keycloak-admin 1.2.0 → 2.0.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cdb86e769e4a945994d979061cd6b44cb49fd40dd72c2c2b4ff40470e4386dc7
-  data.tar.gz: caaf2546d1802ec1b837d4f7bc43878c32a107978e61ea6e51e33e99a3fc0a3f
+  metadata.gz: 4a9c09a6765355416960bbc5c4564ad5dd5f526f65093b43d46ac10fc39d0ae7
+  data.tar.gz: b2dd1762448fad5a096b94adc3d18b30640235fe02efa1e77269797bfa3f9464
 SHA512:
-  metadata.gz: 96e7940acc1d832bf9ff990642cec3a470450ea6bf19259cc301d080b48b8cea95cd668c2ca9b63e818769e1b67904d3d1b6e0c1ef2fe932ecd0919a0e10ec47
-  data.tar.gz: 01eecef72d13cb4f47d7387f21ee4dd70d7eb54275ae4738828bd57b2d21d193a1ef1ca03b330d06840a5d6192771b7204ed1131ba5e26b5087d8dc01f988a1f
+  metadata.gz: 3274b863ef8b7d295b82d5dd87a6d3340ac96ac08c1f38c822ad531b204f4fd5755704a905ccc308821e199d17cc8c73959c3dc1d39a5a13079ce133f1ed4854
+  data.tar.gz: 7c8d7b5f54eb523f27eaaa83893d8b5190d4647ed6d7424a6ac1b55168ffa02fb426171b424330db86d976e00c84e1644d3bab3cf4fd398d1eb9cf4deff2e679

data/.github/workflows/ci.yml

@@ -18,11 +18,13 @@ permissions:
 
 jobs:
   test:
-    runs-on: ubuntu-latest
+    name: Ruby ${{ matrix.ruby-version }}
+    runs-on: ubuntu-24.04
 
     strategy:
+      fail-fast: false
       matrix:
-        ruby-version: ['3.2']
+        ruby-version: ['3.1', '3.2', '3.3', '3.4']
 
