@continuoussecuritytooling/keycloak-reporter 1.2.0 → 1.2.1

package/.bin/start-server.mjs

@@ -14,6 +14,9 @@ import tar from 'tar-fs'
 const DIR_NAME = path.dirname(fileURLToPath(import.meta.url))
 const SERVER_DIR = path.resolve(DIR_NAME, '../tmp/server')
 const SCRIPT_EXTENSION = process.platform === 'win32' ? '.bat' : '.sh'
+const KC_BASE = 'http://localhost:8080'
+const ADMIN_USER = 'admin'
+const ADMIN_PASS = 'admin'
 
 // TODO: Once support for Node.js 14 has been dropped this can be replaced with an import from 'node:stream/promises'.
 // More information: https://nodejs.org/api/stream.html#streams-promises-api
@@ -24,16 +27,22 @@ await startServer()
 async function startServer () {
   await downloadServer()
 
+  // Wipe data so each start gets a clean realm state (binary is preserved)
+  const dataDir = path.join(SERVER_DIR, 'data')
+  if (fs.existsSync(dataDir)) {
+    fs.rmSync(dataDir, { recursive: true })
+    console.info('Cleared server data directory for clean start.')
+  }
+
   console.info('Starting server …')
 
-  const args = process.argv.slice(2)
   const child = spawn(
     path.join(SERVER_DIR, `bin/kc${SCRIPT_EXTENSION}`),
-    ['start-dev', ...args],
+    ['start-dev'],
     {
       env: {
-        KC_BOOTSTRAP_ADMIN_USERNAME: 'master-admin',
-        KC_BOOTSTRAP_ADMIN_PASSWORD: 'admin',
+        KC_BOOTSTRAP_ADMIN_USERNAME: ADMIN_USER,
+        KC_BOOTSTRAP_ADMIN_PASSWORD: ADMIN_PASS,
         ...process.env
       }
     }
@@ -41,6 +50,102 @@ async function startServer () {
 
   child.stdout.pipe(process.stdout)
   child.stderr.pipe(process.stderr)
+
+  await waitForReady()
+  await provisionKeycloakReporter()
+}
+
+async function waitForReady () {
+  const url = `${KC_BASE}/realms/master/.well-known/openid-configuration`
+  console.info('Waiting for Keycloak to be ready…')
+  for (let i = 0; i < 30; i++) {
+    try {
+      const res = await fetch(url)
+      if (res.ok) {
+        console.info('Keycloak is ready.')
+        return
+      }
+    } catch {
+      // not ready yet
+    }
+    await new Promise(r => setTimeout(r, 5000))
+  }
+  throw new Error('Keycloak failed to start within timeout.')
+}
+
+async function provisionKeycloakReporter () {
+  const tokenRes = await fetch(
+    `${KC_BASE}/realms/master/protocol/openid-connect/token`,
+    {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+      body: new URLSearchParams({
+        grant_type: 'password',
+        client_id: 'admin-cli',
+        username: ADMIN_USER,
+        password: ADMIN_PASS,
+      }),
+    }
+  )
+  const { access_token } = /** @type {{ access_token: string }} */ (await tokenRes.json())
+  const headers = {
+    'Content-Type': 'application/json',
+    Authorization: `Bearer ${access_token}`,
+  }
+
+  // Create the keycloak-reporter client (409 = already exists, safe to ignore)
+  const clientRes = await fetch(`${KC_BASE}/admin/realms/master/clients`, {
+    method: 'POST',
+    headers,
+    body: JSON.stringify({
+      clientId: 'keycloak-reporter',
+      secret: '3UYhI2hryFwoVtcd7ljlaDuD9HXrGV5r',
+      serviceAccountsEnabled: true,
+      directAccessGrantsEnabled: true,
+      publicClient: false,
+      enabled: true,
+      fullScopeAllowed: true,
+    }),
+  })
+  if (!clientRes.ok && clientRes.status !== 409) {
+    throw new Error(`Failed to create client: ${clientRes.status}`)
+  }
+
+  // Resolve the service account user Keycloak auto-creates
+  const saRes = await fetch(
+    `${KC_BASE}/admin/realms/master/users?username=service-account-keycloak-reporter`,
+    { headers }
+  )
+  const [serviceAccount] = /** @type {{ id: string }[]} */ (await saRes.json())
+
+  // Fetch the admin realm role and assign it to the service account
+  const roleRes = await fetch(`${KC_BASE}/admin/realms/master/roles/admin`, { headers })
+  const adminRole = /** @type {{ id: string, name: string }} */ (await roleRes.json())
+
+  await fetch(
+    `${KC_BASE}/admin/realms/master/users/${serviceAccount.id}/role-mappings/realm`,
+    {
+      method: 'POST',
+      headers,
+      body: JSON.stringify([{ id: adminRole.id, name: adminRole.name }]),
+    }
+  )
+
+  // Create a test user so e2e user-listing tests have predictable data
+  await fetch(`${KC_BASE}/admin/realms/master/users`, {
+    method: 'POST',
+    headers,
+    body: JSON.stringify({
+      username: 'kermit',
+      firstName: 'Kermit',
+      lastName: 'the Frog',
+      email: 'kermit@example.com',
+      enabled: true,
+      credentials: [{ type: 'password', value: 'kermit', temporary: false }],
+    }),
+  })
+
+  console.info('keycloak-reporter client provisioned successfully.')
 }
 
