Examples with ClaimsRepresentation org.keycloak.representations.ClaimsRepresentation used on opensource projects

Example 1 with ClaimsRepresentation

use of org.keycloak.representations.ClaimsRepresentation in project keycloak by keycloak.

the class JsonParserTest method testReadClaimsParameter.

@Test
public void testReadClaimsParameter() throws Exception {
    InputStream is = getClass().getClassLoader().getResourceAsStream("sample-claims.json");
    ClaimsRepresentation claimsRep = JsonSerialization.readValue(is, ClaimsRepresentation.class);
    Assert.assertTrue(claimsRep.isPresent("auth_time", ClaimsRepresentation.ClaimContext.ID_TOKEN));
    Assert.assertFalse(claimsRep.isPresent("auth_time", ClaimsRepresentation.ClaimContext.USERINFO));
    Assert.assertFalse(claimsRep.isPresentAsNullClaim("auth_time", ClaimsRepresentation.ClaimContext.ID_TOKEN));
    Assert.assertTrue(claimsRep.isPresentAsNullClaim("nickname", ClaimsRepresentation.ClaimContext.USERINFO));
    Assert.assertNull(claimsRep.getClaimValue("nickname", ClaimsRepresentation.ClaimContext.USERINFO, String.class));
    ClaimsRepresentation.ClaimValue<String> email = claimsRep.getClaimValue("email", ClaimsRepresentation.ClaimContext.USERINFO, String.class);
    assertClaimValue(email, true, null);
    ClaimsRepresentation.ClaimValue<Boolean> emailVerified = claimsRep.getClaimValue("email_verified", ClaimsRepresentation.ClaimContext.USERINFO, Boolean.class);
    assertClaimValue(emailVerified, true, null);
    Assert.assertTrue(emailVerified.isEssential());
    emailVerified = claimsRep.getClaimValue("email_verified", ClaimsRepresentation.ClaimContext.ID_TOKEN, Boolean.class);
    assertClaimValue(emailVerified, false, true);
    Assert.assertFalse(emailVerified.isEssential());
    ClaimsRepresentation.ClaimValue<String> sub = claimsRep.getClaimValue("sub", ClaimsRepresentation.ClaimContext.ID_TOKEN, String.class);
    assertClaimValue(sub, null, "248289761001");
    Assert.assertFalse(sub.isEssential());
    ClaimsRepresentation.ClaimValue<String> acr = claimsRep.getClaimValue("acr", ClaimsRepresentation.ClaimContext.ID_TOKEN, String.class);
    assertClaimValue(acr, null, null, "urn:mace:incommon:iap:silver", "urn:mace:incommon:iap:gold");
}

Example 2 with ClaimsRepresentation

use of org.keycloak.representations.ClaimsRepresentation in project keycloak by keycloak.

the class JavascriptAdapterTest method testAcrInLoginOptionsShouldBeConsideredByLoginUrl.

/**
 * Test for acr handling via {@code loginOptions}: <pre>{@code
 * Keycloak keycloak = new Keycloak(); keycloak.login({.... acr: { values: ["foo", "bar"], essential: false}})
 * }</pre>
 */
@Test
public void testAcrInLoginOptionsShouldBeConsideredByLoginUrl() {
    // Test when no "acr" option given. Claims parameter won't be passed to Keycloak server
    testExecutor.configure().init(defaultArguments());
    JSObjectBuilder loginOptions = JSObjectBuilder.create();
    testExecutor.login(loginOptions, (JavascriptStateValidator) (driver, output, events) -> {
        try {
            String queryString = new URL(driver.getCurrentUrl()).getQuery();
            String claimsParam = UriUtils.decodeQueryString(queryString).getFirst(OIDCLoginProtocol.CLAIMS_PARAM);
            Assert.assertNull(claimsParam);
        } catch (IOException ioe) {
            throw new AssertionError(ioe);
        }
    });
    // Test given "acr" option will be translated into the "claims" parameter passed to Keycloak server
    jsDriver.navigate().to(testAppUrl);
    testExecutor.configure().init(defaultArguments());
    JSObjectBuilder acr1 = JSObjectBuilder.create().add("values", new String[] { "foo", "bar" }).add("essential", false);
    loginOptions = JSObjectBuilder.create().add("acr", acr1);
    testExecutor.login(loginOptions, (JavascriptStateValidator) (driver, output, events) -> {
        try {
            String queryString = new URL(driver.getCurrentUrl()).getQuery();
            String claimsParam = UriUtils.decodeQueryString(queryString).getFirst(OIDCLoginProtocol.CLAIMS_PARAM);
            Assert.assertNotNull(claimsParam);
            ClaimsRepresentation claimsRep = JsonSerialization.readValue(claimsParam, ClaimsRepresentation.class);
            ClaimsRepresentation.ClaimValue<String> claimValue = claimsRep.getClaimValue(IDToken.ACR, ClaimsRepresentation.ClaimContext.ID_TOKEN, String.class);
            Assert.assertNames(claimValue.getValues(), "foo", "bar");
            Assert.assertThat(claimValue.isEssential(), is(false));
        } catch (IOException ioe) {
            throw new AssertionError(ioe);
        }
    });
}

Example 3 with ClaimsRepresentation

use of org.keycloak.representations.ClaimsRepresentation in project keycloak by keycloak.

the class LevelOfAssuranceFlowTest method openLoginFormWithAcrClaim.

public static void openLoginFormWithAcrClaim(OAuthClient oauth, boolean essential, String... acrValues) {
    ClaimsRepresentation.ClaimValue<String> acrClaim = new ClaimsRepresentation.ClaimValue<>();
    acrClaim.setEssential(essential);
    acrClaim.setValues(Arrays.asList(acrValues));
    ClaimsRepresentation claims = new ClaimsRepresentation();
    claims.setIdTokenClaims(Collections.singletonMap(IDToken.ACR, acrClaim));
    oauth.claims(claims);
    oauth.openLoginForm();
}