目前我尝试使用 Keycloak API 和 Java 客户端。目前,我很难以编程方式将角色分配给组。不幸的是,此时文档还不是很详细。
这是我的示例代码:
@Test
public void testPushGroupWithRealmRoles() throws IOException {
GroupRepresentation group = new GroupRepresentation();
group.setName("JUnit Test Group realm roles");
String editRoleName = "junit_edit";
String deleteRoleName = "junit_delete";
RoleRepresentation editRole = getRealmRole(editRoleName);
if (editRole == null) {
editRole = new RoleRepresentation(editRoleName, "is allowed to edit", false);
getKeycloak().realm(clientConfig.getRealm()).roles().create(editRole);
}
RoleRepresentation deleteRole = getRealmRole(deleteRoleName);
if (deleteRole == null) {
deleteRole = new RoleRepresentation(deleteRoleName, "is allowed to delete", false);
getKeycloak().realm(clientConfig.getRealm()).roles().create(deleteRole);
}
group.setRealmRoles(Arrays.asList(editRole.getName(), deleteRole.getName()));
GroupResource existingGroup = getGroupRepresentation(group.getName());
if(existingGroup != null){
existingGroup.update(group);
} else{
getKeycloak().realm(clientConfig.getRealm()).groups().add(group);
}
}
如果不存在则创建组,如果不存在则创建角色但分配
group.setRealmRoles(Arrays.asList(editRole.getName(), deleteRole.getName()));
需要在字符串列表中作为参数给出什么?角色名称?角色的技术 ID?(两者都不适合我)。
任何帮助表示赞赏!
更新 感谢 ravthiru,我能够解决我的问题。工作代码是这样的:
@Test
public void testPushGroupWithRealmRoles() throws IOException {
/*
ensure the roles exist
*/
String editRoleName = "junit_edit";
String deleteRoleName = "junit_delete";
RoleRepresentation editRole = getRealmRole(editRoleName);
if (editRole == null) {
editRole = new RoleRepresentation(editRoleName, "is allowed to edit", false);
getKeycloak().realm(clientConfig.getRealm()).roles().create(editRole);
}
RoleRepresentation deleteRole = getRealmRole(deleteRoleName);
if (deleteRole == null) {
deleteRole = new RoleRepresentation(deleteRoleName, "is allowed to delete", false);
getKeycloak().realm(clientConfig.getRealm()).roles().create(deleteRole);
}
/*
ensure the group exists
*/
GroupRepresentation group = new GroupRepresentation();
group.setName("JUnit Test Group realm roles");
GroupResource existingGroup = getGroupResource(group.getName());
if (existingGroup != null) {
existingGroup.update(group);
} else {
getKeycloak().realm(clientConfig.getRealm()).groups().add(group);
}
/*
assign roles to group
*/
existingGroup.roles().realmLevel().add(Arrays.asList(editRole, deleteRole));
}