 async function downloadServer () {
@@ -55,7 +160,13 @@ async function downloadServer () {
 
   const nightlyAsset = await getNightlyAsset()
   //console.log(nightlyAsset)
+  if (!nightlyAsset) {
+    throw new Error('Could not find nightly release asset.')
+  }
   const assetStream = await getAssetAsStream(nightlyAsset)
+  if (!assetStream) {
+    throw new Error('Asset stream is empty.')
+  }
 
   await extractTarball(assetStream, SERVER_DIR, { strip: 1 })
 }
@@ -78,6 +189,7 @@ async function getNightlyAsset () {
   )
 }
 
+/** @param {{ browser_download_url: string }} asset */
 async function getAssetAsStream (asset) {
   const response = await fetch(asset.browser_download_url)
 
@@ -85,9 +197,14 @@ async function getAssetAsStream (asset) {
     throw new Error('Something went wrong requesting the nightly release.')
   }
 
-  return response.body
+  return /** @type {import('node:stream').Readable} */ (response.body)
 }
 
-function extractTarball (stream, path, options) {
-  return pipelineAsync(stream, gunzip(), tar.extract(path, options))
-}
+/**
+ * @param {import('node:stream').Readable} stream
+ * @param {string} destPath
+ * @param {object} options
+ */
+function extractTarball (stream, destPath, options) {
+  return pipelineAsync(stream, gunzip(), tar.extract(destPath, options))
+}

package/.github/workflows/pipeline.yml

@@ -45,7 +45,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@v5
         with:
           version: v3.11.2
 
@@ -130,7 +130,7 @@ jobs:
         run: .bin/wait-for-server.sh
 
       - name: Run End2End Tests
-        uses: nick-fields/retry@v3
+        uses: nick-fields/retry@v4
         with:
           max_attempts: 3
           retry_on: error

package/.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
             id-token: write
         steps:
 
-            -   uses: actions/create-github-app-token@v2
+            -   uses: actions/create-github-app-token@v3
                 id: app-token
                 with:
                     app-id: ${{ vars.CI_APP_ID }}
@@ -73,7 +73,7 @@ jobs:
                     echo "BUILD_DATE=$BUILD_DATE" >> $GITHUB_ENV
 
             -   name: Install Helm
-                uses: azure/setup-helm@v4
+                uses: azure/setup-helm@v5
 
             -   name: Install Python
                 uses: actions/setup-python@v6

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+## [1.2.1](https://github.com/ContinuousSecurityTooling/keycloak-reporter/compare/v1.2.0...v1.2.1) (2026-03-27)
+
+
+### Bug Fixes
+
+* Add missing packages and resolve linting errors ([cde369c](https://github.com/ContinuousSecurityTooling/keycloak-reporter/commit/cde369c61e05abb70c67f365fb755b4cec77254c))
+* Correcting keycloak test config setup ([7210d49](https://github.com/ContinuousSecurityTooling/keycloak-reporter/commit/7210d49330640b5df4c796c1dfe4d9e1b8df1567))
+* Exclude dist folder ([ce2f7b2](https://github.com/ContinuousSecurityTooling/keycloak-reporter/commit/ce2f7b2621fb2b10a1a53153ec9156e1c4b95b66))
+
+
+
 # [1.2.0](https://github.com/ContinuousSecurityTooling/keycloak-reporter/compare/v1.1.9...v1.2.0) (2026-03-10)
 
 

package/Dockerfile

@@ -1,4 +1,4 @@
-FROM node:24.14.0-slim
+FROM node:24.14.1-slim
 
 ARG BUILD_DATE
 ARG APP_VERSION

package/charts/keycloak-reporter/Chart.yaml

@@ -15,14 +15,14 @@ type: application
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.4.11
+version: 1.4.12
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
 # renovate: datasource=docker depName=ContinuousSecurityTooling/keycloak-reporter
-appVersion: 1.2.0
+appVersion: 1.2.1
 maintainers:
   # Martin Reinhardt
   - name: hypery2k

package/charts/keycloak-reporter/README.md

@@ -1,6 +1,6 @@
 # keycloak-reporter
 
-![Version: 1.4.11](https://img.shields.io/badge/Version-1.4.11-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.2.0](https://img.shields.io/badge/AppVersion-1.2.0-informational?style=flat-square)
+![Version: 1.4.12](https://img.shields.io/badge/Version-1.4.12-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![AppVersion: 1.2.1](https://img.shields.io/badge/AppVersion-1.2.1-informational?style=flat-square)
 
 Keycloak user and client reporting tool for automated regular access checks.
 

