Examples with KeycloakAccount org.keycloak.adapters.spi.KeycloakAccount used on opensource projects

Example 1 with KeycloakAccount

use of org.keycloak.adapters.spi.KeycloakAccount in project keycloak by keycloak.

the class JBossWebPrincipalFactory method createPrincipal.

@Override
public GenericPrincipal createPrincipal(Realm realm, final Principal identity, final Set<String> roleSet) {
    KeycloakAccount account = new KeycloakAccount() {

        @Override
        public Principal getPrincipal() {
            return identity;
        }

        @Override
        public Set<String> getRoles() {
            return roleSet;
        }
    };
    Subject subject = new Subject();
    Set<Principal> principals = subject.getPrincipals();
    principals.add(identity);
    Group[] roleSets = getRoleSets(roleSet);
    for (int g = 0; g < roleSets.length; g++) {
        Group group = roleSets[g];
        String name = group.getName();
        Group subjectGroup = createGroup(name, principals);
        if (subjectGroup instanceof NestableGroup) {
            /* A NestableGroup only allows Groups to be added to it so we
                need to add a SimpleGroup to subjectRoles to contain the roles
                */
            SimpleGroup tmp = new SimpleGroup("Roles");
            subjectGroup.addMember(tmp);
            subjectGroup = tmp;
        }
        // Copy the group members to the Subject group
        Enumeration<? extends Principal> members = group.members();
        while (members.hasMoreElements()) {
            Principal role = (Principal) members.nextElement();
            subjectGroup.addMember(role);
        }
    }
    // add the CallerPrincipal group if none has been added in getRoleSets
    Group callerGroup = new SimpleGroup(SecurityConstants.CALLER_PRINCIPAL_GROUP);
    callerGroup.addMember(identity);
    principals.add(callerGroup);
    SecurityContext sc = SecurityContextAssociation.getSecurityContext();
    Principal userPrincipal = getPrincipal(subject);
    sc.getUtil().createSubjectInfo(userPrincipal, account, subject);
    List<String> rolesAsStringList = new ArrayList<>(roleSet);
    try {
        return (GenericPrincipal) jbossWebPrincipalConstructor.newInstance(realm, userPrincipal.getName(), null, rolesAsStringList, userPrincipal, null, account, null, subject);
    } catch (Throwable t) {
        throw new RuntimeException("Failed to create JBossGenericPrincipal", t);
    }
}

Example 2 with KeycloakAccount

use of org.keycloak.adapters.spi.KeycloakAccount in project keycloak by keycloak.

the class KeycloakLoginModule method login.

@SuppressWarnings("unchecked")
@Override
public boolean login() throws LoginException {
    log.debug("KeycloakLoginModule.login()");
    if (super.login()) {
        log.debug("super.login()==true");
        return true;
    }
    Object credential = getCredential();
    if (credential != null && (credential instanceof KeycloakAccount)) {
        log.debug("Found Account");
        KeycloakAccount account = (KeycloakAccount) credential;
        roleSet = account.getRoles();
        identity = account.getPrincipal();
        sharedState.put("javax.security.auth.login.name", identity);
        sharedState.put("javax.security.auth.login.password", credential);
        loginOk = true;
        return true;
    }
    // username and password has been supplied to a web auth.
    return false;
}

Example 3 with KeycloakAccount

use of org.keycloak.adapters.spi.KeycloakAccount in project keycloak by keycloak.

the class KeycloakAuthenticationProviderTest method setUp.

@Before
public void setUp() throws Exception {
    Principal principal = mock(Principal.class);
    RefreshableKeycloakSecurityContext securityContext = mock(RefreshableKeycloakSecurityContext.class);
    KeycloakAccount account = new SimpleKeycloakAccount(principal, roles, securityContext);
    token = new KeycloakAuthenticationToken(account, false);
    interactiveToken = new KeycloakAuthenticationToken(account, true);
}

Example 4 with KeycloakAccount

use of org.keycloak.adapters.spi.KeycloakAccount in project keycloak by keycloak.

the class SimpleHttpFacadeTest method setup.

@Before
public void setup() {
    SecurityContext springSecurityContext = SecurityContextHolder.createEmptyContext();
    SecurityContextHolder.setContext(springSecurityContext);
    Set<String> roles = Sets.newSet("user");
    Principal principal = mock(Principal.class);
    RefreshableKeycloakSecurityContext keycloakSecurityContext = mock(RefreshableKeycloakSecurityContext.class);
    KeycloakAccount account = new SimpleKeycloakAccount(principal, roles, keycloakSecurityContext);
    KeycloakAuthenticationToken token = new KeycloakAuthenticationToken(account, false);
    springSecurityContext.setAuthentication(token);
}

Example 5 with KeycloakAccount

use of org.keycloak.adapters.spi.KeycloakAccount in project keycloak by keycloak.

the class OIDCFilterSessionStore method buildWrapper.

public HttpServletRequestWrapper buildWrapper() {
    HttpSession session = request.getSession(false);
    KeycloakAccount account = null;
    if (session != null) {
        account = (KeycloakAccount) session.getAttribute(KeycloakAccount.class.getName());
        if (account == null) {
            account = (KeycloakAccount) request.getAttribute(KeycloakAccount.class.getName());
        }
    }
    if (account == null) {
        account = (KeycloakAccount) request.getAttribute(KeycloakAccount.class.getName());
    }
    return buildWrapper(session, account);
}