@pawells/nestjs-auth 1.0.0-dev.4c8c698

package/build/admin/client/services/federated-identity.service.d.ts

@@ -0,0 +1,89 @@
+import { BaseService } from './base-service.js';
+/**
+ * Federated identity link representation
+ */
+export interface FederatedIdentityLink {
+    identityProvider: string;
+    userId: string;
+    userName: string;
+}
+/**
+ * Federated Identity Service
+ *
+ * Wraps the Keycloak Admin API for managing federated identity links.
+ * Federated identities allow users to link external identity providers (e.g., GitHub, Google, OIDC)
+ * to their Keycloak account.
+ *
+ * Uses internal deduplication to prevent duplicate links (see workaround for Keycloak issue #34608).
+ *
+ * @example
+ * ```typescript
+ * const links = await keycloakAdmin.federatedIdentity.list(userId);
+ * await keycloakAdmin.federatedIdentity.link(userId, 'github', {
+ *   userId: 'github-user-123',
+ *   userName: 'john_doe'
+ * });
+ * ```
+ */
+export declare class FederatedIdentityService extends BaseService {
+    /**
+     * List all federated identity links for a user
+     *
+     * Retrieves all external identity provider links associated with a Keycloak user.
+     * Uses the Keycloak Admin API endpoint: `GET /admin/realms/{realm}/users/{id}/federated-identity`
+     *
+     * @param userId - The Keycloak user ID
+     * @returns Array of federated identity links (may be empty)
+     *
+     * @example
+     * ```typescript
+     * const links = await this.federatedIdentity.list('user-123');
+     * // [
+     * //   { identityProvider: 'github', userId: 'octocat', userName: 'octocat' },
+     * //   { identityProvider: 'google', userId: 'google-id', userName: 'john@example.com' }
+     * // ]
+     * ```
+     */
+    list(userId: string): Promise<FederatedIdentityLink[]>;
+    /**
+     * Link a federated identity to a user
+     *
+     * Associates an external identity provider account with a Keycloak user.
+     * Includes internal deduplication check to prevent duplicate links (workaround for Keycloak issue #34608).
+     *
+     * Throws `ConflictError` if a link with the same provider and user ID already exists.
+     *
+     * Note: This method requires both `federated-identity:write` and `federated-identity:read` scopes.
+     * The read scope is needed for the internal check performed by {@link list}.
+     *
+     * @param userId - The Keycloak user ID to link to
+     * @param provider - The identity provider name (e.g., 'github', 'google', 'keycloak-oidc')
+     * @param link - The external identity details (userId and userName from the external provider)
+     * @throws {ConflictError} If a link with this provider and userId already exists
+     *
+     * @example
+     * ```typescript
+     * await this.federatedIdentity.link('user-123', 'github', {
+     *   userId: 'octocat',
+     *   userName: 'octocat'
+     * });
+     * ```
+     */
+    link(userId: string, provider: string, link: Omit<FederatedIdentityLink, 'identityProvider'>): Promise<void>;
+    /**
+     * Unlink a federated identity from a user
+     *
+     * Removes an external identity provider link from a Keycloak user.
+     * After unlinking, the user can no longer authenticate via that provider.
+     *
+     * @param userId - The Keycloak user ID
+     * @param provider - The identity provider name to remove
+     *
+     * @example
+     * ```typescript
+     * await this.federatedIdentity.unlink('user-123', 'github');
+     * ```
+     */
+    unlink(userId: string, provider: string): Promise<void>;
+}
+//# sourceMappingURL=federated-identity.service.d.ts.map

package/build/admin/client/services/federated-identity.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated-identity.service.d.ts","sourceRoot":"","sources":["../../../../src/admin/client/services/federated-identity.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACrC,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,wBAAyB,SAAQ,WAAW;IACxD;;;;;;;;;;;;;;;;;OAiBG;IACU,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC;IAWnE;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACU,IAAI,CAChB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,IAAI,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,GACnD,OAAO,CAAC,IAAI,CAAC;IA+BhB;;;;;;;;;;;;;OAaG;IACU,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAUpE"}

