@continuoussecuritytooling/keycloak-reporter 0.6.0 → 0.7.0

package/lib/user.ts

@@ -1,4 +1,9 @@
 import KcAdminClient from '@keycloak/keycloak-admin-client';
+import {
+  AuditClient,
+  AuditedClientRepresentation,
+  AuditedUserRepresentation,
+} from '@continuoussecuritytooling/keycloak-auditor';
 
 export interface User {
   username: string;
@@ -21,79 +26,111 @@ export interface Client {
 }
 
 export async function clientListing(
-  client: KcAdminClient
-): Promise<Array<Client>> {
-  const currentRealm = client.realmName;
-  let realms;
-  try {
-    // iterate over realms
-    realms = await client.realms.find();
-  } catch (e) {
-    console.error('Check Client role:', e.response.statusText);
-    return Promise.reject();
-  }
-  let allClients = new Array<Client>();
-  for (const realm of realms) {
-    // switch realm
+  client: KcAdminClient | AuditClient
+): Promise<Array<Client | AuditedClientRepresentation>> {
+  let allClients = new Array<Client | AuditedClientRepresentation>();
+  if (client instanceof KcAdminClient) {
+    const currentRealm = client.realmName;
+    let realms;
+    try {
+      // iterate over realms
+      realms = await client.realms.find();
+    } catch (e) {
+      console.error('Check Client role:', e.response.statusText);
+      return Promise.reject();
+    }
+    for (const realm of realms) {
+      // switch realm
+      client.setConfig({
+        realmName: realm.realm,
+      });
+      const realmClients = new Array<Client>();
+      for (const user of await client.clients.find()) {
+        realmClients.push({
+          client: user.clientId,
+          id: user.id,
+          description: user.description,
+          realm: realm.realm,
+          enabled: user.enabled,
+          public: user.publicClient,
+          allowedOrigins: JSON.stringify(user.webOrigins),
+        });
+      }
+      allClients = [...allClients, ...realmClients];
+    }
+    // switch back to realm
     client.setConfig({
-      realmName: realm.realm,
+      realmName: currentRealm,
     });
-    const realmClients = new Array<Client>();
-    for (const user of await client.clients.find()) {
-      realmClients.push({
+  } else {
+    const clients = await client.clientListing();
+    for (const user of clients) {
+      allClients.push({
         client: user.clientId,
         id: user.id,
         description: user.description,
-        realm: realm.realm,
+        realm: user.realm,
         enabled: user.enabled,
         public: user.publicClient,
+        lastLogin: user.lastLogin,
         allowedOrigins: JSON.stringify(user.webOrigins),
       });
     }
-    allClients = [...allClients, ...realmClients];
   }
-  // switch back to realm
-  client.setConfig({
-    realmName: currentRealm,
-  });
-
   return new Promise((resolve) => resolve(allClients));
 }
 
