keycloak-admin 2.0.1 → 2.0.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4a9c09a6765355416960bbc5c4564ad5dd5f526f65093b43d46ac10fc39d0ae7
-  data.tar.gz: b2dd1762448fad5a096b94adc3d18b30640235fe02efa1e77269797bfa3f9464
+  metadata.gz: 9bc43409191a911c85de270b70021cbe48d0372844c5a2a4d87409f250d6b646
+  data.tar.gz: eee1d04d6026a04da64769c02cbe49ec9f84d186a1fafefc45476925979333c6
 SHA512:
-  metadata.gz: 3274b863ef8b7d295b82d5dd87a6d3340ac96ac08c1f38c822ad531b204f4fd5755704a905ccc308821e199d17cc8c73959c3dc1d39a5a13079ce133f1ed4854
-  data.tar.gz: 7c8d7b5f54eb523f27eaaa83893d8b5190d4647ed6d7424a6ac1b55168ffa02fb426171b424330db86d976e00c84e1644d3bab3cf4fd398d1eb9cf4deff2e679
+  metadata.gz: 96fccdf9c111acf6cfc67d6d05f7fd3b7e87140292d63df5dd9fdfebb228c30595416ae23ee8e465e06be1b54e3be857d8a64f599a447d642082086054805eb4
+  data.tar.gz: c49b8b8e7b2a13ae05eb69c47c3a0ee4c935a4e8a689fbf8863d01f843f95ee2506460e2ccf852223586266ae3591ee9cefff83819d087410b2fe53ccfadf0c1

data/CHANGELOG.md

@@ -5,6 +5,19 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [2.0.2] - 2026-08-01
+
+* [Breaking] HTTP failures now raise a `KeycloakAdmin::ApiError` subclass instead of a bare `RuntimeError`. 
+  * Messages are unchanged, so code matching on the text keeps working. 
+  * Code rescuing `RuntimeError` explicitly must be updated. 
+  * A create call answering something other than `201 Created` now raises `KeycloakAdmin::UnexpectedResponseError`.
+* [Feature] A `401` answer now drops the cached access token and replays the request once with a freshly fetched one, so a token revoked before its advertised expiry no longer fails every call until it lapses.
+* [Fix] `GroupClient#members` called ActiveSupport's `Object#try` and raised `NoMethodError` outside a Rails application.
+* [Fix] `UserClient#execute_actions_email` (and `#forgot_password`) called ActiveSupport's `Numeric#seconds` and raised `NoMethodError` outside a Rails application whenever a `lifespan` was passed.
+* [Fix] `ClientAuthzPolicyClient#find_by` opened a second `?` in its URL, which folded `name`, `type`, `first` and `max` into the value of `permission`; Keycloak silently returned an unfiltered list.
+* [Fix] Query parameters are now percent-encoded everywhere they are built. Search terms, and the `redirect_uri` of `UserClient#execute_actions_email`, containing a space, `&` or `=` used to break the URL or forge extra parameters.
+* [Fix] `OrganizationClient#build` raised `NameError` instead of the intended `ArgumentError` when `domains` was not an `Array`.
+
 ## [2.0.1] - 2026-07-31
 
 * [Feature] Requests are now logged through `config.logger` (method, URL, and response status) via Faraday's `:logger` middleware.

data/README.md

@@ -16,7 +16,7 @@ This gem *does not* require Rails.
 For example, using `bundle`, add this line to your Gemfile.
 
 ```ruby
-gem "keycloak-admin", "2.0.1"
+gem "keycloak-admin", "2.0.2"
 ```
 
 ## Login
@@ -109,6 +109,42 @@ All options have a default value. However, all of them can be changed in your in
 | `faraday_options` | `{}`| Hash | Optional | Options to pass to `Faraday.new` (e.g. `request:`, `ssl:`, `proxy:`) | `{ request: { timeout: 5 } }` | 
 
