keycloak-admin 2.0.1 → 2.0.3

data/spec/client/client_authz_resource_client_spec.rb

@@ -1,150 +0,0 @@
-RSpec.describe KeycloakAdmin::ClientAuthzResourceClient do
-  describe "#initialize" do
-    let(:realm_name) { nil }
-    before(:each) do
-      @realm = KeycloakAdmin.realm(realm_name)
-    end
-
-    context "when realm_name is defined" do
-      let(:realm_name) { "master" }
-      it "does not raise any error" do
-        expect { @realm.attack_detections }.to_not raise_error
-      end
-    end
-    context "when realm_name is not defined" do
-      it "raise argument error" do
-        expect { @realm.attack_detections }.to raise_error(ArgumentError)
-      end
-    end
-  end
-
-  describe "#list" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    before(:each) do
-      @client_authz_resource = KeycloakAdmin.realm(realm_name).authz_resources(client_id)
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '[{"name":"Default Resource","type":"urn:delme-client-id:resources:default","owner":{"id":"d259b451-371b-432a-a526-3508f3a36f3b","name":"delme-client-id"},"ownerManagedAccess":false,"_id":"94643fe2-1973-4a36-8e1f-830ade186398","uris":["/*"]},{"name":"asdfasdf","type":"urn:delme-client-id:resources:default","owner":{"id":"d259b451-371b-432a-a526-3508f3a36f3b","name":"delme-client-id"},"ownerManagedAccess":true,"displayName":"asdfasdfasdfa","_id":"385966a2-14b9-4cc4-9539-5f2fe1008222","uris":["/*"],"icon_uri":"http://icon"}]'
-    end
-
-    it "returns list of authz scopes" do
-      response = @client_authz_resource.list
-      expect(response.size).to eq 2
-      expect(response[1].id).to eq "385966a2-14b9-4cc4-9539-5f2fe1008222"
-      expect(response[1].name).to eq "asdfasdf"
-      expect(response[1].type).to eq  "urn:delme-client-id:resources:default"
-      expect(response[1].owner_managed_access).to be_truthy
-    end
-  end
-
-  describe '#get' do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:resource_id) { "valid-resource-id" }
-    let(:client_authz_resource) { KeycloakAdmin.realm(realm_name).authz_resources(client_id) }
-    before(:each) do
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '{"name":"Default Resource","type":"urn:delme-client-id:resources:default","owner":{"id":"d259b451-371b-432a-a526-3508f3a36f3b","name":"delme-client-id"},"ownerManagedAccess":false,"_id":"94643fe2-1973-4a36-8e1f-830ade186398","uris":["/*"]}'
-    end
-
-    it "returns authz scope" do
-      response = client_authz_resource.get(resource_id)
-      expect(response.id).to eq "94643fe2-1973-4a36-8e1f-830ade186398"
-      expect(response.name).to eq "Default Resource"
-      expect(response.type).to eq  "urn:delme-client-id:resources:default"
-      expect(response.owner_managed_access).to be_falsey
-    end
-  end
-
-  describe '#update' do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:resource_id) { "valid-resource-id" }
-    let(:client_authz_resource) { KeycloakAdmin.realm(realm_name).authz_resources(client_id) }
-    before(:each) do
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '{"name":"Default Resource","type":"urn:delme-client-id:resources:default","owner":{"id":"d259b451-371b-432a-a526-3508f3a36f3b","name":"delme-client-id"},"ownerManagedAccess":false,"_id":"94643fe2-1973-4a36-8e1f-830ade186398","uris":["/*"]}'
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:put).and_return '{"name":"Default Resource","type":"urn:delme-client-id:resources:default","owner":{"id":"d259b451-371b-432a-a526-3508f3a36f3b","name":"delme-client-id"},"ownerManagedAccess":false,"_id":"94643fe2-1973-4a36-8e1f-830ade186398","uris":["/*"]}'
-    end
-
-    it "returns updated authz scope" do
-      response = client_authz_resource.update(resource_id, {name: "Default Resource", type: "urn:delme-client-id:resources:default", uris: ["/tmp/*"], owner_managed_access: false, display_name: "Default Resource", scopes: []})
-      expect(response.id).to eq "94643fe2-1973-4a36-8e1f-830ade186398"
-      expect(response.name).to eq "Default Resource"
-      expect(response.type).to eq  "urn:delme-client-id:resources:default"
