Package org.keycloak.userprofile

Class DefaultAttributes

java.lang.Object

java.util.AbstractMap<K,V>

java.util.HashMap<String,List<String>>

org.keycloak.userprofile.DefaultAttributes

All Implemented Interfaces:

Serializable, Cloneable, Map<String,List<String>>, Attributes

Direct Known Subclasses:

LegacyAttributes

public class DefaultAttributes
extends HashMap<String,List<String>>
implements Attributes

The default implementation for Attributes. Should be reused as much as possible by the different implementations of UserProfileProvider.

One of the main aspects of this implementation is to allow normalizing attributes accordingly to the profile configuration and current context. As such, it provides some common normalization to common profile attributes (e.g.: username, email, first and last names, dynamic read-only attributes).

This implementation is not specific to any user profile implementation.

Author:

Pedro Igor

See Also:

• Serialized Form

Nested Class Summary

Nested classes/interfaces inherited from class java.util.AbstractMap

AbstractMap.SimpleEntry<K extends Object,V extends Object>, AbstractMap.SimpleImmutableEntry<K extends Object,V extends Object>

Nested classes/interfaces inherited from interface java.util.Map

Map.Entry<K extends Object,V extends Object>

Field Summary

Fields

Modifier and Type	Field	Description
protected final UserProfileContext	context
static final String	DEFAULT_MAX_LENGTH_ATTRIBUTES
static final String	READ_ONLY_ATTRIBUTE_KEY	To reference dynamic attributes that can be configured as read-only when setting up the provider.
protected final KeycloakSession	session
protected final UserModel	user

Fields inherited from interface org.keycloak.userprofile.Attributes

EMPTY_VALUE

Constructor Summary

Constructors

Constructor	Description
DefaultAttributes(UserProfileContext context, Map<String,?> attributes, UserModel user, UserProfileMetadata profileMetadata, KeycloakSession session)

Method Summary

Modifier and Type	Method	Description
protected void	addDefaultValidators(String name, List<AttributeMetadata> metadatas)
boolean	contains(String name)	Checks whether an attribute with the given name is defined.
protected AttributeContext	createAttributeContext(AttributeMetadata metadata)
List<String>	get(String name)	Returns all values for an attribute with the given name.
AttributeMetadata	getMetadata(String name)	Returns the metadata associated with the attribute with the given name.
Map<String,List<String>>	getReadable()	Returns only the attributes that have read permissions in a particular UserProfileContext.
Map<String,List<String>>	getUnmanagedAttributes()	Returns a Map holding any unmanaged attribute.
Map<String,List<String>>	getWritable()	Returns all the attributes with read-write permissions in a particular UserProfileContext.
protected boolean	isIncludeAttributeIfNotProvided(AttributeMetadata metadata)
boolean	isReadOnly(String name)	Checks whether an attribute is read-only.
protected boolean	isReadOnlyFromMetadata(String attributeName)	Checks whether an attribute is marked as read only by looking at its metadata.
protected boolean	isReadOnlyInternalAttribute(String attributeName)	Returns whether an attribute is read only based on the provider configuration (using provider config), usually related to internal attributes managed by the server.
boolean	isRequired(String name)	Returns whether the attribute with the given name is required.
protected boolean	isServiceAccountUser()
protected boolean	isSupportedAttribute(String name)	Checks whether an attribute is support by the profile configuration and the current context.
Set<String>	nameSet()	Returns the names of all defined attributes.
protected List<String>	normalizeAttributeValues(String name, Object value)	Intentionally kept to protected visibility to allow for custom normalization logic while clients adopt User Profile
Map<String,List<String>>	toMap()	Returns the attributes as a Map that are accessible to a particular UserProfileContext.
boolean	validate(String name, Consumer<ValidationError>... listeners)	Validates the attribute with the given name.

Methods inherited from class java.util.HashMap

clear, clone, compute, computeIfAbsent, computeIfPresent, containsKey, containsValue, entrySet, forEach, get, getOrDefault, isEmpty, keySet, merge, put, putAll, putIfAbsent, remove, remove, replace, replace, replaceAll, size, values

Methods inherited from class java.util.AbstractMap

equals, hashCode, toString

Methods inherited from class java.lang.Object

finalize, getClass, notify, notifyAll, wait, wait, wait

Methods inherited from interface org.keycloak.userprofile.Attributes

getFirst

Methods inherited from interface java.util.Map

equals, hashCode

Field Details

READ_ONLY_ATTRIBUTE_KEY

public static final String READ_ONLY_ATTRIBUTE_KEY

To reference dynamic attributes that can be configured as read-only when setting up the provider. We should probably remove that once we remove the legacy provider, because this will come from the configuration.