 
+## Error handling
+
+Every HTTP failure raises a `KeycloakAdmin::ApiError` carrying the `status`, `body` and `headers`
+of the response, so you never have to parse the message. Rescue as narrowly or as broadly as you need:
+
+```ruby
+begin
+  KeycloakAdmin.realm("a-realm").users.get(user_id)
+rescue KeycloakAdmin::NotFoundError => e   # exactly 404
+  nil
+rescue KeycloakAdmin::ClientError => e     # any 4xx
+  logger.warn("Rejected with #{e.status}: #{e.body}")
+  raise
+rescue KeycloakAdmin::ServerError => e     # any 5xx
+  raise
+end
+```
+
+| Class | Raised on |
+| ---- | ---- |
+| `KeycloakAdmin::Error` | Base class of every error this gem raises |
+| `KeycloakAdmin::ApiError` | Any non-2xx answer; parent of the two families below |
+| `KeycloakAdmin::ClientError` | Any 4xx |
+| `KeycloakAdmin::BadRequestError` | 400 |
+| `KeycloakAdmin::UnauthorizedError` | 401 |
+| `KeycloakAdmin::ForbiddenError` | 403 |
+| `KeycloakAdmin::NotFoundError` | 404 |
+| `KeycloakAdmin::ConflictError` | 409 |
+| `KeycloakAdmin::ServerError` | Any 5xx |
+| `KeycloakAdmin::UnexpectedResponseError` | A create call answered something other than `201 Created` |
+
+`Faraday::TimeoutError` and the other connection-level Faraday errors are left untouched and propagate as-is, since no response ever came back to describe.
+
+A `401` is handled before it reaches you: the cached access token is dropped and the request is replayed once with a freshly fetched one, so a token revoked before its advertised expiry does not fail every call until it lapses `KeycloakAdmin::UnauthorizedError` is raised only if the replay is
+refused too.
+
 ## Use Cases
 
 ### Supported features
@@ -348,7 +384,7 @@ KeycloakAdmin.realm("a_realm").groups.list
 
 Returns an array of `KeycloakAdmin::GroupRepresentation`.
 
-According to [the documentation](https://www.keycloak.org/docs-api/22.0.1/rest-api/index.html#_groups):
+According to [the documentation](https://www.keycloak.org/docs-api/22.0.2/rest-api/index.html#_groups):
 * When providing a `String` parameter, this produces an arbitrary search string
 * When providing a `Hash`, you can specify other fields (_e.g_ q, max, first)
 
@@ -898,6 +934,6 @@ scoped RubyGems credential.
 3. Tag the commit and push the tag:
 
 ```
-  $ git tag -a v2.0.1 -m "Version 2.0.1"
-  $ git push origin v2.0.1
+  $ git tag -a v2.0.2 -m "Version 2.0.2"
+  $ git push origin v2.0.2
 ```

data/keycloak-admin.gemspec

@@ -12,15 +12,23 @@ Gem::Specification.new do |spec|
   spec.description = "Keycloak Admin REST API client written in Ruby"
   spec.license     = "MIT"
 
-  spec.files = `git ls-files -z`.split("\x0")
+  spec.files         = Dir.glob(["lib/**/*.rb", "CHANGELOG.md", "MIT-LICENSE", "README.md", "keycloak-admin.gemspec"]).sort
   spec.require_paths = ["lib"]
 
-  spec.required_ruby_version = '>= 3.1'
+  spec.required_ruby_version = ">= 3.1"
+
+  spec.metadata = {
+    "source_code_uri"       => spec.homepage,
+    "changelog_uri"         => "#{spec.homepage}/blob/main/CHANGELOG.md",
+    "bug_tracker_uri"       => "#{spec.homepage}/issues",
+    "rubygems_mfa_required" => "true"
+  }
 
   spec.add_dependency "http-cookie", "~> 1.0", ">= 1.0.3"
   spec.add_dependency "faraday", "~> 2.0"
   spec.add_dependency "base64"
-  spec.add_development_dependency "rspec",  "3.13.2"
-  spec.add_development_dependency "byebug", "12.0.0"
-  spec.add_development_dependency "rake",   ">= 13.0"
-end
+  spec.add_development_dependency "rspec",   "3.13.2"
+  spec.add_development_dependency "byebug",  "12.0.0"
+  spec.add_development_dependency "rake",    ">= 13.0"
+  spec.add_development_dependency "webmock", "~> 3.0"
+end

