keycloak-admin 2.0.1 → 2.0.3

data/spec/integration/client_authorization_spec.rb

@@ -1,93 +0,0 @@
-RSpec.describe 'ClientAuthorization' do
-
-  before(:each) do
-    skip("This test requires to be run in a Github action.")  unless ENV["GITHUB_ACTIONS"]
-
-    KeycloakAdmin.configure do |config|
-      config.use_service_account = false
-      config.server_url          = "http://localhost:8080/"
-      config.client_id           = "admin-cli"
-      config.client_realm_name   = "master"
-      config.username            = "admin"
-      config.password            = "admin"
-      config.faraday_options = { request: { timeout: 5 }, ssl: { verify: false } }
-    end
-  end
-
-  after(:each) do
-    configure
-  end
-
-  describe "ClientAuthorization Suite" do
-    it do
-      realm_name = "dummy"
-
-      client = KeycloakAdmin.realm(realm_name).clients.find_by_client_id("dummy-client")
-      client.authorization_services_enabled = true
-      KeycloakAdmin.realm(realm_name).clients.update(client)
-
-      expect(KeycloakAdmin.realm(realm_name).authz_scopes(client.id).list.size).to eql(0)
-      expect(KeycloakAdmin.realm(realm_name).authz_resources(client.id).list.size).to eql(0)
-      expect(KeycloakAdmin.realm(realm_name).authz_policies(client.id, 'role').list.size).to eql(0)
-
-      realm_role =  KeycloakAdmin.realm(realm_name).roles.get("default-roles-dummy")
-
-      scope_1 = KeycloakAdmin.realm(realm_name).authz_scopes(client.id).create!("POST_1", "POST 1 scope", "http://asdas")
-      scope_2 = KeycloakAdmin.realm(realm_name).authz_scopes(client.id).create!("POST_2", "POST 2 scope", "http://asdas")
-      expect(KeycloakAdmin.realm(realm_name).authz_scopes(client.id).search("POST").first.name).to eql("POST_1")
-      expect(KeycloakAdmin.realm(realm_name).authz_scopes(client.id).get(scope_1.id).name).to eql("POST_1")
-
-      resource = KeycloakAdmin.realm(realm_name).authz_resources(client.id).create!("Dummy Resource", "type", ["/asdf/*", "/tmp/"], true, "display_name", [], {"a": ["b", "c"]})
-
-      expect(KeycloakAdmin.realm(realm_name).authz_resources(client.id).find_by("Dummy Resource", "", "", "", "").first.name).to eql("Dummy Resource")
-      expect(KeycloakAdmin.realm(realm_name).authz_resources(client.id).find_by("", "type", "", "", "").first.name).to eql("Dummy Resource")
-
-      expect(KeycloakAdmin.realm(realm_name).authz_resources(client.id).get(resource.id).scopes.count).to eql(0)
-      expect(KeycloakAdmin.realm(realm_name).authz_resources(client.id).get(resource.id).uris.count).to eql(2)
-      KeycloakAdmin.realm(realm_name).authz_resources(client.id).update(resource.id,
-                                                                             {
-                                                                               "name": "Dummy Resource",
-                                                                               "type": "type",
-                                                                               "owner_managed_access": true,
-                                                                               "display_name": "display_name",
-                                                                               "attributes": {"a":["b","c"]},
-                                                                               "uris": [ "/asdf/*" , "/tmp/45" ],
-                                                                               "scopes":[
-                                                                                 {name: scope_1.name},{name: scope_2.name}
