KEYCLOAK-1187 Admin console and endpoints
This commit is contained in:
1 parent
9a047eda36
commit
4fbbf39c51
117 files changed
+1523
-1580
No files matched your search
@@ -62,7 +62,7 @@ public interface ClientModel extends RoleContainerModel {
|
||||
|
||||
void updateDefaultRoles(String[] defaultRoles);
|
||||
|
||||
Set<RoleModel> getApplicationScopeMappings(ClientModel client);
|
||||
Set<RoleModel> getClientScopeMappings(ClientModel client);
|
||||
|
||||
boolean isBearerOnly();
|
||||
void setBearerOnly(boolean only);
|
||||
|
||||
@@ -5,9 +5,9 @@ package org.keycloak.models;
|
||||
* @version $Revision: 1 $
|
||||
*/
|
||||
public interface Constants {
|
||||
String ADMIN_CONSOLE_APPLICATION = "security-admin-console";
|
||||
String ADMIN_CONSOLE_CLIENT_ID = "security-admin-console";
|
||||
|
||||
String ACCOUNT_MANAGEMENT_APP = "account";
|
||||
String ACCOUNT_MANAGEMENT_CLIENT_ID = "account";
|
||||
|
||||
String INSTALLED_APP_URN = "urn:ietf:wg:oauth:2.0:oob";
|
||||
String INSTALLED_APP_URL = "http://localhost";
|
||||
|
||||
@@ -232,9 +232,9 @@ public interface RealmModel extends RoleContainerModel {
|
||||
|
||||
void setEnabledEventTypes(Set<String> enabledEventTypes);
|
||||
|
||||
ClientModel getMasterAdminApp();
|
||||
ClientModel getMasterAdminClient();
|
||||
|
||||
void setMasterAdminApp(ClientModel app);
|
||||
void setMasterAdminClient(ClientModel client);
|
||||
|
||||
boolean isIdentityFederationEnabled();
|
||||
|
||||
|
||||
@@ -66,7 +66,7 @@ public interface UserModel {
|
||||
void updateCredentialDirectly(UserCredentialValueModel cred);
|
||||
|
||||
Set<RoleModel> getRealmRoleMappings();
|
||||
Set<RoleModel> getApplicationRoleMappings(ClientModel app);
|
||||
Set<RoleModel> getClientRoleMappings(ClientModel app);
|
||||
boolean hasRole(RoleModel role);
|
||||
void grantRole(RoleModel role);
|
||||
Set<RoleModel> getRoleMappings();
|
||||
|
||||
@@ -533,7 +533,7 @@ public class RepresentationToModel {
|
||||
if (resourceRep.isFullScopeAllowed() != null) {
|
||||
client.setFullScopeAllowed(resourceRep.isFullScopeAllowed());
|
||||
} else {
|
||||
client.setFullScopeAllowed(true);
|
||||
client.setFullScopeAllowed(!client.isConsentRequired());
|
||||
}
|
||||
if (resourceRep.getNodeReRegistrationTimeout() != null) {
|
||||
client.setNodeReRegistrationTimeout(resourceRep.getNodeReRegistrationTimeout());
|
||||
|
||||
@@ -152,8 +152,8 @@ public class UserModelDelegate implements UserModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationRoleMappings(ClientModel app) {
|
||||
return delegate.getApplicationRoleMappings(app);
|
||||
public Set<RoleModel> getClientRoleMappings(ClientModel app) {
|
||||
return delegate.getClientRoleMappings(app);
|
||||
}
|
||||
|
||||
@Override
|
||||
|
||||
@@ -565,7 +565,7 @@ public class ClientAdapter implements ClientModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationScopeMappings(ClientModel client) {
|
||||
public Set<RoleModel> getClientScopeMappings(ClientModel client) {
|
||||
Set<RoleModel> allScopes = client.getScopeMappings();
|
||||
|
||||
Set<RoleModel> appRoles = new HashSet<RoleModel>();
|
||||
|
||||
@@ -959,22 +959,22 @@ public class RealmAdapter implements RealmModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public ClientModel getMasterAdminApp() {
|
||||
public ClientModel getMasterAdminClient() {
|
||||
return this.masterAdminApp;