package/build/admin/client/services/federated-identity.service.js

@@ -0,0 +1,120 @@
+import { ConflictError } from '../errors/index.js';
+import { BaseService } from './base-service.js';
+/**
+ * Federated Identity Service
+ *
+ * Wraps the Keycloak Admin API for managing federated identity links.
+ * Federated identities allow users to link external identity providers (e.g., GitHub, Google, OIDC)
+ * to their Keycloak account.
+ *
+ * Uses internal deduplication to prevent duplicate links (see workaround for Keycloak issue #34608).
+ *
+ * @example
+ * ```typescript
+ * const links = await keycloakAdmin.federatedIdentity.list(userId);
+ * await keycloakAdmin.federatedIdentity.link(userId, 'github', {
+ *   userId: 'github-user-123',
+ *   userName: 'john_doe'
+ * });
+ * ```
+ */
+export class FederatedIdentityService extends BaseService {
+    /**
+     * List all federated identity links for a user
+     *
+     * Retrieves all external identity provider links associated with a Keycloak user.
+     * Uses the Keycloak Admin API endpoint: `GET /admin/realms/{realm}/users/{id}/federated-identity`
+     *
+     * @param userId - The Keycloak user ID
+     * @returns Array of federated identity links (may be empty)
+     *
+     * @example
+     * ```typescript
+     * const links = await this.federatedIdentity.list('user-123');
+     * // [
+     * //   { identityProvider: 'github', userId: 'octocat', userName: 'octocat' },
+     * //   { identityProvider: 'google', userId: 'google-id', userName: 'john@example.com' }
+     * // ]
+     * ```
+     */
+    async list(userId) {
+        this.requireScope('federated-identity:read');
+        try {
+            return (await this.withRetry(() => this.adminClient.users.listFederatedIdentities({ id: userId })));
+        }
+        catch (error) {
+            return this.handleError(error);
+        }
+    }
+    /**
+     * Link a federated identity to a user
+     *
+     * Associates an external identity provider account with a Keycloak user.
+     * Includes internal deduplication check to prevent duplicate links (workaround for Keycloak issue #34608).
+     *
+     * Throws `ConflictError` if a link with the same provider and user ID already exists.
+     *
+     * Note: This method requires both `federated-identity:write` and `federated-identity:read` scopes.
+     * The read scope is needed for the internal check performed by {@link list}.
+     *
+     * @param userId - The Keycloak user ID to link to
+     * @param provider - The identity provider name (e.g., 'github', 'google', 'keycloak-oidc')
+     * @param link - The external identity details (userId and userName from the external provider)
+     * @throws {ConflictError} If a link with this provider and userId already exists
+     *
+     * @example
+     * ```typescript
+     * await this.federatedIdentity.link('user-123', 'github', {
+     *   userId: 'octocat',
+     *   userName: 'octocat'
+     * });
+     * ```
+     */
+    async link(userId, provider, link) {
+        this.requireScope('federated-identity:write');
+        try {
+            // Check for existing link with same provider and userId to prevent Keycloak #34608
+            const existingLinks = await this.list(userId);
+            const conflictingLink = existingLinks.find((l) => l.identityProvider === provider && l.userId === link.userId);
+            if (conflictingLink) {
+                throw new ConflictError(`Federated identity link already exists: provider=${provider}, userId=${link.userId}`);
+            }
+            await this.withRetry(() => this.adminClient.users.addToFederatedIdentity({
+                id: userId,
+                federatedIdentityId: provider,
+                federatedIdentity: {
+                    identityProvider: provider,
+                    userId: link.userId,
+                    userName: link.userName,
+                },
+            }));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+    /**
+     * Unlink a federated identity from a user
+     *
+     * Removes an external identity provider link from a Keycloak user.
+     * After unlinking, the user can no longer authenticate via that provider.
+     *
+     * @param userId - The Keycloak user ID
+     * @param provider - The identity provider name to remove
+     *
+     * @example
+     * ```typescript
+     * await this.federatedIdentity.unlink('user-123', 'github');
+     * ```
+     */
+    async unlink(userId, provider) {
+        this.requireScope('federated-identity:write');
+        try {
+            await this.withRetry(() => this.adminClient.users.delFromFederatedIdentity({ id: userId, federatedIdentityId: provider }));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+}
+//# sourceMappingURL=federated-identity.service.js.map