-                                                                               ],
-                                                                               "icon_uri": "https://icon.ico"
-                                                                             }
-      )
-
-      expect(KeycloakAdmin.realm(realm_name).authz_resources(client.id).get(resource.id).scopes.count).to eql(2)
-
-      policy = KeycloakAdmin.realm(realm_name).authz_policies(client.id, 'role').create!("Policy 1", "description", "role", "POSITIVE", "UNANIMOUS", true, [{id: realm_role.id, required: true}])
-      expect(KeycloakAdmin.realm(realm_name).authz_policies(client.id, 'role').find_by("Policy 1", "role").first.name).to eql("Policy 1")
-      expect(KeycloakAdmin.realm(realm_name).authz_policies(client.id, 'role').get(policy.id).name).to eql("Policy 1")
-      scope_permission = KeycloakAdmin.realm(realm_name).authz_permissions(client.id, :scope).create!("Dummy Scope Permission", "scope description", "UNANIMOUS", "POSITIVE", [resource.id], [policy.id], [scope_1.id, scope_2.id], "")
-      resource_permission = KeycloakAdmin.realm(realm_name).authz_permissions(client.id, :resource).create!("Dummy Resource Permission", "resource description", "UNANIMOUS", "POSITIVE", [resource.id], [policy.id], nil, "")
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "", resource.id).list.size).to eql(2)
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "resource").get(resource_permission.id).name).to eql("Dummy Resource Permission")
-      expect(KeycloakAdmin.realm(realm_name).authz_scopes(client.id, resource.id).list.size).to eql(2)
-
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, 'scope').list.size).to eql(2)
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, 'resource').list.size).to eql(2)
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "resource").find_by(resource_permission.name, nil).first.name).to eql("Dummy Resource Permission")
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "resource").find_by(resource_permission.name, resource.id).first.name).to eql("Dummy Resource Permission")
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "scope").find_by(scope_permission.name, resource.id).first.name).to eql("Dummy Scope Permission")
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "scope").find_by(scope_permission.name, resource.id, "POST_1").first.name).to eql("Dummy Scope Permission")
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "resource").find_by(nil, resource.id).first.name).to eql("Dummy Resource Permission")
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "scope").find_by(nil, resource.id).first.name).to eql("Dummy Scope Permission")
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "scope").find_by(nil, resource.id, "POST_1").first.name).to eql("Dummy Scope Permission")
-      expect(KeycloakAdmin.realm(realm_name).authz_permissions(client.id, "scope").find_by(scope_permission.name, nil).first.name).to eql("Dummy Scope Permission")
-
-      KeycloakAdmin.realm(realm_name).authz_permissions(client.id, 'scope').delete(scope_permission.id)
-      KeycloakAdmin.realm(realm_name).authz_permissions(client.id, 'resource').delete(resource_permission.id)
-      KeycloakAdmin.realm(realm_name).authz_policies(client.id, 'role').delete(policy.id)
-      KeycloakAdmin.realm(realm_name).authz_resources(client.id).delete(resource.id)
-      KeycloakAdmin.realm(realm_name).authz_scopes(client.id).delete(scope_1.id)
-      KeycloakAdmin.realm(realm_name).authz_scopes(client.id).delete(scope_2.id)
-
-    end
-  end
-end

