Examples with IDToken org.keycloak.representations.IDToken used on opensource projects

Example 46 with IDToken

use of org.keycloak.representations.IDToken in project keycloak by keycloak.

the class RefreshableKeycloakSecurityContextTest method testSerialization.

@Test
public void testSerialization() throws Exception {
    AccessToken token = createSimpleToken();
    IDToken idToken = new IDToken();
    idToken.setEmail("joe@email.cz");
    KeyPair keyPair = KeyPairGenerator.getInstance("RSA").generateKeyPair();
    String encoded = new JWSBuilder().jsonContent(token).rsa256(keyPair.getPrivate());
    String encodedIdToken = new JWSBuilder().jsonContent(idToken).rsa256(keyPair.getPrivate());
    KeycloakDeployment keycloakDeployment = new KeycloakDeployment();
    keycloakDeployment.setNotBefore(5000);
    KeycloakSecurityContext ctx = new RefreshableKeycloakSecurityContext(keycloakDeployment, null, encoded, token, encodedIdToken, null, null);
    KeycloakPrincipal principal = new KeycloakPrincipal("joe", ctx);
    // Serialize
    ByteArrayOutputStream bso = new ByteArrayOutputStream();
    ObjectOutputStream oos = new ObjectOutputStream(bso);
    oos.writeObject(principal);
    oos.close();
    // Deserialize
    byte[] bytes = bso.toByteArray();
    ByteArrayInputStream bis = new ByteArrayInputStream(bytes);
    ObjectInputStream ois = new ObjectInputStream(bis);
    principal = (KeycloakPrincipal) ois.readObject();
    ctx = principal.getKeycloakSecurityContext();
    token = ctx.getToken();
    idToken = ctx.getIdToken();
    System.out.println("Size of serialized principal: " + bytes.length);
    Assert.assertEquals(encoded, ctx.getTokenString());
    Assert.assertEquals(encodedIdToken, ctx.getIdTokenString());
    Assert.assertEquals("111", token.getId());
    Assert.assertEquals("111", token.getId());
    Assert.assertTrue(token.getResourceAccess("foo").isUserInRole("admin"));
    Assert.assertTrue(token.getResourceAccess("bar").isUserInRole("user"));
    Assert.assertEquals("joe@email.cz", idToken.getEmail());
    Assert.assertEquals("acme", ctx.getRealm());
    ois.close();
}

Example 47 with IDToken

use of org.keycloak.representations.IDToken in project keycloak by keycloak.

the class JsonParserTest method testUnwrap.

@Test
public void testUnwrap() throws Exception {
    // just experimenting with unwrapped and any properties
    IDToken test = new IDToken();
    test.getOtherClaims().put("phone_number", "978-666-0000");
    test.getOtherClaims().put("email_verified", "true");
    test.getOtherClaims().put("yo", "true");
    Map<String, String> nested = new HashMap<String, String>();
    nested.put("foo", "bar");
    test.getOtherClaims().put("nested", nested);
    String json = JsonSerialization.writeValueAsPrettyString(test);
    System.out.println(json);
    test = JsonSerialization.readValue(json, IDToken.class);
    System.out.println("email_verified property: " + test.getEmailVerified());
    System.out.println("property: " + test.getPhoneNumber());
    System.out.println("map: " + test.getOtherClaims().get("phone_number"));
    Assert.assertNotNull(test.getPhoneNumber());
    Assert.assertNotNull(test.getOtherClaims().get("yo"));
    Assert.assertNull(test.getOtherClaims().get("phone_number"));
    nested = (Map<String, String>) test.getOtherClaims().get("nested");
    Assert.assertNotNull(nested);
    Assert.assertNotNull(nested.get("foo"));
}

Example 48 with IDToken

use of org.keycloak.representations.IDToken in project keycloak by keycloak.

the class LDAPPictureServlet method doGet.

