Examples with TokenUtil org.keycloak.testsuite.util.TokenUtil used on opensource projects

Example 26 with TokenUtil

use of org.keycloak.testsuite.util.TokenUtil in project keycloak by keycloak.

the class AccountRestServiceTest method listApplicationsThirdParty.

@Test
public void listApplicationsThirdParty() throws Exception {
    String appId = "third-party";
    TokenUtil token = new TokenUtil("view-applications-access", "password");
    ClientScopeRepresentation clientScopeRepresentation = testRealm().clientScopes().findAll().get(0);
    ConsentScopeRepresentation consentScopeRepresentation = new ConsentScopeRepresentation();
    consentScopeRepresentation.setId(clientScopeRepresentation.getId());
    ConsentRepresentation requestedConsent = new ConsentRepresentation();
    requestedConsent.setGrantedScopes(Collections.singletonList(consentScopeRepresentation));
    SimpleHttp.doPost(getAccountUrl("applications/" + appId + "/consent"), httpClient).header("Accept", "application/json").json(requestedConsent).auth(token.getToken()).asJson(ConsentRepresentation.class);
    List<ClientRepresentation> applications = SimpleHttp.doGet(getAccountUrl("applications"), httpClient).header("Accept", "application/json").auth(token.getToken()).asJson(new TypeReference<List<ClientRepresentation>>() {
    });
    assertFalse(applications.isEmpty());
    SimpleHttp.doDelete(getAccountUrl("applications/" + appId + "/consent"), httpClient).header("Accept", "application/json").auth(token.getToken()).asResponse();
    Map<String, ClientRepresentation> apps = applications.stream().collect(Collectors.toMap(x -> x.getClientId(), x -> x));
    Assert.assertThat(apps.keySet(), containsInAnyOrder(appId, "always-display-client", "direct-grant"));
    ClientRepresentation app = apps.get(appId);
    assertClientRep(app, null, "A third party application", true, false, false, null, "http://localhost:8180/auth/realms/master/app/auth");
    assertFalse(app.getConsent().getGrantedScopes().isEmpty());
    ConsentScopeRepresentation grantedScope = app.getConsent().getGrantedScopes().get(0);
    assertEquals(clientScopeRepresentation.getId(), grantedScope.getId());
    assertEquals(clientScopeRepresentation.getName(), grantedScope.getName());
}

Example 27 with TokenUtil

use of org.keycloak.testsuite.util.TokenUtil in project keycloak by keycloak.

the class ResourcesRestServiceTest method testEndpointPermissions.

@Test
public void testEndpointPermissions() throws Exception {
    // resource for view-account-access
    String resourceId;
    ResourceRepresentation resource = new ResourceRepresentation();
    resource.setOwnerManagedAccess(true);
    resource.setOwner(findUser("view-account-access").getId());
    resource.setName("Resource view-account-access");
    resource.setDisplayName("Display Name view-account-access");
    resource.setIconUri("Icon Uri view-account-access");
    resource.addScope("Scope A", "Scope B", "Scope C", "Scope D");
    resource.setUri("http://resourceServer.com/resources/view-account-access");
    try (Response response1 = getResourceServer().authorization().resources().create(resource)) {
        resourceId = response1.readEntity(ResourceRepresentation.class).getId();
    }
    final String resourcesUrl = getAccountUrl("resources");
    final String sharedWithOthersUrl = resourcesUrl + "/shared-with-others";
    final String sharedWithMeUrl = resourcesUrl + "/shared-with-me";
    final String resourceUrl = resourcesUrl + "/" + resourceId;
    final String permissionsUrl = resourceUrl + "/permissions";
    final String requestsUrl = resourceUrl + "/permissions/requests";
    TokenUtil viewProfileTokenUtil = new TokenUtil("view-account-access", "password");
    TokenUtil noAccessTokenUtil = new TokenUtil("no-account-access", "password");
    // test read access
    for (String url : Arrays.asList(resourcesUrl, sharedWithOthersUrl, sharedWithMeUrl, resourceUrl, permissionsUrl, requestsUrl)) {
        assertEquals("no-account-access GET " + url, 403, SimpleHttp.doGet(url, httpClient).acceptJson().auth(noAccessTokenUtil.getToken()).asStatus());
        assertEquals("view-account-access GET " + url, 200, SimpleHttp.doGet(url, httpClient).acceptJson().auth(viewProfileTokenUtil.getToken()).asStatus());
    }
    // test write access
    assertEquals("no-account-access PUT " + permissionsUrl, 403, SimpleHttp.doPut(permissionsUrl, httpClient).acceptJson().auth(noAccessTokenUtil.getToken()).json(Collections.emptyList()).asStatus());
    assertEquals("view-account-access PUT " + permissionsUrl, 403, SimpleHttp.doPut(permissionsUrl, httpClient).acceptJson().auth(viewProfileTokenUtil.getToken()).json(Collections.emptyList()).asStatus());
}