-export async function userListing(client: KcAdminClient): Promise<Array<User>> {
-  const currentRealm = client.realmName;
-  let realms;
-  // iterate over realms
-  try {
-    realms = await client.realms.find();
-  } catch (e) {
-    console.error('Check Client role:', e.response.statusText);
-    return Promise.reject();
-  }
-  let allUsers = new Array<User>();
-  for (const realm of realms) {
-    // switch realm
+export async function userListing(
+  client: KcAdminClient | AuditClient
+): Promise<Array<User | AuditedUserRepresentation>> {
+  let allUsers = new Array<User | AuditedUserRepresentation>();
+  if (client instanceof KcAdminClient) {
+    const currentRealm = client.realmName;
+    let realms;
+    // iterate over realms
+    try {
+      realms = await client.realms.find();
+    } catch (e) {
+      console.error('Check Client role:', e.response.statusText);
+      return Promise.reject();
+    }
+    for (const realm of realms) {
+      // switch realm
+      client.setConfig({
+        realmName: realm.realm,
+      });
+      const realmUsers = new Array<User>();
+      for (const user of await client.users.find()) {
+        realmUsers.push({
+          username: user.username,
+          id: user.id,
+          firstName: user.firstName,
+          lastName: user.lastName,
+          email: user.email,
+          realm: realm.realm,
+          enabled: user.enabled,
+        });
+      }
+      allUsers = [...allUsers, ...realmUsers];
+    }
+    // switch back to realm
     client.setConfig({
-      realmName: realm.realm,
+      realmName: currentRealm,
     });
-    const realmUsers = new Array<User>();
-    for (const user of await client.users.find()) {
-      realmUsers.push({
+  } else {
+    const users = await client.userListing();
+    for (const user of users) {
+      allUsers.push({
         username: user.username,
         id: user.id,
         firstName: user.firstName,
         lastName: user.lastName,
         email: user.email,
-        realm: realm.realm,
+        realm: user.realm,
+        lastLogin: user.lastLogin,
         enabled: user.enabled,
       });
     }
-    allUsers = [...allUsers, ...realmUsers];
   }
-  // switch back to realm
-  client.setConfig({
-    realmName: currentRealm,
-  });
-
   return new Promise((resolve) => resolve(allUsers));
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@continuoussecuritytooling/keycloak-reporter",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "Reporting Tools for Keycloak",
   "main": "dist/index.js",
   "bin": {
@@ -25,6 +25,7 @@
   },
   "homepage": "https://github.com/ContinuousSecurityTooling/keycloak-reporter#readme",
   "dependencies": {
+    "@continuoussecuritytooling/keycloak-auditor": "^1.1.0",
     "@json2csv/node": "^7.0.0",
     "@keycloak/keycloak-admin-client": "^22.0.0",
     "@slack/webhook": "^7.0.0",
@@ -41,8 +42,8 @@
     "@types/jest": "^29.5.1",
     "@types/node": "^20.1.5",
     "@types/yargs": "^17.0.24",
-    "@typescript-eslint/eslint-plugin": "^5.59.6",
-    "@typescript-eslint/parser": "^5.59.6",
+    "@typescript-eslint/eslint-plugin": "^6.0.0",
+    "@typescript-eslint/parser": "^6.0.0",
     "eslint": "^8.40.0",
     "eslint-config-prettier": "^9.0.0",
     "eslint-plugin-prettier": "^5.0.0",

package/renovate.json

@@ -1,6 +1,9 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
-  "extends": ["config:base", ":rebaseStalePrs"],
+  "labels": ["dependencies"],
+  "extends": ["config:base", ":dependencyDashboard", ":rebaseStalePrs"],
+  "automergeSchedule": ["after 5am and before 5pm every weekday"],
+  "separateMinorPatch": true,
   "platformAutomerge": true,
   "packageRules": [
     {
@@ -12,12 +15,16 @@
   ],
   "regexManagers": [
     {
-      "description": "Update version entries in YAML files",
-      "fileMatch": [".*y[a]?ml$"],
+      "description": "Update image variables in YAML files",
+      "fileMatch": ["\\.y[a]?ml$", "\\.y[a]?ml\\.tpl$"],
       "matchStrings": [
-        "# renovate: datasource=(?<datasource>[a-z-]+?)(?: lookupName=(?<lookupName>.+?))?(?: versioning=(?<versioning>[a-z-]+?))?\\sRUN install-[a-z]+? (?<depName>[a-z-]+?) (?<currentValue>.+?)\\s"
+        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>[^\\s]+?)(?: (lookupName|packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?\\s.+?_version: (?<currentValue>.+?)\\s",
+        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>[^\\s]+?)(?: (lookupName|packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?\\s.+?-version: (?<currentValue>.+?)\\s",
+        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>[^\\s]+?)(?: (lookupName|packageName)=(?<packageName>[^\\s]+?))?(?: versioning=(?<versioning>[^\\s]+?))?\\simage: (?<currentValue>.+?)\\s",
+        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?) versioning=(?<versioning>.+?)\\s\\s*image: (?<currentValue>.*)",
+        "# renovate: datasource=(?<datasource>[a-z-]+?) depName=(?<depName>.+?) \\s\\s*image: (?<currentValue>.*)"
       ],
-      "versioningTemplate": "{{#if versioning}}{{versioning}}{{else}}semver{{/if}}"
+      "extractVersionTemplate": "{{#if extractVersion}}{{{extractVersion}}}{{else}}^v?(?<version>.+)${{/if}}"
     }
   ],
   "prHourlyLimit": 10