     steps:
     - name: Start Keycloak

data/.github/workflows/release.yml

@@ -0,0 +1,112 @@
+name: Release
+
+# Publishing is triggered by pushing a version tag, e.g.:
+#   git tag -a v1.2.0 -m "Version 1.2.0" && git push origin v1.2.0
+#
+# No RubyGems API key is stored in this repository: the gem is pushed through
+# RubyGems' Trusted Publishing, which exchanges a short-lived GitHub OIDC token
+# for a scoped RubyGems credential. This requires a trusted publisher declared on
+# https://rubygems.org/gems/keycloak-admin pointing to this repository, this
+# workflow file name and the 'release' environment.
+on:
+  push:
+    tags: [ "v*" ]
+
+permissions:
+  contents: read
+
+jobs:
+  release:
+    name: Push gem to RubyGems.org
+    # Pinned rather than 'ubuntu-latest', for the same reason as in ci.yml.
+    runs-on: ubuntu-24.04
+
+    environment: release
+
+    permissions:
+      contents: write # 'rake release' pushes the version tag when it does not exist yet
+      id-token: write # mandatory to request the OIDC token used by trusted publishing
+
+    steps:
+    # The test suite includes an integration spec that talks to a real Keycloak
+    # (spec/integration/client_authorization_spec.rb, gated on ENV["GITHUB_ACTIONS"],
+    # which GitHub Actions sets on every run regardless of workflow). Keycloak is
+    # provisioned here the same way ci.yml does it, so 'bundle exec rspec' below is a
+    # real, complete gate rather than skipping that spec for lack of a server.
+    - name: Start Keycloak
+      run: |
+        docker run -d --name keycloak -p 8080:8080 \
+          -e KC_BOOTSTRAP_ADMIN_USERNAME=admin \
+          -e KC_BOOTSTRAP_ADMIN_PASSWORD=admin \
+          -e KC_HOSTNAME=http://localhost:8080 \
+          -e KC_HOSTNAME_ADMIN=http://localhost:8080 \
+          -e KC_HTTP_ENABLED=true \
+          -e KC_DB=dev-file \
+          quay.io/keycloak/keycloak:26.7.0 \
+          start-dev
+
+    - name: Wait for Keycloak to be ready
+      run: |
+        for i in $(seq 1 30); do
+          if curl --silent --fail http://localhost:8080/realms/master > /dev/null; then
+            echo "Keycloak is ready"
+            exit 0
+          fi
+          sleep 5
+        done
+        echo "Keycloak did not become ready in time"
+        docker logs keycloak
+        exit 1
+
+    - name: create realm
+      run: |
+         TOKEN=$(curl --silent --location --request POST "http://localhost:8080/realms/master/protocol/openid-connect/token" \
+            --header 'Content-Type: application/x-www-form-urlencoded' \
+            --data-urlencode 'grant_type=password' \
+            --data-urlencode 'username=admin' \
+            --data-urlencode 'password=admin' \
+            --data-urlencode 'client_id=admin-cli' | jq -r '.access_token')
+
+         curl --silent --show-error -L -X POST "http://localhost:8080/admin/realms" \
+            --header "Content-Type: application/json" \
+            --header "Authorization: Bearer ${TOKEN}" \
+            --data '{"realm":"dummy","enabled":true}'
+
+         curl --silent --show-error --request POST 'http://localhost:8080/admin/realms/dummy/clients' \
+           --header 'Authorization: Bearer '$TOKEN \
+           --header 'Content-Type: application/json' \
+           --data-raw '{
+             "clientId":"dummy-client",
+             "enabled":true,
+             "consentRequired": false,
+             "attributes":{},
+             "serviceAccountsEnabled": true,
+             "protocol":"openid-connect",
+             "publicClient":false,
+             "authorizationServicesEnabled": true,
+             "clientAuthenticatorType":"client-secret",
+             "redirectUris":["http://localhost:8180/demo"]
+           }'
+
+    - uses: actions/checkout@v4
+
+    - name: Set up Ruby
+      uses: ruby/setup-ruby@v1
+      with:
+        ruby-version: '3.4'
+        bundler-cache: true
+
+    - name: Check that the tag matches KeycloakAdmin::VERSION
+      run: |
+        tag="${GITHUB_REF_NAME#v}"
+        version="$(ruby -Ilib -r keycloak-admin/version -e 'print KeycloakAdmin::VERSION')"
+        if [ "$tag" != "$version" ]; then
+          echo "::error::Tag '${GITHUB_REF_NAME}' does not match KeycloakAdmin::VERSION '${version}'"
+          exit 1
+        fi
+
+    - name: Run tests
+      run: bundle exec rspec
+
+    # Builds the gem, pushes it to RubyGems.org and waits for it to be available.
+    - uses: rubygems/release-gem@v1

data/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.0.1] - 2026-07-31
+
+* [Feature] Requests are now logged through `config.logger` (method, URL, and response status) via Faraday's `:logger` middleware.
+* [Feature] The access token is now cached and reused (tracking `expires_in`) instead of being fetched before nearly every call. Previously, caching lived on the `Client` instance, but a fresh `Client` subclass is created for almost every call (e.g. `KeycloakAdmin.realm(x).users` builds a new `UserClient`), so the cache was rarely hit in practice; it now lives on the shared `Configuration`.
+* Publish the gem to RubyGems from Github Actions when a `v*` tag is pushed, using RubyGems' Trusted Publishing
+
+## [2.0.0] - 2026-07-31
+
+* [Breaking] Replaced `rest-client` with `Faraday` as the underlying HTTP library. This should be transparent for callers of this gem's own API, but `config.rest_client_options` is renamed to `config.faraday_options` and its shape changes from rest-client's flat hash to Faraday's connection options (e.g. `{ timeout: 5 }` becomes `{ request: { timeout: 5 } }`, `{ verify_ssl: false }` becomes `{ ssl: { verify: false } }`). See the `Configuration` section of the README.
+* [Fix] `GroupClient#remove_realm_level_role_name!` used Ruby 3.1 hash value omission
+* [Fix] Strip trailing slashes from the configured `server_url`. Keycloak 26 rejects non-normalized request paths with `400 {"error":"missingNormalization"}`, so a `server_url` such as `http://localhost:8080/` produced an unusable `//realms/...` path. Earlier Keycloak versions tolerated it.
+* [Chore] `required_ruby_version` is now `>= 3.1` instead of `>= 2.3`
+* [Chore] CI now tests against Ruby 3.1, 3.2, 3.3 and 3.4.
+
 ## [1.2.0] - 2026-07-30
 