package/build/admin/client/services/federated-identity.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"federated-identity.service.js","sourceRoot":"","sources":["../../../../src/admin/client/services/federated-identity.service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAWhD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,wBAAyB,SAAQ,WAAW;IACxD;;;;;;;;;;;;;;;;;OAiBG;IACI,KAAK,CAAC,IAAI,CAAC,MAAc;QAC/B,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC7C,IAAI,CAAC;YACJ,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACjC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAC9D,CAA4B,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACI,KAAK,CAAC,IAAI,CAChB,MAAc,EACd,QAAgB,EAChB,IAAqD;QAErD,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC;QAC9C,IAAI,CAAC;YACJ,mFAAmF;YACnF,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,eAAe,GAAG,aAAa,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAClE,CAAC;YAEF,IAAI,eAAe,EAAE,CAAC;gBACrB,MAAM,IAAI,aAAa,CACtB,oDAAoD,QAAQ,YAAY,IAAI,CAAC,MAAM,EAAE,CACrF,CAAC;YACH,CAAC;YAED,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,sBAAsB,CAAC;gBAC7C,EAAE,EAAE,MAAM;gBACV,mBAAmB,EAAE,QAAQ;gBAC7B,iBAAiB,EAAE;oBAClB,gBAAgB,EAAE,QAAQ;oBAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;oBACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;iBACvB;aACD,CAAC,CACF,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,QAAgB;QACnD,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC;QAC9C,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,wBAAwB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,CAAC,CAC9F,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;CACD"}

package/build/admin/client/services/group.service.d.ts

@@ -0,0 +1,52 @@
+import type { GroupRepresentation } from '../types/index.js';
+import { BaseService } from './base-service.js';
+/**
+ * Service for managing Keycloak groups.
+ *
+ * Provides methods for creating, listing, and managing user groups. Groups can be nested hierarchically,
+ * have roles assigned to them, and be used to organize users. Requires `groups:read` and `groups:write`
+ * scopes depending on the operation.
+ *
+ * Part of {@link KeycloakAdminService.groups | KeycloakAdminService#groups}.
+ *
+ * @example
+ * ```typescript
+ * const groups = await keycloak.groups.list('my-realm');
+ * const group = await keycloak.groups.get('my-realm', 'group-id');
+ * await keycloak.groups.create('my-realm', { name: 'developers', path: '/developers' });
+ * await keycloak.groups.addMember('my-realm', 'group-id', 'user-id');
+ * ```
+ */
+export declare class GroupService extends BaseService {
+    /**
+     * List all groups in a realm
+     */
+    list(realm: string): Promise<GroupRepresentation[]>;
+    /**
+     * Get a group by ID
+     */
+    get(realm: string, groupId: string): Promise<GroupRepresentation>;
+    /**
+     * Create a new group
+     */
+    create(realm: string, group: GroupRepresentation): Promise<{
+        id: string;
+    }>;
+    /**
+     * Update a group
+     */
+    update(realm: string, groupId: string, group: GroupRepresentation): Promise<void>;
+    /**
+     * Delete a group
+     */
+    delete(realm: string, groupId: string): Promise<void>;
+    /**
+     * Add a user to a group
+     */
+    addMember(realm: string, groupId: string, userId: string): Promise<void>;
+    /**
+     * Remove a user from a group
+     */
+    removeMember(realm: string, groupId: string, userId: string): Promise<void>;
+}
+//# sourceMappingURL=group.service.d.ts.map

package/build/admin/client/services/group.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.service.d.ts","sourceRoot":"","sources":["../../../../src/admin/client/services/group.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,YAAa,SAAQ,WAAW;IAC5C;;OAEG;IACU,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAShE;;OAEG;IACU,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAW9E;;OAEG;IACU,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAWvF;;OAEG;IACU,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9F;;OAEG;IACU,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlE;;OAEG;IACU,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWrF;;OAEG;IACU,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAUxF"}

