Examples with IdentityProviderResource org.keycloak.admin.client.resource.IdentityProviderResource used on opensource projects

Example 16 with IdentityProviderResource

use of org.keycloak.admin.client.resource.IdentityProviderResource in project keycloak by keycloak.

the class IdentityProviderTest method testUpdateProtocolMappers.

// KEYCLOAK-4962
@Test
public void testUpdateProtocolMappers() {
    create(createRep("google2", "google"));
    IdentityProviderResource provider = realm.identityProviders().get("google2");
    IdentityProviderMapperRepresentation mapper = new IdentityProviderMapperRepresentation();
    mapper.setIdentityProviderAlias("google2");
    mapper.setName("my_mapper");
    mapper.setIdentityProviderMapper("oidc-hardcoded-role-idp-mapper");
    Map<String, String> config = new HashMap<>();
    config.put(IdentityProviderMapperModel.SYNC_MODE, IdentityProviderMapperSyncMode.INHERIT.toString());
    config.put("role", "");
    mapper.setConfig(config);
    Response response = provider.addMapper(mapper);
    String mapperId = ApiUtil.getCreatedId(response);
    List<IdentityProviderMapperRepresentation> mappers = provider.getMappers();
    assertEquals(1, mappers.size());
    assertEquals(1, mappers.get(0).getConfig().size());
    mapper = provider.getMapperById(mapperId);
    mapper.getConfig().put("role", "offline_access");
    provider.update(mapperId, mapper);
    mappers = provider.getMappers();
    assertEquals("INHERIT", mappers.get(0).getConfig().get(IdentityProviderMapperModel.SYNC_MODE));
    assertEquals(1, mappers.size());
    assertEquals(2, mappers.get(0).getConfig().size());
    assertEquals("offline_access", mappers.get(0).getConfig().get("role"));
}

Example 17 with IdentityProviderResource

use of org.keycloak.admin.client.resource.IdentityProviderResource in project keycloak by keycloak.

the class IdentityProviderTest method failUpdateInvalidUrl.

