create in interface IdentityProviderFactory<LinkedInOIDCIdentityProvider>

model - The configuration to be used to create the identity provider.

Returns:

createConfig

public OIDCIdentityProviderConfig createConfig()

Description copied from interface: IdentityProviderFactory

Creates a provider specific IdentityProviderModel instance.

Providers may want to implement their own IdentityProviderModel type so that validations can be performed when managing the provider configuration

Specified by:

createConfig in interface IdentityProviderFactory<LinkedInOIDCIdentityProvider>

Returns:

the provider specific instance

getConfigProperties

public List<ProviderConfigProperty> getConfigProperties()

Specified by:

getConfigProperties in interface ConfiguredProvider

Specified by:

getConfigProperties in interface IdentityProviderFactory<LinkedInOIDCIdentityProvider>