package/build/admin/client/services/group.service.js

@@ -0,0 +1,105 @@
+import { BaseService } from './base-service.js';
+/**
+ * Service for managing Keycloak groups.
+ *
+ * Provides methods for creating, listing, and managing user groups. Groups can be nested hierarchically,
+ * have roles assigned to them, and be used to organize users. Requires `groups:read` and `groups:write`
+ * scopes depending on the operation.
+ *
+ * Part of {@link KeycloakAdminService.groups | KeycloakAdminService#groups}.
+ *
+ * @example
+ * ```typescript
+ * const groups = await keycloak.groups.list('my-realm');
+ * const group = await keycloak.groups.get('my-realm', 'group-id');
+ * await keycloak.groups.create('my-realm', { name: 'developers', path: '/developers' });
+ * await keycloak.groups.addMember('my-realm', 'group-id', 'user-id');
+ * ```
+ */
+export class GroupService extends BaseService {
+    /**
+     * List all groups in a realm
+     */
+    async list(realm) {
+        this.requireScope('groups:read');
+        try {
+            return (await this.withRetry(() => this.adminClient.groups.find({ realm })));
+        }
+        catch (error) {
+            return this.handleError(error);
+        }
+    }
+    /**
+     * Get a group by ID
+     */
+    async get(realm, groupId) {
+        this.requireScope('groups:read');
+        try {
+            return (await this.withRetry(() => this.adminClient.groups.findOne({ realm, id: groupId })));
+        }
+        catch (error) {
+            return this.handleError(error);
+        }
+    }
+    /**
+     * Create a new group
+     */
+    async create(realm, group) {
+        this.requireScope('groups:write');
+        try {
+            return await this.withRetry(() => this.adminClient.groups.create({ ...group, realm }));
+        }
+        catch (error) {
+            return this.handleError(error);
+        }
+    }
+    /**
+     * Update a group
+     */
+    async update(realm, groupId, group) {
+        this.requireScope('groups:write');
+        try {
+            await this.withRetry(() => this.adminClient.groups.update({ realm, id: groupId }, group));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+    /**
+     * Delete a group
+     */
+    async delete(realm, groupId) {
+        this.requireScope('groups:write');
+        try {
+            await this.withRetry(() => this.adminClient.groups.del({ realm, id: groupId }));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+    /**
+     * Add a user to a group
+     */
+    async addMember(realm, groupId, userId) {
+        this.requireScope('groups:write');
+        try {
+            await this.withRetry(() => this.adminClient.users.addToGroup({ realm, id: userId, groupId }));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+    /**
+     * Remove a user from a group
+     */
+    async removeMember(realm, groupId, userId) {
+        this.requireScope('groups:write');
+        try {
+            await this.withRetry(() => this.adminClient.users.delFromGroup({ realm, id: userId, groupId }));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+}
+//# sourceMappingURL=group.service.js.map

package/build/admin/client/services/group.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group.service.js","sourceRoot":"","sources":["../../../../src/admin/client/services/group.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,YAAa,SAAQ,WAAW;IAC5C;;OAEG;IACI,KAAK,CAAC,IAAI,CAAC,KAAa;QAC9B,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC;YACJ,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAQ,CAAC;QACrF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,OAAe;QAC9C,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC;QACjC,IAAI,CAAC;YACJ,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACjC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CACvD,CAAQ,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAA0B;QAC5D,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAClC,IAAI,CAAC;YACJ,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CAChC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,CACnD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAe,EAAE,KAA0B;QAC7E,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,CAC7D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,OAAe;QACjD,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CACnD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc;QACpE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CACjE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAC,KAAa,EAAE,OAAe,EAAE,MAAc;QACvE,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CACnE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;CACD"}

