Table of Contents

Class KeycloakTokenIntrospectionClaimsTransformation

Namespace
Keycloak.AuthServices.Authorization.TokenIntrospection
Assembly
Keycloak.AuthServices.Authorization.TokenIntrospection.dll

Claims transformation that enriches a ClaimsPrincipal with claims resolved from the Keycloak token introspection endpoint. Designed for use with lightweight access tokens that lack business claims.

public class KeycloakTokenIntrospectionClaimsTransformation : IKeycloakTokenIntrospectionTransformation, IClaimsTransformation
Inheritance
KeycloakTokenIntrospectionClaimsTransformation
Implements
Inherited Members

Constructors

KeycloakTokenIntrospectionClaimsTransformation(IKeycloakTokenIntrospectionClient, HybridCache, IHttpContextAccessor, IOptions<KeycloakTokenIntrospectionOptions>, ILogger<KeycloakTokenIntrospectionClaimsTransformation>)

Initializes a new instance of the KeycloakTokenIntrospectionClaimsTransformation class.

public KeycloakTokenIntrospectionClaimsTransformation(IKeycloakTokenIntrospectionClient introspectionClient, HybridCache cache, IHttpContextAccessor httpContextAccessor, IOptions<KeycloakTokenIntrospectionOptions> options, ILogger<KeycloakTokenIntrospectionClaimsTransformation> logger)

Parameters

introspectionClient IKeycloakTokenIntrospectionClient
cache HybridCache
httpContextAccessor IHttpContextAccessor
options IOptions<KeycloakTokenIntrospectionOptions>
logger ILogger<KeycloakTokenIntrospectionClaimsTransformation>

Methods

TransformAsync(ClaimsPrincipal)

Provides a central transformation point to change the specified principal. Note: this will be run on each AuthenticateAsync call, so its safer to return a new ClaimsPrincipal if your transformation is not idempotent.

public Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal principal)

Parameters

principal ClaimsPrincipal

The ClaimsPrincipal to transform.

Returns

Task<ClaimsPrincipal>

The transformed principal.