data/lib/keycloak-admin/client/client.rb

@@ -1,3 +1,5 @@
+require "uri"
+
 module KeycloakAdmin
   class Client
 
@@ -25,16 +27,24 @@ module KeycloakAdmin
     end
 
     def execute_http
-      yield
-    rescue Faraday::TimeoutError
-      raise
-    rescue Faraday::ClientError, Faraday::ServerError => e
-      http_error(e.response)
+      replayed = false
+      begin
+        yield
+      rescue Faraday::TimeoutError
+        raise
+      rescue Faraday::ClientError, Faraday::ServerError => e
+        if !replayed && e.response && e.response[:status] == 401 && !@configuration.cached_token.nil?
+          @configuration.clear_cached_token!
+          replayed = true
+          retry
+        end
+        raise ApiError.from_response(e.response)
+      end
     end
 
     def created_id(response)
       unless response.status == 201
-        raise "Create method returned status #{response.reason_phrase} (Code: #{response.status}); expected status: Created (201)"
+        raise UnexpectedResponseError.new(response.status, response.reason_phrase)
       end
       (_head, _separator, id) = response.headers[:location].rpartition("/")
       id
@@ -52,6 +62,12 @@ module KeycloakAdmin
 
     private
 
+    def build_query(parameters)
+      parameters.map do |name, value|
+        "#{URI.encode_uri_component(name.to_s)}=#{URI.encode_uri_component(value.to_s)}"
+      end.join("&")
+    end
+
     def fetch_token
       KeycloakAdmin.create_client(@configuration, @configuration.client_realm_name).token.get
     end
@@ -59,9 +75,5 @@ module KeycloakAdmin
     def resource(url)
       Resource.new(url, @configuration.faraday_options, @configuration.logger)
     end
-
-    def http_error(response)
-      raise "Keycloak: The request failed with response code #{response[:status]} and message: #{response[:body]}"
-    end
   end
 end

data/lib/keycloak-admin/client/client_authz_permission_client.rb

@@ -20,7 +20,7 @@ module KeycloakAdmin
 
     def find_by(name, resource_param, scope = nil)
       response = execute_http do
-        url = "#{authz_permission_url(@client_id)}?name=#{name}&resource=#{resource_param}&type=#{@type}&scope=#{scope}&deep=true&first=0&max=100"
+        url = "#{authz_permission_url(@client_id)}?#{build_query(name: name, resource: resource_param, type: @type, scope: scope, deep: true, first: 0, max: 100)}"
         resource(url).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzPermissionRepresentation.from_hash(role_as_hash) }

data/lib/keycloak-admin/client/client_authz_policy_client.rb

@@ -33,7 +33,7 @@ module KeycloakAdmin
 
     def find_by(name, type)
       response = execute_http do
-        url = "#{authz_policy_url(@client_id, @type)}?permission=false&name=#{name}&type=#{type}&first=0&max=11"
+        url = "#{authz_policy_url(@client_id, @type)}&#{build_query(name: name, type: type, first: 0, max: 11)}"
         resource(url).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzPolicyRepresentation.from_hash(role_as_hash) }

data/lib/keycloak-admin/client/client_authz_resource_client.rb

@@ -47,7 +47,7 @@ module KeycloakAdmin
 
     def find_by(name, type, uris, owner, scope)
       response = execute_http do
-        url = "#{authz_resources_url(@client_id)}?name=#{name}&type=#{type}&uris=#{uris}&owner=#{owner}&scope=#{scope}&deep=true&first=0&max=100"
+        url = "#{authz_resources_url(@client_id)}?#{build_query(name: name, type: type, uris: uris, owner: owner, scope: scope, deep: true, first: 0, max: 100)}"
         resource(url).get(headers)
       end
       JSON.parse(response).map { |role_as_hash| ClientAuthzResourceRepresentation.from_hash(role_as_hash) }