 * [Chore] Bump `http-cookie` dependency from 1.1.0 to 1.1.6.

data/Gemfile.lock

@@ -1,34 +1,31 @@
 PATH
   remote: .
   specs:
-    keycloak-admin (1.2.0)
+    keycloak-admin (2.0.1)
+      base64
+      faraday (~> 2.0)
       http-cookie (~> 1.0, >= 1.0.3)
-      rest-client (~> 2.0)
 
 GEM
   remote: https://rubygems.org/
   specs:
-    byebug (13.0.0)
-      reline (>= 0.6.0)
+    base64 (0.3.0)
+    byebug (12.0.0)
     diff-lcs (1.6.2)
     domain_name (0.6.20240107)
-    http-accept (1.7.0)
+    faraday (2.14.3)
+      faraday-net_http (>= 2.0, < 3.5)
+      json
+      logger
+    faraday-net_http (3.4.4)
+      net-http (~> 0.5)
     http-cookie (1.1.6)
       domain_name (~> 0.5)
-    io-console (0.8.2)
+    json (2.21.2)
     logger (1.7.0)
-    mime-types (3.7.0)
-      logger
-      mime-types-data (~> 3.2025, >= 3.2025.0507)
-    mime-types-data (3.2026.0701)
-    netrc (0.11.0)
-    reline (0.6.3)
-      io-console (~> 0.5)
-    rest-client (2.1.0)
-      http-accept (>= 1.7.0, < 2.0)
-      http-cookie (>= 1.0.2, < 2.0)
-      mime-types (>= 1.16, < 4.0)
-      netrc (~> 0.8)
+    net-http (0.9.1)
+      uri (>= 0.11.1)
+    rake (13.4.2)
     rspec (3.13.2)
       rspec-core (~> 3.13.0)
       rspec-expectations (~> 3.13.0)
@@ -42,14 +39,16 @@ GEM
       diff-lcs (>= 1.2.0, < 2.0)
       rspec-support (~> 3.13.0)
     rspec-support (3.13.7)
+    uri (1.1.1)
 
 PLATFORMS
   ruby
 
 DEPENDENCIES
-  byebug (= 13.0.0)
+  byebug (= 12.0.0)
   keycloak-admin!
+  rake (>= 13.0)
   rspec (= 3.13.2)
 
 BUNDLED WITH
-   2.7.2
+   2.6.9

data/README.md

@@ -2,17 +2,21 @@
 # Keycloak Admin Ruby
 
 Ruby client that acts as a client for the Keycloak REST API.
-This gem basically acts as an url builder using `http-client` to get responses and serialize them into _representation_ objects.
+This gem basically acts as an url builder using `Faraday` to get responses and serialize them into _representation_ objects.
 
 _Warning: This beta gem is currently used for personal use. Most Keycloak Admin features are not implemented yet._
 
+## Requirements
+
+Ruby 3.1 or greater. The gem is tested against Ruby 3.1, 3.2, 3.3 and 3.4.
+
 ## Install
 
 This gem *does not* require Rails.
 For example, using `bundle`, add this line to your Gemfile.
 
 ```ruby
-gem "keycloak-admin", "1.2.0"
+gem "keycloak-admin", "2.0.1"
 ```
 
 ## Login
@@ -81,8 +85,8 @@ KeycloakAdmin.configure do |config|
   config.password            = ENV["KEYCLOAK_ADMIN_PASSWORD"]
   config.logger              = Rails.logger
 
