cartography 0.111.0rc1__py3-none-any.whl → 0.113.0__py3-none-any.whl

cartography/models/keycloak/authenticationexecution.py

@@ -0,0 +1,160 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    display_name: PropertyRef = PropertyRef("displayName")
+    requirement: PropertyRef = PropertyRef("requirement")
+    description: PropertyRef = PropertyRef("description")
+    configurable: PropertyRef = PropertyRef("configurable")
+    authentication_flow: PropertyRef = PropertyRef("authenticationFlow")
+    provider_id: PropertyRef = PropertyRef("providerId")
+    flow_id: PropertyRef = PropertyRef("flowId")
+    level: PropertyRef = PropertyRef("level")
+    index: PropertyRef = PropertyRef("index")
+    priority: PropertyRef = PropertyRef("priority")
+    is_terminal_step: PropertyRef = PropertyRef("is_terminal_step")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakAuthenticationExecutionToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakAuthenticationExecutionToRealmRelProperties = (
+        KeycloakAuthenticationExecutionToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ExecutionToFlowRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:HAS_STEP]-(:KeycloakAuthenticationFlow)
+class ExecutionToFlowRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakAuthenticationFlow"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "alias": PropertyRef("_parent_flow"),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_STEP"
+    properties: ExecutionToFlowRelProperties = ExecutionToFlowRelProperties()
+
+
+@dataclass(frozen=True)
+class ExecutionToExecutionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:HAS_STEP]-(:KeycloakAuthenticationExecution)
+class ExecutionToExecutionRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakAuthenticationExecution"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_parent_subflow")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_STEP"
+    properties: ExecutionToExecutionRelProperties = ExecutionToExecutionRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionSchema(CartographyNodeSchema):
+    label: str = "KeycloakAuthenticationExecution"
+    properties: KeycloakAuthenticationExecutionNodeProperties = (
+        KeycloakAuthenticationExecutionNodeProperties()
+    )
+    sub_resource_relationship: KeycloakAuthenticationExecutionToRealmRel = (
+        KeycloakAuthenticationExecutionToRealmRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [ExecutionToFlowRel(), ExecutionToExecutionRel()]
+    )
+
+
+# The following relationships are MatchLinks, they are used to modelize all the possible flows
+@dataclass(frozen=True)
+class ExecutionToExecutionStepRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # Mandatory fields for MatchLinks
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)-[:NEXT_STEP]->(:KeycloakAuthenticationExecution)
+class ExecutionToExecutionMatchLink(CartographyRelSchema):
+    source_node_label: str = "KeycloakAuthenticationExecution"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("source")},
+    )
+    target_node_label: str = "KeycloakAuthenticationExecution"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("target")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "NEXT_STEP"
+    properties: ExecutionToExecutionStepRelProperties = (
+        ExecutionToExecutionStepRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ExecutionToFlowStepRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # Mandatory fields for MatchLinks
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationFlow)-[:NEXT_STEP]->(:KeycloakAuthenticationExecution)
+class ExecutionToFlowMatchLink(CartographyRelSchema):
+    source_node_label: str = "KeycloakAuthenticationExecution"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("execution_id")},
+    )
+    target_node_label: str = "KeycloakAuthenticationFlow"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "alias": PropertyRef("flow_name"),
+            "realm": PropertyRef(
+                "realm"
+            ),  # We need to pass the realm to match the flow correctly as aliases can be shared across realms
+        },
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "NEXT_STEP"
+    properties: ExecutionToFlowStepRelProperties = ExecutionToFlowStepRelProperties()

cartography/models/keycloak/authenticationflow.py

@@ -0,0 +1,54 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    alias: PropertyRef = PropertyRef("alias", extra_index=True)
+    description: PropertyRef = PropertyRef("description")
+    provider_id: PropertyRef = PropertyRef("providerId")
+    top_level: PropertyRef = PropertyRef("topLevel")
+    built_in: PropertyRef = PropertyRef("builtIn")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # We need to store the realm name because authentication flows are often referenced by name
+    # and not by id, so we need to be able to find the authentication flows by name (that is not unique across realms)
+    realm: PropertyRef = PropertyRef("REALM", set_in_kwargs=True, extra_index=True)
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationFlow)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakAuthenticationFlowToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakAuthenticationFlowToRealmRelProperties = (
+        KeycloakAuthenticationFlowToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowSchema(CartographyNodeSchema):
+    label: str = "KeycloakAuthenticationFlow"
+    properties: KeycloakAuthenticationFlowNodeProperties = (
+        KeycloakAuthenticationFlowNodeProperties()
+    )
+    sub_resource_relationship: KeycloakAuthenticationFlowToRealmRel = (
+        KeycloakAuthenticationFlowToRealmRel()
+    )

