package org.keycloak.protocol.cas.mappers; import org.keycloak.models.*; import org.keycloak.models.utils.KeycloakModelUtils; import org.keycloak.protocol.ProtocolMapperUtils; import org.keycloak.protocol.oidc.mappers.OIDCAttributeMapperHelper; import org.keycloak.provider.ProviderConfigProperty; import java.util.ArrayList; import java.util.Collection; import java.util.List; import java.util.Map; public class UserAttributeMapper extends AbstractCASProtocolMapper { private static final List configProperties = new ArrayList(); static { ProviderConfigProperty property; property = new ProviderConfigProperty(); property.setName(ProtocolMapperUtils.USER_ATTRIBUTE); property.setLabel(ProtocolMapperUtils.USER_MODEL_ATTRIBUTE_LABEL); property.setHelpText(ProtocolMapperUtils.USER_MODEL_ATTRIBUTE_HELP_TEXT); property.setType(ProviderConfigProperty.STRING_TYPE); configProperties.add(property); OIDCAttributeMapperHelper.addTokenClaimNameConfig(configProperties); OIDCAttributeMapperHelper.addJsonTypeConfig(configProperties); property = new ProviderConfigProperty(); property.setName(ProtocolMapperUtils.MULTIVALUED); property.setLabel(ProtocolMapperUtils.MULTIVALUED_LABEL); property.setHelpText(ProtocolMapperUtils.MULTIVALUED_HELP_TEXT); property.setType(ProviderConfigProperty.BOOLEAN_TYPE); configProperties.add(property); property = new ProviderConfigProperty(); property.setName(ProtocolMapperUtils.AGGREGATE_ATTRS); property.setLabel(ProtocolMapperUtils.AGGREGATE_ATTRS_LABEL); property.setHelpText(ProtocolMapperUtils.AGGREGATE_ATTRS_HELP_TEXT); property.setType(ProviderConfigProperty.BOOLEAN_TYPE); configProperties.add(property); } public static final String PROVIDER_ID = "cas-usermodel-attribute-mapper"; @Override public List getConfigProperties() { return configProperties; } @Override public String getId() { return PROVIDER_ID; } @Override public String getDisplayType() { return "User Attribute"; } @Override public String getHelpText() { return "Map a custom user attribute to a token claim."; } @Override public void setAttribute(Map attributes, ProtocolMapperModel mappingModel, UserSessionModel userSession, KeycloakSession session, ClientSessionContext clientSessionCt) { UserModel user = userSession.getUser(); String attributeName = mappingModel.getConfig().get(ProtocolMapperUtils.USER_ATTRIBUTE); boolean aggregateAttrs = Boolean.valueOf(mappingModel.getConfig().get(ProtocolMapperUtils.AGGREGATE_ATTRS)); Collection attributeValue = KeycloakModelUtils.resolveAttribute(user, attributeName, aggregateAttrs); setMappedAttribute(attributes, mappingModel, attributeValue); } public static ProtocolMapperModel create(String name, String userAttribute, String tokenClaimName, String claimType, boolean multivalued) { return create(name, userAttribute, tokenClaimName, claimType, multivalued, false); } public static ProtocolMapperModel create(String name, String userAttribute, String tokenClaimName, String claimType, boolean multivalued, boolean aggregateAttrs) { ProtocolMapperModel mapper = CASAttributeMapperHelper.createClaimMapper(name, tokenClaimName, claimType, PROVIDER_ID); mapper.getConfig().put(ProtocolMapperUtils.USER_ATTRIBUTE, userAttribute); if (multivalued) { mapper.getConfig().put(ProtocolMapperUtils.MULTIVALUED, "true"); } if (aggregateAttrs) { mapper.getConfig().put(ProtocolMapperUtils.AGGREGATE_ATTRS, "true"); } return mapper; } }