-  # You configure RestClient to your liking – see https://github.com/rest-client/rest-client/blob/master/lib/restclient/request.rb for available options.
-  config.rest_client_options = { timeout: 5 }
+  # You configure Faraday to your liking – see https://lostisland.github.io/faraday/#/customization/connection-options for available options.
+  config.faraday_options = { request: { timeout: 5 } }
 end
 ```
 This example is autoloaded in a Rails environment.
@@ -102,7 +106,7 @@ All options have a default value. However, all of them can be changed in your in
 | `username` | `nil`| String | Optional | Username to access the Admin REST API. Recommended if `user_service_account` is set to `false`. | `mummy` |
 | `password` | `nil`| String | Optional | Clear password to access the Admin REST API. Recommended if `user_service_account` is set to `false`. | `bobby` |
 | `logger` | `Logger.new(STDOUT)`| Logger | Optional | The logger used by `keycloak-admin` | `Rails.logger` | 
-| `rest_client_options` | `{}`| Hash | Optional | Options to pass to `RestClient` | `{ timeout: 5 }` | 
+| `faraday_options` | `{}`| Hash | Optional | Options to pass to `Faraday.new` (e.g. `request:`, `ssl:`, `proxy:`) | `{ request: { timeout: 5 } }` | 
 
 
 ## Use Cases
@@ -881,3 +885,19 @@ From the `keycloak-admin-api` directory:
   $ docker build . -t keycloak-admin:test
   $ docker run -v `pwd`:/usr/src/app/ keycloak-admin:test rspec spec
 ```
+
+## How to release a new version
+
+Releases are published to [RubyGems](https://rubygems.org/gems/keycloak-admin) by GitHub Actions
+(`.github/workflows/release.yml`), through [Trusted Publishing](https://guides.rubygems.org/trusted-publishing/):
+no API key is stored in this repository, the workflow exchanges a short-lived GitHub OIDC token for a
+scoped RubyGems credential.
+
+1. Update `KeycloakAdmin::VERSION` in `lib/keycloak-admin/version.rb` and the `CHANGELOG.md`
+2. Commit and push these changes to `main`
+3. Tag the commit and push the tag:
+
+```
+  $ git tag -a v2.0.1 -m "Version 2.0.1"
+  $ git push origin v2.0.1
+```

data/Rakefile

@@ -0,0 +1,6 @@
+require "bundler/gem_tasks"
+require "rspec/core/rake_task"
+
+RSpec::Core::RakeTask.new(:spec)
+
+task default: :spec

data/keycloak-admin.gemspec

@@ -15,10 +15,12 @@ Gem::Specification.new do |spec|
   spec.files = `git ls-files -z`.split("\x0")
   spec.require_paths = ["lib"]
 
-  spec.required_ruby_version = '>= 2.3'
+  spec.required_ruby_version = '>= 3.1'
 
   spec.add_dependency "http-cookie", "~> 1.0", ">= 1.0.3"
-  spec.add_dependency "rest-client", "~> 2.0"
+  spec.add_dependency "faraday", "~> 2.0"
+  spec.add_dependency "base64"
   spec.add_development_dependency "rspec",  "3.13.2"
-  spec.add_development_dependency "byebug", "13.0.0"
+  spec.add_development_dependency "byebug", "12.0.0"
+  spec.add_development_dependency "rake",   ">= 13.0"
 end

data/lib/keycloak-admin/client/attack_detection_client.rb

@@ -10,7 +10,7 @@ module KeycloakAdmin
       raise ArgumentError.new("user_id must be defined") if user_id.nil?
 
       response = execute_http do
-        RestClient::Resource.new(brute_force_url(user_id), @configuration.rest_client_options).get(headers)
+        resource(brute_force_url(user_id)).get(headers)
       end
       AttackDetectionRepresentation.from_hash(JSON.parse(response))
     end
@@ -19,14 +19,14 @@ module KeycloakAdmin
       raise ArgumentError.new("user_id must be defined") if user_id.nil?
 
       execute_http do
-        RestClient::Resource.new(brute_force_url(user_id), @configuration.rest_client_options).delete(headers)
+        resource(brute_force_url(user_id)).delete(headers)
       end
       true
     end
 
     def unlock_users
       execute_http do
-        RestClient::Resource.new(brute_force_url, @configuration.rest_client_options).delete(headers)
+        resource(brute_force_url).delete(headers)
       end
       true
     end

data/lib/keycloak-admin/client/client.rb

@@ -6,11 +6,14 @@ module KeycloakAdmin
     end
 
     def server_url
-      @configuration.server_url
+      @configuration.server_url&.sub(/\/+\z/, "")
     end
 