-      expect(response.owner_managed_access).to be_falsey
-    end
-  end
-
-  describe '#create!' do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    before(:each) do
-      @client_authz_resource = KeycloakAdmin.realm(realm_name).authz_resources(client_id)
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:post).and_return '{"name":"Default Resource","type":"urn:delme-client-id:resources:default","owner":{"id":"d259b451-371b-432a-a526-3508f3a36f3b","name":"delme-client-id"},"ownerManagedAccess":false,"_id":"94643fe2-1973-4a36-8e1f-830ade186398","uris":["/*"]}'
-    end
-
-    it "returns created authz scope" do
-      response = @client_authz_resource.create!("Default Resource", "urn:delme-client-id:resources:default", ["/tmp/*"], false, "Default Resource", [])
-      expect(response.id).to eq "94643fe2-1973-4a36-8e1f-830ade186398"
-      expect(response.name).to eq "Default Resource"
-      expect(response.type).to eq  "urn:delme-client-id:resources:default"
-      expect(response.owner_managed_access).to be_falsey
-    end
-  end
-
-  describe "#find_by" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:resource_id) { "valid-resource-id" }
-    let(:client_authz_resource) { KeycloakAdmin.realm(realm_name).authz_resources(client_id) }
-    before(:each) do
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '[{"name":"Default Resource","type":"urn:delme-client-id:resources:default","owner":{"id":"d259b451-371b-432a-a526-3508f3a36f3b","name":"delme-client-id"},"ownerManagedAccess":false,"_id":"94643fe2-1973-4a36-8e1f-830ade186398","uris":["/*"]}]'
-    end
-
-    it "returns list of authz scopes" do
-      response = client_authz_resource.find_by("Default Resource", "urn:delme-client-id:resources:default", ["/tmp/*"], false, "")
-      expect(response.size).to eq 1
-      expect(response[0].id).to eq "94643fe2-1973-4a36-8e1f-830ade186398"
-      expect(response[0].name).to eq "Default Resource"
-      expect(response[0].type).to eq  "urn:delme-client-id:resources:default"
-      expect(response[0].owner_managed_access).to be_falsey
-    end
-  end
-
-  describe "#authz_scopes_url" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:client_authz_resource){ KeycloakAdmin.realm(realm_name).authz_resources(client_id) }
-
-    context 'when resource_id is nil' do
-      it "return a proper url" do
-        expect(client_authz_resource.authz_resources_url(client_id)).to eq "http://auth.service.io/auth/admin/realms/valid-realm/clients/valid-client-id/authz/resource-server/resource"
-      end
-    end
-
-    context 'when resource_id is not nil' do
-      it "return a proper url" do
-        expect(client_authz_resource.authz_resources_url(client_id, "resource-id")).to eq "http://auth.service.io/auth/admin/realms/valid-realm/clients/valid-client-id/authz/resource-server/resource/resource-id"
-      end
-    end
-  end
-
-  describe "#delete" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:resource_id) { "valid-resource-id" }
-    let(:client_authz_resource) { KeycloakAdmin.realm(realm_name).authz_resources(client_id) }
-    before(:each) do
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:delete).and_return '{}'
-    end
-
-    it "returns true" do
-      response = client_authz_resource.delete(resource_id)
-      expect(response).to be_truthy
-    end
-  end
-end

data/spec/client/client_authz_scope_client_spec.rb

@@ -1,134 +0,0 @@
-RSpec.describe KeycloakAdmin::ClientAuthzScopeClient do
-  describe "#initialize" do
-    let(:realm_name) { nil }
-    before(:each) do
-      @realm = KeycloakAdmin.realm(realm_name)
-    end
-
-    context "when realm_name is defined" do
-      let(:realm_name) { "master" }
-      it "does not raise any error" do
-        expect { @realm.attack_detections }.to_not raise_error
-      end
-    end
-    context "when realm_name is not defined" do
-      it "raise argument error" do
-        expect { @realm.attack_detections }.to raise_error(ArgumentError)
-      end
-    end
-  end
-
-  describe "#create" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    before(:each) do