cartography/models/keycloak/client.py

@@ -0,0 +1,177 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakClientNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    client_id: PropertyRef = PropertyRef("clientId")
+    name: PropertyRef = PropertyRef("name")
+    description: PropertyRef = PropertyRef("description")
+    type: PropertyRef = PropertyRef("type")
+    root_url: PropertyRef = PropertyRef("rootUrl")
+    admin_url: PropertyRef = PropertyRef("adminUrl")
+    base_url: PropertyRef = PropertyRef("baseUrl")
+    surrogate_auth_required: PropertyRef = PropertyRef("surrogateAuthRequired")
+    enabled: PropertyRef = PropertyRef("enabled")
+    always_display_in_console: PropertyRef = PropertyRef("alwaysDisplayInConsole")
+    client_authenticator_type: PropertyRef = PropertyRef("clientAuthenticatorType")
+    registration_access_token: PropertyRef = PropertyRef("registrationAccessToken")
+    not_before: PropertyRef = PropertyRef("notBefore")
+    bearer_only: PropertyRef = PropertyRef("bearerOnly")
+    consent_required: PropertyRef = PropertyRef("consentRequired")
+    standard_flow_enabled: PropertyRef = PropertyRef("standardFlowEnabled")
+    implicit_flow_enabled: PropertyRef = PropertyRef("implicitFlowEnabled")
+    direct_access_grants_enabled: PropertyRef = PropertyRef("directAccessGrantsEnabled")
+    service_accounts_enabled: PropertyRef = PropertyRef("serviceAccountsEnabled")
+    authorization_services_enabled: PropertyRef = PropertyRef(
+        "authorizationServicesEnabled"
+    )
+    direct_grants_only: PropertyRef = PropertyRef("directGrantsOnly")
+    public_client: PropertyRef = PropertyRef("publicClient")
+    frontchannel_logout: PropertyRef = PropertyRef("frontchannelLogout")
+    protocol: PropertyRef = PropertyRef("protocol")
+    full_scope_allowed: PropertyRef = PropertyRef("fullScopeAllowed")
+    node_re_registration_timeout: PropertyRef = PropertyRef("nodeReRegistrationTimeout")
+    client_template: PropertyRef = PropertyRef("clientTemplate")
+    use_template_config: PropertyRef = PropertyRef("useTemplateConfig")
+    use_template_scope: PropertyRef = PropertyRef("useTemplateScope")
+    use_template_mappers: PropertyRef = PropertyRef("useTemplateMappers")
+    origin: PropertyRef = PropertyRef("origin")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakClientToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakClientToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakClientToRealmRelProperties = (
+        KeycloakClientToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakClientToDefaultScopeRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)-[:HAS_DEFAULT_SCOPE]->(:KeycloakScope)
+class KeycloakClientToDefaultScopeRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakScope"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "name": PropertyRef("defaultClientScopes", one_to_many=True),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "HAS_DEFAULT_SCOPE"
+    properties: KeycloakClientToDefaultScopeRelProperties = (
+        KeycloakClientToDefaultScopeRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakClientToOptionalScopeRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)-[:HAS_OPTIONAL_SCOPE]->(:KeycloakScope)
+class KeycloakClientToOptionalScopeRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakScope"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "name": PropertyRef("optionalClientScopes", one_to_many=True),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "HAS_OPTIONAL_SCOPE"
+    properties: KeycloakClientToOptionalScopeRelProperties = (
+        KeycloakClientToOptionalScopeRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakClientToServiceAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)-[:HAS_SERVICE_ACCOUNT]->(:KeycloakUser)
+class KeycloakClientToServiceAccountRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_service_account_user_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "HAS_SERVICE_ACCOUNT"
+    properties: KeycloakClientToServiceAccountRelProperties = (
+        KeycloakClientToServiceAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakClientSchema(CartographyNodeSchema):
+    label: str = "KeycloakClient"
+    properties: KeycloakClientNodeProperties = KeycloakClientNodeProperties()
+    sub_resource_relationship: KeycloakClientToRealmRel = KeycloakClientToRealmRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            KeycloakClientToDefaultScopeRel(),
+            KeycloakClientToOptionalScopeRel(),
+            KeycloakClientToServiceAccountRel(),
+        ]
+    )
+
+
+# The following relationships are MatchLinks to enable batch loading with rel properties
+@dataclass(frozen=True)
+class KeycloakClientToFlowRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    flow_name: PropertyRef = PropertyRef("flow_name")
+    default_flow: PropertyRef = PropertyRef("default_flow")
+    # Mandatory fields for MatchLinks
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakClient)-[:USES]->(:KeycloakAuthenticationFlow)
+class KeycloakClientToFlowMatchLink(CartographyRelSchema):
+    source_node_label: str = "KeycloakClient"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("client_id")},
+    )
+    target_node_label: str = "KeycloakAuthenticationFlow"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("flow_id")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "USES"
+    properties: KeycloakClientToFlowRelProperties = KeycloakClientToFlowRelProperties()