data/lib/keycloak-admin/client/client_authz_scope_client.rb

@@ -35,7 +35,7 @@ module KeycloakAdmin
     end
 
     def search(name)
-      url = "#{authz_scopes_url(@client_id)}?first=0&max=11&deep=false&name=#{name}"
+      url = "#{authz_scopes_url(@client_id)}?#{build_query(first: 0, max: 11, deep: false, name: name)}"
       response = execute_http do
         resource(url).get(headers)
       end

data/lib/keycloak-admin/client/group_client.rb

@@ -75,11 +75,8 @@ module KeycloakAdmin
 
     def members(group_id, first=0, max=100)
       url = "#{groups_url(group_id)}/members"
-      query = {first: first.try(:to_i), max: max.try(:to_i)}.compact
-      unless query.empty?
-        query_string = query.to_a.map { |e| "#{e[0]}=#{e[1]}" }.join("&")
-        url = "#{url}?#{query_string}"
-      end
+      query = {first: first&.to_i, max: max&.to_i}.compact
+      url = "#{url}?#{build_query(query)}" unless query.empty?
       response = execute_http do
         resource(url).get(headers)
       end

data/lib/keycloak-admin/client/organization_client.rb

@@ -170,24 +170,24 @@ module KeycloakAdmin
     end
 
     def count_url(exact, query, search)
-      query_parameters = {exact: exact, q: query, search: search}.compact.to_a.map { |e| "#{e[0]}=#{e[1]}" }.join("&")
+      query_parameters = build_query({exact: exact, q: query, search: search}.compact)
       "#{organizations_url}/count?#{query_parameters}"
     end
 
     def organizations_url_with_parameters(brief_representation, exact, first, max, query, search)
-      query_parameters = {
+      query_parameters = build_query({
         briefRepresentation: brief_representation,
         exact: exact,
         first: first,
         max: max,
         q: query,
         search: search
-      }.compact.to_a.map { |e| "#{e[0]}=#{e[1]}" }.join("&")
+      }.compact)
       "#{organizations_url}?#{query_parameters}"
     end
 
     def associated_with_member_url(member_id, brief_representation=true)
-      "#{organizations_url}/members/#{member_id}/organizations?briefRepresentation=#{brief_representation}"
+      "#{organizations_url}/members/#{member_id}/organizations?#{build_query(briefRepresentation: brief_representation)}"
     end
 
     def members_count_url(organization_id)
@@ -212,19 +212,19 @@ module KeycloakAdmin
     end
 
     def members_url_with_query_parameters(organization_id, exact, first, max, membership_type, search)
-      query_parameters = {
+      query_parameters = build_query({
         exact: exact,
         first: first,
         max: max,
         membershipType: membership_type,
         search: search
-      }.compact.to_a.map { |e| "#{e[0]}=#{e[1]}" }.join("&")
+      }.compact)
       "#{organization_url(organization_id)}/members?#{query_parameters}"
     end
 
     def build(name, alias_name, enabled, description, redirect_url=nil, domains=[], attributes={})
       unless domains.is_a?(Array)
-        raise ArgumentError.new("domains must be an Array, got #{new_domains.class}")
+        raise ArgumentError.new("domains must be an Array, got #{domains.class}")
       end
 
       unless domains.all? { |domain| domain.is_a?(KeycloakAdmin::OrganizationDomainRepresentation) }

data/lib/keycloak-admin/client/user_client.rb

@@ -141,10 +141,14 @@ module KeycloakAdmin
     def execute_actions_email(user_id, actions=[], lifespan=nil, redirect_uri=nil, client_id=nil)
       raise ArgumentError.new("client_id must be defined") if client_id.nil? && !redirect_uri.nil?
       execute_http do
-        lifespan_param = lifespan.nil? ? "" : "&lifespan=#{lifespan.seconds}"
-        redirect_uri_param = redirect_uri.nil? ? "" : "&redirect_uri=#{redirect_uri}"
-        client_id_param = client_id.nil? ? "" : "client_id=#{client_id}"
-        Resource.put("#{execute_actions_email_url(user_id)}?#{client_id_param}#{redirect_uri_param}#{lifespan_param}", create_payload(actions), headers, @configuration.logger)
+        query = {}
+        query[:client_id]    = client_id     unless client_id.nil?
+        query[:redirect_uri] = redirect_uri  unless redirect_uri.nil?
+        query[:lifespan]     = lifespan.to_i unless lifespan.nil?
+
+        url = execute_actions_email_url(user_id)
+        url = "#{url}?#{build_query(query)}" unless query.empty?
+        Resource.put(url, create_payload(actions), headers, @configuration.logger)
       end
       user_id
     end