data/spec/representation/attack_detection_representation_spec.rb

@@ -1,16 +0,0 @@
-# frozen_string_literal: true
-
-RSpec.describe KeycloakAdmin::AttackDetectionRepresentation do
-  describe '.from_hash' do
-    it 'converts json response to class structure' do
-      rep = described_class.from_hash({
-        'numFailures' => 2,
-        'disabled' => true,
-        'lastIPFailure' => 12345,
-        'last_failure' => 12345678
-      })
-      expect(rep.num_failures).to eq 2
-      expect(rep).to be_a described_class
-    end
-  end
-end

data/spec/representation/client_authz_permission_representation_spec.rb

@@ -1,52 +0,0 @@
-RSpec.describe KeycloakAdmin::ClientAuthzPermissionRepresentation do
-  describe '.from_hash, #resource based permission' do
-    it 'converts json response to class structure' do
-      rep = described_class.from_hash({
-                                        "id" => "e9e3bc49-fe11-4287-b6fc-fa8be4930ffa",
-                                        "resources" => ["4f55e984-d1ec-405c-a25c-1387f88acd5c"],
-                                        "policies" => ["e9e3bc49-fe11-4287-b6fc-fa8be4930ffa"],
-                                        "name" => "delme policy",
-                                        "description" => "Delme policy description",
-                                        "decisionStrategy" => "UNANIMOUS",
-                                        "resourceType" => ""
-                                      })
-      expect(rep.id).to eq "e9e3bc49-fe11-4287-b6fc-fa8be4930ffa"
-      expect(rep.resources).to eq ["4f55e984-d1ec-405c-a25c-1387f88acd5c"]
-      expect(rep.policies).to eq ["e9e3bc49-fe11-4287-b6fc-fa8be4930ffa"]
-      expect(rep.name).to eq "delme policy"
-      expect(rep.description).to eq "Delme policy description"
-      expect(rep.decision_strategy).to eq "UNANIMOUS"
-      expect(rep.resource_type).to eq ""
-      expect(rep).to be_a described_class
-    end
-  end
-
-  describe '.from_hash, #scope based permission' do
-    it 'converts json response to class structure' do
-      rep = described_class.from_hash(
-
-        { "id" => "4d762e5d-bf3d-4641-8f94-97e8a1869d1d",
-          "name" => "permission name",
-          "description" => "permission description",
-          "type" => "scope",
-          "policies" => ["e9e3bc49-fe11-4287-b6fc-fa8be4930ffa"],
-          "resources" => ["4f55e984-d1ec-405c-a25c-1387f88acd5c"],
-          "scopes" => ["7c4809c5-33b6-4668-a318-19b302214d20"],
-          "logic" => "POSITIVE",
-          "decisionStrategy" => "UNANIMOUS"
-        })
-      expect(rep.id).to eq "4d762e5d-bf3d-4641-8f94-97e8a1869d1d"
-      expect(rep.resources).to eq ["4f55e984-d1ec-405c-a25c-1387f88acd5c"]
-      expect(rep.policies).to eq ["e9e3bc49-fe11-4287-b6fc-fa8be4930ffa"]
-      expect(rep.scopes).to eq ["7c4809c5-33b6-4668-a318-19b302214d20"]
-      expect(rep.name).to eq "permission name"
-      expect(rep.description).to eq "permission description"
-      expect(rep.decision_strategy).to eq "UNANIMOUS"
-      expect(rep.logic).to eq "POSITIVE"
-      expect(rep.type).to eq "scope"
-      expect(rep.resource_type).to eq nil
-      expect(rep).to be_a described_class
-    end
-  end
-
-end

data/spec/representation/client_authz_policy_representation_spec.rb

@@ -1,47 +0,0 @@
-# frozen_string_literal: true
-
-RSpec.describe KeycloakAdmin::ClientAuthzPolicyRepresentation do
-  let(:realm_name) { "valid-realm" }
-  let(:client_id) { "valid-client-id" }
-  let(:policy_id) { "valid-policy-id" }
-  let(:role_id) { "valid-role-id" }
-  let(:role_name) { "valid-role-name" }
-  let(:policy_name) { "valid-policy-name" }
-  let(:policy_description) { "valid-policy-description" }
-  let(:policy_type) { "role" }
-  let(:policy_logic) { "POSITIVE" }
-  let(:policy_decision_strategy) { "UNANIMOUS" }
-  let(:policy) do
-    {
-      "id": policy_id,
-      "name": policy_name,
-      "description": policy_description,
-      "type": policy_type,
-      "logic": policy_logic,
-      "decisionStrategy": policy_decision_strategy,
-      "roles": [{ "id": role_id, "required": true }]
-    }
-  end
-  let(:client_authz_policy) { KeycloakAdmin.realm(realm_name).authz_policies(client_id, 'role') }
-
-  before(:each) do
-    stub_token_client
-  end
-
-  describe "#create!" do
-    before(:each) do
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:post).and_return policy.to_json
-    end
-
-    it "returns created authz policy" do
-      response = client_authz_policy.create!(policy_name, policy_description, policy_type, policy_logic, policy_decision_strategy, true, [{ id: role_id, required: true }])
-      expect(response.id).to eq policy_id
-      expect(response.name).to eq policy_name
-      expect(response.description).to eq policy_description
-      expect(response.type).to eq policy_type
-      expect(response.logic).to eq policy_logic
-      expect(response.decision_strategy).to eq policy_decision_strategy
-      expect(response.roles).to eq [{ "id" => role_id, "required" => true }]
-    end
-  end
-end