Example 28 with TokenUtil

use of org.keycloak.testsuite.util.TokenUtil in project keycloak by keycloak.

the class AccountRestServiceTest method createConsentForClient.

@Test
public void createConsentForClient() throws IOException {
    TokenUtil token = new TokenUtil("manage-consent-access", "password");
    String appId = "security-admin-console";
    ClientScopeRepresentation clientScopeRepresentation = testRealm().clientScopes().findAll().get(0);
    ConsentScopeRepresentation consentScopeRepresentation = new ConsentScopeRepresentation();
    consentScopeRepresentation.setId(clientScopeRepresentation.getId());
    ConsentRepresentation requestedConsent = new ConsentRepresentation();
    requestedConsent.setGrantedScopes(Collections.singletonList(consentScopeRepresentation));
    ConsentRepresentation consentRepresentation = SimpleHttp.doPost(getAccountUrl("applications/" + appId + "/consent"), httpClient).header("Accept", "application/json").json(requestedConsent).auth(token.getToken()).asJson(ConsentRepresentation.class);
    assertTrue(consentRepresentation.getCreatedDate() > 0);
    assertTrue(consentRepresentation.getLastUpdatedDate() > 0);
    assertEquals(1, consentRepresentation.getGrantedScopes().size());
    assertEquals(consentScopeRepresentation.getId(), consentRepresentation.getGrantedScopes().get(0).getId());
}

Example 29 with TokenUtil

use of org.keycloak.testsuite.util.TokenUtil in project keycloak by keycloak.

the class SessionRestServiceTest method testProfilePreviewPermissions.

@Test
public void testProfilePreviewPermissions() throws IOException {
    TokenUtil noaccessToken = new TokenUtil("no-account-access", "password");
    TokenUtil viewToken = new TokenUtil("view-account-access", "password");
    // Read sessions with no access
    assertEquals(403, SimpleHttp.doGet(getAccountUrl("sessions"), httpClient).header("Accept", "application/json").auth(noaccessToken.getToken()).asStatus());
    // Delete all sessions with no access
    assertEquals(403, SimpleHttp.doDelete(getAccountUrl("sessions"), httpClient).header("Accept", "application/json").auth(noaccessToken.getToken()).asStatus());
    // Delete all sessions with read only
    assertEquals(403, SimpleHttp.doDelete(getAccountUrl("sessions"), httpClient).header("Accept", "application/json").auth(viewToken.getToken()).asStatus());
    // Delete single session with no access
    assertEquals(403, SimpleHttp.doDelete(getAccountUrl("sessions/bogusId"), httpClient).header("Accept", "application/json").auth(noaccessToken.getToken()).asStatus());
    // Delete single session with read only
    assertEquals(403, SimpleHttp.doDelete(getAccountUrl("sessions/bogusId"), httpClient).header("Accept", "application/json").auth(viewToken.getToken()).asStatus());
}