Examples with UserConsentModel org.keycloak.models.UserConsentModel used on opensource projects

Example 21 with UserConsentModel

use of org.keycloak.models.UserConsentModel in project keycloak by keycloak.

the class JpaUserFederatedStorageProvider method toConsentModel.

private UserConsentModel toConsentModel(RealmModel realm, FederatedUserConsentEntity entity) {
    if (entity == null) {
        return null;
    }
    StorageId clientStorageId = null;
    if (entity.getClientId() == null) {
        clientStorageId = new StorageId(entity.getClientStorageProvider(), entity.getExternalClientId());
    } else {
        clientStorageId = new StorageId(entity.getClientId());
    }
    ClientModel client = realm.getClientById(clientStorageId.getId());
    UserConsentModel model = new UserConsentModel(client);
    model.setCreatedDate(entity.getCreatedDate());
    model.setLastUpdatedDate(entity.getLastUpdatedDate());
    Collection<FederatedUserConsentClientScopeEntity> grantedClientScopeEntities = entity.getGrantedClientScopes();
    if (grantedClientScopeEntities != null) {
        for (FederatedUserConsentClientScopeEntity grantedClientScope : grantedClientScopeEntities) {
            ClientScopeModel grantedClientScopeModel = realm.getClientScopeById(grantedClientScope.getScopeId());
            if (grantedClientScopeModel == null) {
                grantedClientScopeModel = realm.getClientById(grantedClientScope.getScopeId());
            }
            if (grantedClientScopeModel != null) {
                model.addGrantedClientScope(grantedClientScopeModel);
            }
        }
    }
    return model;
}

Example 22 with UserConsentModel

use of org.keycloak.models.UserConsentModel in project keycloak by keycloak.

the class LoginActionsService method processConsent.

/**
 * OAuth grant page.  You should not invoked this directly!
 *
 * @return
 */
@Path("consent")
@POST
@Consumes(MediaType.APPLICATION_FORM_URLENCODED)
public Response processConsent() {
    MultivaluedMap<String, String> formData = request.getDecodedFormParameters();
    event.event(EventType.LOGIN);
    String code = formData.getFirst(SESSION_CODE);
    String clientId = session.getContext().getUri().getQueryParameters().getFirst(Constants.CLIENT_ID);
    String tabId = session.getContext().getUri().getQueryParameters().getFirst(Constants.TAB_ID);
    SessionCodeChecks checks = checksForCode(null, code, null, clientId, tabId, REQUIRED_ACTION);
    if (!checks.verifyRequiredAction(AuthenticationSessionModel.Action.OAUTH_GRANT.name())) {
        return checks.getResponse();
    }
    AuthenticationSessionModel authSession = checks.getAuthenticationSession();
    initLoginEvent(authSession);
    UserModel user = authSession.getAuthenticatedUser();
    ClientModel client = authSession.getClient();
    if (formData.containsKey("cancel")) {
        LoginProtocol protocol = session.getProvider(LoginProtocol.class, authSession.getProtocol());
        protocol.setRealm(realm).setHttpHeaders(headers).setUriInfo(session.getContext().getUri()).setEventBuilder(event);
        Response response = protocol.sendError(authSession, Error.CONSENT_DENIED);
        event.error(Errors.REJECTED_BY_USER);
        return response;
    }
    UserConsentModel grantedConsent = session.users().getConsentByClient(realm, user.getId(), client.getId());
    if (grantedConsent == null) {
        grantedConsent = new UserConsentModel(client);
        session.users().addConsent(realm, user.getId(), grantedConsent);
    }
    // Update may not be required if all clientScopes were already granted (May happen for example with prompt=consent)
    boolean updateConsentRequired = false;
    for (String clientScopeId : authSession.getClientScopes()) {
        ClientScopeModel clientScope = KeycloakModelUtils.findClientScopeById(realm, client, clientScopeId);
        if (clientScope != null) {
            if (!grantedConsent.isClientScopeGranted(clientScope) && clientScope.isDisplayOnConsentScreen()) {
                grantedConsent.addGrantedClientScope(clientScope);
                updateConsentRequired = true;
            }
        } else {
            logger.warnf("Client scope or client with ID '%s' not found", clientScopeId);
        }
    }
    if (updateConsentRequired) {
        session.users().updateConsent(realm, user.getId(), grantedConsent);
    }
    event.detail(Details.CONSENT, Details.CONSENT_VALUE_CONSENT_GRANTED);
    event.success();
    ClientSessionContext clientSessionCtx = AuthenticationProcessor.attachSession(authSession, null, session, realm, clientConnection, event);
    return AuthenticationManager.redirectAfterSuccessfulFlow(session, realm, clientSessionCtx.getClientSession().getUserSession(), clientSessionCtx, request, session.getContext().getUri(), clientConnection, event, authSession);
}

