Module io.helidon.security.providers.idcs.mapper

Package io.helidon.security.providers.idcs.mapper

Class IdcsMtRoleMapperRxProvider.DefaultMultitenancyEndpoints

java.lang.Object

io.helidon.security.providers.idcs.mapper.IdcsMtRoleMapperRxProvider.DefaultMultitenancyEndpoints

All Implemented Interfaces:

IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Enclosing class:

IdcsMtRoleMapperRxProvider

protected static class IdcsMtRoleMapperRxProvider.DefaultMultitenancyEndpoints
extends Object
implements IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Default implementation of the IdcsMtRoleMapperRxProvider.MultitenancyEndpoints. Caches the endpoints per tenant.

Constructor Summary

Constructors

Modifier	Constructor	Description
protected	DefaultMultitenancyEndpoints(OidcConfig config)	Creates endpoints from provided OIDC configuration using default URIs.

Method Summary

Modifier and Type	Method	Description
URI	assertEndpoint(String tenantId)	Asserter endpoint URI for a specific tenant.
String	idcsInfraTenantId()	The tenant id of the infrastructure tenant.
URI	tokenEndpoint(String tenantId)	Token endpoint URI for a specific tenant.
boolean	useClientCredentials(String tenantId, URI tokenEndpoint)	Whether client credentials may be attached to a token request for the resolved endpoint.
String	validateTenantId(String tenantId)	Validate or normalize a tenant ID extracted from the request.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

DefaultMultitenancyEndpoints

protected DefaultMultitenancyEndpoints(OidcConfig config)

Creates endpoints from provided OIDC configuration using default URIs.

• For Asserter endpoint: /admin/v1/Asserter
• For Token endpoint: /oauth2/v1/token?IDCS_CLIENT_TENANT=

Parameters:

config - IDCS base configuration

Method Details

idcsInfraTenantId

public String idcsInfraTenantId()

Description copied from interface: IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

The tenant id of the infrastructure tenant.

Specified by:

idcsInfraTenantId in interface IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Returns:

id of the tenant

assertEndpoint

public URI assertEndpoint(String tenantId)

Description copied from interface: IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Asserter endpoint URI for a specific tenant.

Specified by:

assertEndpoint in interface IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Parameters:

tenantId - id of tenant to get the endpoint for

Returns:

URI for the tenant

tokenEndpoint

public URI tokenEndpoint(String tenantId)

Description copied from interface: IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Token endpoint URI for a specific tenant.

Specified by:

tokenEndpoint in interface IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Parameters:

tenantId - id of tenant to get the endpoint for

Returns:

URI for the tenant

useClientCredentials

public boolean useClientCredentials(String tenantId,
 URI tokenEndpoint)

Description copied from interface: IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Whether client credentials may be attached to a token request for the resolved endpoint. Custom endpoint implementations should override this method to return true only for endpoints they have validated as trusted for the provided tenant. The default returns false.

Specified by:

useClientCredentials in interface IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Parameters:

tenantId - id of tenant to get the endpoint for

tokenEndpoint - resolved token endpoint

Returns:

whether client credentials may be attached

validateTenantId

public String validateTenantId(String tenantId)

Description copied from interface: IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Validate or normalize a tenant ID extracted from the request. Custom endpoint implementations can use the tenant ID format required by their endpoint mapping. The default returns the tenant ID unchanged.

Specified by:

validateTenantId in interface IdcsMtRoleMapperRxProvider.MultitenancyEndpoints

Parameters:

tenantId - extracted tenant ID

Returns:

tenant ID to use for endpoint resolution