-      @client_authz_scope = KeycloakAdmin.realm(realm_name).authz_scopes(client_id)
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:post).and_return '{"id":"c0779ce3-0900-4ea3-b1d6-b23e1f19c662","name":"GET","iconUri":"http://asdfasd1","displayName":"GET authz scope"}'
-    end
-
-    it "returns created authz scope" do
-      response = @client_authz_scope.create!("GET", "GET authz scope", "http://asdfasd1")
-      expect(response.id).to eq "c0779ce3-0900-4ea3-b1d6-b23e1f19c662"
-      expect(response.name).to eq "GET"
-      expect(response.display_name).to eq "GET authz scope"
-      expect(response.icon_uri).to eq "http://asdfasd1"
-    end
-  end
-
-  describe "#list" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    before(:each) do
-      @client_authz_scope = KeycloakAdmin.realm(realm_name).authz_scopes(client_id)
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '[{"id":"c0779ce3-0900-4ea3-b1d6-b23e1f19c662","name":"GET","iconUri":"http://asdfasd1","displayName":"GET authz scope"},{"id":"d0779ce3-0900-4ea3-b1d6-b23e1f19c662","name":"POST","iconUri":"http://asdfasd2","displayName":"POST authz scope"}]'
-    end
-
-    it "returns list of authz scopes" do
-      response = @client_authz_scope.list
-      expect(response.size).to eq 2
-      expect(response.first.id).to eq "c0779ce3-0900-4ea3-b1d6-b23e1f19c662"
-      expect(response.first.name).to eq "GET"
-      expect(response.first.display_name).to eq "GET authz scope"
-      expect(response.first.icon_uri).to eq "http://asdfasd1"
-    end
-  end
-
-
-  describe "#delete" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:scope_id) { "valid-scope-id" }
-    before(:each) do
-      @client_authz_scope = KeycloakAdmin.realm(realm_name).authz_scopes(client_id)
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:delete).and_return ""
-    end
-
-    it "returns true" do
-      response = @client_authz_scope.delete(scope_id)
-      expect(response).to eq true
-    end
-  end
-
-  describe '#get' do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:scope_id) { "valid-scope-id" }
-    before(:each) do
-      @client_authz_scope = KeycloakAdmin.realm(realm_name).authz_scopes(client_id)
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '{"id":"c0779ce3-0900-4ea3-b1d6-b23e1f19c662","name":"GET","iconUri":"http://asdfasd1","displayName":"GET authz scope"}'
-    end
-
-    it "returns authz scope" do
-      response = @client_authz_scope.get(scope_id)
-      expect(response.id).to eq "c0779ce3-0900-4ea3-b1d6-b23e1f19c662"
-      expect(response.name).to eq "GET"
-      expect(response.display_name).to eq "GET authz scope"
-      expect(response.icon_uri).to eq "http://asdfasd1"
-    end
-  end
-
-  describe '#search' do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:name) { "GET" }
-    before(:each) do
-      @client_authz_scope = KeycloakAdmin.realm(realm_name).authz_scopes(client_id)
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '[{"id":"c0779ce3-0900-4ea3-b1d6-b23e1f19c662","name":"GET","iconUri":"http://asdfasd1","displayName":"GET authz scope"}]'
-    end
-
-    it "returns list of authz scopes" do
-      response = @client_authz_scope.search(name)
-      expect(response.size).to eq 1
-      expect(response.first.id).to eq "c0779ce3-0900-4ea3-b1d6-b23e1f19c662"
-      expect(response.first.name).to eq "GET"
-      expect(response.first.display_name).to eq "GET authz scope"
-      expect(response.first.icon_uri).to eq "http://asdfasd1"
-    end
-  end
-
-  describe "#authz_scopes_url" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "valid-client-id" }
-    let(:client_authz_scope) { KeycloakAdmin.realm(realm_name).authz_scopes(client_id) }
-    context 'resource_id is nil and id is nil' do
-      it "return a proper url" do
-        expect(client_authz_scope.authz_scopes_url(client_id)).to eq "http://auth.service.io/auth/admin/realms/valid-realm/clients/valid-client-id/authz/resource-server/scope"
-      end
-    end
-    context 'resource_id is not nil' do
-      it "return a proper url" do