package/src/commands.ts

@@ -0,0 +1,27 @@
+import KcAdminClient from '@keycloak/keycloak-admin-client';
+import {
+  AuditClient,
+  AuditedClientRepresentation,
+  AuditedUserRepresentation,
+} from '@continuoussecuritytooling/keycloak-auditor';
+import { Options, createClient } from '../lib/client.js';
+import { User, userListing, clientListing, Client } from '../lib/user.js';
+
+function kcClient(options: Options): Promise<KcAdminClient | AuditClient> {
+  return createClient({
+    clientId: options.clientId,
+    clientSecret: options.clientSecret,
+    rootUrl: options.rootUrl,
+    useAuditingEndpoint: options.useAuditingEndpoint,
+  });
+}
+
+export async function listUsers(options: Options): Promise<Array<User | AuditedUserRepresentation>> {
+  const users = await userListing(await kcClient(options));
+  return new Promise((resolve) => resolve(users));
+}
+
+export async function listClients(options: Options): Promise<Array<Client | AuditedClientRepresentation>> {
+  const clients = await clientListing(await kcClient(options));
+  return new Promise((resolve) => resolve(clients));
+}

package/src/config.ts

@@ -1,5 +1,4 @@
 import { assoc, pick, mergeAll, mergeDeepRight } from 'ramda';
-import Ajv from 'ajv';
 import path from 'path';
 import { fileURLToPath } from 'url';
 import fs from 'fs';
@@ -8,16 +7,15 @@ const schema = JSON.parse(
   fs.readFileSync(fileURLToPath(path.join(import.meta.url, '../../config/schema.json')), 'utf8')
 );
 
-const ajv = new Ajv.default();
-const ajvValidate = ajv.compile(schema);
-
 // import the config file
 function buildConfigFromFile(filePath) {
   if (!filePath) return {};
   const isAbsolutePath = filePath.charAt(0) === '/';
-  return JSON.parse(isAbsolutePath
-    ? fs.readFileSync(filePath, 'utf8')
-    : fs.readFileSync(fileURLToPath(path.join(import.meta.url, '../config', filePath)), 'utf8'));
+  return JSON.parse(
+    isAbsolutePath
+      ? fs.readFileSync(filePath, 'utf8')
+      : fs.readFileSync(fileURLToPath(path.join(import.meta.url, '../config', filePath)), 'utf8')
+  );
 }
 // build an object using the defaults in the schema
 function buildDefaults(schema, definitions) {
@@ -50,19 +48,9 @@ function buildEnvironmentVariablesConfig(schema) {
     }
   }, {});
 }
-
-function validate(data) {
-  const valid = ajvValidate(data);
-  if (valid) return true;
-  throw new Error(ajv.errorsText());
-}
-
 // merge the environment variables, config file values, and defaults
 const config = mergeAll(
-  mergeDeepRight(
-    buildDefaults(schema, schema.definitions),
-    buildConfigFromFile(process.env.CONFIG_FILE)
-  ),
+  mergeDeepRight(buildDefaults(schema, schema.definitions), buildConfigFromFile(process.env.CONFIG_FILE)),
   buildEnvironmentVariablesConfig(schema)
 );
 

