Examples with AccessToken org.keycloak.representations.AccessToken used on opensource projects

Example 46 with AccessToken

use of org.keycloak.representations.AccessToken in project keycloak by keycloak.

the class RSAVerifierTest method testSimpleVerification.

@Test
public void testSimpleVerification() throws Exception {
    String encoded = new JWSBuilder().jsonContent(token).rsa256(idpPair.getPrivate());
    System.out.print("encoded size: " + encoded.length());
    AccessToken token = verifySkeletonKeyToken(encoded);
    Assert.assertTrue(token.getResourceAccess("service").getRoles().contains("admin"));
    Assert.assertEquals("CN=Client", token.getSubject());
}

Example 47 with AccessToken

use of org.keycloak.representations.AccessToken in project keycloak by keycloak.

the class RSAVerifierTest method testBadSignature.

@Test
public void testBadSignature() {
    String encoded = new JWSBuilder().jsonContent(token).rsa256(badPair.getPrivate());
    AccessToken v = null;
    try {
        v = verifySkeletonKeyToken(encoded);
        Assert.fail();
    } catch (VerificationException ignored) {
    }
}

Example 48 with AccessToken

use of org.keycloak.representations.AccessToken in project keycloak by keycloak.

the class SkeletonKeyTokenTest method createSimpleToken.

private AccessToken createSimpleToken() {
    AccessToken token = new AccessToken();
    token.id("111");
    token.issuer("http://localhost:8080/auth/acme");
    token.addAccess("foo").addRole("admin");
    token.addAccess("bar").addRole("user");
    return token;
}

Example 49 with AccessToken

use of org.keycloak.representations.AccessToken in project keycloak by keycloak.

the class SkeletonKeyTokenTest method testTokenWithoutResourceAccess.

@Test
public void testTokenWithoutResourceAccess() throws Exception {
    AccessToken token = new AccessToken();
    token.id("111");
    token.issuer("http://localhost:8080/auth/acme");
    String json = JsonSerialization.writeValueAsString(token);
    // Assert JSON doesn't contain "realm_access" or "resource_access" fields as it doesn't have any roles specified
    Assert.assertFalse(json.contains("realm_access"));
    Assert.assertFalse(json.contains("resource_access"));
    token = JsonSerialization.readValue(json, AccessToken.class);
    Assert.assertNull(token.getRealmAccess());
    Assert.assertTrue(token.getResourceAccess() != null && token.getResourceAccess().isEmpty());
    Assert.assertNull(token.getResourceAccess("foo"));
}

Example 50 with AccessToken

use of org.keycloak.representations.AccessToken in project keycloak by keycloak.

the class GSSCredentialsClient method getUserFromLDAP.

public static LDAPUser getUserFromLDAP(HttpServletRequest req) throws Exception {
    KeycloakPrincipal keycloakPrincipal = (KeycloakPrincipal) req.getUserPrincipal();
    AccessToken accessToken = keycloakPrincipal.getKeycloakSecurityContext().getToken();
    String username = accessToken.getPreferredUsername();
    // Retrieve kerberos credential from accessToken and deserialize it
    String serializedGssCredential = (String) accessToken.getOtherClaims().get(KerberosConstants.GSS_DELEGATION_CREDENTIAL);
    GSSCredential deserializedGssCredential = KerberosSerializationUtils.deserializeCredential(serializedGssCredential);
    // First try to invoke without gssCredential. It should fail. This is here just for illustration purposes
    try {
        invokeLdap(null, username);
        throw new RuntimeException("Not expected to authenticate to LDAP without credential");
    } catch (NamingException nse) {
        System.out.println("GSSCredentialsClient: Expected exception: " + nse.getMessage());
    }
    return invokeLdap(deserializedGssCredential, username);
}