data/lib/keycloak-admin/error.rb

@@ -0,0 +1,62 @@
+module KeycloakAdmin
+  class Error < StandardError; end
+
+  # Raised when Keycloak answers with a non-2xx status.
+  #
+  # Callers can rescue the precise failure (KeycloakAdmin::NotFoundError), a whole family
+  # (KeycloakAdmin::ClientError for any 4xx) or every HTTP failure (KeycloakAdmin::ApiError),
+  # and read #status/#body off the exception rather than parsing the message.
+  class ApiError < Error
+    attr_reader :status, :body, :headers
+
+    def initialize(status, body, headers = {})
+      @status  = status
+      @body    = body
+      @headers = headers || {}
+      super("Keycloak: The request failed with response code #{status} and message: #{body}")
+    end
+
+    def self.from_response(response)
+      response ||= {}
+      status     = response[:status]
+      error_class_for(status).new(status, response[:body], response[:headers])
+    end
+
+    def self.error_class_for(status)
+      case status
+      when 400      then BadRequestError
+      when 401      then UnauthorizedError
+      when 403      then ForbiddenError
+      when 404      then NotFoundError
+      when 409      then ConflictError
+      when 400..499 then ClientError
+      when 500..599 then ServerError
+      else ApiError
+      end
+    end
+  end
+
+  # Any 4xx: the request itself was rejected.
+  class ClientError < ApiError; end
+
+  class BadRequestError   < ClientError; end
+  class UnauthorizedError < ClientError; end
+  class ForbiddenError    < ClientError; end
+  class NotFoundError     < ClientError; end
+  class ConflictError     < ClientError; end
+
+  # Any 5xx: Keycloak accepted the request but failed to serve it.
+  class ServerError < ApiError; end
+
+  # Raised when a create call succeeds at the HTTP level but answers something other than
+  # 201 Created, leaving no Location header to read the new resource's id from.
+  class UnexpectedResponseError < Error
+    attr_reader :status, :reason_phrase
+
+    def initialize(status, reason_phrase)
+      @status        = status
+      @reason_phrase = reason_phrase
+      super("Create method returned status #{reason_phrase} (Code: #{status}); expected status: Created (201)")
+    end
+  end
+end

data/lib/keycloak-admin/version.rb

@@ -1,3 +1,3 @@
 module KeycloakAdmin
-  VERSION = "2.0.1"
+  VERSION = "2.0.2"
 end

data/lib/keycloak-admin.rb

@@ -1,5 +1,6 @@
 require "logger"
 
