Custom protocol mapper which calls external REST endpoint - how to avoid multiple requests? #17060

domsew · 2023-02-13T18:02:57Z

domsew
Feb 13, 2023

Hello,
I am trying to implement a custom protocol mapper which calls external REST endpoint to acquire extra scope data for current user. I was following this example and everything works as expected. The problem is, that for single sign in call, my mapper gets the same data three times. I was wondering what is most clean way to avoid such behaviour. Probably I should cache HTTP response in the context of current sign in request. But how to do this with Keycloak API?
My code looks like this:

public class RestScopeMapper extends AbstractOIDCProtocolMapper
    implements OIDCAccessTokenMapper, OIDCIDTokenMapper, UserInfoTokenMapper
{
    /* [...] <- Some boilerplate code */
    @Override
    protected void setClaim(
        IDToken token,
        ProtocolMapperModel mappingModel,
        UserSessionModel userSession,
        KeycloakSession keycloakSession,
        ClientSessionContext clientSessionCtx
    ) {
        var url = mappingModel.getConfig().get(REST_ENDPOINT);
        var userId = userSession.getUser().getId();
        JsonNode extraData = SimpleHttp.doGet(url + "/" + userId, keycloakSession).asJson();
        OIDCAttributeMapperHelper.mapClaim(token, mappingModel, extraData);
    }
}

Navigation Menu

Repository navigation

Custom protocol mapper which calls external REST endpoint - how to avoid multiple requests? #17060

Uh oh!

{{title}}

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Custom protocol mapper which calls external REST endpoint - how to avoid multiple requests? #17060

Uh oh!

domsew Feb 13, 2023

Replies: 0 comments

domsew
Feb 13, 2023