Example 23 with UserConsentModel

use of org.keycloak.models.UserConsentModel in project keycloak by keycloak.

the class UserCacheSession method getConsentsStream.

@Override
public Stream<UserConsentModel> getConsentsStream(RealmModel realm, String userId) {
    logger.tracev("getConsents: {0}", userId);
    String cacheKey = getConsentCacheKey(userId);
    if (realmInvalidations.contains(realm.getId()) || invalidations.contains(userId) || invalidations.contains(cacheKey)) {
        return getDelegate().getConsentsStream(realm, userId);
    }
    CachedUserConsents cached = cache.get(cacheKey, CachedUserConsents.class);
    if (cached == null) {
        Long loaded = cache.getCurrentRevision(cacheKey);
        List<UserConsentModel> consents = getDelegate().getConsentsStream(realm, userId).collect(Collectors.toList());
        cached = new CachedUserConsents(loaded, cacheKey, realm, consents);
        cache.addRevisioned(cached, startupRevision);
        return consents.stream();
    } else {
        return cached.getConsents().values().stream().map(cachedConsent -> toConsentModel(realm, cachedConsent)).filter(Objects::nonNull);
    }
}

Example 24 with UserConsentModel

use of org.keycloak.models.UserConsentModel in project keycloak by keycloak.

the class UserCacheSession method toConsentModel.

private UserConsentModel toConsentModel(RealmModel realm, CachedUserConsent cachedConsent) {
    ClientModel client = session.clients().getClientById(realm, cachedConsent.getClientDbId());
    if (client == null) {
        return null;
    }
    UserConsentModel consentModel = new UserConsentModel(client);
    consentModel.setCreatedDate(cachedConsent.getCreatedDate());
    consentModel.setLastUpdatedDate(cachedConsent.getLastUpdatedDate());
    for (String clientScopeId : cachedConsent.getClientScopeIds()) {
        ClientScopeModel clientScope = KeycloakModelUtils.findClientScopeById(realm, client, clientScopeId);
        if (clientScope != null) {
            consentModel.addGrantedClientScope(clientScope);
        }
    }
    return consentModel;
}

Example 25 with UserConsentModel

use of org.keycloak.models.UserConsentModel in project keycloak by keycloak.

the class UserCacheSession method getConsentByClient.

@Override
public UserConsentModel getConsentByClient(RealmModel realm, String userId, String clientId) {
    logger.tracev("getConsentByClient: {0}", userId);
    String cacheKey = getConsentCacheKey(userId);
    if (realmInvalidations.contains(realm.getId()) || invalidations.contains(userId) || invalidations.contains(cacheKey)) {
        return getDelegate().getConsentByClient(realm, userId, clientId);
    }
    CachedUserConsents cached = cache.get(cacheKey, CachedUserConsents.class);
    if (cached == null) {
        Long loaded = cache.getCurrentRevision(cacheKey);
        List<UserConsentModel> consents = getDelegate().getConsentsStream(realm, userId).collect(Collectors.toList());
        cached = new CachedUserConsents(loaded, cacheKey, realm, consents);
        cache.addRevisioned(cached, startupRevision);
    }
    CachedUserConsent cachedConsent = cached.getConsents().get(clientId);
    if (cachedConsent == null)
        return null;
    return toConsentModel(realm, cachedConsent);
}