Examples with MutualTLSUtils org.keycloak.testsuite.util.MutualTLSUtils used on opensource projects

Example 1 with MutualTLSUtils

use of org.keycloak.testsuite.util.MutualTLSUtils in project keycloak by keycloak.

the class HoKTest method serviceAccountWithClientCertificate.

@Test
public void serviceAccountWithClientCertificate() throws Exception {
    oauth.clientId("service-account-client");
    AccessTokenResponse response;
    Supplier<CloseableHttpClient> previous = oauth.getHttpClient();
    try {
        // Request without HoK should fail
        oauth.httpClient(MutualTLSUtils::newCloseableHttpClientWithoutKeyStoreAndTrustStore);
        response = oauth.doClientCredentialsGrantAccessTokenRequest("secret1");
        assertEquals(400, response.getStatusCode());
        assertEquals(OAuthErrorException.INVALID_REQUEST, response.getError());
        assertEquals("Client Certification missing for MTLS HoK Token Binding", response.getErrorDescription());
        // Request with HoK - success
        oauth.httpClient(MutualTLSUtils::newCloseableHttpClientWithDefaultKeyStoreAndTrustStore);
        response = oauth.doClientCredentialsGrantAccessTokenRequest("secret1");
        assertEquals(200, response.getStatusCode());
        // Success Pattern
        verifyHoKTokenCertThumbPrint(response, MutualTLSUtils.getThumbprintFromDefaultClientCert(), false);
    } catch (IOException ioe) {
        throw new RuntimeException(ioe);
    } finally {
        oauth.httpClient(previous);
    }
}