See Also:

• Constant Field Values

DEFAULT_MAX_LENGTH_ATTRIBUTES

public static final String DEFAULT_MAX_LENGTH_ATTRIBUTES

See Also:

• Constant Field Values

context

protected final UserProfileContext context

session

protected final KeycloakSession session

user

protected final UserModel user

Constructor Details

DefaultAttributes

public DefaultAttributes(UserProfileContext context,
 Map<String,?> attributes,
 UserModel user,
 UserProfileMetadata profileMetadata,
 KeycloakSession session)

Method Details

isReadOnly

public boolean isReadOnly(String name)

Description copied from interface: Attributes

Checks whether an attribute is read-only.

Specified by:

isReadOnly in interface Attributes

Parameters:

name - the attribute name

Returns:

true if the attribute is read-only. Otherwise, false

isReadOnlyFromMetadata

protected boolean isReadOnlyFromMetadata(String attributeName)

Checks whether an attribute is marked as read only by looking at its metadata.

Parameters:

attributeName - the attribute name

Returns:

isRequired

public boolean isRequired(String name)

Description copied from interface: Attributes

Returns whether the attribute with the given name is required.

Specified by:

isRequired in interface Attributes

Parameters:

name - the attribute name

Returns:

true if the attribute is required. Otherwise, false.

validate

public boolean validate(String name,
 Consumer<ValidationError>... listeners)

Description copied from interface: Attributes

Validates the attribute with the given name.

Specified by:

validate in interface Attributes

Parameters:

name - the name of the attribute

listeners - the listeners for listening for errors. ValidationError.inputHint contains name of the attribute in error.

Returns:

true if validation is successful. Otherwise, false. In case there is no attribute with the given name, false is also returned but without triggering listeners

addDefaultValidators

protected void addDefaultValidators(String name,
 List<AttributeMetadata> metadatas)

get

public List<String> get(String name)

Description copied from interface: Attributes

Returns all values for an attribute with the given name.

Specified by:

get in interface Attributes

Parameters:

name - the name of the attribute

Returns:

the attribute values

contains

public boolean contains(String name)

Description copied from interface: Attributes

Checks whether an attribute with the given name is defined.

Specified by:

contains in interface Attributes

Parameters:

name - the name of the attribute

Returns:

true if the attribute is defined. Otherwise, false

nameSet

public Set<String> nameSet()

Description copied from interface: Attributes

Returns the names of all defined attributes.

Specified by:

nameSet in interface Attributes

Returns:

the set of attribute names

getWritable

public Map<String,List<String>> getWritable()

Description copied from interface: Attributes

Returns all the attributes with read-write permissions in a particular UserProfileContext.

Specified by:

getWritable in interface Attributes

Returns:

the attributes

getMetadata

public AttributeMetadata getMetadata(String name)

Description copied from interface: Attributes

Returns the metadata associated with the attribute with the given name.

The AttributeMetadata is a copy of the original metadata. The original metadata keeps immutable.

Specified by:

getMetadata in interface Attributes

Parameters:

name - the attribute name

Returns:

the metadata

getReadable

public Map<String,List<String>> getReadable()

Description copied from interface: Attributes

Returns only the attributes that have read permissions in a particular UserProfileContext.

Specified by:

getReadable in interface Attributes

Returns:

the attributes with read permission.

toMap

public Map<String,List<String>> toMap()

Description copied from interface: Attributes

Returns the attributes as a Map that are accessible to a particular UserProfileContext.

Specified by:

toMap in interface Attributes

Returns:

a map with all the attributes

isServiceAccountUser

protected boolean isServiceAccountUser()

createAttributeContext

protected AttributeContext createAttributeContext(AttributeMetadata metadata)

normalizeAttributeValues

protected List<String> normalizeAttributeValues(String name,
 Object value)

Intentionally kept to protected visibility to allow for custom normalization logic while clients adopt User Profile

isIncludeAttributeIfNotProvided

protected boolean isIncludeAttributeIfNotProvided(AttributeMetadata metadata)

isSupportedAttribute

protected boolean isSupportedAttribute(String name)

Checks whether an attribute is support by the profile configuration and the current context.

This method can be used to avoid unexpected attributes from being added as an attribute because the attribute source is a regular Map and not normalized.

Parameters:

name - the name of the attribute

Returns:

isReadOnlyInternalAttribute

protected boolean isReadOnlyInternalAttribute(String attributeName)

Returns whether an attribute is read only based on the provider configuration (using provider config), usually related to internal attributes managed by the server.

For user-defined attributes, it should be preferable to use the user profile configuration.

Parameters:

attributeName - the attribute name

Returns:

true if the attribute is readonly. Otherwise, returns false

getUnmanagedAttributes

public Map<String,List<String>> getUnmanagedAttributes()

Description copied from interface: Attributes

Returns a Map holding any unmanaged attribute.

Specified by:

getUnmanagedAttributes in interface Attributes

Returns:

a map with any unmanaged attribute