Examples with PolicyRepresentation org.keycloak.representations.idm.authorization.PolicyRepresentation used on opensource projects

Example 71 with PolicyRepresentation

use of org.keycloak.representations.idm.authorization.PolicyRepresentation in project quarkus by quarkusio.

the class KeycloakTestResource method configureClaimBasedPermission.

private static void configureClaimBasedPermission(ResourceServerRepresentation settings) {
    PolicyRepresentation policy = createJSPolicy("Claim-Based Policy", "var context = $evaluation.getContext();\n" + "var attributes = context.getAttributes();\n" + "\n" + "if (attributes.containsValue('grant', 'true')) {\n" + "    $evaluation.grant();\n" + "}", settings);
    createPermission(settings, createResource(settings, "Claim Protected Resource", "/api/permission/claim-protected"), policy);
}

Example 72 with PolicyRepresentation

use of org.keycloak.representations.idm.authorization.PolicyRepresentation in project quarkus by quarkusio.

the class KeycloakTestResource method configurePermissionResourcePermission.

private static void configurePermissionResourcePermission(ResourceServerRepresentation settings) {
    PolicyRepresentation policyConfidential = createJSPolicy("Confidential Policy", "var identity = $evaluation.context.identity;\n" + "\n" + "if (identity.hasRealmRole(\"confidential\")) {\n" + "$evaluation.grant();\n" + "}", settings);
    createPermission(settings, createResource(settings, "Permission Resource", "/api/permission"), policyConfidential);
    PolicyRepresentation policyAdmin = createJSPolicy("Admin Policy", "var identity = $evaluation.context.identity;\n" + "\n" + "if (identity.hasRealmRole(\"admin\")) {\n" + "$evaluation.grant();\n" + "}", settings);
    createPermission(settings, createResource(settings, "Permission Resource Tenant", "/api-permission-tenant"), policyAdmin);
    PolicyRepresentation policyUser = createJSPolicy("Superuser Policy", "var identity = $evaluation.context.identity;\n" + "\n" + "if (identity.hasRealmRole(\"superuser\")) {\n" + "$evaluation.grant();\n" + "}", settings);
    createPermission(settings, createResource(settings, "Permission Resource WebApp", "/api-permission-webapp"), policyUser);
}

Example 73 with PolicyRepresentation

use of org.keycloak.representations.idm.authorization.PolicyRepresentation in project quarkus by quarkusio.

the class KeycloakTestResource method configureBodyClaimBasedPermission.

private static void configureBodyClaimBasedPermission(ResourceServerRepresentation settings) {
    PolicyRepresentation policy = createJSPolicy("Body Claim-Based Policy", "var context = $evaluation.getContext();\n" + "print(context.getAttributes().toMap());" + "var attributes = context.getAttributes();\n" + "\n" + "if (attributes.containsValue('from-body', 'grant')) {\n" + "    $evaluation.grant();\n" + "}", settings);
    createPermission(settings, createResource(settings, "Body Claim Protected Resource", "/api/permission/body-claim"), policy);
}

Example 74 with PolicyRepresentation

use of org.keycloak.representations.idm.authorization.PolicyRepresentation in project quarkus by quarkusio.

the class KeycloakTestResource method createScopePermission.

private static void createScopePermission(ResourceServerRepresentation settings, ResourceRepresentation resource, PolicyRepresentation policy, String scope) {
    PolicyRepresentation permission = new PolicyRepresentation();
    permission.setName(resource.getName() + " Permission");
    permission.setType("scope");
    permission.setResources(new HashSet<>());
    permission.getResources().add(resource.getName());
    permission.setScopes(new HashSet<>());
    permission.getScopes().add(scope);
    permission.setPolicies(new HashSet<>());
    permission.getPolicies().add(policy.getName());
    settings.getPolicies().add(permission);
}

Example 75 with PolicyRepresentation

use of org.keycloak.representations.idm.authorization.PolicyRepresentation in project quarkus by quarkusio.

the class KeycloakTestResource method configureScopePermission.

private static void configureScopePermission(ResourceServerRepresentation settings) {
    PolicyRepresentation policy = createJSPolicy("Grant Policy", "$evaluation.grant();", settings);
    createScopePermission(settings, createResource(settings, "Scope Permission Resource", "/api/permission/scope", "read", "write"), policy, "read");
}