package/continuoussecuritytooling-keycloak-reporting-cli-latest_digest.txt

@@ -1 +1 @@
-sha256:2517014a5097177fa36dccf235234347bb6181e4d3da8d0349b93ac4e860ce9b
+sha256:fa291afd103823f1ec28ec3f5105a977b3fe7197b8ef68b8572ffae78e702eae

package/dist/lib/report.js

@@ -32,13 +32,13 @@ export async function convert(cfg) {
                 switch (e.code || e.message) {
                     case 'Request failed with status code 400':
                         logger.error('Invalid Teams Webhook Payload. Check your params.');
-                        throw new Error('Invalid Teams Payload');
+                        throw new Error('Invalid Teams Payload', { cause: e });
                     case 'slack_webhook_http_error':
                         logger.error('Invalid Slack Webhook Payload. Check your params.');
-                        throw new Error('Invalid Slack Payload');
+                        throw new Error('Invalid Slack Payload', { cause: e });
                     case 'generic_webhook_http_error':
                         logger.error('Generic Webhook request failed. Check your URL and params.');
-                        throw new Error('Invalid Generic Webhook request');
+                        throw new Error('Invalid Generic Webhook request', { cause: e });
                     default:
                         logger.error(`Error during sending webhook.(${e === null || e === void 0 ? void 0 : e.code})`, e === null || e === void 0 ? void 0 : e.original);
                         throw e;

package/dist/lib/report.js.map

@@ -1 +1 @@
-{"version":3,"file":"report.js","sourceRoot":"","sources":["../../lib/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAkB;IAC9C,IAAI,aAAqB,CAAC;IAC1B,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,KAAK;YACR,aAAa,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM;QACR,qBAAqB;QACrB;YACE,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,aAAa,CACX,IAAI,CAAC,IAAI,CACP,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAC1B,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CACjH,EACD,aAAa,CACd,CAAC;IACJ,CAAC;IACD,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,iCAAiC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC;gBACrE,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC5B,KAAK,qCAAqC;wBACxC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;wBAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBAC3C,KAAK,0BAA0B;wBAC7B,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;wBAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;oBAC3C,KAAK,4BAA4B;wBAC/B,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;wBAC3E,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBACrD;wBACE,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,GAAG,EAAE,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,CAAC,CAAC;wBACvE,MAAM,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,MAAM;QACR,6BAA6B;QAC7B;YACE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../lib/report.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACxC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,MAAM,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,GAAkB;IAC9C,IAAI,aAAqB,CAAC;IAC1B,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,KAAK;YACR,aAAa,GAAG,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC7D,MAAM;QACR,qBAAqB;QACrB;YACE,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QACxB,aAAa,CACX,IAAI,CAAC,IAAI,CACP,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,EAC1B,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,CACjH,EACD,aAAa,CACd,CAAC;IACJ,CAAC;IACD,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,CAAC,IAAI,CAAC,iCAAiC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,CAAC;gBACrE,MAAM,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBACzG,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;oBAC5B,KAAK,qCAAqC;wBACxC,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;wBAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBACzD,KAAK,0BAA0B;wBAC7B,MAAM,CAAC,KAAK,CAAC,mDAAmD,CAAC,CAAC;wBAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBACzD,KAAK,4BAA4B;wBAC/B,MAAM,CAAC,KAAK,CAAC,4DAA4D,CAAC,CAAC;wBAC3E,MAAM,IAAI,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;oBACnE;wBACE,MAAM,CAAC,KAAK,CAAC,iCAAiC,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,IAAI,GAAG,EAAE,CAAC,aAAD,CAAC,uBAAD,CAAC,CAAE,QAAQ,CAAC,CAAC;wBACvE,MAAM,CAAC,CAAC;gBACZ,CAAC;YACH,CAAC;YACD,MAAM;QACR,6BAA6B;QAC7B;YACE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC"}