@Override
protected void doGet(HttpServletRequest req, HttpServletResponse resp) throws ServletException, IOException {
    resp.setContentType("image/jpeg");
    ServletOutputStream outputStream = resp.getOutputStream();
    KeycloakSecurityContext securityContext = (KeycloakSecurityContext) req.getAttribute(KeycloakSecurityContext.class.getName());
    IDToken idToken = securityContext.getIdToken();
    String profilePicture = idToken.getPicture();
    if (profilePicture != null) {
        byte[] decodedPicture = Base64.decode(profilePicture);
        outputStream.write(decodedPicture);
    }
    outputStream.flush();
}

Example 49 with IDToken

use of org.keycloak.representations.IDToken in project keycloak by keycloak.

the class SkeletonKeyTokenTest method testSerialization.

@Test
public void testSerialization() throws Exception {
    AccessToken token = createSimpleToken();
    IDToken idToken = new IDToken();
    idToken.setEmail("joe@email.cz");
    KeyPair keyPair = KeyPairGenerator.getInstance("RSA").generateKeyPair();
    String encoded = new JWSBuilder().jsonContent(token).rsa256(keyPair.getPrivate());
    String encodedIdToken = new JWSBuilder().jsonContent(idToken).rsa256(keyPair.getPrivate());
    KeycloakSecurityContext ctx = new KeycloakSecurityContext(encoded, token, encodedIdToken, idToken);
    KeycloakPrincipal principal = new KeycloakPrincipal("joe", ctx);
    // Serialize
    ByteArrayOutputStream bso = new ByteArrayOutputStream();
    ObjectOutputStream oos = new ObjectOutputStream(bso);
    oos.writeObject(principal);
    oos.close();
    // Deserialize
    byte[] bytes = bso.toByteArray();
    ByteArrayInputStream bis = new ByteArrayInputStream(bytes);
    ObjectInputStream ois = new ObjectInputStream(bis);
    principal = (KeycloakPrincipal) ois.readObject();
    ctx = principal.getKeycloakSecurityContext();
    token = ctx.getToken();
    idToken = ctx.getIdToken();
    System.out.println("Size of serialized principal: " + bytes.length);
    Assert.assertEquals(encoded, ctx.getTokenString());
    Assert.assertEquals(encodedIdToken, ctx.getIdTokenString());
    Assert.assertEquals("111", token.getId());
    Assert.assertEquals("111", token.getId());
    Assert.assertTrue(token.getResourceAccess("foo").isUserInRole("admin"));
    Assert.assertTrue(token.getResourceAccess("bar").isUserInRole("user"));
    Assert.assertEquals("joe@email.cz", idToken.getEmail());
    Assert.assertEquals("acme", ctx.getRealm());
    ois.close();
}

Example 50 with IDToken

use of org.keycloak.representations.IDToken in project keycloak by keycloak.

the class ClaimInformationPointProviderTest method createHttpFacade.

private HttpFacade createHttpFacade(Map<String, List<String>> headers, InputStream requestBody) {
    return new OIDCHttpFacade() {

        private Request request;

        @Override
        public KeycloakSecurityContext getSecurityContext() {
            AccessToken token = new AccessToken();
            token.subject("sub");
            token.setPreferredUsername("username");
            token.getOtherClaims().put("custom_claim", Arrays.asList("param-other-claims-value1", "param-other-claims-value2"));
            IDToken idToken = new IDToken();
            idToken.subject("sub");
            idToken.setPreferredUsername("username");
            idToken.getOtherClaims().put("custom_claim", Arrays.asList("param-other-claims-value1", "param-other-claims-value2"));
            return new KeycloakSecurityContext("tokenString", token, "idTokenString", idToken);
        }

        @Override
        public Request getRequest() {
            if (request == null) {
                request = createHttpRequest(headers, requestBody);
            }
            return request;
        }

        @Override
        public Response getResponse() {
            return createHttpResponse();
        }

        @Override
        public X509Certificate[] getCertificateChain() {
            return new X509Certificate[0];
        }
    };
}