How to use

org.keycloak.adapters.tomcat.OIDCCatalinaHttpFacade

constructor

  @Override
  public void invoke(Request request, Response response) throws IOException, ServletException {
    log.debugv("AuthenticatedActionsValve.invoke {0}", request.getRequestURI());
    CatalinaHttpFacade facade = new OIDCCatalinaHttpFacade(request, response);
    KeycloakDeployment deployment = deploymentContext.resolveDeployment(facade);
    if (deployment != null && deployment.isConfigured()) {
      AuthenticatedActionsHandler handler = new AuthenticatedActionsHandler(deployment, new OIDCCatalinaHttpFacade(request, response));
      if (handler.handledRequest()) {
        return;
      }

    }
    getNext().invoke(request, response);
  }
}

  @Override
  public void invoke(Request request, Response response) throws IOException, ServletException {
    log.debugv("AuthenticatedActionsValve.invoke {0}", request.getRequestURI());
    CatalinaHttpFacade facade = new OIDCCatalinaHttpFacade(request, response);
    KeycloakDeployment deployment = deploymentContext.resolveDeployment(facade);
    if (deployment != null && deployment.isConfigured()) {
      AuthenticatedActionsHandler handler = new AuthenticatedActionsHandler(deployment, new OIDCCatalinaHttpFacade(request, response));
      if (handler.handledRequest()) {
        return;
      }

    }
    getNext().invoke(request, response);
  }
}

protected void logoutInternal(Request request) {
  KeycloakSecurityContext ksc = (KeycloakSecurityContext)request.getAttribute(KeycloakSecurityContext.class.getName());
  if (ksc != null) {
    CatalinaHttpFacade facade = new OIDCCatalinaHttpFacade(request, null);
    KeycloakDeployment deployment = deploymentContext.resolveDeployment(facade);
    if (ksc instanceof RefreshableKeycloakSecurityContext) {
      ((RefreshableKeycloakSecurityContext) ksc).logout(deployment);
    }
    AdapterTokenStore tokenStore = getTokenStore(request, facade, deployment);
    tokenStore.logout();
    request.removeAttribute(KeycloakSecurityContext.class.getName());
  }
  request.setUserPrincipal(null);
}

protected void logoutInternal(Request request) {
  KeycloakSecurityContext ksc = (KeycloakSecurityContext)request.getAttribute(KeycloakSecurityContext.class.getName());
  if (ksc != null) {
    CatalinaHttpFacade facade = new OIDCCatalinaHttpFacade(request, null);
    KeycloakDeployment deployment = deploymentContext.resolveDeployment(facade);
    if (ksc instanceof RefreshableKeycloakSecurityContext) {
      ((RefreshableKeycloakSecurityContext) ksc).logout(deployment);
    }
    AdapterTokenStore tokenStore = getTokenStore(request, facade, deployment);
    tokenStore.logout();
    request.removeAttribute(KeycloakSecurityContext.class.getName());
  }
  request.setUserPrincipal(null);
}

@Override
public void invoke(Request request, Response response) throws IOException, ServletException {
  try {
    CatalinaHttpFacade facade = new OIDCCatalinaHttpFacade(request, response);
    Manager sessionManager = request.getContext().getManager();
    CatalinaUserSessionManagementWrapper sessionManagementWrapper = new CatalinaUserSessionManagementWrapper(userSessionManagement, sessionManager);
    PreAuthActionsHandler handler = new PreAuthActionsHandler(sessionManagementWrapper, deploymentContext, facade);
    if (handler.handleRequest()) {
      return;
    }
    checkKeycloakSession(request, facade);
    super.invoke(request, response);
  } finally {
  }
}

@Override
public void invoke(Request request, Response response) throws IOException, ServletException {
  try {
    CatalinaHttpFacade facade = new OIDCCatalinaHttpFacade(request, response);
    Manager sessionManager = request.getContext().getManager();
    CatalinaUserSessionManagementWrapper sessionManagementWrapper = new CatalinaUserSessionManagementWrapper(userSessionManagement, sessionManager);
    PreAuthActionsHandler handler = new PreAuthActionsHandler(sessionManagementWrapper, deploymentContext, facade);
    if (handler.handleRequest()) {
      return;
    }
    checkKeycloakSession(request, facade);
    super.invoke(request, response);
  } finally {
  }
}

protected boolean authenticateInternal(Request request, HttpServletResponse response, Object loginConfig) throws IOException {
  CatalinaHttpFacade facade = new OIDCCatalinaHttpFacade(request, response);
  KeycloakDeployment deployment = deploymentContext.resolveDeployment(facade);
  if (deployment == null || !deployment.isConfigured()) {
    //needed for the EAP6/AS7 adapter relying on the tomcat core adapter
    facade.getResponse().sendError(401);
    return false;
  }
  AdapterTokenStore tokenStore = getTokenStore(request, facade, deployment);
  nodesRegistrationManagement.tryRegister(deployment);
  CatalinaRequestAuthenticator authenticator = createRequestAuthenticator(request, facade, deployment, tokenStore);
  AuthOutcome outcome = authenticator.authenticate();
  if (outcome == AuthOutcome.AUTHENTICATED) {
    if (facade.isEnded()) {
      return false;
    }
    return true;
  }
  AuthChallenge challenge = authenticator.getChallenge();
  if (challenge != null) {
    challenge.challenge(facade);
  }
  return false;
}

protected boolean authenticateInternal(Request request, HttpServletResponse response, Object loginConfig) throws IOException {
  CatalinaHttpFacade facade = new OIDCCatalinaHttpFacade(request, response);
  KeycloakDeployment deployment = deploymentContext.resolveDeployment(facade);
  if (deployment == null || !deployment.isConfigured()) {
    //needed for the EAP6/AS7 adapter relying on the tomcat core adapter
    facade.getResponse().sendError(401);
    return false;
  }
  AdapterTokenStore tokenStore = getTokenStore(request, facade, deployment);
  nodesRegistrationManagement.tryRegister(deployment);
  CatalinaRequestAuthenticator authenticator = createRequestAuthenticator(request, facade, deployment, tokenStore);
  AuthOutcome outcome = authenticator.authenticate();
  if (outcome == AuthOutcome.AUTHENTICATED) {
    if (facade.isEnded()) {
      return false;
    }
    return true;
  }
  AuthChallenge challenge = authenticator.getChallenge();
  if (challenge != null) {
    challenge.challenge(facade);
  }
  return false;
}