package/e2e/fixtures/auth-utils/test-realm.json

@@ -2,8 +2,8 @@
   {
     "id": "a7d99dcc-75f0-4630-99c6-294dcf0501ce",
     "realm": "master",
-    "displayName": "Keycloak",
-    "displayNameHtml": "<div class=\"kc-logo-text\"><span>Keycloak</span></div>",
+    "displayName": "Keycloak Reporter",
+    "displayNameHtml": "<div class=\"kc-logo-text\"><span>Keycloak Reporter</span></div>",
     "notBefore": 0,
     "defaultSignatureAlgorithm": "RS256",
     "revokeRefreshToken": false,
@@ -54,7 +54,9 @@
           "description": "${role_admin}",
           "composite": true,
           "composites": {
-            "realm": ["create-realm"],
+            "realm": [
+              "create-realm"
+            ],
             "client": {
               "master-realm": [
                 "view-events",
@@ -88,9 +90,15 @@
           "description": "${role_default-roles}",
           "composite": true,
           "composites": {
-            "realm": ["offline_access", "uma_authorization"],
+            "realm": [
+              "offline_access",
+              "uma_authorization"
+            ],
             "client": {
-              "account": ["manage-account", "view-profile"]
+              "account": [
+                "manage-account",
+                "view-profile"
+              ]
             }
           },
           "clientRole": false,
@@ -284,7 +292,9 @@
             "composite": true,
             "composites": {
               "client": {
-                "master-realm": ["query-clients"]
+                "master-realm": [
+                  "query-clients"
+                ]
               }
             },
             "clientRole": true,
@@ -307,7 +317,10 @@
             "composite": true,
             "composites": {
               "client": {
-                "master-realm": ["query-groups", "query-users"]
+                "master-realm": [
+                  "query-groups",
+                  "query-users"
+                ]
               }
             },
             "clientRole": true,
@@ -350,7 +363,9 @@
             "composite": true,
             "composites": {
               "client": {
-                "account": ["manage-account-links"]
+                "account": [
+                  "manage-account-links"
+                ]
               }
             },
             "clientRole": true,
@@ -364,7 +379,9 @@
             "composite": true,
             "composites": {
               "client": {
-                "account": ["view-consent"]
+                "account": [
+                  "view-consent"
+                ]
               }
             },
             "clientRole": true,
@@ -410,7 +427,9 @@
       "clientRole": false,
       "containerId": "a7d99dcc-75f0-4630-99c6-294dcf0501ce"
     },
-    "requiredCredentials": ["password"],
+    "requiredCredentials": [
+      "password"
+    ],
     "otpPolicyType": "totp",
     "otpPolicyAlgorithm": "HmacSHA1",
     "otpPolicyInitialCounter": 0,
@@ -418,10 +437,16 @@
     "otpPolicyLookAheadWindow": 1,
     "otpPolicyPeriod": 30,
     "otpPolicyCodeReusable": false,
-    "otpSupportedApplications": ["totpAppFreeOTPName", "totpAppGoogleName", "totpAppMicrosoftAuthenticatorName"],
+    "otpSupportedApplications": [
+      "totpAppFreeOTPName",
+      "totpAppGoogleName",
+      "totpAppMicrosoftAuthenticatorName"
+    ],
     "localizationTexts": {},
     "webAuthnPolicyRpEntityName": "keycloak",
-    "webAuthnPolicySignatureAlgorithms": ["ES256"],
+    "webAuthnPolicySignatureAlgorithms": [
+      "ES256"
+    ],
     "webAuthnPolicyRpId": "",
     "webAuthnPolicyAttestationConveyancePreference": "not specified",
     "webAuthnPolicyAuthenticatorAttachment": "not specified",
@@ -432,7 +457,9 @@
     "webAuthnPolicyAcceptableAaguids": [],
     "webAuthnPolicyExtraOrigins": [],
     "webAuthnPolicyPasswordlessRpEntityName": "keycloak",
-    "webAuthnPolicyPasswordlessSignatureAlgorithms": ["ES256"],
+    "webAuthnPolicyPasswordlessSignatureAlgorithms": [
+      "ES256"
+    ],
     "webAuthnPolicyPasswordlessRpId": "",
     "webAuthnPolicyPasswordlessAttestationConveyancePreference": "not specified",
     "webAuthnPolicyPasswordlessAuthenticatorAttachment": "not specified",
@@ -443,34 +470,6 @@
     "webAuthnPolicyPasswordlessAcceptableAaguids": [],
     "webAuthnPolicyPasswordlessExtraOrigins": [],
     "users": [
-      {
-        "id": "44c2cc1f-dd8e-4ca2-be61-21fe72305161",
-        "username": "admin",
-        "firstName": "",
-        "lastName": "",
-        "emailVerified": false,
-        "attributes": {
-          "aud_usr_last-login_security-admin-console": ["2024-09-26T04:23:20.004404216Z"],
-          "aud_usr_last-login": ["2024-09-26T04:23:20.004404216Z"]
-        },
-        "createdTimestamp": 1687417311137,
-        "enabled": true,
-        "totp": false,
-        "credentials": [
-          {
-            "id": "7c62f635-9292-4c64-a420-520ebd422fad",
-            "type": "password",
-            "createdDate": 1687417311218,
-            "secretData": "{\"value\":\"4h1gArnd7ss+tC2PY6P7Hmcqtf+jkJitldnEI9aPZTg=\",\"salt\":\"jYO3O/+8/wfo+o8CVrq0Gg==\",\"additionalParameters\":{}}",
-            "credentialData": "{\"hashIterations\":5,\"algorithm\":\"argon2\",\"additionalParameters\":{\"hashLength\":[\"32\"],\"memory\":[\"7168\"],\"type\":[\"id\"],\"version\":[\"1.3\"],\"parallelism\":[\"1\"]}}"
-          }
-        ],
-        "disableableCredentialTypes": [],
-        "requiredActions": [],
-        "realmRoles": ["default-roles-master", "admin"],
-        "notBefore": 0,
-        "groups": []
-      },
       {
         "id": "7bfdd029-8dfd-49bb-abaa-09ab23dd6d3a",
         "username": "kermit",
@@ -493,7 +492,9 @@
         ],
         "disableableCredentialTypes": [],
         "requiredActions": [],
-        "realmRoles": ["default-roles-master"],
+        "realmRoles": [
+          "default-roles-master"
+        ],
         "notBefore": 0,
         "groups": []
       },
@@ -508,7 +509,10 @@
         "credentials": [],
         "disableableCredentialTypes": [],
         "requiredActions": [],