cartography/models/keycloak/group.py

@@ -0,0 +1,101 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakGroupNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    description: PropertyRef = PropertyRef("description")
+    path: PropertyRef = PropertyRef("path")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakGroupToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakGroup)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakGroupToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakGroupToRealmRelProperties = KeycloakGroupToRealmRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakGroupToGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakGroup)-[:SUBGROUP_OF]->(:KeycloakGroup)
+class KeycloakGroupToGroupRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("parentId")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "SUBGROUP_OF"
+    properties: KeycloakGroupToGroupRelProperties = KeycloakGroupToGroupRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakGroupToUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakGroup)<-[:MEMBER_OF]-(:KeycloakUser)
+class KeycloakGroupToUserRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_member_ids", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_OF"
+    properties: KeycloakGroupToUserRelProperties = KeycloakGroupToUserRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakGroupToRoleRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakGroup)-[:GRANTS]->(:KeycloakRole)
+class KeycloakGroupToRoleRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRole"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "name": PropertyRef("_roles", one_to_many=True),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "GRANTS"
+    properties: KeycloakGroupToRoleRelProperties = KeycloakGroupToRoleRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakGroupSchema(CartographyNodeSchema):
+    label: str = "KeycloakGroup"
+    properties: KeycloakGroupNodeProperties = KeycloakGroupNodeProperties()
+    sub_resource_relationship: KeycloakGroupToRealmRel = KeycloakGroupToRealmRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [KeycloakGroupToGroupRel(), KeycloakGroupToUserRel(), KeycloakGroupToRoleRel()]
+    )

cartography/models/keycloak/identityprovider.py

@@ -0,0 +1,89 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakIdentityProviderNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("internalId")
+    alias: PropertyRef = PropertyRef("alias", extra_index=True)
+    display_name: PropertyRef = PropertyRef("displayName")
+    provider_id: PropertyRef = PropertyRef("providerId")
+    enabled: PropertyRef = PropertyRef("enabled")
+    update_profile_first_login_mode: PropertyRef = PropertyRef(
+        "updateProfileFirstLoginMode"
+    )
+    trust_email: PropertyRef = PropertyRef("trustEmail")
+    store_token: PropertyRef = PropertyRef("storeToken")
+    add_read_token_role_on_create: PropertyRef = PropertyRef("addReadTokenRoleOnCreate")
+    authenticate_by_default: PropertyRef = PropertyRef("authenticateByDefault")
+    link_only: PropertyRef = PropertyRef("linkOnly")
+    hide_on_login: PropertyRef = PropertyRef("hideOnLogin")
+    first_broker_login_flow_alias: PropertyRef = PropertyRef(
+        "firstBrokerLoginFlowAlias"
+    )
+    post_broker_login_flow_alias: PropertyRef = PropertyRef("postBrokerLoginFlowAlias")
+    organization_id: PropertyRef = PropertyRef("organizationId")
+    update_profile_first_login: PropertyRef = PropertyRef("updateProfileFirstLogin")
+    config_sync_mode: PropertyRef = PropertyRef("config.syncMode")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakIdentityProviderToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakIdentityProvider)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakIdentityProviderToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakIdentityProviderToRealmRelProperties = (
+        KeycloakIdentityProviderToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakIdentityProviderToUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakIdentityProvider)<-[:HAS_IDENTITY]-(:KeycloakUser)
+class KeycloakIdentityProviderToUserRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_member_ids", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_IDENTITY"
+    properties: KeycloakIdentityProviderToUserRelProperties = (
+        KeycloakIdentityProviderToUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakIdentityProviderSchema(CartographyNodeSchema):
+    label: str = "KeycloakIdentityProvider"
+    properties: KeycloakIdentityProviderNodeProperties = (
+        KeycloakIdentityProviderNodeProperties()
+    )
+    sub_resource_relationship: KeycloakIdentityProviderToRealmRel = (
+        KeycloakIdentityProviderToRealmRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [KeycloakIdentityProviderToUserRel()],
+    )