data/spec/representation/client_authz_resource_representation_spec.rb

@@ -1,33 +0,0 @@
-RSpec.describe KeycloakAdmin::ClientAuthzResourceRepresentation do
-  describe '.from_hash' do
-    it 'converts json response to class structure' do
-      rep = described_class.from_hash({
-                                        "name" => "Default Resource",
-                                        "type" => "urn:delme-client-id:resources:default",
-                                        "owner" => {
-                                          "id" => "d259b451-371b-432a-a526-3508f3a36f3b",
-                                          "name" => "delme-client-id"
-                                        },
-                                        "ownerManagedAccess" => true,
-                                        "displayName" => "Display Name",
-                                        "attributes" => { "a" => ["b"]},
-                                        "_id" => "385966a2-14b9-4cc4-9539-5f2fe1008222",
-                                        "uris" => ["/*"],
-                                        "scopes" => [{"id"=>"c0779ce3-0900-4ea3-b1d6-b23e1f19c662",
-                                                    "name" => "GET",
-                                                    "iconUri" => "http=>//asdfasdf"}],
-                                        "icon_uri" => "http://icon"
-                                      })
-      expect(rep.id).to eq "385966a2-14b9-4cc4-9539-5f2fe1008222"
-      expect(rep.name).to eq "Default Resource"
-      expect(rep.type).to eq "urn:delme-client-id:resources:default"
-      expect(rep.uris).to eq ["/*"]
-      expect(rep.owner_managed_access).to eq true
-      expect(rep.attributes).to eq({ :"a" => ["b"]})
-      expect(rep.display_name).to eq "Display Name"
-      expect(rep.scopes[0].id).to eq "c0779ce3-0900-4ea3-b1d6-b23e1f19c662"
-      expect(rep.scopes[0].name).to eq "GET"
-      expect(rep).to be_a described_class
-    end
-  end
-end

data/spec/representation/client_authz_scope_representation_spec.rb

@@ -1,19 +0,0 @@
-# frozen_string_literal: true
-
-RSpec.describe KeycloakAdmin::ClientAuthzScopeRepresentation do
-  describe '.from_hash' do
-    it 'converts json response to class structure' do
-      rep = described_class.from_hash({
-                                        "id" =>"c0779ce3-0900-4ea3-b1d6-b23e1f19c662",
-                                        "name" => "GET",
-                                        "iconUri" => "http://asdfasdf/image.png",
-                                        "displayName" => "GET authz scope"
-                                      })
-      expect(rep.id).to eq "c0779ce3-0900-4ea3-b1d6-b23e1f19c662"
-      expect(rep.name).to eq "GET"
-      expect(rep.icon_uri).to eq "http://asdfasdf/image.png"
-      expect(rep.display_name).to eq "GET authz scope"
-      expect(rep).to be_a described_class
-    end
-  end
-end