|
||||
}
|
||||
|
||||
@Override
|
||||
public void setMasterAdminApp(ClientModel app) {
|
||||
if (app == null) {
|
||||
public void setMasterAdminClient(ClientModel client) {
|
||||
if (client == null) {
|
||||
realm.setAdminAppId(null);
|
||||
this.masterAdminApp = null;
|
||||
} else {
|
||||
String appId = app.getId();
|
||||
String appId = client.getId();
|
||||
if (appId == null) {
|
||||
throw new IllegalStateException("Master Admin app not initialized.");
|
||||
}
|
||||
realm.setAdminAppId(appId);
|
||||
this.masterAdminApp = app;
|
||||
this.masterAdminApp = client;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
@@ -325,7 +325,7 @@ public class UserAdapter implements UserModel, Comparable {
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationRoleMappings(ClientModel app) {
|
||||
public Set<RoleModel> getClientRoleMappings(ClientModel app) {
|
||||
Set<RoleModel> result = new HashSet<RoleModel>();
|
||||
|
||||
for (RoleModel role : allRoles) {
|
||||
|
||||
Vendored
+1
-1
@@ -377,7 +377,7 @@ public class ClientAdapter implements ClientModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationScopeMappings(ClientModel client) {
|
||||
public Set<RoleModel> getClientScopeMappings(ClientModel client) {
|
||||
Set<RoleModel> roleMappings = client.getScopeMappings();
|
||||
|
||||
Set<RoleModel> appRoles = new HashSet<RoleModel>();
|
||||
|
||||
Vendored
+3
-4
@@ -11,7 +11,6 @@ import org.keycloak.models.RequiredCredentialModel;
|
||||
import org.keycloak.models.RoleModel;
|
||||
import org.keycloak.models.UserFederationProviderModel;
|
||||
import org.keycloak.models.cache.entities.CachedRealm;
|
||||
import org.keycloak.models.entities.IdentityProviderMapperEntity;
|
||||
import org.keycloak.models.utils.KeycloakModelUtils;
|
||||
|
||||
import java.security.Key;
|
||||
@@ -752,14 +751,14 @@ public class RealmAdapter implements RealmModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public ClientModel getMasterAdminApp() {
|
||||
public ClientModel getMasterAdminClient() {
|
||||
return cacheSession.getRealm(Config.getAdminRealm()).getClientById(cached.getMasterAdminApp());
|
||||
}
|
||||
|
||||
@Override
|
||||
public void setMasterAdminApp(ClientModel app) {
|
||||
public void setMasterAdminClient(ClientModel client) {
|
||||
getDelegateForUpdate();
|
||||
updated.setMasterAdminApp(app);
|
||||
updated.setMasterAdminClient(client);
|
||||
}
|
||||
|
||||
@Override
|
||||
|
||||
Vendored
+2
-2
@@ -219,8 +219,8 @@ public class UserAdapter implements UserModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationRoleMappings(ClientModel app) {
|
||||
if (updated != null) return updated.getApplicationRoleMappings(app);
|
||||
public Set<RoleModel> getClientRoleMappings(ClientModel app) {
|
||||
if (updated != null) return updated.getClientRoleMappings(app);
|
||||
Set<RoleModel> roleMappings = getRoleMappings();
|
||||
Set<RoleModel> appMappings = new HashSet<RoleModel>();
|
||||
for (RoleModel role : roleMappings) {
|
||||
|
||||
+1
-1
@@ -155,7 +155,7 @@ public class CachedRealm {
|
||||
eventsListeners.addAll(model.getEventsListeners());
|
||||
enabledEventTypes.addAll(model.getEnabledEventTypes());
|
||||
defaultRoles.addAll(model.getDefaultRoles());
|
||||
masterAdminApp = model.getMasterAdminApp().getId();
|
||||
masterAdminApp = model.getMasterAdminClient().getId();
|
||||