package/build/admin/client/services/identity-provider.service.d.ts

@@ -0,0 +1,47 @@
+import type { IdentityProviderRepresentation } from '../types/index.js';
+import { BaseService } from './base-service.js';
+/**
+ * Service for managing Keycloak identity providers.
+ *
+ * Provides methods for configuring external identity providers (e.g., social login, SAML, OIDC).
+ * Identity providers enable federated authentication — users can log in via external identity systems
+ * that are then linked to Keycloak accounts. Requires `identity-providers:read` and
+ * `identity-providers:write` scopes depending on the operation.
+ *
+ * Part of {@link KeycloakAdminService.identityProviders | KeycloakAdminService#identityProviders}.
+ *
+ * @example
+ * ```typescript
+ * const idps = await keycloak.identityProviders.list('my-realm');
+ * const googleIdp = await keycloak.identityProviders.get('my-realm', 'google');
+ * await keycloak.identityProviders.create('my-realm', {
+ *   alias: 'github',
+ *   providerId: 'github',
+ *   enabled: true,
+ *   config: { clientId: '...', clientSecret: '...' },
+ * });
+ * ```
+ */
+export declare class IdentityProviderService extends BaseService {
+    /**
+     * List all identity providers in a realm
+     */
+    list(realm: string): Promise<IdentityProviderRepresentation[]>;
+    /**
+     * Get an identity provider by alias
+     */
+    get(realm: string, alias: string): Promise<IdentityProviderRepresentation>;
+    /**
+     * Create a new identity provider
+     */
+    create(realm: string, idp: IdentityProviderRepresentation): Promise<void>;
+    /**
+     * Update an identity provider
+     */
+    update(realm: string, alias: string, idp: IdentityProviderRepresentation): Promise<void>;
+    /**
+     * Delete an identity provider
+     */
+    delete(realm: string, alias: string): Promise<void>;
+}
+//# sourceMappingURL=identity-provider.service.d.ts.map

package/build/admin/client/services/identity-provider.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-provider.service.d.ts","sourceRoot":"","sources":["../../../../src/admin/client/services/identity-provider.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,uBAAwB,SAAQ,WAAW;IACvD;;OAEG;IACU,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,EAAE,CAAC;IAW3E;;OAEG;IACU,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,8BAA8B,CAAC;IAWvF;;OAEG;IACU,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,8BAA8B,GAAG,OAAO,CAAC,IAAI,CAAC;IAWtF;;OAEG;IACU,MAAM,CAClB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,8BAA8B,GACjC,OAAO,CAAC,IAAI,CAAC;IAWhB;;OAEG;IACU,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAUhE"}

package/build/admin/client/services/identity-provider.service.js

@@ -0,0 +1,86 @@
+import { BaseService } from './base-service.js';
+/**
+ * Service for managing Keycloak identity providers.
+ *
+ * Provides methods for configuring external identity providers (e.g., social login, SAML, OIDC).
+ * Identity providers enable federated authentication — users can log in via external identity systems
+ * that are then linked to Keycloak accounts. Requires `identity-providers:read` and
+ * `identity-providers:write` scopes depending on the operation.
+ *
+ * Part of {@link KeycloakAdminService.identityProviders | KeycloakAdminService#identityProviders}.
+ *
+ * @example
+ * ```typescript
+ * const idps = await keycloak.identityProviders.list('my-realm');
+ * const googleIdp = await keycloak.identityProviders.get('my-realm', 'google');
+ * await keycloak.identityProviders.create('my-realm', {
+ *   alias: 'github',
+ *   providerId: 'github',
+ *   enabled: true,
+ *   config: { clientId: '...', clientSecret: '...' },
+ * });
+ * ```
+ */
+export class IdentityProviderService extends BaseService {
+    /**
+     * List all identity providers in a realm
+     */
+    async list(realm) {
+        this.requireScope('identity-providers:read');
+        try {
+            return (await this.withRetry(() => this.adminClient.identityProviders.find({ realm })));
+        }
+        catch (error) {
+            return this.handleError(error);
+        }
+    }
+    /**
+     * Get an identity provider by alias
+     */
+    async get(realm, alias) {
+        this.requireScope('identity-providers:read');
+        try {
+            return (await this.withRetry(() => this.adminClient.identityProviders.findOne({ realm, alias })));
+        }
+        catch (error) {
+            return this.handleError(error);
+        }
+    }
+    /**
+     * Create a new identity provider
+     */
+    async create(realm, idp) {
+        this.requireScope('identity-providers:write');
+        try {
+            await this.withRetry(() => this.adminClient.identityProviders.create({ ...idp, realm }));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+    /**
+     * Update an identity provider
+     */
+    async update(realm, alias, idp) {
+        this.requireScope('identity-providers:write');
+        try {
+            await this.withRetry(() => this.adminClient.identityProviders.update({ realm, alias }, idp));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+    /**
+     * Delete an identity provider
+     */
+    async delete(realm, alias) {
+        this.requireScope('identity-providers:write');
+        try {
+            await this.withRetry(() => this.adminClient.identityProviders.del({ realm, alias }));
+        }
+        catch (error) {
+            this.handleError(error);
+        }
+    }
+}
+//# sourceMappingURL=identity-provider.service.js.map