+require_relative "keycloak-admin/error"
 require_relative "keycloak-admin/configuration"
 require_relative "keycloak-admin/client/response"
 require_relative "keycloak-admin/client/resource"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: keycloak-admin
 version: !ruby/object:Gem::Version
-  version: 2.0.1
+  version: 2.0.2
 platform: ruby
 authors:
 - Lorent Lempereur
@@ -99,6 +99,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '13.0'
+- !ruby/object:Gem::Dependency
+  name: webmock
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '3.0'
 description: Keycloak Admin REST API client written in Ruby
 email:
 - lorent.lempereur.dev@gmail.com
@@ -106,19 +120,9 @@ executables: []
 extensions: []
 extra_rdoc_files: []
 files:
-- ".github/workflows/Dockerfile"
-- ".github/workflows/ci.yml"
-- ".github/workflows/release.yml"
-- ".gitignore"
-- ".rspec"
 - CHANGELOG.md
-- Dockerfile
-- Gemfile
-- Gemfile.lock
 - MIT-LICENSE
 - README.md
-- Rakefile
-- bin/console
 - keycloak-admin.gemspec
 - lib/keycloak-admin.rb
 - lib/keycloak-admin/client/attack_detection_client.rb
@@ -144,6 +148,7 @@ files:
 - lib/keycloak-admin/client/token_client.rb
 - lib/keycloak-admin/client/user_client.rb
 - lib/keycloak-admin/configuration.rb
+- lib/keycloak-admin/error.rb
 - lib/keycloak-admin/representation/attack_detection_representation.rb
 - lib/keycloak-admin/representation/camel_json.rb
 - lib/keycloak-admin/representation/client_authz_permission_representation.rb
@@ -174,54 +179,14 @@ files:
 - lib/keycloak-admin/resource/group_resource.rb
 - lib/keycloak-admin/resource/user_resource.rb
 - lib/keycloak-admin/version.rb
-- spec/client/attack_detection_client_spec.rb
-- spec/client/client_authz_permission_client_spec.rb
-- spec/client/client_authz_policy_client_spec.rb
-- spec/client/client_authz_resource_client_spec.rb
-- spec/client/client_authz_scope_client_spec.rb
-- spec/client/client_client_spec.rb
-- spec/client/client_role_mappings_client_spec.rb
-- spec/client/client_scope_client_spec.rb
-- spec/client/client_scope_protocol_mapper_client_spec.rb
-- spec/client/client_spec.rb
-- spec/client/configurable_token_client_spec.rb
-- spec/client/group_client_spec.rb
-- spec/client/identity_provider_client_spec.rb
-- spec/client/organization_client_spec.rb
-- spec/client/realm_client_spec.rb
-- spec/client/resource_spec.rb
-- spec/client/response_spec.rb
-- spec/client/role_client_spec.rb
-- spec/client/role_mapper_client_spec.rb
-- spec/client/token_client_spec.rb
-- spec/client/user_client_spec.rb
-- spec/configuration_spec.rb
-- spec/gemspec_spec.rb
-- spec/integration/client_authorization_spec.rb
-- spec/representation/attack_detection_representation_spec.rb
-- spec/representation/client_authz_permission_representation_spec.rb
-- spec/representation/client_authz_policy_representation_spec.rb
-- spec/representation/client_authz_resource_representation_spec.rb
-- spec/representation/client_authz_scope_representation_spec.rb
-- spec/representation/client_representation_spec.rb
-- spec/representation/client_scope_representation_spec.rb
-- spec/representation/credential_representation_spec.rb
-- spec/representation/group_representation_spec.rb
-- spec/representation/identity_provider_mapper_representation_spec.rb
-- spec/representation/identity_provider_representation_spec.rb
-- spec/representation/impersonation_representation_spec.rb
-- spec/representation/organization_representation_spec.rb
-- spec/representation/protocol_mapper_representation_spec.rb
-- spec/representation/role_representation_spec.rb
-- spec/representation/session_representation_spec.rb
-- spec/representation/user_representation_spec.rb
-- spec/resource/group_resource_spec.rb
-- spec/resource/user_resource_spec.rb
-- spec/spec_helper.rb
 homepage: https://github.com/looorent/keycloak-admin-ruby
 licenses:
 - MIT
-metadata: {}
+metadata:
+  source_code_uri: https://github.com/looorent/keycloak-admin-ruby
+  changelog_uri: https://github.com/looorent/keycloak-admin-ruby/blob/main/CHANGELOG.md
+  bug_tracker_uri: https://github.com/looorent/keycloak-admin-ruby/issues
+  rubygems_mfa_required: 'true'
 rdoc_options: []
 require_paths:
 - lib

data/.github/workflows/Dockerfile

@@ -1,24 +0,0 @@
-### Dockerfile for: tillawy/keycloak-github-actions
-##
-## To build & push
-# docker buildx build . --platform linux/amd64 -t tillawy/keycloak-github-actions:25.0.1
-# docker push tillawy/keycloak-github-actions:25.0.1
-#
-## To Run Locally
-# docker run \
-#        --rm \
-#        -p 8080:8080 \
-#        -e KEYCLOAK_ADMIN="admin" \
-#        -e KEYCLOAK_ADMIN_PASSWORD="admin" \
-#        -e KC_HOSTNAME="http://localhost:8080" \
-#        -e KC_HOSTNAME_ADMIN="http://localhost:8080" \
-#        -e KC_HTTP_ENABLED="true" \
-#        -e KC_DB="dev-file" \
-#        tillawy/keycloak-github-actions:25.0.1
-
-FROM quay.io/keycloak/keycloak:25.0.1
-
-ENTRYPOINT ["/opt/keycloak/bin/kc.sh"]
-
-CMD ["start-dev", "--hostname=http://localhost:8080" , "--hostname-admin=http://localhost:8080" , "--http-enabled=true", "--verbose"]
-

