Skip to content

[ DSD-1246 ] added method to create mappers for keycloak client #17

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ckm007 merged 2 commits into from
Jul 18, 2022
Merged

[ DSD-1246 ] added method to create mappers for keycloak client #17

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
da52aa3
[ DSD-1246 ] added method to create mappers for keycloak client
Jul 18, 2022
6afd47d
[ DSD-1246 ] removed commented print statement
Jul 18, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 39 additions & 1 deletion keycloak-init/keycloak_init.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@
import yaml
import traceback
from keycloak import KeycloakAdmin
from keycloak.exceptions import raise_error_from_response, KeycloakError
from keycloak.exceptions import raise_error_from_response, KeycloakError, KeycloakGetError
from keycloak.connection import ConnectionManager
from keycloak.urls_patterns import URL_ADMIN_USER_REALM_ROLES

Expand Down Expand Up @@ -95,6 +95,38 @@ def create_client(self, realm, client, secret, sa_roles=None):

self.keycloak_admin.realm_name = 'master' # restore

def create_mapper(self, realm, client, mapper, skip_exists=False):
self.keycloak_admin.realm_name = realm # work around because otherwise client was getting created in master
client_id = self.keycloak_admin.get_client_id(client)
mapper_url = 'admin/realms/'+realm+'/clients/'+client_id+'/protocol-mappers/models'
payload = {
"protocol":"openid-connect",
"config": {
"id.token.claim":"true",
"access.token.claim":"true",
"userinfo.token.claim":"true",
"multivalued":"",
"aggregate.attrs":"",
"user.attribute":mapper['mapper_user_attribute'],
"claim.name":mapper['token_claim_name'],
"jsonType.label":"String"
},
"name":mapper['mapper_name'],
"protocolMapper":"oidc-usermodel-attribute-mapper"
}
try:
print('\tCreating Mapper %s' % mapper['mapper_name'])
data_raw = self.keycloak_admin.connection.raw_post(mapper_url, data=json.dumps(payload))
return raise_error_from_response(data_raw, KeycloakGetError, skip_exists=skip_exists)

except KeycloakError as e:
if e.response_code == 409:
print('\tMapper %s Exists already exists; SKIPPING;' % mapper['mapper_name'])

except:
self.keycloak_admin.realm_name = 'master' # restore
raise

def create_user(self, realm, uname, email, fname, lname, password, temp_flag):
self.keycloak_admin.realm_name = realm
payload = {
Expand Down Expand Up @@ -185,6 +217,12 @@ def main():
print('Secret environment variable %s not found, generating' % secret_env_name)
secret = secrets.token_urlsafe(16)
r = ks.create_client(realm, client['name'], secret, client['saroles'])

if 'mappers' in client:
mappers = client['mappers']
print("Creating mappers for %s client " % client['name'])
for mapper in mappers:
r = ks.create_mapper(realm, client['name'], mapper)

users = values[realm]['users']
for user in users:
Expand Down