data/spec/representation/client_representation_spec.rb

@@ -1,119 +0,0 @@
-RSpec.describe KeycloakAdmin::ClientRepresentation do
-  describe "#to_json" do
-    before(:each) do
-      @client = KeycloakAdmin::ClientRepresentation.from_hash(
-        {
-          "id" => "c9104bc7-04d8-4348-b4df-8d883f9f6095",
-          "clientId" => "clien-test",
-          "name" => "Client TEST",
-          "description" => "Test to parse a client repsentation",
-          "surrogateAuthRequired" => false,
-          "enabled" => true,
-          "alwaysDisplayInConsole" => false,
-          "clientAuthenticatorType" => "client-secret",
-          "redirectUris" => [],
-          "webOrigins" => [],
-          "notBefore" => 0,
-          "bearerOnly" => false,
-          "consentRequired" => false,
-          "standardFlowEnabled" => false,
-          "implicitFlowEnabled" => false,
-          "directAccessGrantsEnabled" => false,
-          "serviceAccountsEnabled" => true,
-          "publicClient" => false,
-          "frontchannelLogout" => false,
-          "protocol" => "openid-connect",
-          "attributes" => {
-            "saml.assertion.signature" => "false",
-            "access.token.lifespan" => "86400",
-            "saml.multivalued.roles" => "false",
-            "saml.force.post.binding" => "false",
-            "saml.encrypt" => "false",
-            "saml.server.signature" => "false",
-            "backchannel.logout.revoke.offline.tokens" => "false",
-            "saml.server.signature.keyinfo.ext" => "false",
-            "exclude.session.state.from.auth.response" => "false",
-            "backchannel.logout.session.required" => "true",
-            "saml_force_name_id_format" => "false",
-            "saml.client.signature" => "false",
-            "tls.client.certificate.bound.access.tokens" => "false",
-            "saml.authnstatement" => "false",
-            "display.on.consent.screen" => "false",
-            "saml.onetimeuse.condition" => "false"
-          },
-          "authenticationFlowBindingOverrides" => {},
-          "fullScopeAllowed" => true,
-          "nodeReRegistrationTimeout" => -1,
-          "protocolMappers" => [
-            {
-              "id" => "2220432a-e953-422c-b176-62b65e085fe5",
-              "name" => "Client Host",
-              "protocol" => "openid-connect",
-              "protocolMapper" => "oidc-usersessionmodel-note-mapper",
-              "consentRequired" => false,
-              "config" => {
-                "user.session.note" => "clientHost",
-                "userinfo.token.claim" => "true",
-                "id.token.claim" => "true",
-                "access.token.claim" => "true",
-                "claim.name" => "clientHost",
-                "jsonType.label" => "String"
-              }
-            },
-            {
-              "id" => "5509e428-574d-4137-b396-9108244f31ee",
-              "name" => "Client IP Address",
-              "protocol" => "openid-connect",
-              "protocolMapper" => "oidc-usersessionmodel-note-mapper",
-              "consentRequired" => false,
-              "config" => {
-                "user.session.note" => "clientAddress",
-                "userinfo.token.claim" => "true",
-                "id.token.claim" => "true",
-                "access.token.claim" => "true",
-                "claim.name" => "clientAddress",
-                "jsonType.label" => "String"
-              }
-            },
-            {
-              "id" => "44504b93-dbce-48b8-9570-9a48d5421ae9",
-              "name" => "Client ID",
-              "protocol" => "openid-connect",
-              "protocolMapper" => "oidc-usersessionmodel-note-mapper",
-              "consentRequired" => false,
