mirror of https://github.com/jacekkow/keycloak-protocol-cas

Matthias Piepkorn
2018-11-16 89e3d757b9f6893d16e5c3e49fc407aa1a003931
commit | author | age
0ad1a9 1 package org.keycloak.protocol.cas.mappers;
MP 2
89e3d7 3 import org.keycloak.models.ClientSessionContext;
MP 4 import org.keycloak.models.KeycloakSession;
0ad1a9 5 import org.keycloak.models.ProtocolMapperModel;
MP 6 import org.keycloak.models.UserSessionModel;
7 import org.keycloak.protocol.ProtocolMapperUtils;
8 import org.keycloak.protocol.oidc.mappers.OIDCAttributeMapperHelper;
9 import org.keycloak.provider.ProviderConfigProperty;
89e3d7 10 import org.keycloak.representations.AccessToken;
MP 11 import org.keycloak.utils.RoleResolveUtil;
0ad1a9 12
MP 13 import java.util.ArrayList;
14 import java.util.List;
15 import java.util.Map;
16
17 public class UserRealmRoleMappingMapper extends AbstractUserRoleMappingMapper {
18     public static final String PROVIDER_ID = "cas-usermodel-realm-role-mapper";
19
20     private static final List<ProviderConfigProperty> CONFIG_PROPERTIES = new ArrayList<>();
21
22     static {
23
24         ProviderConfigProperty realmRolePrefix = new ProviderConfigProperty();
25         realmRolePrefix.setName(ProtocolMapperUtils.USER_MODEL_REALM_ROLE_MAPPING_ROLE_PREFIX);
26         realmRolePrefix.setLabel(ProtocolMapperUtils.USER_MODEL_REALM_ROLE_MAPPING_ROLE_PREFIX_LABEL);
27         realmRolePrefix.setHelpText(ProtocolMapperUtils.USER_MODEL_REALM_ROLE_MAPPING_ROLE_PREFIX_HELP_TEXT);
28         realmRolePrefix.setType(ProviderConfigProperty.STRING_TYPE);
29         CONFIG_PROPERTIES.add(realmRolePrefix);
30
31         OIDCAttributeMapperHelper.addTokenClaimNameConfig(CONFIG_PROPERTIES);
32     }
33
34     @Override
35     public List<ProviderConfigProperty> getConfigProperties() {
36         return CONFIG_PROPERTIES;
37     }
38
39     @Override
40     public String getId() {
41         return PROVIDER_ID;
42     }
43
44     @Override
45     public String getDisplayType() {
46         return "User Realm Role";
47     }
48
49     @Override
50     public String getDisplayCategory() {
51         return TOKEN_MAPPER_CATEGORY;
52     }
53
54     @Override
55     public String getHelpText() {
56         return "Map a user realm role to a token claim.";
57     }
58
59     @Override
89e3d7 60     public void setAttribute(Map<String, Object> attributes, ProtocolMapperModel mappingModel, UserSessionModel userSession,
MP 61                              KeycloakSession session, ClientSessionContext clientSessionCtx) {
0ad1a9 62         String rolePrefix = mappingModel.getConfig().get(ProtocolMapperUtils.USER_MODEL_REALM_ROLE_MAPPING_ROLE_PREFIX);
89e3d7 63
MP 64         AccessToken.Access access = RoleResolveUtil.getResolvedRealmRoles(session, clientSessionCtx, false);
65         if (access == null) {
66             return;
67         }
68
69         setAttribute(attributes, mappingModel, access.getRoles(), rolePrefix);
0ad1a9 70     }
MP 71
72     public static ProtocolMapperModel create(String realmRolePrefix, String name, String tokenClaimName) {
73         ProtocolMapperModel mapper = CASAttributeMapperHelper.createClaimMapper(name, tokenClaimName,
b8d686 74                 "String", PROVIDER_ID);
0ad1a9 75         mapper.getConfig().put(ProtocolMapperUtils.USER_MODEL_REALM_ROLE_MAPPING_ROLE_PREFIX, realmRolePrefix);
MP 76         return mapper;
77     }
78 }