@Test
public void failUpdateInvalidUrl() throws Exception {
    try (RealmAttributeUpdater rau = new RealmAttributeUpdater(realm).updateWith(r -> r.setSslRequired(SslRequired.ALL.name())).update()) {
        IdentityProviderRepresentation representation = createRep(UUID.randomUUID().toString(), "oidc");
        representation.getConfig().put("clientId", "clientId");
        representation.getConfig().put("clientSecret", "some secret value");
        try (Response response = realm.identityProviders().create(representation)) {
            assertEquals(Response.Status.CREATED.getStatusCode(), response.getStatus());
        }
        IdentityProviderResource resource = this.realm.identityProviders().get(representation.getAlias());
        representation = resource.toRepresentation();
        OIDCIdentityProviderConfigRep oidcConfig = new OIDCIdentityProviderConfigRep(representation);
        oidcConfig.setAuthorizationUrl("invalid://test");
        try {
            resource.update(representation);
            fail("Invalid URL");
        } catch (Exception e) {
            assertTrue(e instanceof ClientErrorException);
            Response response = ClientErrorException.class.cast(e).getResponse();
            assertEquals(Response.Status.BAD_REQUEST.getStatusCode(), response.getStatus());
            ErrorRepresentation error = ((ClientErrorException) e).getResponse().readEntity(ErrorRepresentation.class);
            assertEquals("The url [authorization_url] is malformed", error.getErrorMessage());
        }
        oidcConfig.setAuthorizationUrl(null);
        oidcConfig.setTokenUrl("http://test");
        try {
            resource.update(representation);
            fail("Invalid URL");
        } catch (Exception e) {
            assertTrue(e instanceof ClientErrorException);
            Response response = ClientErrorException.class.cast(e).getResponse();
            assertEquals(Response.Status.BAD_REQUEST.getStatusCode(), response.getStatus());
            ErrorRepresentation error = ((ClientErrorException) e).getResponse().readEntity(ErrorRepresentation.class);
            assertEquals("The url [token_url] requires secure connections", error.getErrorMessage());
        }
        oidcConfig.setAuthorizationUrl(null);
        oidcConfig.setTokenUrl(null);
        oidcConfig.setJwksUrl("http://test");
        try {
            resource.update(representation);
            fail("Invalid URL");
        } catch (Exception e) {
            assertTrue(e instanceof ClientErrorException);
            Response response = ClientErrorException.class.cast(e).getResponse();
            assertEquals(Response.Status.BAD_REQUEST.getStatusCode(), response.getStatus());
            ErrorRepresentation error = ((ClientErrorException) e).getResponse().readEntity(ErrorRepresentation.class);
            assertEquals("The url [jwks_url] requires secure connections", error.getErrorMessage());
        }
        oidcConfig.setAuthorizationUrl(null);
        oidcConfig.setTokenUrl(null);
        oidcConfig.setJwksUrl(null);
        oidcConfig.setLogoutUrl("http://test");
        try {
            resource.update(representation);
            fail("Invalid URL");
        } catch (Exception e) {
            assertTrue(e instanceof ClientErrorException);
            Response response = ClientErrorException.class.cast(e).getResponse();
            assertEquals(Response.Status.BAD_REQUEST.getStatusCode(), response.getStatus());
            ErrorRepresentation error = ((ClientErrorException) e).getResponse().readEntity(ErrorRepresentation.class);
            assertEquals("The url [logout_url] requires secure connections", error.getErrorMessage());
        }
        oidcConfig.setAuthorizationUrl(null);
        oidcConfig.setTokenUrl(null);
        oidcConfig.setJwksUrl(null);
        oidcConfig.setLogoutUrl(null);
        oidcConfig.setUserInfoUrl("http://localhost");
        try {
            resource.update(representation);
            fail("Invalid URL");
        } catch (Exception e) {
            assertTrue(e instanceof ClientErrorException);
            Response response = ClientErrorException.class.cast(e).getResponse();
            assertEquals(Response.Status.BAD_REQUEST.getStatusCode(), response.getStatus());
            ErrorRepresentation error = ((ClientErrorException) e).getResponse().readEntity(ErrorRepresentation.class);
            assertEquals("The url [userinfo_url] requires secure connections", error.getErrorMessage());
        }
        rau.updateWith(r -> r.setSslRequired(SslRequired.EXTERNAL.name())).update();
        resource.update(representation);
    }
}

Example 18 with IdentityProviderResource

use of org.keycloak.admin.client.resource.IdentityProviderResource in project keycloak by keycloak.

the class IdentityProviderTest method testMappers.

