如何以编程方式创建 keycloak 客户端角色并分配给用户

Question

我想以编程方式创建 keycloak 客户端角色并分配给动态创建的用户。下面是我创建用户的代码

UserRepresentation user = new UserRepresentation();
user.setEmail("xxxxx@xxx.com");
user.setUsername("xxxx");
user.setFirstName("xxx");
user.setLastName("m");
user.setEnabled(true);
Response response = kc.realm("YYYYY").users().create(user);

Answer 1

这里有一个针对你的要求的解决方案（不是很漂亮，但是很管用）：

// Get keycloak client
Keycloak kc = Keycloak.getInstance("http://localhost:8080/auth",
                "master", "admin", "admin", "admin-cli");

// Create the role
RoleRepresentation clientRoleRepresentation = new RoleRepresentation();
clientRoleRepresentation.setName("client_role");
clientRoleRepresentation.setClientRole(true);
kc.realm("RealmID").clients().findByClientId("ClientID").forEach(clientRepresentation ->
    kc.realm("RealmID").clients().get(clientRepresentation.getId()).roles().create(clientRoleRepresentation)
);

// Create the user
UserRepresentation user = new UserRepresentation();
user.setUsername("test");
user.setEnabled(true);
Response response = kc.realm("RealmID").users().create(user);
String userId = getCreatedId(response);

// Assign role to the user
kc.realm("RealmID").clients().findByClientId("ClientID").forEach(clientRepresentation -> {
    RoleRepresentation savedRoleRepresentation = kc.realm("RealmID").clients()
            .get(clientRepresentation.getId()).roles().get("client_role").toRepresentation();
    kc.realm("RealmID").users().get(userId).roles().clientLevel(clientRepresentation.getId())
            .add(asList(savedRoleRepresentation));
});

// Update credentials to make sure, that the user can log in
UserResource userResource = kc.realm("RealmID").users().get(userId);
userResource.resetPassword(credential);

使用帮助方法：

private String getCreatedId(Response response) {
    URI location = response.getLocation();
    if (!response.getStatusInfo().equals(Response.Status.CREATED)) {
        Response.StatusType statusInfo = response.getStatusInfo();
        throw new WebApplicationException("Create method returned status " +
                statusInfo.getReasonPhrase() + " (Code: " + statusInfo.getStatusCode() + "); expected status: Created (201)", response);
    }
    if (location == null) {
        return null;
    }
    String path = location.getPath();
    return path.substring(path.lastIndexOf('/') + 1);
}

如何以编程方式创建 keycloak 客户端角色并分配给用户

How to create keycloak client role programmatically and assign to user

java

keycloak