Package org.keycloak.protocol.oidc.tokenexchange

Class SubjectImpersonationTokenExchangeProvider

java.lang.Object

org.keycloak.protocol.oidc.tokenexchange.AbstractTokenExchangeProvider

org.keycloak.protocol.oidc.tokenexchange.SubjectImpersonationTokenExchangeProvider

All Implemented Interfaces:

TokenExchangeProvider, Provider

public class SubjectImpersonationTokenExchangeProvider
extends AbstractTokenExchangeProvider

Provider for token-exchange subject impersonation where subject of the token is changed. This is Keycloak proprietary and it is not related to standard token-exchange impersonation described in the specification https://datatracker.ietf.org/doc/html/rfc8693 where the subject in the tokens are not changed. That one is covered by StandardTokenExchangeProvider

Author:

Marek Posolda

Field Summary

Fields inherited from class org.keycloak.protocol.oidc.tokenexchange.AbstractTokenExchangeProvider

client, clientAuthAttributes, clientConnection, context, cors, event, formParams, headers, params, realm, session, tokenManager

Constructor Summary

Constructors

Constructor	Description
SubjectImpersonationTokenExchangeProvider()

Method Summary

Modifier and Type	Method	Description
boolean	supports(TokenExchangeContext context)	Check if exchange request is supported by this provider
protected jakarta.ws.rs.core.Response	tokenExchange()

Methods inherited from class org.keycloak.protocol.oidc.tokenexchange.AbstractTokenExchangeProvider

close, createSessionModel, exchange, exchangeClientToClient, exchangeClientToOIDCClient, exchangeClientToSAML2Client, exchangeExternalToken, exchangeToIdentityProvider, forbiddenIfClientIsNotTokenHolder, forbiddenIfClientIsNotWithinTokenAudience, getRequestedScope, getRequestedTokenType, getSubjectIssuer, getSupportedOAuthResponseTokenTypes, getTargetAudienceClients, getTargetClient, importUserFromExternalIdentity, isExternalInternalTokenExchangeRequest, setClientToContext, updateUserSessionFromClientAuth, validateAudience

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

SubjectImpersonationTokenExchangeProvider

public SubjectImpersonationTokenExchangeProvider()

Method Details

supports

public boolean supports(TokenExchangeContext context)

Description copied from interface: TokenExchangeProvider

Check if exchange request is supported by this provider

Parameters:

context - token exchange context

Returns:

true if the request is supported

tokenExchange

protected jakarta.ws.rs.core.Response tokenExchange()

Specified by:

tokenExchange in class AbstractTokenExchangeProvider