-        expect(client_authz_scope.authz_scopes_url(client_id, "valid-resource-id")).to eq "http://auth.service.io/auth/admin/realms/valid-realm/clients/valid-client-id/authz/resource-server/resource/valid-resource-id/scopes"
-      end
-    end
-    context 'resource_id is nil and id is not nil' do
-      it "return a proper url" do
-        expect(client_authz_scope.authz_scopes_url(client_id, nil, "valid-id")).to eq "http://auth.service.io/auth/admin/realms/valid-realm/clients/valid-client-id/authz/resource-server/scope/valid-id"
-      end
-    end
-  end
-end

data/spec/client/client_client_spec.rb

@@ -1,133 +0,0 @@
-RSpec.describe KeycloakAdmin::ClientClient do
-  describe "#clients_url" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id)    { nil }
-
-    before(:each) do
-      @built_url = KeycloakAdmin.realm(realm_name).clients.clients_url(client_id)
-    end
-
-    context "when client_id is not defined" do
-      let(:client_id) { nil }
-      it "return a proper url without client id" do
-        expect(@built_url).to eq "http://auth.service.io/auth/admin/realms/valid-realm/clients"
-      end
-    end
-
-    context "when client_id is defined" do
-      let(:client_id) { "95985b21-d884-4bbd-b852-cb8cd365afc2" }
-      it "return a proper url with the client id" do
-        expect(@built_url).to eq "http://auth.service.io/auth/admin/realms/valid-realm/clients/95985b21-d884-4bbd-b852-cb8cd365afc2"
-      end
-    end
-  end
-
-  describe "#get" do
-    let(:realm_name) { "valid-realm" }
-    let(:id) { "test_client_id" }
-    let(:client_name) { "test_client_name" }
-
-    before(:each) do
-      @client_client = KeycloakAdmin.realm(realm_name).clients
-
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '{"id":"test_client_id","name":"test_client_name"}'
-    end
-
-    it "finds a client" do
-      client = @client_client.get(id)
-      expect(client.name).to eq client_name
-      expect(client.id).to eq id
-    end
-  end
-
-  describe "#find_by_client_id" do
-    let(:realm_name) { "valid-realm" }
-    let(:client_id) { "my_client_id" }
-    let(:client_name) { "test_client_name" }
-
-    before(:each) do
-      @client_client = KeycloakAdmin.realm(realm_name).clients
-
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '[{"id":"test_client_id","clientId": "my_client_id","name":"test_client_name"},{"id":"test_client_id_2","clientId":"client_id_2","name":"test_client_name_2"}]'
-    end
-
-    it "finds a client it has" do
-      client = @client_client.find_by_client_id(client_id)
-      expect(client.name).to eq client_name
-      expect(client.client_id).to eq client_id
-    end
-
-    it "returns nil if it doesn't have the client" do
-      client = @client_client.find_by_client_id("client_id_3")
-      expect(client).to be_nil
-    end
-  end
-
-  describe "#list" do
-    let(:realm_name) { "valid-realm" }
-
-    before(:each) do
-      @client_client = KeycloakAdmin.realm(realm_name).clients
-
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '[{"id":"test_client_id","name":"test_client_name"}]'
-    end
-
-    it "lists clients" do
-      clients = @client_client.list
-      expect(clients.length).to eq 1
-      expect(clients[0].name).to eq "test_client_name"
-    end
-
-    it "passes rest client options" do
-      faraday_options = {timeout: 10}
-      allow_any_instance_of(KeycloakAdmin::Configuration).to receive(:faraday_options).and_return faraday_options
-
-      expect(KeycloakAdmin::Resource).to receive(:new).with(
-        "http://auth.service.io/auth/admin/realms/valid-realm/clients", faraday_options, anything).and_call_original
-
-      clients = @client_client.list
-      expect(clients.length).to eq 1
-      expect(clients[0].name).to eq "test_client_name"
-    end
-  end
-
-  describe "#update" do
-    let(:realm_name) { "valid-realm" }
-    let(:client) { KeycloakAdmin::ClientRepresentation.from_hash({ "id" => "test_client_id", "clientId" => "my-client", "name" => "old_name" }) }
-
-    before(:each) do
-      @client_client = KeycloakAdmin.realm(realm_name).clients
-
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:put).and_return ''