package/dist/cli.js

@@ -1,131 +0,0 @@
-#!/usr/bin/env node
-import { writeFileSync } from 'node:fs';
-import path from 'path';
-import yargs from 'yargs/yargs';
-import { hideBin } from 'yargs/helpers';
-import { listUsers, listClients, convertJSON2CSV, post2Webhook } from './index.js';
-import config from './src/config.js';
-class WebhookConfig {
-    constructor(type, url, title, message) {
-        this.type = type;
-        this.url = url;
-        this.title = title;
-        this.message = message;
-    }
-}
-class ReportConfig {
-}
-async function convert(format, output, reports, config, json) {
-    let outputContent;
-    switch (format) {
-        case 'csv':
-            outputContent = (await convertJSON2CSV(json)).toString();
-            break;
-        // defaulting to JSON
-        default:
-            outputContent = JSON.stringify(json);
-    }
-    if (reports.directory) {
-        const date = new Date();
-        writeFileSync(path.join(`${reports.directory}`, `${reports.name}_${date.getFullYear()}-${date.getMonth() + 1}-${date.getDate()}.${format.toLowerCase()}`), outputContent);
-    }
-    switch (output) {
-        case 'webhook':
-            try {
-                console.log(`Sending report via webhook to ${config.type} ....`);
-                await post2Webhook(config.type, config.url, config.title, outputContent, config.message);
-                console.log('Done sending.');
-            }
-            catch (e) {
-                switch (e.code || e.message) {
-                    case 'Request failed with status code 400':
-                        console.error('Invalid Teams Webhook Payload. Check your params.');
-                        throw new Error('Invalid Teams Payload');
-                    case 'slack_webhook_http_error':
-                        console.error('Invalid Slack Webhook Payload. Check your params.');
-                        throw new Error('Invalid Slack Payload');
-                    default:
-                        console.error(`Error during sending webhook.(${e === null || e === void 0 ? void 0 : e.code})`, e === null || e === void 0 ? void 0 : e.original);
-                        throw e;
-                }
-            }
-            break;
-        // defaulting to standard out
-        default:
-            console.log(outputContent);
-    }
-}
-yargs(hideBin(process.argv))
-    .command('listUsers [url] [clientId] [clientSecret]', 'fetches all users in the realms.', 
-// eslint-disable-next-line @typescript-eslint/no-empty-function
-() => { }, async (argv) => {
-    const users = await listUsers({
-        clientId: config.clientId ? config.clientId : argv.clientId,
-        clientSecret: config.clientSecret
-            ? config.clientSecret
-            : argv.clientSecret,
-        rootUrl: config.url ? config.url : argv.url
-    });
-    await convert(config.format ? config.format : argv.format, config.output ? config.output : argv.output, {
-        name: 'user_listing',
-        directory: argv.reports ? argv.reports : config.reports
-    }, new WebhookConfig(config.webhookType
-        ? config.webhookType
-        : argv.webhookType, config.webhookUrl ? config.webhookUrl : argv.webhookUrl, 'User Listing', config.webhookMessage
-        ? config.webhookMessage
-        : argv.webhookMessage), users);
-})
-    .command('listClients [url] [clientId] [clientSecret]', 'fetches all clients in the realms.', 
-// eslint-disable-next-line @typescript-eslint/no-empty-function
-() => { }, async (argv) => {
-    const clients = await listClients({
-        clientId: config.clientId ? config.clientId : argv.clientId,
-        clientSecret: config.clientSecret
-            ? config.clientSecret
-            : argv.clientSecret,
-        rootUrl: config.url ? config.url : argv.url
-    });
-    await convert(config.format ? config.format : argv.format, config.output ? config.output : argv.output, {
-        name: 'client_listing',
-        directory: argv.reports ? argv.reports : config.reports
-    }, new WebhookConfig(config.webhookType
-        ? config.webhookType
-        : argv.webhookType, config.webhookUrl ? config.webhookUrl : argv.webhookUrl, 'Client Listing', config.webhookMessage
-        ? config.webhookMessage
-        : argv.webhookMessage), clients);
-})
-    .option('format', {
-    alias: 'f',
-    type: 'string',
-    default: 'json',
-    description: 'output format, e.g. JSON|CSV'
-})
-    .option('output', {
-    alias: 'o',
-    type: 'string',
-    default: 'stdout',
-    description: 'output channel'
-})
-    .option('webhookType', {
-    alias: 'w',
-    type: 'string',
-    default: 'slack',
-    description: 'Webhook Type'
-})
-    .option('webhookMessage', {
-    alias: 'm',
-    type: 'string',
-    description: 'Webhook Message'
-})
-    .option('webhookUrl', {
-    alias: 't',
-    type: 'string',
-    description: 'Webhook URL'
-})
-    .option('reports', {
-    alias: 'r',
-    type: 'string',
-    description: 'Reports directory'
-})
-    .parse();
-//# sourceMappingURL=cli.js.map

