ef-keycloak-connect 1.8.4-patch-3.0 → 1.8.4-patch-5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ef-keycloak-connect",
-  "version": "1.8.4-patch-3.0",
+  "version": "1.8.4-patch-5.0",
   "description": "Node JS keycloak adapter for authentication and authorization.",
   "main": "index.js",
   "scripts": {

package/services/keycloakService.js

@@ -62,7 +62,7 @@ class KeycloakService extends Keycloak {
         if ( !attributesFromToken || !attributesFromToken.is2FARegistered || attributesFromToken.is2FARegistered == 'false' ) {
 
           // getting admin access token to update the user attributes for RSA & Auht Apps
-          const adminData = await this.getAccessToken( keycloakConfig.USERNAME_ADMIN, keycloakConfig.PASSWORD_ADMIN );
+          const adminData = await this.getAccessToken( this.keycloakConfig.USERNAME_ADMIN, this.keycloakConfig.PASSWORD_ADMIN );
           const adminToken = adminData.access_token;
 
           // appending extra information regarding 2FA in response object
@@ -239,7 +239,7 @@ class KeycloakService extends Keycloak {
 
     return new Promise( async ( resolve, reject ) => {
 
-      let URL = keycloakConfig[ "auth-server-url" ] + "realms/" + keycloakConfig[ "realm" ] + "/protocol/openid-connect/token/introspect";
+      let URL = this.keycloakConfig[ "auth-server-url" ] + "realms/" + this.keycloakConfig[ "realm" ] + "/protocol/openid-connect/token/introspect";
 
       let config = {
         method: "post",
@@ -275,6 +275,79 @@ class KeycloakService extends Keycloak {
     } );
   }
 
+
+  // function for getting user details against user id (and extracting attributes)
+  async getUserDetailsById( userId ) {
+
+    return new Promise( async ( resolve, reject ) => {
+
+      let keycloakAdminToken;
+
+      try {
+
+        //Fetching admin token, we pass it in our "Create User" API for authorization
+        keycloakAdminToken = await this.getAccessToken( this.keycloakConfig[ "USERNAME_ADMIN" ], this.keycloakConfig[ "PASSWORD_ADMIN" ] );
+
+        let URL = this.keycloakConfig[ "auth-server-url" ] + "admin/realms/" + this.keycloakConfig[ "realm" ] + "/users/" + userId;
+
+        let config = {
+          method: "get",
+          url: URL,
+          headers: {
+            Accept: "application/json",
+            "Content-Type": "application/json",
+            "Authorization": `Bearer ${keycloakAdminToken.access_token}`
+          }
+        };
+
+        try {
+
+          let userDetailsAgainstId = await requestController.httpRequest( config, true );
+
+          if ( userDetailsAgainstId?.data ) {
+
+            resolve( userDetailsAgainstId.data )    // extracting user details from response object
+          }
+
+        }
+        catch ( er ) {
+
+          let error
+
+          if ( er?.status && er?.status === 404 ) {
+
+            error = {
+              status: 404,
+              reason: `No user exist in keycloak against given user id: ${userId}`
+            }
+
+          } else {
+
+            error = await errorService.handleError( er );
+          }
+
+          reject( {
+            error_message: "User Details API Error: Error occurred while getting user against user id",
+            error_detail: error
+          } );
+
+        }
+      } catch ( er ) {
+
+        console.log( er );
+
+        let error = await errorService.handleError( er );
+
+        reject( {
+
+          error_message: "Keycloak Admin Token Fetch Error: An error occurred while fetching the keycloak admin token in getUserDetailsById function.",
+          error_detail: error
+        } );
+
+      }
+    } );
+  }
+
   // function for getting user details (and extracting attributes)
   async getUserDetails( adminToken, username ) {
     let URL = this.keycloakConfig[ "auth-server-url" ] + "admin/realms/" + this.keycloakConfig[ "realm" ] + "/users?username=" + username + "&exact=true";
@@ -507,7 +580,7 @@ class KeycloakService extends Keycloak {
       // running OTP validation flow for RSA Authenticator
       else if ( userAttributes.twoFAChannel[ 0 ] === 'rsa' ) {
         // setting up SecurID API for MFA
-        let URL = keycloakConfig.RSA_Server_URL + "mfa/v1_1/authn/initialize";
+        let URL = this.keycloakConfig.RSA_Server_URL + "mfa/v1_1/authn/initialize";
 
         // configuring headers & payload
         let config = {
@@ -761,7 +834,7 @@ class KeycloakService extends Keycloak {
                 let rpt_token = rptResponse.data.access_token;
 
                 let userToken = token;
-                config.data.grant_type = keycloakConfig.GRANT_TYPE;
+                config.data.grant_type = this.keycloakConfig.GRANT_TYPE;
                 config.data.token = rpt_token;
                 URL = URL + "/introspect";
                 config.url = URL;
@@ -773,7 +846,7 @@ class KeycloakService extends Keycloak {
                   intrsopectionResponse.data.access_token = rpt_token;
 
                   responseObject.permittedResources = {
-                    Resources: ( intrsopectionResponse.data.authorization.permissions.length > 0 ) ? intrsopectionResponse.data.authorization.permissions : []
+                    Resources: ( intrsopectionResponse?.data?.authorization?.permissions?.length > 0 ) ? intrsopectionResponse?.data?.authorization?.permissions : []
                   }
 
                   //  T.O.K.E.N   R.E.Q.U.E.S.T   # 4   ( A.D.M.I.N.  T.O.K.E.N)