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '{"id":"test_client_id", "clientId": "my-client","name":"new_name"}'
-    end
-
-    it "updates a client" do
-      updated_client = @client_client.update(client)
-
-      expect(updated_client.name).to eq "new_name"
-    end
-  end
-
-  describe "#delete" do
-    let(:realm_name) { "valid-realm" }
-
-    before(:each) do
-      @client_client = KeycloakAdmin.realm(realm_name).clients
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:delete).and_return ''
-    end
-
-    it "passes rest client options" do
-      faraday_options = {timeout: 10}
-      allow_any_instance_of(KeycloakAdmin::Configuration).to receive(:faraday_options).and_return faraday_options
-      expect(KeycloakAdmin::Resource).to receive(:new).with(
-        "http://auth.service.io/auth/admin/realms/valid-realm/clients/95b45037-3980-404c-ba12-784fa1baf2c2", faraday_options, anything).and_call_original
-      @client_client.delete("95b45037-3980-404c-ba12-784fa1baf2c2")
-    end
-  end
-end

data/spec/client/client_role_mappings_client_spec.rb

@@ -1,83 +0,0 @@
-RSpec.describe KeycloakAdmin::ClientRoleMappingsClient do
-  describe "#available_url" do
-    let(:realm_name) { "valid-realm" }
-    let(:user_id)    { "test_user" }
-    let(:client_id)  { "test_client" }
-
-    before(:each) do
-      @built_url = KeycloakAdmin.realm(realm_name).user(user_id).client_role_mappings(client_id).list_available_url
-    end
-
-    it "return a proper url" do
-      expect(@built_url).to eq "http://auth.service.io/auth/admin/realms/valid-realm/users/test_user/role-mappings/clients/test_client/available"
-    end
-  end
-
-  describe "#list_available" do
-    let(:realm_name) { "valid-realm" }
-    let(:user_id)    { "test_user" }
-    let(:client_id)  { "test_client" }
-
-    before(:each) do
-      @client_role_mappings_client = KeycloakAdmin.realm(realm_name).user(user_id).client_role_mappings(client_id)
-
-      stub_token_client
-      allow_any_instance_of(KeycloakAdmin::Resource).to receive(:get).and_return '[{"id":"test_role_id","name":"test_role_name"}]'
-    end
-
-    it "lists roles" do
-      roles = @client_role_mappings_client.list_available
-      expect(roles.length).to eq 1
-      expect(roles[0].name).to eq "test_role_name"
-    end
-
-    it "passes rest client options" do
-      faraday_options = {timeout: 10}
-      allow_any_instance_of(KeycloakAdmin::Configuration).to receive(:faraday_options).and_return faraday_options
-
-      expect(KeycloakAdmin::Resource).to receive(:new).with(
-        "http://auth.service.io/auth/admin/realms/valid-realm/users/test_user/role-mappings/clients/test_client/available",
-        faraday_options,
-        anything
-      ).and_call_original
-
-      roles = @client_role_mappings_client.list_available
-      expect(roles.length).to eq 1
-      expect(roles[0].name).to eq "test_role_name"
-    end
-  end
-
-  describe "#save" do
-    let(:realm_name) { "valid-realm" }
-    let(:user_id)    { "test_user" }
-    let(:client_id)  { "test_client" }
-    let(:role_list) { [
-      KeycloakAdmin::RoleRepresentation.from_hash(
-        "name" => "test_role_name",
-        "composite" => false,
-        "clientRole" => false
-      )
-    ] }
-
-    before(:each) do
-      @client_role_mappings_client = KeycloakAdmin.realm(realm_name).user(user_id).client_role_mappings(client_id)
-
-      stub_token_client
-      expect_any_instance_of(KeycloakAdmin::Resource).to receive(:post).with(role_list.to_json, anything)
-    end
-
-    it "saves client role mappings" do
-      @client_role_mappings_client.save(role_list)
-    end
-
-    it "passes rest client options" do
-      faraday_options = {timeout: 10}
-      allow_any_instance_of(KeycloakAdmin::Configuration).to receive(:faraday_options).and_return faraday_options
-
-      expect(KeycloakAdmin::Resource).to receive(:new).with(
-        "http://auth.service.io/auth/admin/realms/valid-realm/users/test_user/role-mappings/clients/test_client", faraday_options, anything).and_call_original
-
-      @client_role_mappings_client.save(role_list)
-    end
-  end
-end