+    # Cached on @configuration, not on this instance, since a new Client subclass is
+    # created for nearly every call (e.g. KeycloakAdmin.realm(x).users creates a fresh
+    # UserClient) - caching here alone would fetch a new token on almost every request.
     def current_token
-      @current_token ||= KeycloakAdmin.create_client(@configuration, @configuration.client_realm_name).token.get
+      @configuration.cached_token || @configuration.cache_token(fetch_token)
     end
 
     def headers
@@ -23,15 +26,15 @@ module KeycloakAdmin
 
     def execute_http
       yield
-    rescue RestClient::Exceptions::Timeout => e
+    rescue Faraday::TimeoutError
       raise
-    rescue RestClient::ExceptionWithResponse => e
+    rescue Faraday::ClientError, Faraday::ServerError => e
       http_error(e.response)
     end
 
     def created_id(response)
-      unless response.net_http_res.is_a? Net::HTTPCreated
-        raise "Create method returned status #{response.net_http_res.message} (Code: #{response.net_http_res.code}); expected status: Created (201)"
+      unless response.status == 201
+        raise "Create method returned status #{response.reason_phrase} (Code: #{response.status}); expected status: Created (201)"
       end
       (_head, _separator, id) = response.headers[:location].rpartition("/")
       id
@@ -49,8 +52,16 @@ module KeycloakAdmin
 
     private
 
+    def fetch_token
+      KeycloakAdmin.create_client(@configuration, @configuration.client_realm_name).token.get
+    end
+
+    def resource(url)
+      Resource.new(url, @configuration.faraday_options, @configuration.logger)
+    end
+
     def http_error(response)
-      raise "Keycloak: The request failed with response code #{response.code} and message: #{response.body}"
+      raise "Keycloak: The request failed with response code #{response[:status]} and message: #{response[:body]}"
     end
   end
 end

data/lib/keycloak-admin/client/client_authz_permission_client.rb

@@ -13,15 +13,15 @@ module KeycloakAdmin
 
     def delete(permission_id)
       execute_http do
-        RestClient::Resource.new(authz_permission_url(@client_id, nil, nil, permission_id), @configuration.rest_client_options).delete(headers)
+        resource(authz_permission_url(@client_id, nil, @type, permission_id)).delete(headers)
       end
       true
     end
 
-    def find_by(name, resource, scope = nil)
+    def find_by(name, resource_param, scope = nil)
       response = execute_http do
-        url = "#{authz_permission_url(@client_id)}?name=#{name}&resource=#{resource}&type=#{@type}&scope=#{scope}&deep=true&first=0&max=100"
-        RestClient::Resource.new(url, @configuration.rest_client_options).get(headers)
+        url = "#{authz_permission_url(@client_id)}?name=#{name}&resource=#{resource_param}&type=#{@type}&scope=#{scope}&deep=true&first=0&max=100"
+        resource(url).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzPermissionRepresentation.from_hash(role_as_hash) }
     end
@@ -33,7 +33,7 @@ module KeycloakAdmin
 
     def save(permission_representation)
       execute_http do
-        RestClient::Resource.new(authz_permission_url(@client_id, nil, permission_representation.type), @configuration.rest_client_options).post(
+        resource(authz_permission_url(@client_id, nil, permission_representation.type)).post(
           create_payload(permission_representation), headers
         )
       end
@@ -41,14 +41,14 @@ module KeycloakAdmin
 
     def list
       response = execute_http do
-        RestClient::Resource.new(authz_permission_url(@client_id, @resource_id), @configuration.rest_client_options).get(headers)
+        resource(authz_permission_url(@client_id, @resource_id)).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzPermissionRepresentation.from_hash(role_as_hash) }
     end
 
     def get(permission_id)
       response = execute_http do
-        RestClient::Resource.new(authz_permission_url(@client_id, nil, @type, permission_id), @configuration.rest_client_options).get(headers)
+        resource(authz_permission_url(@client_id, nil, @type, permission_id)).get(headers)
       end
       ClientAuthzPermissionRepresentation.from_hash(JSON.parse(response))
     end

