Examples with ComponentExportRepresentation org.keycloak.representations.idm.ComponentExportRepresentation used on opensource projects

Example 6 with ComponentExportRepresentation

use of org.keycloak.representations.idm.ComponentExportRepresentation in project keycloak by keycloak.

the class StripSecretsUtils method strip.

public static ComponentExportRepresentation strip(KeycloakSession session, String providerType, ComponentExportRepresentation rep) {
    Map<String, ProviderConfigProperty> configProperties = ComponentUtil.getComponentConfigProperties(session, providerType, rep.getProviderId());
    if (rep.getConfig() == null) {
        return rep;
    }
    Iterator<Map.Entry<String, List<String>>> itr = rep.getConfig().entrySet().iterator();
    while (itr.hasNext()) {
        Map.Entry<String, List<String>> next = itr.next();
        ProviderConfigProperty configProperty = configProperties.get(next.getKey());
        if (configProperty != null) {
            if (configProperty.isSecret()) {
                if (next.getValue() == null || next.getValue().isEmpty()) {
                    next.setValue(Collections.singletonList(ComponentRepresentation.SECRET_VALUE));
                } else {
                    next.setValue(next.getValue().stream().map(StripSecretsUtils::maskNonVaultValue).collect(Collectors.toList()));
                }
            }
        } else {
            itr.remove();
        }
    }
    MultivaluedHashMap<String, ComponentExportRepresentation> sub = rep.getSubComponents();
    for (Map.Entry<String, List<ComponentExportRepresentation>> ent : sub.entrySet()) {
        for (ComponentExportRepresentation c : ent.getValue()) {
            strip(session, ent.getKey(), c);
        }
    }
    return rep;
}

Example 7 with ComponentExportRepresentation

use of org.keycloak.representations.idm.ComponentExportRepresentation in project keycloak by keycloak.

the class PartialExportTest method checkSecretsAreMasked.

private void checkSecretsAreMasked(RealmRepresentation rep) {
    // Client secret
    for (ClientRepresentation client : rep.getClients()) {
        if (Boolean.FALSE.equals(client.isPublicClient()) && Boolean.FALSE.equals(client.isBearerOnly())) {
            Assert.assertEquals("Client secret masked", ComponentRepresentation.SECRET_VALUE, client.getSecret());
        }
    }
    // IdentityProvider clientSecret
    for (IdentityProviderRepresentation idp : rep.getIdentityProviders()) {
        Assert.assertEquals("IdentityProvider clientSecret masked", ComponentRepresentation.SECRET_VALUE, idp.getConfig().get("clientSecret"));
    }
    // smtpServer password
    Assert.assertEquals("SMTP password masked", ComponentRepresentation.SECRET_VALUE, rep.getSmtpServer().get("password"));
    // components rsa KeyProvider privateKey
    MultivaluedHashMap<String, ComponentExportRepresentation> components = rep.getComponents();
    List<ComponentExportRepresentation> keys = components.get("org.keycloak.keys.KeyProvider");
    Assert.assertNotNull("Keys not null", keys);
    Assert.assertTrue("At least one key returned", keys.size() > 0);
    boolean found = false;
    for (ComponentExportRepresentation component : keys) {
        if ("rsa".equals(component.getProviderId())) {
            Assert.assertEquals("RSA KeyProvider privateKey masked", ComponentRepresentation.SECRET_VALUE, component.getConfig().getFirst("privateKey"));
            found = true;
        }
    }
    Assert.assertTrue("Found rsa private key", found);
    // components ldap UserStorageProvider bindCredential
    List<ComponentExportRepresentation> userStorage = components.get("org.keycloak.storage.UserStorageProvider");
    Assert.assertNotNull("UserStorageProvider not null", userStorage);
    Assert.assertTrue("At least one UserStorageProvider returned", userStorage.size() > 0);
    found = false;
    for (ComponentExportRepresentation component : userStorage) {
        if ("ldap".equals(component.getProviderId())) {
            Assert.assertEquals("LDAP provider bindCredential masked", ComponentRepresentation.SECRET_VALUE, component.getConfig().getFirst("bindCredential"));
            found = true;
        }
    }
    Assert.assertTrue("Found ldap bindCredential", found);
}