-        "realmRoles": ["default-roles-master", "admin"],
+        "realmRoles": [
+          "default-roles-master",
+          "admin"
+        ],
         "notBefore": 0,
         "groups": []
       }
@@ -516,14 +520,19 @@
     "scopeMappings": [
       {
         "clientScope": "offline_access",
-        "roles": ["offline_access"]
+        "roles": [
+          "offline_access"
+        ]
       }
     ],
     "clientScopeMappings": {
       "account": [
         {
           "client": "account-console",
-          "roles": ["manage-account", "view-groups"]
+          "roles": [
+            "manage-account",
+            "view-groups"
+          ]
         }
       ]
     },
@@ -538,7 +547,9 @@
         "enabled": true,
         "alwaysDisplayInConsole": false,
         "clientAuthenticatorType": "client-secret",
-        "redirectUris": ["/realms/master/account/*"],
+        "redirectUris": [
+          "/realms/master/account/*"
+        ],
         "webOrigins": [],
         "notBefore": 0,
         "bearerOnly": false,
@@ -556,8 +567,20 @@
         "authenticationFlowBindingOverrides": {},
         "fullScopeAllowed": false,
         "nodeReRegistrationTimeout": 0,
-        "defaultClientScopes": ["web-origins", "acr", "roles", "profile", "basic", "email"],
-        "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"]
+        "defaultClientScopes": [
+          "web-origins",
+          "acr",
+          "roles",
+          "profile",
+          "basic",
+          "email"
+        ],
+        "optionalClientScopes": [
+          "address",
+          "phone",
+          "offline_access",
+          "microprofile-jwt"
+        ]
       },
       {
         "id": "97b8fe48-63ef-4d0b-9300-3688e9f60327",
@@ -569,7 +592,9 @@
         "enabled": true,
         "alwaysDisplayInConsole": false,
         "clientAuthenticatorType": "client-secret",
-        "redirectUris": ["/realms/master/account/*"],
+        "redirectUris": [
+          "/realms/master/account/*"
+        ],
         "webOrigins": [],
         "notBefore": 0,
         "bearerOnly": false,
@@ -598,8 +623,20 @@
             "config": {}
           }
         ],
-        "defaultClientScopes": ["web-origins", "acr", "roles", "profile", "basic", "email"],
-        "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"]
+        "defaultClientScopes": [
+          "web-origins",
+          "acr",
+          "roles",
+          "profile",
+          "basic",
+          "email"
+        ],
+        "optionalClientScopes": [
+          "address",
+          "phone",
+          "offline_access",
+          "microprofile-jwt"
+        ]
       },
       {
         "id": "be4a4d27-4fdb-4547-99ed-5a7a789d7ad3",
@@ -625,8 +662,20 @@
         "authenticationFlowBindingOverrides": {},
         "fullScopeAllowed": false,
         "nodeReRegistrationTimeout": 0,
-        "defaultClientScopes": ["web-origins", "acr", "roles", "profile", "basic", "email"],
-        "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"]
+        "defaultClientScopes": [
+          "web-origins",
+          "acr",
+          "roles",
+          "profile",
+          "basic",
+          "email"
+        ],
+        "optionalClientScopes": [
+          "address",
+          "phone",
+          "offline_access",
+          "microprofile-jwt"
+        ]
       },
       {
         "id": "3592a6f0-f576-4ca6-9de0-435a1986f59d",
@@ -641,8 +690,12 @@
         "alwaysDisplayInConsole": false,
         "clientAuthenticatorType": "client-secret",
         "secret": "3UYhI2hryFwoVtcd7ljlaDuD9HXrGV5r",
-        "redirectUris": ["*"],
-        "webOrigins": ["+"],
+        "redirectUris": [
+          "*"
+        ],
+        "webOrigins": [
+          "+"
+        ],
         "notBefore": 0,
         "bearerOnly": false,
         "consentRequired": false,
@@ -711,8 +764,20 @@
             }
           }
         ],
-        "defaultClientScopes": ["web-origins", "acr", "roles", "profile", "basic", "email"],
-        "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"]
+        "defaultClientScopes": [
+          "web-origins",
+          "acr",
+          "roles",
+          "profile",
+          "basic",
+          "email"
+        ],
+        "optionalClientScopes": [
+          "address",
+          "phone",
+          "offline_access",
+          "microprofile-jwt"
+        ]
       },
       {
         "id": "7fde7727-5e5b-4808-a795-16d8f145aa76",
@@ -738,8 +803,19 @@
         "authenticationFlowBindingOverrides": {},
         "fullScopeAllowed": false,
         "nodeReRegistrationTimeout": 0,
-        "defaultClientScopes": ["web-origins", "acr", "roles", "profile", "email"],
-        "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"]
+        "defaultClientScopes": [
+          "web-origins",
+          "acr",
+          "roles",
+          "profile",
+          "email"
+        ],
+        "optionalClientScopes": [
+          "address",
+          "phone",
+          "offline_access",
+          "microprofile-jwt"
+        ]
       },
       {
         "id": "55b17911-341e-42b4-84c9-ef0501314f0e",
@@ -764,8 +840,19 @@
         "authenticationFlowBindingOverrides": {},
         "fullScopeAllowed": false,
         "nodeReRegistrationTimeout": 0,
-        "defaultClientScopes": ["web-origins", "acr", "roles", "profile", "email"],
-        "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"]
+        "defaultClientScopes": [
+          "web-origins",
+          "acr",
+          "roles",
+          "profile",
+          "email"
+        ],
+        "optionalClientScopes": [
+          "address",
+          "phone",
+          "offline_access",
+          "microprofile-jwt"
+        ]
       },
       {
         "id": "ef05dd18-6304-4674-b2bd-b9f5227415e5",
@@ -777,8 +864,12 @@
         "enabled": true,
         "alwaysDisplayInConsole": false,
         "clientAuthenticatorType": "client-secret",
-        "redirectUris": ["/admin/master/console/*"],
-        "webOrigins": ["+"],
+        "redirectUris": [
+          "/admin/master/console/*"
+        ],
+        "webOrigins": [