package/dist/cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../cli.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,KAAK,MAAM,aAAa,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,SAAS,EACT,WAAW,EAEX,eAAe,EACf,YAAY,EACb,MAAM,YAAY,CAAC;AACpB,OAAO,MAAM,MAAM,iBAAiB,CAAC;AAErC,MAAM,aAAa;IAKjB,YAAY,IAAY,EAAE,GAAW,EAAE,KAAa,EAAE,OAAgB;QACpE,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;CACF;AAED,MAAM,YAAY;CAGjB;AAED,KAAK,UAAU,OAAO,CACpB,MAAc,EACd,MAAc,EACd,OAAqB,EACrB,MAAqB,EACrB,IAAY;IAEZ,IAAI,aAAqB,CAAC;IAC1B,QAAQ,MAAM,EAAE;QACd,KAAK,KAAK;YACR,aAAa,GAAG,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YACzD,MAAM;QACR,qBAAqB;QACrB;YACE,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;KACxC;IACD,IAAI,OAAO,CAAC,SAAS,EAAE;QACrB,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,aAAa,CACX,IAAI,CAAC,IAAI,CACP,GAAG,OAAO,CAAC,SAAS,EAAE,EACtB,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,IACnC,IAAI,CAAC,QAAQ,EAAE,GAAG,CACpB,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAC7C,EACD,aAAa,CACd,CAAC;KACH;IACD,QAAQ,MAAM,EAAE;QACd,KAAK,SAAS;YACZ,IAAI;gBACF,OAAO,CAAC,GAAG,CAAC,iCAAiC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC;gBACjE,MAAM,YAAY,CAChB,MAAM,CAAC,IAAI,EACX,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,KAAK,EACZ,aAAa,EACb,MAAM,CAAC,OAAO,CACf,CAAC;gBACF,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;aAC9B;YAAC,OAAO,CAAC,EAAE;gBACV,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE;oBAC3B,KAAK,qCAAqC;wBACxC,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;wBACnE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBAC3C,KAAK,0BAA0B;wBAC7B,OAAO,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;wBACnE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBAC3C;wBACE,OAAO,CAAC,KAAK,CACX,iCAAiC,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,GAAG,EAC3C,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,CACZ,CAAC;wBACF,MAAM,CAAC,CAAC;iBACX;aACF;YACD,MAAM;QACR,6BAA6B;QAC7B;YACE,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;KAC9B;AACH,CAAC;AAED,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;KACzB,OAAO,CACN,2CAA2C,EAC3C,kCAAkC;AAClC,gEAAgE;AAChE,GAAG,EAAE,GAAE,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,KAAK,GAAG,MAAM,SAAS,CAAU;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,QAAmB;QACvE,YAAY,EAAE,MAAM,CAAC,YAAY;YAC/B,CAAC,CAAC,MAAM,CAAC,YAAY;YACrB,CAAC,CAAE,IAAI,CAAC,YAAuB;QACjC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc;KACxD,CAAC,CAAC;IACH,MAAM,OAAO,CACX,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,MAAiB,EACvD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,MAAiB,EACvD;QACE,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,OAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;KACpE,EACD,IAAI,aAAa,CACf,MAAM,CAAC,WAAW;QAChB,CAAC,CAAC,MAAM,CAAC,WAAW;QACpB,CAAC,CAAE,IAAI,CAAC,WAAsB,EAChC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,IAAI,CAAC,UAAqB,EACnE,cAAc,EACd,MAAM,CAAC,cAAc;QACnB,CAAC,CAAC,MAAM,CAAC,cAAc;QACvB,CAAC,CAAE,IAAI,CAAC,cAAyB,CACpC,EACD,KAAK,CACN,CAAC;AACJ,CAAC,CACF;KACA,OAAO,CACN,6CAA6C,EAC7C,oCAAoC;AACpC,gEAAgE;AAChE,GAAG,EAAE,GAAE,CAAC,EACR,KAAK,EAAE,IAAI,EAAE,EAAE;IACb,MAAM,OAAO,GAAG,MAAM,WAAW,CAAU;QACzC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,QAAmB;QACvE,YAAY,EAAE,MAAM,CAAC,YAAY;YAC/B,CAAC,CAAC,MAAM,CAAC,YAAY;YACrB,CAAC,CAAE,IAAI,CAAC,YAAuB;QACjC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,GAAc;KACxD,CAAC,CAAC;IACH,MAAM,OAAO,CACX,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,MAAiB,EACvD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAE,IAAI,CAAC,MAAiB,EACvD;QACE,IAAI,EAAE,gBAAgB;QACtB,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,OAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO;KACpE,EACD,IAAI,aAAa,CACf,MAAM,CAAC,WAAW;QAChB,CAAC,CAAC,MAAM,CAAC,WAAW;QACpB,CAAC,CAAE,IAAI,CAAC,WAAsB,EAChC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,IAAI,CAAC,UAAqB,EACnE,gBAAgB,EAChB,MAAM,CAAC,cAAc;QACnB,CAAC,CAAC,MAAM,CAAC,cAAc;QACvB,CAAC,CAAE,IAAI,CAAC,cAAyB,CACpC,EACD,OAAO,CACR,CAAC;AACJ,CAAC,CACF;KACA,MAAM,CAAC,QAAQ,EAAE;IAChB,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,MAAM;IACf,WAAW,EAAE,8BAA8B;CAC5C,CAAC;KACD,MAAM,CAAC,QAAQ,EAAE;IAChB,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,QAAQ;IACjB,WAAW,EAAE,gBAAgB;CAC9B,CAAC;KACD,MAAM,CAAC,aAAa,EAAE;IACrB,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,QAAQ;IACd,OAAO,EAAE,OAAO;IAChB,WAAW,EAAE,cAAc;CAC5B,CAAC;KACD,MAAM,CAAC,gBAAgB,EAAE;IACxB,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,iBAAiB;CAC/B,CAAC;KACD,MAAM,CAAC,YAAY,EAAE;IACpB,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,aAAa;CAC3B,CAAC;KACD,MAAM,CAAC,SAAS,EAAE;IACjB,KAAK,EAAE,GAAG;IACV,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,mBAAmB;CACjC,CAAC;KACD,KAAK,EAAE,CAAC"}

