keycloak 3.0.0 → 3.1.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: dd3cb974c7f655f965f864b7fcffee8a1c69166a91f43957522cfabe3f6aba3b
-  data.tar.gz: a78167c5ababe6e103ec55dd5adb044000dcf6c21dca8318f332a9eecdc6b611
+  metadata.gz: 31c0cf08f09237855b198e4128d3e8b6419d3a404fafd413c2043015a6d7a4c9
+  data.tar.gz: f2265af7c22257d307b1bfe6bea0fca0db01dc5d8ecb6dd9a0374685c75821a8
 SHA512:
-  metadata.gz: a616d4cad7f422573b31c3e3c1f9129c4dbf51142d9e4f403c65f6e62a7ae64c62511e78e5f8589245db2e8aa4dc43c632734ec30eb26df4734c27899afb3228
-  data.tar.gz: 4269bbc0fc85ea7347428339c1a20b66db32e9b5e4a5b3dec9c0ce50aad4a8472cd74d19379edd80c62e70624ea9b33404545baca29f1bf8cae398dd182fda60
+  metadata.gz: b341ebe39b5cf767604c7b673300b1b14a27dac0f34d15c5afa7edf99d705d7cf3c3970345de2d9dbb4a4093ee1282b101a57840a0273e02386b9d317fb14510
+  data.tar.gz: cab5a14532198339f832690908a44dacea2072765603f770bfe103e07680e051a717438266616edda967b1902bd17ca271690536a0faa9459051b6af3c079733

data/.gitignore

@@ -1,2 +1,4 @@
 keycloak-*.gem
-.rspec_status
+.rspec_status
+
+.idea

data/keycloak.gemspec

@@ -33,7 +33,7 @@ Gem::Specification.new do |spec|
   spec.add_development_dependency "bundler", "~> 1.15"
   spec.add_development_dependency "rake", "~> 10.0"
   spec.add_development_dependency "rspec", "~> 3.0"
-  spec.add_runtime_dependency "rest-client"
-  spec.add_runtime_dependency "jwt"
-  spec.add_runtime_dependency "json"
+  spec.add_runtime_dependency "rest-client", "2.1.0"
+  spec.add_runtime_dependency "jwt", "2.2.1"
+  spec.add_runtime_dependency "json", "2.3.0"
 end

data/lib/generators/keycloak.rb

@@ -4,9 +4,9 @@ Keycloak.proxy = ''
 Keycloak.generate_request_exception = true
 # controller that manage the user session
 Keycloak.keycloak_controller = 'session'
-# relm name (only if the installation file is not present)
+# realm name (only if the installation file is not present)
 Keycloak.realm = ''
-# relm url (only if the installation file is not present)
+# realm url (only if the installation file is not present)
 Keycloak.auth_server_url = ''
 # The introspect of the token will be executed every time the Keycloak::Client.has_role? method is invoked, if this setting is set to true.
 Keycloak.validate_token_when_call_has_role = false

data/lib/keycloak.rb

@@ -53,12 +53,12 @@ module Keycloak
                   'client_secret' => secret,
                   'username' => user,
                   'password' => password,
-                  'grant_type' => 'password' }
+                  'grant_type' => 'password'}
 
       mount_request_token(payload)
     end
 
-    def self.get_token_by_code(code, redirect_uri, client_id = '', secret = '')
+    def self.get_token_by_code(code, redirect_uri, client_id = '', secret = '', client_session_state = '', client_session_host = '')
       verify_setup
 
       client_id = @client_id if isempty?(client_id)
@@ -68,7 +68,9 @@ module Keycloak
                   'client_secret' => secret,
                   'code' => code,
                   'grant_type' => 'authorization_code',
-                  'redirect_uri' => redirect_uri }
+                  'redirect_uri' => redirect_uri,
+                  'client_session_state' => client_session_state,
+                  'client_session_host' => client_session_host}
 
       mount_request_token(payload)
     end
@@ -80,7 +82,13 @@ module Keycloak
       secret = @secret if isempty?(secret)
       token_endpoint = @configuration['token_endpoint'] if isempty?(token_endpoint)
 
-      payload = { 'client_id' => client_id, 'client_secret' => secret, 'audience' => client_id, 'grant_type' => 'urn:ietf:params:oauth:grant-type:token-exchange', 'subject_token_type' => 'urn:ietf:params:oauth:token-type:access_token', 'subject_issuer' => issuer, 'subject_token' => issuer_token }
+      payload = { 'client_id' => client_id,
+                  'client_secret' => secret,
+                  'audience' => client_id,
+                  'grant_type' => 'urn:ietf:params:oauth:grant-type:token-exchange',
+                  'subject_token_type' => 'urn:ietf:params:oauth:token-type:access_token',
+                  'subject_issuer' => issuer,
+                  'subject_token' => issuer_token}
       header = { 'Content-Type' => 'application/x-www-form-urlencoded' }
       _request = -> do
         RestClient.post(token_endpoint, payload, header){|response, request, result|
@@ -333,7 +341,7 @@ module Keycloak
           @public_key = installation["realm-public-key"]
           @auth_server_url = installation["auth-server-url"]
         else
-          raise "#{Keycloak.installation_file} and relm settings not found." if isempty?(Keycloak.realm) || isempty?(Keycloak.auth_server_url)
+          raise "#{Keycloak.installation_file} and realm settings not found." if isempty?(Keycloak.realm) || isempty?(Keycloak.auth_server_url)
 
