Examples with Keycloak org.keycloak.admin.client.Keycloak used on opensource projects

Example 11 with Keycloak

use of org.keycloak.admin.client.Keycloak in project airavata by apache.

the class TenantManagementKeycloakImpl method getUsersWithRole.

@Override
public List<UserProfile> getUsersWithRole(PasswordCredential realmAdminCreds, String tenantId, String roleName) throws IamAdminServicesException {
    Keycloak client = null;
    try {
        client = TenantManagementKeycloakImpl.getClient(ServerSettings.getIamServerUrl(), tenantId, realmAdminCreds);
        // FIXME: this only searches through the most recent 100 users for the given role (assuming there are no more than 10,000 users in the gateway)
        int totalUserCount = client.realm(tenantId).users().count();
        logger.debug("getUsersWithRole: totalUserCount=" + totalUserCount);
        // Load all users in batches
        List<UserRepresentation> allUsers = new ArrayList<>();
        int userBatchSize = 100;
        for (int start = 0; start < totalUserCount; start = start + userBatchSize) {
            logger.debug("getUsersWithRole: fetching " + userBatchSize + " users...");
            allUsers.addAll(client.realm(tenantId).users().search(null, null, null, null, start, userBatchSize));
        }
        logger.debug("getUsersWithRole: all users count=" + allUsers.size());
        allUsers.sort((a, b) -> a.getCreatedTimestamp() - b.getCreatedTimestamp() > 0 ? -1 : 1);
        // The 100 most recently created users
        List<UserRepresentation> mostRecentUsers = allUsers.subList(0, Math.min(allUsers.size(), 100));
        logger.debug("getUsersWithRole: most recent users count=" + mostRecentUsers.size());
        List<UserProfile> usersWithRole = new ArrayList<>();
        for (UserRepresentation user : mostRecentUsers) {
            UserResource userResource = client.realm(tenantId).users().get(user.getId());
            List<RoleRepresentation> roleRepresentations = userResource.roles().realmLevel().listAll();
            for (RoleRepresentation roleRepresentation : roleRepresentations) {
                if (roleRepresentation.getName().equals(roleName)) {
                    usersWithRole.add(convertUserRepresentationToUserProfile(user, tenantId));
                    break;
                }
            }
        }
        logger.debug("getUsersWithRole: most recent users with role count=" + usersWithRole.size());
        return usersWithRole;
    } catch (ApplicationSettingsException ex) {
        logger.error("Error getting values from property file, reason: " + ex.getMessage(), ex);
        IamAdminServicesException exception = new IamAdminServicesException();
        exception.setMessage("Error getting values from property file, reason " + ex.getMessage());
        throw exception;
    } finally {
        if (client != null) {
            logger.debug("getUsersWithRole: closing client...");
            client.close();
            logger.debug("getUsersWithRole: client closed");
        }
    }
}

Example 12 with Keycloak

use of org.keycloak.admin.client.Keycloak in project airavata by apache.

the class KeycloakIdentityServerClient method migrateUserStore.

void migrateUserStore(List<UserProfileDAO> userProfiles, String targetRealm, String tempPassword, Map<String, String> roleConversionMap) {
    Map<String, RoleRepresentation> allRealmRoles = getRealmRoleNameMap(targetRealm);
    for (UserProfileDAO userProfile : userProfiles) {
        UserRepresentation user = new UserRepresentation();
        user.setUsername(userProfile.getUserName());
        user.setFirstName(userProfile.getFirstName());
        user.setLastName(userProfile.getLastName());
        user.setEmail(userProfile.getEmail());
        user.setEmailVerified(true);
        user.setEnabled(true);
        List<String> requiredActionList = new ArrayList<>();
        requiredActionList.add("UPDATE_PASSWORD");
        user.setRequiredActions(requiredActionList);
        Response httpResponse = this.client.realm(targetRealm).users().create(user);
        System.out.println(httpResponse.getStatus());
        if (httpResponse.getStatus() == 201) {
            // HTTP code for record creation: HTTP 201
            List<UserRepresentation> retrieveCreatedUserList = this.client.realm(targetRealm).users().search(user.getUsername(), user.getFirstName(), user.getLastName(), user.getEmail(), 0, 1);
            UserResource retirievedUser = this.client.realm(targetRealm).users().get(retrieveCreatedUserList.get(0).getId());
            // Add user to realm roles
            List<RoleRepresentation> userRealmRoles = userProfile.getRoles().stream().filter(r -> roleConversionMap.containsKey(r)).map(r -> roleConversionMap.get(r)).map(r -> allRealmRoles.get(r)).collect(Collectors.toList());
            retirievedUser.roles().realmLevel().add(userRealmRoles);
            CredentialRepresentation credential = new CredentialRepresentation();
            credential.setType(CredentialRepresentation.PASSWORD);
            credential.setValue(tempPassword);
            credential.setTemporary(true);
            retirievedUser.resetPassword(credential);
            System.out.println("User profile for user " + userProfile.getUserName() + " successfully migrated");
        } else {
            String response = httpResponse.readEntity(String.class);
            System.err.println("Failed to add user [" + userProfile.getUserName() + "] to Keycloak");
            System.err.println("Response: " + response);
        }
        if (httpResponse != null) {
            httpResponse.close();
        }
    }
}