package/dist/config/schema.json

@@ -1,65 +0,0 @@
-{
-  "$id": "https://github.com/ContinuousSecurityTooling/keycloak-reporter/blob/main/config/schema.json",
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "title": "Keycloak Reporter Config",
-  "type": "object",
-  "definitions": {},
-  "required": ["url", "clientId", "clientSecret"],
-  "properties": {
-    "command": {
-      "type": "array",
-      "items": {
-        "type": "string",
-        "enum": ["listClients", "listUsers"]
-      }
-    },
-    "url": {
-      "type": "string",
-      "description": "Keycloak Server URL"
-    },
-    "clientId": {
-      "type": "string",
-      "description": "Keycloak Client used for reporting"
-    },
-    "clientSecret": {
-      "type": "string",
-      "description": "Keycloak Client Secret used for reporting"
-    },
-    "output": {
-      "type": "array",
-      "items": {
-        "type": "string",
-        "enum": ["webhook", "stdout"]
-      },
-      "description": "Output channel to use"
-    },
-    "format": {
-      "type": "array",
-      "items": {
-        "type": "string",
-        "enum": ["json", "csv"]
-      },
-      "description": "Report format"
-    },
-    "webhookType": {
-      "type": "array",
-      "items": {
-        "type": "string",
-        "enum": ["slack", "teams"]
-      },
-      "description": "Type of webhook"
-    },
-    "webhookMessage": {
-      "type": "string",
-      "description": "Message added to the webhook post"
-    },
-    "webhookUrl": {
-      "type": "string",
-      "description": "URL of the webhook"
-    },
-    "reports": {
-      "type": "string",
-      "description": "Reports directory"
-    }
-  }
-}

package/dist/index.js

@@ -1,4 +0,0 @@
-export { listUsers, listClients } from './src/cli.js';
-export { convertJSON2CSV } from './lib/convert.js';
-export { post2Webhook } from './lib/output.js';
-//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEtD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/lib/client.js