data/lib/keycloak-admin/client/client_authz_policy_client.rb

@@ -18,7 +18,7 @@ module KeycloakAdmin
 
     def save(policy_representation)
       execute_http do
-        RestClient::Resource.new(authz_policy_url(@client_id, @type), @configuration.rest_client_options).post(
+        resource(authz_policy_url(@client_id, @type)).post(
           create_payload(policy_representation), headers
         )
       end
@@ -26,7 +26,7 @@ module KeycloakAdmin
 
     def get(policy_id)
       response = execute_http do
-        RestClient::Resource.new(authz_policy_url(@client_id, @type, policy_id), @configuration.rest_client_options).get(headers)
+        resource(authz_policy_url(@client_id, @type, policy_id)).get(headers)
       end
       ClientAuthzPolicyRepresentation.from_hash(JSON.parse(response))
     end
@@ -34,21 +34,21 @@ module KeycloakAdmin
     def find_by(name, type)
       response = execute_http do
         url = "#{authz_policy_url(@client_id, @type)}?permission=false&name=#{name}&type=#{type}&first=0&max=11"
-        RestClient::Resource.new(url, @configuration.rest_client_options).get(headers)
+        resource(url).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzPolicyRepresentation.from_hash(role_as_hash) }
     end
 
     def delete(policy_id)
       execute_http do
-        RestClient::Resource.new(authz_policy_url(@client_id, @type, policy_id), @configuration.rest_client_options).delete(headers)
+        resource(authz_policy_url(@client_id, @type, policy_id)).delete(headers)
       end
       true
     end
 
     def list
       response = execute_http do
-        RestClient::Resource.new(authz_policy_url(@client_id, @type), @configuration.rest_client_options).get(headers)
+        resource(authz_policy_url(@client_id, @type)).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzPolicyRepresentation.from_hash(role_as_hash) }
     end

data/lib/keycloak-admin/client/client_authz_resource_client.rb

@@ -9,14 +9,14 @@ module KeycloakAdmin
 
     def list
       response = execute_http do
-        RestClient::Resource.new(authz_resources_url(@client_id), @configuration.rest_client_options).get(headers)
+        resource(authz_resources_url(@client_id)).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzResourceRepresentation.from_hash(role_as_hash) }
     end
 
     def get(resource_id)
       response = execute_http do
-        RestClient::Resource.new(authz_resources_url(@client_id, resource_id), @configuration.rest_client_options).get(headers)
+        resource(authz_resources_url(@client_id, resource_id)).get(headers)
       end
       ClientAuthzResourceRepresentation.from_hash(JSON.parse(response))
     end
@@ -36,7 +36,7 @@ module KeycloakAdmin
       )
 
       execute_http do
-        RestClient::Resource.new(authz_resources_url(@client_id, resource_id), @configuration.rest_client_options).put(new_resource.to_json, headers)
+        resource(authz_resources_url(@client_id, resource_id)).put(new_resource.to_json, headers)
       end
       get(resource_id)
     end
@@ -48,21 +48,21 @@ module KeycloakAdmin
     def find_by(name, type, uris, owner, scope)
       response = execute_http do
         url = "#{authz_resources_url(@client_id)}?name=#{name}&type=#{type}&uris=#{uris}&owner=#{owner}&scope=#{scope}&deep=true&first=0&max=100"
-        RestClient::Resource.new(url, @configuration.rest_client_options).get(headers)
+        resource(url).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzResourceRepresentation.from_hash(role_as_hash) }
     end
 
     def save(client_authz_resource_representation)
       response = execute_http do
-        RestClient::Resource.new(authz_resources_url(@client_id), @configuration.rest_client_options).post(client_authz_resource_representation.to_json, headers)
+        resource(authz_resources_url(@client_id)).post(client_authz_resource_representation.to_json, headers)
       end
       ClientAuthzResourceRepresentation.from_hash(JSON.parse(response))
     end
 
     def delete(resource_id)
       execute_http do
-        RestClient::Resource.new(authz_resources_url(@client_id, resource_id), @configuration.rest_client_options).delete(headers)
+        resource(authz_resources_url(@client_id, resource_id)).delete(headers)
       end
       true
     end