+          "+"
+        ],
         "notBefore": 0,
         "bearerOnly": false,
         "consentRequired": false,
@@ -813,8 +904,20 @@
             }
           }
         ],
-        "defaultClientScopes": ["web-origins", "acr", "roles", "profile", "basic", "email"],
-        "optionalClientScopes": ["address", "phone", "offline_access", "microprofile-jwt"]
+        "defaultClientScopes": [
+          "web-origins",
+          "acr",
+          "roles",
+          "profile",
+          "basic",
+          "email"
+        ],
+        "optionalClientScopes": [
+          "address",
+          "phone",
+          "offline_access",
+          "microprofile-jwt"
+        ]
       }
     ],
     "clientScopes": [
@@ -1363,8 +1466,21 @@
         ]
       }
     ],
-    "defaultDefaultClientScopes": ["basic", "email", "role_list", "web-origins", "acr", "roles", "profile"],
-    "defaultOptionalClientScopes": ["phone", "microprofile-jwt", "address", "offline_access"],
+    "defaultDefaultClientScopes": [
+      "basic",
+      "email",
+      "role_list",
+      "web-origins",
+      "acr",
+      "roles",
+      "profile"
+    ],
+    "defaultOptionalClientScopes": [
+      "phone",
+      "microprofile-jwt",
+      "address",
+      "offline_access"
+    ],
     "browserSecurityHeaders": {
       "contentSecurityPolicyReportOnly": "",
       "xContentTypeOptions": "nosniff",
@@ -1376,7 +1492,10 @@
     },
     "smtpServer": {},
     "eventsEnabled": true,
-    "eventsListeners": ["jboss-logging", "kc-auditor"],
+    "eventsListeners": [
+      "jboss-logging",
+      "kc-auditor"
+    ],
     "enabledEventTypes": [
       "UPDATE_CONSENT_ERROR",
       "UPDATE_TOTP",
@@ -1523,7 +1642,9 @@
           "subType": "anonymous",
           "subComponents": {},
           "config": {
-            "allow-default-scopes": ["true"]
+            "allow-default-scopes": [
+              "true"
+            ]
           }
         },
         {
@@ -1533,7 +1654,9 @@
           "subType": "anonymous",
           "subComponents": {},
           "config": {
-            "max-clients": ["200"]
+            "max-clients": [
+              "200"
+            ]
           }
         },
         {
@@ -1543,7 +1666,9 @@
           "subType": "authenticated",
           "subComponents": {},
           "config": {
-            "allow-default-scopes": ["true"]
+            "allow-default-scopes": [
+              "true"
+            ]
           }
         },
         {
@@ -1580,8 +1705,12 @@
           "subType": "anonymous",
           "subComponents": {},
           "config": {
-            "host-sending-registration-request-must-match": ["true"],
-            "client-uris-must-match": ["true"]
+            "host-sending-registration-request-must-match": [
+              "true"
+            ],
+            "client-uris-must-match": [
+              "true"
+            ]
           }
         }
       ],
@@ -1595,11 +1724,15 @@
             "privateKey": [
               "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"
             ],
-            "keyUse": ["SIG"],
+            "keyUse": [
+              "SIG"
+            ],
             "certificate": [
               "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"
             ],
-            "priority": ["100"]
+            "priority": [
+              "100"
+            ]
           }
         },
         {
@@ -1608,10 +1741,18 @@
           "providerId": "hmac-generated",
           "subComponents": {},
           "config": {
-            "kid": ["65ff5817-07e7-49f8-af9b-42275ff2743d"],
-            "secret": ["s9r4kWThPSruxEhHM4zJSmP12pKlScTguWNQQJCSju1vgrg7aSaqPML5supbGkyuHsBwZZsWmIaiz6ahyA-IXA"],
-            "priority": ["100"],
-            "algorithm": ["HS256"]
+            "kid": [
+              "65ff5817-07e7-49f8-af9b-42275ff2743d"
+            ],
+            "secret": [
+              "s9r4kWThPSruxEhHM4zJSmP12pKlScTguWNQQJCSju1vgrg7aSaqPML5supbGkyuHsBwZZsWmIaiz6ahyA-IXA"
+            ],
+            "priority": [
+              "100"
+            ],
+            "algorithm": [
+              "HS256"
+            ]
           }
         },
         {
@@ -1620,9 +1761,15 @@
           "providerId": "aes-generated",
           "subComponents": {},
           "config": {
-            "kid": ["53bed235-84b5-4ba4-9596-64817056eff3"],
-            "secret": ["Mw2VQRtxs9cSxeDahDG7sw"],
-            "priority": ["100"]
+            "kid": [
+              "53bed235-84b5-4ba4-9596-64817056eff3"
+            ],
+            "secret": [
+              "Mw2VQRtxs9cSxeDahDG7sw"
+            ],
+            "priority": [
+              "100"
+            ]
           }
         },
         {
@@ -1634,12 +1781,18 @@
             "privateKey": [
               "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"
             ],
-            "keyUse": ["ENC"],
+            "keyUse": [
+              "ENC"
+            ],
             "certificate": [
               "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"
             ],
-            "priority": ["100"],
-            "algorithm": ["RSA-OAEP"]
+            "priority": [
+              "100"
+            ],
+            "algorithm": [
+              "RSA-OAEP"
+            ]
           }
         },
         {
@@ -1648,12 +1801,18 @@
           "providerId": "hmac-generated",
           "subComponents": {},
           "config": {
-            "kid": ["f553ff21-7a08-4f65-b6f4-7a7b7143b578"],
+            "kid": [
+              "f553ff21-7a08-4f65-b6f4-7a7b7143b578"
+            ],
             "secret": [
               "t-tPUhbmk9ne-3Vehghh-G6vjiPYeu6qu2bYWayIkwjocoYqxR8PrfLxj1lQGxzi174dCgPNUrE5f_R4Q7ie0uMXiP3MQd9Kje4P2wM0RB8h1G1z-E7uH3qTuG-43XqPDjVf6SRWPyKoOQbWq4LvzX-_5FUNYQMdh8b1CeZ3XRw"
             ],
-            "priority": ["100"],
-            "algorithm": ["HS512"]
+            "priority": [
+              "100"
+            ],
+            "algorithm": [
+              "HS512"
+            ]
           }
         }
       ]
@@ -2303,4 +2462,4 @@
       "policies": []
     }
   }
-]
+]

