Examples with PolicyStore org.keycloak.authorization.store.PolicyStore used on opensource projects

Example 26 with PolicyStore

use of org.keycloak.authorization.store.PolicyStore in project keycloak by keycloak.

the class ScopeService method getPermissions.

@Path("{id}/permissions")
@GET
@NoCache
@Produces(MediaType.APPLICATION_JSON)
public Response getPermissions(@PathParam("id") String id) {
    this.auth.realm().requireViewAuthorization();
    StoreFactory storeFactory = this.authorization.getStoreFactory();
    Scope model = storeFactory.getScopeStore().findById(id, resourceServer.getId());
    if (model == null) {
        return Response.status(Status.NOT_FOUND).build();
    }
    PolicyStore policyStore = storeFactory.getPolicyStore();
    return Response.ok(policyStore.findByScopeIds(Arrays.asList(model.getId()), resourceServer.getId()).stream().map(policy -> {
        PolicyRepresentation representation = new PolicyRepresentation();
        representation.setId(policy.getId());
        representation.setName(policy.getName());
        representation.setType(policy.getType());
        return representation;
    }).collect(Collectors.toList())).build();
}

Example 27 with PolicyStore

use of org.keycloak.authorization.store.PolicyStore in project keycloak by keycloak.

the class MapResourceServerStore method delete.

@Override
public void delete(ClientModel client) {
    String id = client.getId();
    LOG.tracef("delete(%s, %s)%s", id, getShortStackTrace());
    if (id == null)
        return;
    // TODO: Simplify the following, ideally by leveraging triggers, stored procedures or ref integrity
    PolicyStore policyStore = authorizationProvider.getStoreFactory().getPolicyStore();
    policyStore.findByResourceServer(id).stream().map(Policy::getId).forEach(policyStore::delete);
    PermissionTicketStore permissionTicketStore = authorizationProvider.getStoreFactory().getPermissionTicketStore();
    permissionTicketStore.findByResourceServer(id).stream().map(PermissionTicket::getId).forEach(permissionTicketStore::delete);
    ResourceStore resourceStore = authorizationProvider.getStoreFactory().getResourceStore();
    resourceStore.findByResourceServer(id).stream().map(Resource::getId).forEach(resourceStore::delete);
    ScopeStore scopeStore = authorizationProvider.getStoreFactory().getScopeStore();
    scopeStore.findByResourceServer(id).stream().map(Scope::getId).forEach(scopeStore::delete);
    tx.delete(id);
}

Example 28 with PolicyStore

use of org.keycloak.authorization.store.PolicyStore in project keycloak by keycloak.

the class RepresentationToModel method importPolicies.

private static Policy importPolicies(AuthorizationProvider authorization, ResourceServer resourceServer, List<PolicyRepresentation> policiesToImport, String parentPolicyName) {
    StoreFactory storeFactory = authorization.getStoreFactory();
    for (PolicyRepresentation policyRepresentation : policiesToImport) {
        if (parentPolicyName != null && !parentPolicyName.equals(policyRepresentation.getName())) {
            continue;
        }
        Map<String, String> config = policyRepresentation.getConfig();
        String applyPolicies = config.get("applyPolicies");
        if (applyPolicies != null && !applyPolicies.isEmpty()) {
            PolicyStore policyStore = storeFactory.getPolicyStore();
            try {
                List<String> policies = (List<String>) JsonSerialization.readValue(applyPolicies, List.class);
                Set<String> policyIds = new HashSet<>();
                for (String policyName : policies) {
                    Policy policy = policyStore.findByName(policyName, resourceServer.getId());
                    if (policy == null) {
                        policy = policyStore.findById(policyName, resourceServer.getId());
                    }
                    if (policy == null) {
                        policy = importPolicies(authorization, resourceServer, policiesToImport, policyName);
                        if (policy == null) {
                            throw new RuntimeException("Policy with name [" + policyName + "] not defined.");
                        }
                    }
                    policyIds.add(policy.getId());
                }
                config.put("applyPolicies", JsonSerialization.writeValueAsString(policyIds));
            } catch (Exception e) {
                throw new RuntimeException("Error while importing policy [" + policyRepresentation.getName() + "].", e);
            }
        }
        PolicyStore policyStore = storeFactory.getPolicyStore();
        Policy policy = policyStore.findById(policyRepresentation.getId(), resourceServer.getId());
        if (policy == null) {
            policy = policyStore.findByName(policyRepresentation.getName(), resourceServer.getId());
        }
        if (policy == null) {
            policy = policyStore.create(policyRepresentation, resourceServer);
        } else {
            policy = toModel(policyRepresentation, authorization, policy);
        }
        if (parentPolicyName != null && parentPolicyName.equals(policyRepresentation.getName())) {
            return policy;
        }
    }
    return null;
}