Examples with AuthorizationEndpointResponse org.keycloak.testsuite.util.OAuthClient.AuthorizationEndpointResponse used on opensource projects

Example 1 with AuthorizationEndpointResponse

use of org.keycloak.testsuite.util.OAuthClient.AuthorizationEndpointResponse in project keycloak by keycloak.

the class CookieTest method testCookieValue.

private void testCookieValue(String cookieName) throws Exception {
    final String accountClientId = realmsResouce().realm("test").clients().findByClientId("account").get(0).getId();
    final String clientSecret = realmsResouce().realm("test").clients().get(accountClientId).getSecret().getValue();
    AuthorizationEndpointResponse codeResponse = oauth.clientId("account").redirectUri(accountPage.buildUri().toString()).doLogin("test-user@localhost", "password");
    OAuthClient.AccessTokenResponse accTokenResp = oauth.doAccessTokenRequest(codeResponse.getCode(), clientSecret);
    String accessToken = accTokenResp.getAccessToken();
    accountPage.navigateTo();
    accountPage.assertCurrent();
    try (CloseableHttpClient hc = OAuthClient.newCloseableHttpClient()) {
        BasicCookieStore cookieStore = new BasicCookieStore();
        BasicClientCookie cookie = new BasicClientCookie(cookieName, accessToken);
        cookie.setDomain("localhost");
        cookie.setPath("/");
        cookieStore.addCookie(cookie);
        HttpContext localContext = new BasicHttpContext();
        localContext.setAttribute(HttpClientContext.COOKIE_STORE, cookieStore);
        HttpGet get = new HttpGet(oauth.clientId("account").redirectUri(accountPage.buildUri().toString()).getLoginFormUrl());
        try (CloseableHttpResponse resp = hc.execute(get, localContext)) {
            final String pageContent = EntityUtils.toString(resp.getEntity());
            // Ensure that we did not get to the account page ...
            assertThat(pageContent, not(containsString("First name")));
            assertThat(pageContent, not(containsString("Last name")));
            // ... but were redirected to login page
            assertThat(pageContent, containsString("Sign In"));
            assertThat(pageContent, containsString("Forgot Password?"));
        }
    }
}

Example 2 with AuthorizationEndpointResponse

use of org.keycloak.testsuite.util.OAuthClient.AuthorizationEndpointResponse in project keycloak by keycloak.

the class CookieTest method testCookieValueLoggedOut.

@Test
public void testCookieValueLoggedOut() throws Exception {
    final String accountClientId = realmsResouce().realm("test").clients().findByClientId("account").get(0).getId();
    final String clientSecret = realmsResouce().realm("test").clients().get(accountClientId).getSecret().getValue();
    AuthorizationEndpointResponse codeResponse = oauth.clientId("account").redirectUri(accountPage.buildUri().toString()).doLogin("test-user@localhost", "password");
    OAuthClient.AccessTokenResponse accTokenResp = oauth.doAccessTokenRequest(codeResponse.getCode(), clientSecret);
    String accessToken = accTokenResp.getAccessToken();
    accountPage.navigateTo();
    accountPage.assertCurrent();
    accountPage.logOut();
    try (CloseableHttpClient hc = OAuthClient.newCloseableHttpClient()) {
        BasicCookieStore cookieStore = new BasicCookieStore();
        BasicClientCookie cookie = new BasicClientCookie(KEYCLOAK_IDENTITY_COOKIE, accessToken);
        cookie.setDomain("localhost");
        cookie.setPath("/");
        cookieStore.addCookie(cookie);
        HttpContext localContext = new BasicHttpContext();
        localContext.setAttribute(HttpClientContext.COOKIE_STORE, cookieStore);
        HttpGet get = new HttpGet(oauth.clientId("account").redirectUri(accountPage.buildUri().toString()).getLoginFormUrl());
        try (CloseableHttpResponse resp = hc.execute(get, localContext)) {
            final String pageContent = EntityUtils.toString(resp.getEntity());
            // Ensure that we did not get to the account page ...
            assertThat(pageContent, not(containsString("First name")));
            assertThat(pageContent, not(containsString("Last name")));
            // ... but were redirected to login page
            assertThat(pageContent, containsString("Sign In"));
            assertThat(pageContent, containsString("Forgot Password?"));
        }
    }
}

Example 3 with AuthorizationEndpointResponse

use of org.keycloak.testsuite.util.OAuthClient.AuthorizationEndpointResponse in project keycloak by keycloak.

the class ConsentsTest method clientConsentRequiredAfterLogin.

@Test
public void clientConsentRequiredAfterLogin() {
    oauth.realm(TEST_REALM_NAME).clientId("test-app");
    AuthorizationEndpointResponse response = oauth.doLogin("test-user@localhost", "password");
    AccessTokenResponse accessTokenResponse = oauth.doAccessTokenRequest(response.getCode(), "password");
    Assert.assertEquals(AppPage.RequestType.AUTH_RESPONSE, appPage.getRequestType());
    Assert.assertNotNull(oauth.getCurrentQuery().get(OAuth2Constants.CODE));
    EventRepresentation loginEvent = events.expectLogin().detail(Details.USERNAME, "test-user@localhost").assertEvent();
    String sessionId = loginEvent.getSessionId();
    ClientRepresentation clientRepresentation = adminClient.realm(TEST_REALM_NAME).clients().findByClientId("test-app").get(0);
    try {
        clientRepresentation.setConsentRequired(true);
        adminClient.realm(TEST_REALM_NAME).clients().get(clientRepresentation.getId()).update(clientRepresentation);
        events.clear();
        // try to refresh the token
        // this fails as client no longer has requested consent from user
        AccessTokenResponse refreshTokenResponse = oauth.doRefreshTokenRequest(accessTokenResponse.getRefreshToken(), "password");
        Assert.assertEquals(OAuthErrorException.INVALID_SCOPE, refreshTokenResponse.getError());
        Assert.assertEquals("Client no longer has requested consent from user", refreshTokenResponse.getErrorDescription());
        events.expectRefresh(accessTokenResponse.getRefreshToken(), sessionId).clearDetails().error(Errors.INVALID_TOKEN).assertEvent();
    } finally {
        clientRepresentation.setConsentRequired(false);
        adminClient.realm(TEST_REALM_NAME).clients().get(clientRepresentation.getId()).update(clientRepresentation);
    }
}