package/e2e/spec/clients.js

@@ -4,7 +4,7 @@ import { test } from 'tape';
 import { spawn } from 'node:child_process';
 import path from 'node:path';
 
-test('Should list clients as JSON', { timeout: 3000 }, (t) => {
+test('Should list clients as JSON', { timeout: 10000 }, (t) => {
   const cli = spawn(
     path.join(path.dirname('.'), 'node'),
     [
@@ -20,12 +20,18 @@ test('Should list clients as JSON', { timeout: 3000 }, (t) => {
       },
     }
   );
+  let output = '';
   cli.stdout.on('data', (chunk) => {
-    console.log('Response', JSON.parse(chunk.toString()));
-    t.equal(JSON.parse(chunk.toString()).length, 7);
-    t.end();
+    output += chunk.toString();
   });
   cli.stderr.on('data', (msg) => {
-    t.fail(msg)
+    t.fail(msg);
+  });
+  cli.stdout.on('end', () => {
+    const json = output.split('\n').find((line) => line.trim().startsWith('['));
+    const parsed = JSON.parse(json);
+    console.log('Response', parsed);
+    t.equal(parsed.length, 7);
+    t.end();
   });
 });

package/e2e/spec/config.js

@@ -4,36 +4,48 @@ import { test } from 'tape';
 import { spawn } from 'node:child_process';
 import path from 'node:path';
 
-test('Should use config file', { timeout: 3000 }, (t) => {
+test('Should use config file', { timeout: 10000 }, (t) => {
   const cli = spawn(path.join(path.dirname('.'), 'node'), ['dist/cli.js', 'listClients'], {
     env: {
       CONFIG_FILE: process.cwd() + '/e2e/fixtures/config.json',
       ...process.env,
     },
   });
+  let output = '';
   cli.stdout.on('data', (chunk) => {
-    console.log('Response', JSON.parse(chunk.toString()));
-    t.equal(JSON.parse(chunk.toString()).length,7);
-    t.end();
+    output += chunk.toString();
   });
   cli.stderr.on('data', (msg) => {
     t.fail(msg);
   });
+  cli.stdout.on('end', () => {
+    const json = output.split('\n').find((line) => line.trim().startsWith('['));
+    const parsed = JSON.parse(json);
+    console.log('Response', parsed);
+    t.equal(parsed.length, 7);
+    t.end();
+  });
 });
 