           @realm = Keycloak.realm
           @auth_server_url = Keycloak.auth_server_url
@@ -414,6 +422,10 @@ module Keycloak
       generic_get("users/", query_parameters, access_token)
     end
 
+    def self.get_users_by_group(id, query_parameters = nil, access_token = nil)
+      generic_get("groups/#{id}/members", query_parameters, access_token)
+    end
+
     def self.create_user(user_representation, access_token = nil)
       generic_post("users/", nil, user_representation, access_token)
     end
@@ -452,6 +464,14 @@ module Keycloak
       generic_get("groups/", query_parameters, access_token)
     end
 
+    def self.get_users_by_role_name(role_name, query_parameters = nil, access_token = nil)
+      generic_get("roles/#{role_name}/users", query_parameters, access_token)
+    end
+
+    def self.get_groups_by_role_name(role_name, query_parameters = nil, access_token = nil)
+      generic_get("roles/#{role_name}/groups", query_parameters, access_token)
+    end
+
     def self.get_clients(query_parameters = nil, access_token = nil)
       generic_get("clients/", query_parameters, access_token)
     end
@@ -464,6 +484,10 @@ module Keycloak
       generic_get("clients/#{id}/roles/#{role_name}", nil, access_token)
     end
 
+    def self.get_users_client_by_role_name(id, role_name, access_token = nil)
+      generic_get("clients/#{id}/roles/#{role_name}/users", nil, access_token)
+    end
+
     def self.add_client_level_roles_to_user(id, client, role_representation, access_token = nil)
       generic_post("users/#{id}/role-mappings/clients/#{client}", nil, role_representation, access_token)
     end
@@ -585,6 +609,17 @@ module Keycloak
       default_call(proc, client_id, secret)
     end
 
+    def self.get_users_by_role_name(role_name, query_parameters = nil, client_id = '', secret = '')
+      client_id = Keycloak::Client.client_id if isempty?(client_id)
+      secret = Keycloak::Client.secret if isempty?(secret)
+
+      proc = lambda do |token|
+        Keycloak::Admin.get_users_by_role_name(role_name, query_parameters, token['access_token'])
+      end
+
+      default_call(proc, client_id, secret)
+    end
+
     def self.get_groups(query_parameters = nil, client_id = '', secret = '')
       client_id = Keycloak::Client.client_id if isempty?(client_id)
       secret = Keycloak::Client.secret if isempty?(secret)
@@ -596,6 +631,28 @@ module Keycloak
       default_call(proc, client_id, secret)
     end
 
+    def self.get_groups_by_role_name(role_name, query_parameters = nil, client_id = '', secret = '')
+      client_id = Keycloak::Client.client_id if isempty?(client_id)
+      secret = Keycloak::Client.secret if isempty?(secret)
+
+      proc = lambda do |token|
+        Keycloak::Admin.get_groups_by_role_name(role_name, query_parameters, token['access_token'])
+      end
+
+      default_call(proc, client_id, secret)
+    end
+
+    def self.get_users_by_group(id, query_parameters = nil, client_id = '', secret = '')
+      client_id = Keycloak::Client.client_id if isempty?(client_id)
+      secret = Keycloak::Client.secret if isempty?(secret)
+
+      proc = lambda do |token|
+        Keycloak::Admin.get_users_by_group(id, query_parameters, token['access_token'])
+      end
+
+      default_call(proc, client_id, secret)
+    end
+
     def self.change_password(user_id, redirect_uri = '', client_id = '', secret = '')
       client_id = Keycloak::Client.client_id if isempty?(client_id)
       secret = Keycloak::Client.secret if isempty?(secret)

data/lib/keycloak/version.rb

@@ -1,3 +1,3 @@
 module Keycloak
-  VERSION = '3.0.0'.freeze
+  VERSION = '3.1.0'.freeze
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: keycloak
 version: !ruby/object:Gem::Version
-  version: 3.0.0
+  version: 3.1.0
 platform: ruby
 authors:
 - Guilherme Portugues
 autorequire: 
 bindir: exe
 cert_chain: []
-date: 2019-06-26 00:00:00.000000000 Z
+date: 2020-02-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: bundler
@@ -56,44 +56,44 @@ dependencies:
   name: rest-client
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.1.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.1.0
 - !ruby/object:Gem::Dependency
   name: jwt
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.2.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.2.1
 - !ruby/object:Gem::Dependency
   name: json
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.3.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - ">="
+    - - '='
       - !ruby/object:Gem::Version
-        version: '0'
+        version: 2.3.0
 description: 
 email:
 - g_portugues@hotmail.com
@@ -139,8 +139,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.7
+rubygems_version: 3.0.3
 signing_key: 
 specification_version: 4
 summary: Add authentication to applications and secure services with Keycloak