Examples with ResourceServerStore org.keycloak.authorization.store.ResourceServerStore used on opensource projects

Example 6 with ResourceServerStore

use of org.keycloak.authorization.store.ResourceServerStore in project keycloak by keycloak.

the class AuthorizationTokenService method getResourceServer.

private ResourceServer getResourceServer(PermissionTicketToken ticket, KeycloakAuthorizationRequest request) {
    AuthorizationProvider authorization = request.getAuthorization();
    StoreFactory storeFactory = authorization.getStoreFactory();
    ResourceServerStore resourceServerStore = storeFactory.getResourceServerStore();
    String issuedFor = ticket.getIssuedFor();
    if (issuedFor == null) {
        CorsErrorResponseException missingIssuedForException = new CorsErrorResponseException(request.getCors(), OAuthErrorException.INVALID_REQUEST, "You must provide the issuedFor", Status.BAD_REQUEST);
        fireErrorEvent(request.getEvent(), Errors.INVALID_REQUEST, missingIssuedForException);
        throw missingIssuedForException;
    }
    ClientModel clientModel = request.getRealm().getClientByClientId(issuedFor);
    if (clientModel == null) {
        CorsErrorResponseException unknownServerIdException = new CorsErrorResponseException(request.getCors(), OAuthErrorException.INVALID_REQUEST, "Unknown resource server id: [" + issuedFor + "]", Status.BAD_REQUEST);
        fireErrorEvent(request.getEvent(), Errors.INVALID_REQUEST, unknownServerIdException);
        throw unknownServerIdException;
    }
    ResourceServer resourceServer = resourceServerStore.findByClient(clientModel);
    if (resourceServer == null) {
        CorsErrorResponseException unsupportedPermissionsException = new CorsErrorResponseException(request.getCors(), OAuthErrorException.INVALID_REQUEST, "Client does not support permissions", Status.BAD_REQUEST);
        fireErrorEvent(request.getEvent(), Errors.INVALID_REQUEST, unsupportedPermissionsException);
        throw unsupportedPermissionsException;
    }
    return resourceServer;
}

Example 7 with ResourceServerStore

use of org.keycloak.authorization.store.ResourceServerStore in project keycloak by keycloak.

the class MgmtPermissions method realmResourceServer.

@Override
public ResourceServer realmResourceServer() {
    if (!Profile.isFeatureEnabled(Profile.Feature.AUTHORIZATION))
        return null;
    if (realmResourceServer != null)
        return realmResourceServer;
    ClientModel client = getRealmManagementClient();
    if (client == null)
        return null;
    ResourceServerStore resourceServerStore = authz.getStoreFactory().getResourceServerStore();
    realmResourceServer = resourceServerStore.findByClient(client);
    return realmResourceServer;
}