-test('Should validate config', { timeout: 3000 }, (t) => {
+test('Should validate config', { timeout: 10000 }, (t) => {
   const cli = spawn(path.join(path.dirname('.'), 'node'), ['dist/cli.js', 'configTest'], {
     env: {
       CONFIG_FILE: process.cwd() + '/e2e/fixtures/config.json',
       ...process.env,
     },
   });
+  let output = '';
   cli.stdout.on('data', (chunk) => {
-    console.log(chunk.toString());
-    t.equal(chunk.toString(), 'Connection to http://localhost:8080 was successful: 3 users found.\n');
-    t.end();
+    output += chunk.toString();
   });
   cli.stderr.on('data', (msg) => {
     t.fail(msg);
   });
+  cli.stdout.on('end', () => {
+    t.ok(
+      output.includes('Connection to http://localhost:8080 was successful: 2 users found.'),
+      'config test output matches'
+    );
+    t.end();
+  });
 });

package/e2e/spec/users.js

@@ -4,7 +4,7 @@ import { test } from 'tape';
 import { spawn } from 'node:child_process';
 import path from 'node:path';
 
-test('Should list users as JSON', { timeout: 3000 }, (t) => {
+test('Should list users as JSON', { timeout: 10000 }, (t) => {
   const cli = spawn(
     path.join(path.dirname('.'), 'node'),
     [
@@ -20,12 +20,18 @@ test('Should list users as JSON', { timeout: 3000 }, (t) => {
       },
     }
   );
+  let output = '';
   cli.stdout.on('data', (chunk) => {
-    console.log('Response', JSON.parse(chunk.toString()));
-    t.equal(JSON.parse(chunk.toString()).length, 3);
-    t.end();
+    output += chunk.toString();
   });
   cli.stderr.on('data', (msg) => {
-    t.fail(msg)
+    t.fail(msg);
+  });
+  cli.stdout.on('end', () => {
+    const json = output.split('\n').find((line) => line.trim().startsWith('['));
+    const parsed = JSON.parse(json);
+    console.log('Response', parsed);
+    t.equal(parsed.length, 2);
+    t.end();
   });
 });

package/lib/report.ts

@@ -39,13 +39,13 @@ export async function convert(cfg: ConvertConfig) {
         switch (e.code || e.message) {
           case 'Request failed with status code 400':
             logger.error('Invalid Teams Webhook Payload. Check your params.');
-            throw new Error('Invalid Teams Payload');
+            throw new Error('Invalid Teams Payload', { cause: e });
           case 'slack_webhook_http_error':
             logger.error('Invalid Slack Webhook Payload. Check your params.');
-            throw new Error('Invalid Slack Payload');
+            throw new Error('Invalid Slack Payload', { cause: e });
           case 'generic_webhook_http_error':
             logger.error('Generic Webhook request failed. Check your URL and params.');
-            throw new Error('Invalid Generic Webhook request');
+            throw new Error('Invalid Generic Webhook request', { cause: e });
           default:
             logger.error(`Error during sending webhook.(${e?.code})`, e?.original);
             throw e;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@continuoussecuritytooling/keycloak-reporter",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "Reporting Tools for Keycloak",
   "main": "dist/index.js",
   "bin": {
@@ -11,7 +11,7 @@
     "clean": "rm -rf dist/* && npm i",
     "build": "tsc && chmod +x dist/cli.js && cp -rp config dist/",
     "test": "eslint --config .eslintrc.cjs . && jest",
-    "end2end:start-server": ".bin/start-server.mjs -Dkeycloak.profile.feature.account_api=enabled -Dkeycloak.profile.feature.account2=disabled -Dkeycloak.migration.action=import -Dkeycloak.migration.provider=singleFile -Dkeycloak.migration.file=e2e/fixtures/auth-utils/test-realm.json -Dkeycloak.migration.strategy=OVERWRITE_EXISTING",
+    "end2end:start-server": ".bin/start-server.mjs",
     "end2end:test": "./e2e/run-tests.sh",
     "changelog": "conventional-changelog -p angular -i CHANGELOG.md -s -r 0",
     "changelog:add": "git add CHANGELOG.md && git commit -m 'updated CHANGELOG.md'",
@@ -46,6 +46,8 @@
     "yargs": "^18.0.0"
   },
   "devDependencies": {
+    "@eslint/eslintrc": "^3.3.5",
+    "@eslint/js": "^10.0.1",
     "@octokit/rest": "^22.0.0",
     "@types/jest": "^30.0.0",
     "@types/node": "^24.0.0",
@@ -53,9 +55,10 @@
     "@typescript-eslint/eslint-plugin": "^8.0.0",
     "@typescript-eslint/parser": "^8.0.0",
     "conventional-changelog-cli": "^5.0.0",
-    "eslint": "^9.0.0",
+    "eslint": "^10.0.0",
     "eslint-config-prettier": "^10.0.0",
     "eslint-plugin-prettier": "^5.0.0",
+    "globals": "^17.4.0",
     "gunzip-maybe": "^1.4.2",
     "jest": "^30.0.0",
     "jest-extended": "^7.0.0",

package/tsconfig.json

@@ -5,7 +5,7 @@
     "target": "es2017",
     "sourceMap": true,
     "outDir": "dist",
-    "lib": ["dom", "es2017"]
+    "lib": ["dom", "es2017", "es2022"]
   },
-  "exclude": ["test"]
+  "exclude": ["test", "dist"]
 }