|
||||
for (RoleModel role : model.getRoles()) {
|
||||
realmRoles.put(role.getName(), role.getId());
|
||||
|
||||
@@ -625,7 +625,7 @@ public class ClientAdapter implements ClientModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationScopeMappings(ClientModel client) {
|
||||
public Set<RoleModel> getClientScopeMappings(ClientModel client) {
|
||||
Set<RoleModel> roleMappings = client.getScopeMappings();
|
||||
|
||||
Set<RoleModel> appRoles = new HashSet<RoleModel>();
|
||||
|
||||
@@ -1065,13 +1065,13 @@ public class RealmAdapter implements RealmModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public ClientModel getMasterAdminApp() {
|
||||
public ClientModel getMasterAdminClient() {
|
||||
return new ClientAdapter(this, em, session, realm.getMasterAdminApp());
|
||||
}
|
||||
|
||||
@Override
|
||||
public void setMasterAdminApp(ClientModel app) {
|
||||
ClientEntity appEntity = app!=null ? em.getReference(ClientEntity.class, app.getId()) : null;
|
||||
public void setMasterAdminClient(ClientModel client) {
|
||||
ClientEntity appEntity = client !=null ? em.getReference(ClientEntity.class, client.getId()) : null;
|
||||
realm.setMasterAdminApp(appEntity);
|
||||
em.flush();
|
||||
}
|
||||
|
||||
@@ -363,7 +363,7 @@ public class UserAdapter implements UserModel {
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationRoleMappings(ClientModel app) {
|
||||
public Set<RoleModel> getClientRoleMappings(ClientModel app) {
|
||||
Set<RoleModel> roleMappings = getRoleMappings();
|
||||
|
||||
Set<RoleModel> roles = new HashSet<RoleModel>();
|
||||
|
||||
+1
-1
@@ -575,7 +575,7 @@ public class ClientAdapter extends AbstractMongoAdapter<MongoClientEntity> imple
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationScopeMappings(ClientModel client) {
|
||||
public Set<RoleModel> getClientScopeMappings(ClientModel client) {
|
||||
Set<RoleModel> result = new HashSet<RoleModel>();
|
||||
List<MongoRoleEntity> roles = MongoModelUtils.getAllScopesOfClient(client, invocationContext);
|
||||
|
||||
|
||||
+3
-3
@@ -978,14 +978,14 @@ public class RealmAdapter extends AbstractMongoAdapter<MongoRealmEntity> impleme
|
||||
}
|
||||
|
||||
@Override
|
||||
public ClientModel getMasterAdminApp() {
|
||||
public ClientModel getMasterAdminClient() {
|
||||
MongoClientEntity appData = getMongoStore().loadEntity(MongoClientEntity.class, realm.getAdminAppId(), invocationContext);
|
||||
return appData != null ? new ClientAdapter(session, this, appData, invocationContext) : null;
|
||||
}
|
||||
|
||||
@Override
|
||||
public void setMasterAdminApp(ClientModel app) {
|
||||
String adminAppId = app != null ? app.getId() : null;
|
||||
public void setMasterAdminClient(ClientModel client) {
|
||||
String adminAppId = client != null ? client.getId() : null;
|
||||
realm.setAdminAppId(adminAppId);
|
||||
updateRealm();
|
||||
}
|
||||
|
||||
+1
-1
@@ -316,7 +316,7 @@ public class UserAdapter extends AbstractMongoAdapter<MongoUserEntity> implement
|
||||
}
|
||||
|
||||
@Override
|
||||
public Set<RoleModel> getApplicationRoleMappings(ClientModel app) {
|
||||
public Set<RoleModel> getClientRoleMappings(ClientModel app) {
|
||||
Set<RoleModel> result = new HashSet<RoleModel>();
|
||||
List<MongoRoleEntity> roles = MongoModelUtils.getAllRolesOfUser(this, invocationContext);
|
||||
|
||||
|
||||
Reference in new issue
Block a user