package/build/admin/client/services/identity-provider.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-provider.service.js","sourceRoot":"","sources":["../../../../src/admin/client/services/identity-provider.service.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,uBAAwB,SAAQ,WAAW;IACvD;;OAEG;IACI,KAAK,CAAC,IAAI,CAAC,KAAa;QAC9B,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC7C,IAAI,CAAC;YACJ,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACjC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAClD,CAAQ,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,GAAG,CAAC,KAAa,EAAE,KAAa;QAC5C,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,CAAC;QAC7C,IAAI,CAAC;YACJ,OAAO,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACjC,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAQ,CAAC;QACX,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,GAAmC;QACrE,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC;QAC9C,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,CAC5D,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAClB,KAAa,EACb,KAAa,EACb,GAAmC;QAEnC,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC;QAC9C,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,GAAG,CAAC,CAChE,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAAa;QAC/C,IAAI,CAAC,YAAY,CAAC,0BAA0B,CAAC,CAAC;QAC9C,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,CACzB,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CACxD,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACzB,CAAC;IACF,CAAC;CACD"}

package/build/admin/client/services/index.d.ts

@@ -0,0 +1,11 @@
+export * from './base-service.js';
+export * from './realm.service.js';
+export * from './user.service.js';
+export * from './client.service.js';
+export * from './role.service.js';
+export * from './group.service.js';
+export * from './identity-provider.service.js';
+export * from './authentication.service.js';
+export * from './federated-identity.service.js';
+export * from './event.service.js';
+//# sourceMappingURL=index.d.ts.map

package/build/admin/client/services/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/admin/client/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC"}

package/build/admin/client/services/index.js

@@ -0,0 +1,11 @@
+export * from './base-service.js';
+export * from './realm.service.js';
+export * from './user.service.js';
+export * from './client.service.js';
+export * from './role.service.js';
+export * from './group.service.js';
+export * from './identity-provider.service.js';
+export * from './authentication.service.js';
+export * from './federated-identity.service.js';
+export * from './event.service.js';
+//# sourceMappingURL=index.js.map

package/build/admin/client/services/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/admin/client/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,oBAAoB,CAAC"}

package/build/admin/client/services/realm.service.d.ts

@@ -0,0 +1,41 @@
+import type { RealmRepresentation } from '../types/index.js';
+import { BaseService } from './base-service.js';
+/**
+ * Service for managing Keycloak realms.
+ *
+ * Provides methods for querying and updating realm-level configuration, including realm properties,
+ * security policy, login settings, and event configuration. Requires `realms:read` and `realms:write`
+ * scopes depending on the operation.
+ *
+ * Part of {@link KeycloakAdminService.realms | KeycloakAdminService#realms}.
+ *
+ * @example
+ * ```typescript
+ * const realm = await keycloak.realms.get('my-realm');
+ * const realms = await keycloak.realms.list();
+ * await keycloak.realms.update('my-realm', { accessTokenLifespan: 3600 });
+ * ```
+ */
+export declare class RealmService extends BaseService {
+    /**
+     * List all realms
+     */
+    list(): Promise<RealmRepresentation[]>;
+    /**
+     * Get a realm by name
+     */
+    get(realm: string): Promise<RealmRepresentation>;
+    /**
+     * Create a new realm
+     */
+    create(realm: RealmRepresentation): Promise<void>;
+    /**
+     * Update a realm
+     */
+    update(realmName: string, realm: RealmRepresentation): Promise<void>;
+    /**
+     * Delete a realm
+     */
+    delete(realm: string): Promise<void>;
+}
+//# sourceMappingURL=realm.service.d.ts.map

package/build/admin/client/services/realm.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"realm.service.d.ts","sourceRoot":"","sources":["../../../../src/admin/client/services/realm.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAEhD;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,YAAa,SAAQ,WAAW;IAC5C;;OAEG;IACU,IAAI,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;IASnD;;OAEG;IACU,GAAG,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAW7D;;OAEG;IACU,MAAM,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D;;OAEG;IACU,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAWjF;;OAEG;IACU,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAQjD"}