-              "config" => {
-                "user.session.note" => "clientId",
-                "userinfo.token.claim" => "true",
-                "id.token.claim" => "true",
-                "access.token.claim" => "true",
-                "claim.name" => "clientId",
-                "jsonType.label" => "String"
-              }
-            }
-          ],
-          "defaultClientScopes" => [
-            "web-origins",
-            "roles",
-            "profile",
-            "email"
-          ],
-          "optionalClientScopes" => [
-            "address",
-            "phone",
-            "offline_access",
-            "microprofile-jwt"
-          ],
-          "access" => {
-            "view" => true,
-            "configure" => true,
-            "manage" => true
-          }
-        }
-      )
-    end
-
-    it "can convert to json" do
-      expect(@client.to_json).to eq "{\"id\":\"c9104bc7-04d8-4348-b4df-8d883f9f6095\",\"name\":\"Client TEST\",\"clientId\":\"clien-test\",\"description\":\"Test to parse a client repsentation\",\"clientAuthenticatorType\":\"client-secret\",\"alwaysDisplayInConsole\":false,\"surrogateAuthRequired\":false,\"redirectUris\":[],\"webOrigins\":[],\"notBefore\":0,\"bearerOnly\":false,\"consentRequired\":false,\"standardFlowEnabled\":false,\"implicitFlowEnabled\":false,\"directAccessGrantsEnabled\":false,\"serviceAccountsEnabled\":true,\"authorizationServicesEnabled\":false,\"publicClient\":false,\"frontchannelLogout\":false,\"protocol\":\"openid-connect\",\"baseUrl\":null,\"rootUrl\":null,\"attributes\":{\"saml.assertion.signature\":\"false\",\"access.token.lifespan\":\"86400\",\"saml.multivalued.roles\":\"false\",\"saml.force.post.binding\":\"false\",\"saml.encrypt\":\"false\",\"saml.server.signature\":\"false\",\"backchannel.logout.revoke.offline.tokens\":\"false\",\"saml.server.signature.keyinfo.ext\":\"false\",\"exclude.session.state.from.auth.response\":\"false\",\"backchannel.logout.session.required\":\"true\",\"saml_force_name_id_format\":\"false\",\"saml.client.signature\":\"false\",\"tls.client.certificate.bound.access.tokens\":\"false\",\"saml.authnstatement\":\"false\",\"display.on.consent.screen\":\"false\",\"saml.onetimeuse.condition\":\"false\"},\"authenticationFlowBindingOverrides\":{},\"fullScopeAllowed\":true,\"nodeReRegistrationTimeout\":-1,\"protocolMappers\":[{\"id\":\"2220432a-e953-422c-b176-62b65e085fe5\",\"config\":{\"user.session.note\":\"clientHost\",\"userinfo.token.claim\":\"true\",\"id.token.claim\":\"true\",\"access.token.claim\":\"true\",\"claim.name\":\"clientHost\",\"jsonType.label\":\"String\"},\"name\":\"Client Host\",\"protocol\":\"openid-connect\",\"protocolMapper\":\"oidc-usersessionmodel-note-mapper\"},{\"id\":\"5509e428-574d-4137-b396-9108244f31ee\",\"config\":{\"user.session.note\":\"clientAddress\",\"userinfo.token.claim\":\"true\",\"id.token.claim\":\"true\",\"access.token.claim\":\"true\",\"claim.name\":\"clientAddress\",\"jsonType.label\":\"String\"},\"name\":\"Client IP Address\",\"protocol\":\"openid-connect\",\"protocolMapper\":\"oidc-usersessionmodel-note-mapper\"},{\"id\":\"44504b93-dbce-48b8-9570-9a48d5421ae9\",\"config\":{\"user.session.note\":\"clientId\",\"userinfo.token.claim\":\"true\",\"id.token.claim\":\"true\",\"access.token.claim\":\"true\",\"claim.name\":\"clientId\",\"jsonType.label\":\"String\"},\"name\":\"Client ID\",\"protocol\":\"openid-connect\",\"protocolMapper\":\"oidc-usersessionmodel-note-mapper\"}],\"defaultClientScopes\":[\"web-origins\",\"roles\",\"profile\",\"email\"],\"optionalClientScopes\":[\"address\",\"phone\",\"offline_access\",\"microprofile-jwt\"],\"access\":{\"view\":true,\"configure\":true,\"manage\":true}}"
-    end
-  end
-end

