Class KeycloakTokenIntrospectionClaimsTransformation
- Assembly
- Keycloak.AuthServices.Authorization.TokenIntrospection.dll
Claims transformation that enriches a ClaimsPrincipal with claims resolved from the Keycloak token introspection endpoint. Designed for use with lightweight access tokens that lack business claims.
public class KeycloakTokenIntrospectionClaimsTransformation : IKeycloakTokenIntrospectionTransformation, IClaimsTransformation
- Inheritance
-
KeycloakTokenIntrospectionClaimsTransformation
- Implements
- Inherited Members
Constructors
KeycloakTokenIntrospectionClaimsTransformation(IKeycloakTokenIntrospectionClient, HybridCache, IHttpContextAccessor, IOptions<KeycloakTokenIntrospectionOptions>, ILogger<KeycloakTokenIntrospectionClaimsTransformation>)
Initializes a new instance of the KeycloakTokenIntrospectionClaimsTransformation class.
public KeycloakTokenIntrospectionClaimsTransformation(IKeycloakTokenIntrospectionClient introspectionClient, HybridCache cache, IHttpContextAccessor httpContextAccessor, IOptions<KeycloakTokenIntrospectionOptions> options, ILogger<KeycloakTokenIntrospectionClaimsTransformation> logger)
Parameters
introspectionClientIKeycloakTokenIntrospectionClientcacheHybridCachehttpContextAccessorIHttpContextAccessoroptionsIOptions<KeycloakTokenIntrospectionOptions>loggerILogger<KeycloakTokenIntrospectionClaimsTransformation>
Methods
TransformAsync(ClaimsPrincipal)
Provides a central transformation point to change the specified principal. Note: this will be run on each AuthenticateAsync call, so its safer to return a new ClaimsPrincipal if your transformation is not idempotent.
public Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal principal)
Parameters
principalClaimsPrincipalThe ClaimsPrincipal to transform.
Returns
- Task<ClaimsPrincipal>
The transformed principal.