From 8f62c5bc5f405d12ef48e2381fb68a49820513d5 Mon Sep 17 00:00:00 2001
From: Marek Posolda <mposolda@gmail.com>
Date: Wed, 30 Mar 2022 09:55:26 +0000
Subject: [PATCH] OIDC RP-Initiated logout endpoint (#10887)

---
 src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java |    7 +++++++
 1 files changed, 7 insertions(+), 0 deletions(-)

diff --git a/src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java b/src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java
index da0f11a..2c7f53b 100644
--- a/src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java
+++ b/src/main/java/org/keycloak/protocol/cas/utils/RedirectUtils.java
@@ -41,6 +41,12 @@
 
     private static final Logger logger = Logger.getLogger(RedirectUtils.class);
 
+    /**
+     * This method is deprecated for performance and security reasons and it is available just for the
+     * backwards compatibility. It is recommended to use some other methods of this class where the client is given as an argument
+     * to the method, so we know the client, which redirect-uri we are trying to resolve.
+     */
+    @Deprecated
     public static String verifyRealmRedirectUri(KeycloakSession session, String redirectUri) {
         Set<String> validRedirects = getValidateRedirectUris(session);
         return verifyRedirectUri(session, null, redirectUri, validRedirects, true);
@@ -71,6 +77,7 @@
         return resolveValidRedirects;
     }
 
+    @Deprecated
     private static Set<String> getValidateRedirectUris(KeycloakSession session) {
         RealmModel realm = session.getContext().getRealm();
         return session.clientStorageManager().getAllRedirectUrisOfEnabledClients(realm).entrySet().stream()

--
Gitblit v1.10.0