@@ -1,41 +0,0 @@
-import { Issuer } from 'openid-client';
-import KcAdminClient from '@keycloak/keycloak-admin-client';
-// Token refresh interval 60 seconds
-const TOKEN_REFRESH = 60;
-export async function createClient(options) {
-    const kcAdminClient = new KcAdminClient({
-        baseUrl: options.rootUrl,
-        realmName: 'master',
-    });
-    try {
-        // client login
-        await kcAdminClient.auth({
-            clientId: options.clientId,
-            clientSecret: options.clientSecret,
-            grantType: 'client_credentials',
-        });
-    }
-    catch (e) {
-        console.error('Check Client Config:', e.response ? e.response.data.error_description : e);
-        return Promise.reject();
-    }
-    const keycloakIssuer = await Issuer.discover(`${options.rootUrl}/realms/master`);
-    const client = new keycloakIssuer.Client({
-        client_id: options.clientId,
-        token_endpoint_auth_method: 'none', // to send only client_id in the header
-    });
-    // Use the grant type 'password'
-    const tokenSet = await client.grant({
-        client_id: options.clientId,
-        client_secret: options.clientSecret,
-        grant_type: 'client_credentials',
-    });
-    /*
-    // TODO: FIXME - Periodically using refresh_token grant flow to get new access token here
-    setInterval(async () => {
-      const refreshToken = tokenSet.refresh_token;
-      kcAdminClient.setAccessToken((await client.refresh(refreshToken)).access_token);
-    }, TOKEN_REFRESH * 1000); */
-    return new Promise((resolve) => resolve(kcAdminClient));
-}
-//# sourceMappingURL=client.js.map

package/dist/lib/client.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../lib/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,aAAa,MAAM,iCAAiC,CAAC;AAE5D,oCAAoC;AACpC,MAAM,aAAa,GAAG,EAAE,CAAC;AAQzB,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAgB;IACjD,MAAM,aAAa,GAAG,IAAI,aAAa,CAAC;QACtC,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS,EAAE,QAAQ;KACpB,CAAC,CAAC;IAEH,IAAI;QACF,eAAe;QACf,MAAM,aAAa,CAAC,IAAI,CAAC;YACvB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,oBAAoB;SAChC,CAAC,CAAC;KACJ;IAAC,OAAO,CAAC,EAAE;QACV,OAAO,CAAC,KAAK,CACX,sBAAsB,EACtB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CACnD,CAAC;QACF,OAAO,OAAO,CAAC,MAAM,EAAE,CAAC;KACzB;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,QAAQ,CAC1C,GAAG,OAAO,CAAC,OAAO,gBAAgB,CACnC,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,cAAc,CAAC,MAAM,CAAC;QACvC,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,0BAA0B,EAAE,MAAM,EAAE,uCAAuC;KAC5E,CAAC,CAAC;IAEH,gCAAgC;IAChC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC;QAClC,SAAS,EAAE,OAAO,CAAC,QAAQ;QAC3B,aAAa,EAAE,OAAO,CAAC,YAAY;QACnC,UAAU,EAAE,oBAAoB;KACjC,CAAC,CAAC;IAEH;;;;;gCAK4B;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAC1D,CAAC"}

package/dist/lib/convert.js

@@ -1,9 +0,0 @@
-import { AsyncParser } from '@json2csv/node';
-export async function convertJSON2CSV(json) {
-    const opts = {};
-    const transformOpts = {};
-    const asyncOpts = {};
-    const parser = new AsyncParser(opts, transformOpts, asyncOpts);
-    return await parser.parse(json).promise();
-}
-//# sourceMappingURL=convert.js.map

package/dist/lib/convert.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"convert.js","sourceRoot":"","sources":["../../lib/convert.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,IAAI,GAAG,EAAE,CAAC;IAChB,MAAM,aAAa,GAAG,EAAE,CAAC;IACzB,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC;IAC/D,OAAO,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AAC5C,CAAC"}