data/spec/representation/client_scope_representation_spec.rb

@@ -1,125 +0,0 @@
-# frozen_string_literal: true
-
-RSpec.describe KeycloakAdmin::ClientScopeRepresentation do
-  describe ".from_hash" do
-    context "with all fields" do
-      let(:hash) do
-        {
-          "id"          => "valid-scope-id",
-          "name"        => "my-scope",
-          "description" => "A test scope",
-          "protocol"    => "openid-connect",
-          "attributes"  => {
-            "display.on.consent.screen" => "true",
-            "include.in.token.scope"    => "true"
-          },
-          "protocolMappers" => [
-            {
-              "id"             => "mapper-id",
-              "name"           => "my-claim",
-              "protocol"       => "openid-connect",
-              "protocolMapper" => "oidc-hardcoded-claim-mapper",
-              "config"         => { "claim.name" => "my_claim", "claim.value" => "bar" }
-            }
-          ]
-        }
-      end
-
-      subject { described_class.from_hash(hash) }
-
-      it "returns an instance of the class" do
-        expect(subject).to be_a described_class
-      end
-
-      it "sets id" do
-        expect(subject.id).to eq "valid-scope-id"
-      end
-
-      it "sets name" do
-        expect(subject.name).to eq "my-scope"
-      end
-
-      it "sets description" do
-        expect(subject.description).to eq "A test scope"
-      end
-
-      it "sets protocol" do
-        expect(subject.protocol).to eq "openid-connect"
-      end
-
-      it "sets attributes" do
-        expect(subject.attributes).to eq(
-          "display.on.consent.screen" => "true",
-          "include.in.token.scope"    => "true"
-        )
-      end
-
-      it "deserializes protocolMappers as ProtocolMapperRepresentation objects" do
-        expect(subject.protocol_mappers.size).to eq 1
-        expect(subject.protocol_mappers.first).to be_a KeycloakAdmin::ProtocolMapperRepresentation
-      end
-
-      it "sets the correct mapper attributes" do
-        expect(subject.protocol_mappers.first).to have_attributes(
-          id:             "mapper-id",
-          name:           "my-claim",
-          protocol:       "openid-connect",
-          protocolMapper: "oidc-hardcoded-claim-mapper"
-        )
-      end
-    end
-
-    context "without protocolMappers" do
-      subject { described_class.from_hash({ "id" => "valid-scope-id", "name" => "my-scope" }) }
-
-      it "defaults protocolMappers to an empty array" do
-        expect(subject.protocol_mappers).to eq []
-      end
-    end
-
-    context "with minimal fields" do
-      subject { described_class.from_hash({ "name" => "my-scope", "protocol" => "saml" }) }
-
-      it "sets name" do
-        expect(subject.name).to eq "my-scope"
-      end
-
-      it "sets protocol" do
-        expect(subject.protocol).to eq "saml"
-      end
-
-      it "leaves id nil" do
-        expect(subject.id).to be_nil
-      end
-
-      it "leaves description nil" do
-        expect(subject.description).to be_nil
-      end
-
-      it "leaves attributes nil" do
-        expect(subject.attributes).to be_nil
-      end
-    end
-  end
-
-  describe "#to_json" do
-    subject do
-      described_class.from_hash(
-        "id"          => "valid-scope-id",
-        "name"        => "my-scope",
-        "description" => "A test scope",
-        "protocol"    => "openid-connect",
-        "attributes"  => { "include.in.token.scope" => "true" }
-      )
-    end
-
-    it "serializes to JSON" do
-      parsed = JSON.parse(subject.to_json)
-      expect(parsed["id"]).to          eq "valid-scope-id"
-      expect(parsed["name"]).to        eq "my-scope"
-      expect(parsed["description"]).to eq "A test scope"
-      expect(parsed["protocol"]).to    eq "openid-connect"
-      expect(parsed["attributes"]).to  eq("include.in.token.scope" => "true")
-    end
-  end
-end