data/.github/workflows/ci.yml

@@ -1,94 +0,0 @@
-# This workflow uses actions that are not certified by GitHub.
-# They are provided by a third-party and are governed by
-# separate terms of service, privacy policy, and support
-# documentation.
-# This workflow will download a prebuilt Ruby version, install dependencies and run tests with Rake
-# For more information see: https://github.com/marketplace/actions/setup-ruby-jruby-and-truffleruby
-
-name: Ruby
-
-on:
-  push:
-    branches: [ "main" ]
-  pull_request:
-    branches: [ "main" ]
-
-permissions:
-  contents: read
-
-jobs:
-  test:
-    name: Ruby ${{ matrix.ruby-version }}
-    runs-on: ubuntu-24.04
-
-    strategy:
-      fail-fast: false
-      matrix:
-        ruby-version: ['3.1', '3.2', '3.3', '3.4']
-
-    steps:
-    - name: Start Keycloak
-      run: |
-        docker run -d --name keycloak -p 8080:8080 \
-          -e KC_BOOTSTRAP_ADMIN_USERNAME=admin \
-          -e KC_BOOTSTRAP_ADMIN_PASSWORD=admin \
-          -e KC_HOSTNAME=http://localhost:8080 \
-          -e KC_HOSTNAME_ADMIN=http://localhost:8080 \
-          -e KC_HTTP_ENABLED=true \
-          -e KC_DB=dev-file \
-          quay.io/keycloak/keycloak:26.7.0 \
-          start-dev
-
-    - name: Wait for Keycloak to be ready
-      run: |
-        for i in $(seq 1 30); do
-          if curl --silent --fail http://localhost:8080/realms/master > /dev/null; then
-            echo "Keycloak is ready"
-            exit 0
-          fi
-          sleep 5
-        done
-        echo "Keycloak did not become ready in time"
-        docker logs keycloak
-        exit 1
-
-    - name: create realm
-      run: |
-         TOKEN=$(curl --silent --location --request POST "http://localhost:8080/realms/master/protocol/openid-connect/token" \
-            --header 'Content-Type: application/x-www-form-urlencoded' \
-            --data-urlencode 'grant_type=password' \
-            --data-urlencode 'username=admin' \
-            --data-urlencode 'password=admin' \
-            --data-urlencode 'client_id=admin-cli' | jq -r '.access_token')
-          
-         curl --silent --show-error -L -X POST "http://localhost:8080/admin/realms" \
-            --header "Content-Type: application/json" \
-            --header "Authorization: Bearer ${TOKEN}" \
-            --data '{"realm":"dummy","enabled":true}'
-        
-         curl --silent --show-error --request POST 'http://localhost:8080/admin/realms/dummy/clients' \
-           --header 'Authorization: Bearer '$TOKEN \
-           --header 'Content-Type: application/json' \
-           --data-raw '{
-             "clientId":"dummy-client",
-             "enabled":true,
-             "consentRequired": false,
-             "attributes":{},
-             "serviceAccountsEnabled": true,
-             "protocol":"openid-connect",
-             "publicClient":false,
-             "authorizationServicesEnabled": true,
-             "clientAuthenticatorType":"client-secret",
-             "redirectUris":["http://localhost:8180/demo"]
-           }'
-
-    - uses: actions/checkout@v6
-    - name: Set up Ruby
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: ${{ matrix.ruby-version }}
-        bundler-cache: true # runs 'bundle install' and caches installed gems automatically
-    - name: Run tests
-      run: bundle exec rspec
-      env:
-        GITHUB_ACTIONS: true