Module io.helidon.security.providers.idcs.mapper
Package io.helidon.security.providers.idcs.mapper

Interface IdcsMtRoleMapperProvider.MultitenancyEndpoints

All Known Implementing Classes:
IdcsMtRoleMapperProvider.DefaultMultitenancyEndpoints
Enclosing class:
IdcsMtRoleMapperProvider
public static interface IdcsMtRoleMapperProvider.MultitenancyEndpoints
Multitenant endpoints for accessing IDCS services.

  • Method Summary

    Modifier and Type
    Method
    Description
    URI
    assertEndpoint(String tenantId)
    Asserter endpoint URI for a specific tenant.
    String
    idcsInfraTenantId()
    The tenant id of the infrastructure tenant.
    URI
    tokenEndpoint(String tenantId)
    Token endpoint URI for a specific tenant.
    default boolean
    useClientCredentials(String tenantId, URI tokenEndpoint)
    Whether client credentials may be attached to a token request for the resolved endpoint.

  • Method Details

    • idcsInfraTenantId

      String idcsInfraTenantId()
      The tenant id of the infrastructure tenant.
      Returns:
      id of the tenant

    • assertEndpoint

      URI assertEndpoint(String tenantId)
      Asserter endpoint URI for a specific tenant.
      Parameters:
      tenantId - id of tenant to get the endpoint for
      Returns:
      URI for the tenant

    • tokenEndpoint

      URI tokenEndpoint(String tenantId)
      Token endpoint URI for a specific tenant.
      Parameters:
      tenantId - id of tenant to get the endpoint for
      Returns:
      URI for the tenant

    • useClientCredentials

      default boolean useClientCredentials(String tenantId, URI tokenEndpoint)
      Whether client credentials may be attached to a token request for the resolved endpoint. The default preserves the legacy custom endpoint behavior. Custom endpoint implementations should override this method to return true only for endpoints they have validated as trusted for the provided tenant.
      Parameters:
      tenantId - id of tenant to get the endpoint for
      tokenEndpoint - resolved token endpoint
      Returns:
      whether client credentials may be attached