Examples with UserModel org.keycloak.models.UserModel used on opensource projects

Example 61 with UserModel

use of org.keycloak.models.UserModel in project keycloak by keycloak.

the class UsersPartialImport method create.

@Override
public void create(RealmModel realm, KeycloakSession session, UserRepresentation user) {
    user.setId(KeycloakModelUtils.generateId());
    UserModel userModel = RepresentationToModel.createUser(session, realm, user);
    if (userModel == null)
        throw new RuntimeException("Unable to create user " + getName(user));
    createdIds.put(getName(user), userModel.getId());
}

Example 62 with UserModel

use of org.keycloak.models.UserModel in project keycloak by keycloak.

the class AuthorizationEndpointBase method createAuthenticationSession.

protected AuthenticationSessionModel createAuthenticationSession(ClientModel client, String requestState) {
    AuthenticationSessionManager manager = new AuthenticationSessionManager(session);
    RootAuthenticationSessionModel rootAuthSession = manager.getCurrentRootAuthenticationSession(realm);
    AuthenticationSessionModel authSession;
    if (rootAuthSession != null) {
        authSession = rootAuthSession.createAuthenticationSession(client);
        logger.debugf("Sent request to authz endpoint. Root authentication session with ID '%s' exists. Client is '%s' . Created new authentication session with tab ID: %s", rootAuthSession.getId(), client.getClientId(), authSession.getTabId());
    } else {
        UserSessionCrossDCManager userSessionCrossDCManager = new UserSessionCrossDCManager(session);
        UserSessionModel userSession = userSessionCrossDCManager.getUserSessionIfExistsRemotely(manager, realm);
        if (userSession != null) {
            UserModel user = userSession.getUser();
            if (user != null && !user.isEnabled()) {
                authSession = createNewAuthenticationSession(manager, client);
                AuthenticationManager.backchannelLogout(session, userSession, true);
            } else {
                String userSessionId = userSession.getId();
                rootAuthSession = session.authenticationSessions().createRootAuthenticationSession(realm, userSessionId);
                authSession = rootAuthSession.createAuthenticationSession(client);
                logger.debugf("Sent request to authz endpoint. We don't have root authentication session with ID '%s' but we have userSession." + "Re-created root authentication session with same ID. Client is: %s . New authentication session tab ID: %s", userSessionId, client.getClientId(), authSession.getTabId());
            }
        } else {
            authSession = createNewAuthenticationSession(manager, client);
        }
    }
    session.getProvider(LoginFormsProvider.class).setAuthenticationSession(authSession);
    return authSession;
}

Example 63 with UserModel

use of org.keycloak.models.UserModel in project keycloak by keycloak.

the class ClientsPartialImport method remove.

@Override
public void remove(RealmModel realm, KeycloakSession session, ClientRepresentation clientRep) {
    ClientModel clientModel = realm.getClientByClientId(getName(clientRep));
    // remove the associated service account if the account exists
    if (clientModel.isServiceAccountsEnabled()) {
        UserModel serviceAccountUser = session.users().getServiceAccount(clientModel);
        if (serviceAccountUser != null) {
            session.users().removeUser(realm, serviceAccountUser);
        }
    }
    // the authorization resource server seems to be removed using the delete event, so it's not needed
    // remove the client itself
    realm.removeClient(clientModel.getId());
}

Example 64 with UserModel

use of org.keycloak.models.UserModel in project keycloak by keycloak.

the class AccessTokenIntrospectionProvider method introspect.

public Response introspect(String token) {
    try {
        AccessToken accessToken = verifyAccessToken(token);
        ObjectNode tokenMetadata;
        if (accessToken != null) {
            tokenMetadata = JsonSerialization.createObjectNode(accessToken);
            tokenMetadata.put("client_id", accessToken.getIssuedFor());
            if (!tokenMetadata.has("username")) {
                if (accessToken.getPreferredUsername() != null) {
                    tokenMetadata.put("username", accessToken.getPreferredUsername());
                } else {
                    UserModel userModel = session.users().getUserById(realm, accessToken.getSubject());
                    if (userModel != null) {
                        tokenMetadata.put("username", userModel.getUsername());
                    }
                }
            }
        } else {
            tokenMetadata = JsonSerialization.createObjectNode();
        }
        tokenMetadata.put("active", accessToken != null);
        return Response.ok(JsonSerialization.writeValueAsBytes(tokenMetadata)).type(MediaType.APPLICATION_JSON_TYPE).build();
    } catch (Exception e) {
        throw new RuntimeException("Error creating token introspection response.", e);
    }
}

Example 65 with UserModel

use of org.keycloak.models.UserModel in project keycloak by keycloak.

the class UserStorageManager method getUserById.

/**
 * {@link UserRegistrationProvider} methods implementations end here
 *        {@link UserLookupProvider} methods implementations start here
 */
@Override
public UserModel getUserById(RealmModel realm, String id) {
    StorageId storageId = new StorageId(id);
    if (storageId.getProviderId() == null) {
        UserModel user = localStorage().getUserById(realm, id);
        return importValidation(realm, user);
    }
    UserLookupProvider provider = getStorageProviderInstance(realm, storageId.getProviderId(), UserLookupProvider.class);
    if (provider == null)
        return null;
    return provider.getUserById(realm, id);
}