data/lib/keycloak-admin/client/client_authz_scope_client.rb

@@ -15,21 +15,21 @@ module KeycloakAdmin
 
     def list
       response = execute_http do
-        RestClient::Resource.new(authz_scopes_url(@client_id, @resource_id), @configuration.rest_client_options).get(headers)
+        resource(authz_scopes_url(@client_id, @resource_id)).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzScopeRepresentation.from_hash(role_as_hash) }
     end
 
     def delete(scope_id)
       execute_http do
-        RestClient::Resource.new(authz_scopes_url(@client_id, nil, scope_id), @configuration.rest_client_options).delete(headers)
+        resource(authz_scopes_url(@client_id, nil, scope_id)).delete(headers)
       end
       true
     end
 
     def get(scope_id)
       response = execute_http do
-        RestClient::Resource.new(authz_scopes_url(@client_id, nil, scope_id), @configuration.rest_client_options).get(headers)
+        resource(authz_scopes_url(@client_id, nil, scope_id)).get(headers)
       end
       ClientAuthzScopeRepresentation.from_hash(JSON.parse(response))
     end
@@ -37,7 +37,7 @@ module KeycloakAdmin
     def search(name)
       url = "#{authz_scopes_url(@client_id)}?first=0&max=11&deep=false&name=#{name}"
       response = execute_http do
-        RestClient::Resource.new(url, @configuration.rest_client_options).get(headers)
+        resource(url).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzScopeRepresentation.from_hash(role_as_hash) }
     end
@@ -54,7 +54,7 @@ module KeycloakAdmin
 
     def save(scope_representation)
       execute_http do
-        RestClient::Resource.new(authz_scopes_url(@client_id), @configuration.rest_client_options).post(
+        resource(authz_scopes_url(@client_id)).post(
           create_payload(scope_representation), headers
         )
       end

data/lib/keycloak-admin/client/client_client.rb

@@ -8,14 +8,14 @@ module KeycloakAdmin
 
     def get(id)
       response = execute_http do
-        RestClient::Resource.new(clients_url(id), @configuration.rest_client_options).get(headers)
+        resource(clients_url(id)).get(headers)
       end
       ClientRepresentation.from_hash(JSON.parse(response))
     end
 
     def save(client_representation)
       execute_http do
-        RestClient::Resource.new(clients_url, @configuration.rest_client_options).post(
+        resource(clients_url).post(
           create_payload(client_representation), headers
         )
       end
@@ -23,7 +23,7 @@ module KeycloakAdmin
 
     def list
       response = execute_http do
-        RestClient::Resource.new(clients_url, @configuration.rest_client_options).get(headers)
+        resource(clients_url).get(headers)
       end
       JSON.parse(response).map { |client_as_hash| ClientRepresentation.from_hash(client_as_hash) }
     end
@@ -34,14 +34,14 @@ module KeycloakAdmin
 
     def delete(id)
       execute_http do
-        RestClient::Resource.new(clients_url(id), @configuration.rest_client_options).delete(headers)
+        resource(clients_url(id)).delete(headers)
       end
       true
     end
 
     def update(client_representation)
       execute_http do
-        RestClient::Resource.new(clients_url(client_representation.id), @configuration.rest_client_options).put(
+        resource(clients_url(client_representation.id)).put(
           create_payload(client_representation), headers
         )
       end
@@ -51,7 +51,7 @@ module KeycloakAdmin
 
     def get_service_account_user(client_id)
       response = execute_http do
-        RestClient::Resource.new(service_account_user_url(client_id), @configuration.rest_client_options).get(headers)
+        resource(service_account_user_url(client_id)).get(headers)
       end
       UserRepresentation.from_hash(JSON.parse(response))
     end

data/lib/keycloak-admin/client/client_role_client.rb

@@ -8,7 +8,7 @@ module KeycloakAdmin
 
     def list(client_id)
       response = execute_http do
-        RestClient::Resource.new(clients_url(client_id), @configuration.rest_client_options).get(headers)
+        resource(clients_url(client_id)).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| RoleRepresentation.from_hash(role_as_hash) }
     end