data/spec/representation/credential_representation_spec.rb

@@ -1,68 +0,0 @@
-
-RSpec.describe KeycloakAdmin::CredentialRepresentation do
-  describe ".from_json" do
-    it "parses a password" do
-      json_payload = <<-'payload'
-        {
-          "id": "2ff4b4d0-fd72-4c6e-9684-02ab337687c2",
-          "type": "password",
-          "userLabel": "My password",
-          "createdDate": 1767604673211,
-          "credentialData": "{\"hashIterations\":5,\"algorithm\":\"argon2\",\"additionalParameters\":{\"hashLength\":[\"32\"],\"memory\":[\"7168\"],\"type\":[\"id\"],\"version\":[\"1.3\"],\"parallelism\":[\"1\"]}}"
-        }
-      payload
-
-      credential = described_class.from_json(json_payload)
-      expect(credential).to be
-      expect(credential).to be_a described_class
-      expect(credential.id).to eq "2ff4b4d0-fd72-4c6e-9684-02ab337687c2"
-      expect(credential.type).to eq "password"
-      expect(credential.createdDate).to eq 1767604673211
-      expect(credential.credentialData).to eq "{\"hashIterations\":5,\"algorithm\":\"argon2\",\"additionalParameters\":{\"hashLength\":[\"32\"],\"memory\":[\"7168\"],\"type\":[\"id\"],\"version\":[\"1.3\"],\"parallelism\":[\"1\"]}}"
-      expect(credential.userLabel).to eq "My password"
-      expect(credential.device).to be_nil
-      expect(credential.value).to be_nil
-      expect(credential.hashedSaltedValue).to be_nil
-      expect(credential.salt).to be_nil
-      expect(credential.hashIterations).to eq 5
-      expect(credential.counter).to be_nil
-      expect(credential.algorithm).to eq "argon2"
-      expect(credential.digits).to be_nil
-      expect(credential.period).to be_nil
-      expect(credential.config).to be_nil
-      expect(credential.temporary).to be_nil
-    end
-
-    it "parses an otp" do
-      json_payload = <<-'payload'
-        {
-          "id": "34389672-9356-4154-9ed6-6c212b869010",
-          "type": "otp",
-          "userLabel": "Smartphone",
-          "createdDate": 1767605202060,
-          "credentialData": "{\"subType\":\"totp\",\"digits\":6,\"counter\":0,\"period\":30,\"algorithm\":\"HmacSHA1\"}"
-        }
-      payload
-
-      credential = described_class.from_json(json_payload)
-      expect(credential).to be
-      expect(credential).to be_a described_class
-      expect(credential.id).to eq "34389672-9356-4154-9ed6-6c212b869010"
-      expect(credential.type).to eq "otp"
-      expect(credential.createdDate).to eq 1767605202060
-      expect(credential.credentialData).to eq "{\"subType\":\"totp\",\"digits\":6,\"counter\":0,\"period\":30,\"algorithm\":\"HmacSHA1\"}"
-      expect(credential.userLabel).to eq "Smartphone"
-      expect(credential.device).to be_nil
-      expect(credential.value).to be_nil
-      expect(credential.hashedSaltedValue).to be_nil
-      expect(credential.salt).to be_nil
-      expect(credential.hashIterations).to be_nil
-      expect(credential.counter).to eq 0
-      expect(credential.algorithm).to eq "HmacSHA1"
-      expect(credential.digits).to eq 6
-      expect(credential.period).to eq 30
-      expect(credential.config).to be_nil
-      expect(credential.temporary).to be_nil
-    end
-  end
-end

data/spec/representation/group_representation_spec.rb

@@ -1,22 +0,0 @@
-
-RSpec.describe KeycloakAdmin::GroupRepresentation do
-  describe ".from_hash" do
-    it "parses the sub groups into group representations" do
-      group = described_class.from_hash({
-        "name" => "group a",
-        "attributes" => {
-          "key" => ["value"]
-        },
-        "subGroupCount" => 1,
-        "subGroups" => [{
-          "name" => "subgroup b"
-        }]
-      })
-
-      expect(group.attributes).to eq(key: ["value"])
-      expect(group.sub_group_count).to eq 1
-      expect(group.sub_groups.length).to eq 1
-      expect(group.sub_groups.first).to be_a described_class
-    end
-  end
-end

data/spec/representation/identity_provider_mapper_representation_spec.rb

@@ -1,24 +0,0 @@
-RSpec.describe KeycloakAdmin::IdentityProviderMapperRepresentation do
-  describe "#to_json" do
-    before(:each) do
-      @mapper = KeycloakAdmin::IdentityProviderMapperRepresentation.from_hash(
-        {
-          "id" => "91895ce9-b225-4274-993e-c8e6b8e490f0",
-          "name" => "IDP",
-          "identityProviderAlias" => "test",
-          "identityProviderMapper" => "hardcoded-attribute-idp-mapper",
-          "config" => {
-            "syncMode" => "INHERIT",
-            "attribute.value" => "test",
-            "attributes" => "[]",
-            "attribute" => "keycloak.idp"
-          }
-        }
-      )
-    end
-
-    it "can convert to json" do
-      expect(@mapper.to_json).to eq "{\"id\":\"91895ce9-b225-4274-993e-c8e6b8e490f0\",\"name\":\"IDP\",\"identityProviderAlias\":\"test\",\"identityProviderMapper\":\"hardcoded-attribute-idp-mapper\",\"config\":{\"syncMode\":\"INHERIT\",\"attribute.value\":\"test\",\"attributes\":\"[]\",\"attribute\":\"keycloak.idp\"}}"
-    end
-  end
-end