@Test
public void testMappers() {
    create(createRep("google", "google"));
    IdentityProviderResource provider = realm.identityProviders().get("google");
    IdentityProviderMapperRepresentation mapper = new IdentityProviderMapperRepresentation();
    mapper.setIdentityProviderAlias("google");
    mapper.setName("my_mapper");
    mapper.setIdentityProviderMapper("oidc-hardcoded-role-idp-mapper");
    Map<String, String> config = new HashMap<>();
    config.put("role", "offline_access");
    config.put(IdentityProviderMapperModel.SYNC_MODE, IdentityProviderMapperSyncMode.INHERIT.toString());
    mapper.setConfig(config);
    // createRep and add mapper
    Response response = provider.addMapper(mapper);
    String id = ApiUtil.getCreatedId(response);
    Assert.assertNotNull(id);
    response.close();
    assertAdminEvents.assertEvent(realmId, OperationType.CREATE, AdminEventPaths.identityProviderMapperPath("google", id), mapper, ResourceType.IDENTITY_PROVIDER_MAPPER);
    // list mappers
    List<IdentityProviderMapperRepresentation> mappers = provider.getMappers();
    Assert.assertEquals("mappers count", 1, mappers.size());
    Assert.assertEquals("newly created mapper id", id, mappers.get(0).getId());
    // get mapper
    mapper = provider.getMapperById(id);
    Assert.assertEquals("INHERIT", mappers.get(0).getConfig().get(IdentityProviderMapperModel.SYNC_MODE));
    Assert.assertNotNull("mapperById not null", mapper);
    Assert.assertEquals("mapper id", id, mapper.getId());
    Assert.assertNotNull("mapper.config exists", mapper.getConfig());
    Assert.assertEquals("config retained", "offline_access", mapper.getConfig().get("role"));
    // add duplicate mapper
    Response error = provider.addMapper(mapper);
    Assert.assertEquals("mapper unique name", 400, error.getStatus());
    error.close();
    // update mapper
    mapper.getConfig().put("role", "master-realm.manage-realm");
    provider.update(id, mapper);
    assertAdminEvents.assertEvent(realmId, OperationType.UPDATE, AdminEventPaths.identityProviderMapperPath("google", id), mapper, ResourceType.IDENTITY_PROVIDER_MAPPER);
    mapper = provider.getMapperById(id);
    Assert.assertNotNull("mapperById not null", mapper);
    Assert.assertEquals("config changed", "master-realm.manage-realm", mapper.getConfig().get("role"));
    // delete mapper
    provider.delete(id);
    assertAdminEvents.assertEvent(realmId, OperationType.DELETE, AdminEventPaths.identityProviderMapperPath("google", id), ResourceType.IDENTITY_PROVIDER_MAPPER);
    try {
        provider.getMapperById(id);
        Assert.fail("Should fail with NotFoundException");
    } catch (NotFoundException e) {
    // Expected
    }
}

Example 19 with IdentityProviderResource

use of org.keycloak.admin.client.resource.IdentityProviderResource in project keycloak by keycloak.

the class OidcClaimToRoleMapperTest method createClaimToRoleMapper.

protected void createClaimToRoleMapper(IdentityProviderRepresentation idp, String claimValue, IdentityProviderMapperSyncMode syncMode) {
    IdentityProviderMapperRepresentation claimToRoleMapper = new IdentityProviderMapperRepresentation();
    claimToRoleMapper.setName("claim-to-role-mapper");
    claimToRoleMapper.setIdentityProviderMapper(ClaimToRoleMapper.PROVIDER_ID);
    claimToRoleMapper.setConfig(ImmutableMap.<String, String>builder().put(IdentityProviderMapperModel.SYNC_MODE, syncMode.toString()).put(ClaimToRoleMapper.CLAIM, OidcClaimToRoleMapperTest.CLAIM).put(ClaimToRoleMapper.CLAIM_VALUE, claimValue).put(ConfigConstants.ROLE, CLIENT_ROLE_MAPPER_REPRESENTATION).build());
    IdentityProviderResource idpResource = realm.identityProviders().get(idp.getAlias());
    claimToRoleMapper.setIdentityProviderAlias(bc.getIDPAlias());
    idpResource.addMapper(claimToRoleMapper).close();
}

Example 20 with IdentityProviderResource

use of org.keycloak.admin.client.resource.IdentityProviderResource in project keycloak by keycloak.

the class AccountBrokerTest method displayEnabledIdentityProviders.

@Test
public void displayEnabledIdentityProviders() {
    identityPage.realm(KcOidcBrokerConfiguration.INSTANCE.consumerRealmName());
    identityPage.open();
    loginPage.login("accountbrokertest", "password");
    Assert.assertTrue(identityPage.isCurrent());
    List<AccountFederatedIdentityPage.FederatedIdentity> identities = identityPage.getIdentities();
    Assert.assertEquals(1, identities.size());
    // Disable the identity provider
    RealmResource realm = adminClient.realm(bc.consumerRealmName());
    IdentityProviderResource providerResource = realm.identityProviders().get(bc.getIDPAlias());
    IdentityProviderRepresentation provider = providerResource.toRepresentation();
    provider.setEnabled(false);
    providerResource.update(provider);
    // Reload federated identities page
    identityPage.open();
    Assert.assertTrue(identityPage.isCurrent());
    identities = identityPage.getIdentities();
    Assert.assertEquals(0, identities.size());
}