6.4. JavaScript Providers
Red Hat Single Sign-On has the ability to execute scripts during runtime in order to allow administrators to customize specific functionalities:
- Authenticator
- JavaScript Policy
- OpenID Connect Protocol Mapper
6.4.1. Authenticator リンクのコピーリンクがクリップボードにコピーされました!
Authentication scripts must provide at least one of the following functions: authenticate(..), which is called from Authenticator#authenticate(AuthenticationFlowContext)action(..), which is called from Authenticator#action(AuthenticationFlowContext)
Custom Authenticator should at least provide the authenticate(..) function. You can use the javax.script.Bindings script within the code.
script-
the
ScriptModelto access script metadata realm-
the
RealmModel user-
the current
UserModel session-
the active
KeycloakSession authenticationSession-
the current
AuthenticationSessionModel httpRequest-
the current
org.jboss.resteasy.spi.HttpRequest LOG-
a
org.jboss.logging.Loggerscoped toScriptBasedAuthenticator
You can extract additional context information from the context argument passed to the authenticate(context) action(context) function.