2016-06-23 12:57:39 +00:00
|
|
|
{
|
|
|
|
|
"realm": "test-realm",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"accessTokenLifespan": 6000,
|
|
|
|
|
"accessTokenLifespanForImplicitFlow": 1500,
|
|
|
|
|
"accessCodeLifespan": 30,
|
|
|
|
|
"accessCodeLifespanUserAction": 600,
|
|
|
|
|
"offlineSessionIdleTimeout": 3600000,
|
|
|
|
|
"requiredCredentials": [ "password" ],
|
|
|
|
|
"defaultRoles": [ "foo", "bar" ],
|
|
|
|
|
"verifyEmail" : "true",
|
|
|
|
|
"smtpServer": {
|
|
|
|
|
"from": "auto@keycloak.org",
|
|
|
|
|
"host": "localhost",
|
|
|
|
|
"port":"3025"
|
|
|
|
|
},
|
|
|
|
|
"identityProviders" : [
|
|
|
|
|
{
|
|
|
|
|
"providerId" : "google",
|
|
|
|
|
"alias" : "google1",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"config": {
|
|
|
|
|
"clientId": "googleId",
|
|
|
|
|
"clientSecret": "googleSecret"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"providerId" : "facebook",
|
|
|
|
|
"alias" : "facebook1",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"config": {
|
|
|
|
|
"clientId": "facebookId",
|
|
|
|
|
"clientSecret": "facebookSecret"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"providerId" : "twitter",
|
|
|
|
|
"alias" : "twitter1",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"config": {
|
|
|
|
|
"clientId": "twitterId",
|
|
|
|
|
"clientSecret": "twitterSecret"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"userFederationProviders": [
|
|
|
|
|
{
|
|
|
|
|
"displayName": "MyLDAPProvider1",
|
|
|
|
|
"providerName": "ldap",
|
|
|
|
|
"priority": 1,
|
|
|
|
|
"config": {
|
|
|
|
|
"connectionUrl": "ldap://foo"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"displayName": "MyLDAPProvider2",
|
|
|
|
|
"providerName": "ldap",
|
|
|
|
|
"priority": 2,
|
|
|
|
|
"config": {
|
|
|
|
|
"connectionUrl": "ldap://bar"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"userFederationMappers": [
|
|
|
|
|
{
|
|
|
|
|
"name": "FullNameMapper",
|
|
|
|
|
"federationProviderDisplayName": "MyLDAPProvider1",
|
|
|
|
|
"federationMapperType": "full-name-ldap-mapper",
|
|
|
|
|
"config": {
|
|
|
|
|
"ldap.full.name.attribute": "cn"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"users": [
|
|
|
|
|
{
|
|
|
|
|
"username": "wburke",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"createdTimestamp" : 123654,
|
|
|
|
|
"attributes": {
|
|
|
|
|
"email": "bburke@redhat.com"
|
|
|
|
|
},
|
|
|
|
|
"credentials": [
|
|
|
|
|
{
|
|
|
|
|
"type": "password",
|
|
|
|
|
"value": "userpassword"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"applicationRoles": {
|
|
|
|
|
"Application": [ "app-user" ],
|
|
|
|
|
"OtherApp": [ "otherapp-user" ]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"username": "loginclient",
|
|
|
|
|
"createdTimestamp" : "123655",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"credentials": [
|
|
|
|
|
{
|
|
|
|
|
"type": "password",
|
|
|
|
|
"value": "clientpassword"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"username": "admin",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"attributes": {
|
|
|
|
|
"key1": [
|
|
|
|
|
"val1"
|
|
|
|
|
],
|
|
|
|
|
"key2": [
|
|
|
|
|
"val21",
|
|
|
|
|
"val22"
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"credentials": [
|
|
|
|
|
{
|
|
|
|
|
"type": "password",
|
|
|
|
|
"value": "adminpassword"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"realmRoles": [ "admin" ],
|
|
|
|
|
"applicationRoles": {
|
|
|
|
|
"Application": [ "app-admin" ],
|
|
|
|
|
"OtherApp": [ "otherapp-admin" ]
|
|
|
|
|
},
|
|
|
|
|
"clientConsents": [
|
|
|
|
|
{
|
|
|
|
|
"clientId": "Application",
|
|
|
|
|
"grantedRealmRoles": [ "admin" ],
|
|
|
|
|
"grantedClientRoles": {
|
|
|
|
|
"Application": [ "app-admin" ]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"clientId": "OtherApp",
|
|
|
|
|
"grantedRealmRoles": [ "admin" ],
|
|
|
|
|
"grantedProtocolMappers": {
|
|
|
|
|
"openid-connect": [ "gss delegation credential" ]
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"username": "mySocialUser",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"federatedIdentities": [
|
|
|
|
|
{
|
|
|
|
|
"identityProvider": "facebook1",
|
|
|
|
|
"userId": "facebook1",
|
|
|
|
|
"userName": "fbuser1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"identityProvider": "twitter1",
|
|
|
|
|
"userId": "twitter1",
|
|
|
|
|
"userName": "twuser1"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"identityProvider": "google1",
|
|
|
|
|
"userId": "google1",
|
|
|
|
|
"userName": "mySocialUser@gmail.com"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"username": "my-service-user",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"serviceAccountClientId": "OtherApp"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"clients": [
|
|
|
|
|
{
|
|
|
|
|
"clientId": "Application",
|
|
|
|
|
"name": "Applicationn",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"implicitFlowEnabled": true,
|
|
|
|
|
"directAccessGrantsEnabled": true,
|
|
|
|
|
"nodeReRegistrationTimeout": 50,
|
|
|
|
|
"registeredNodes": {
|
|
|
|
|
"node1": 10,
|
|
|
|
|
"172.10.15.20": 20
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"clientId": "OtherApp",
|
|
|
|
|
"name": "Other Application",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"standardFlowEnabled": false,
|
|
|
|
|
"directAccessGrantsEnabled": false,
|
|
|
|
|
"serviceAccountsEnabled": true,
|
|
|
|
|
"clientAuthenticatorType": "client-jwt",
|
|
|
|
|
"protocolMappers" : [
|
|
|
|
|
{
|
|
|
|
|
"name" : "gss delegation credential",
|
|
|
|
|
"protocol" : "openid-connect",
|
|
|
|
|
"protocolMapper" : "oidc-usersessionmodel-note-mapper",
|
|
|
|
|
"consentRequired" : true,
|
|
|
|
|
"consentText" : "gss delegation credential",
|
|
|
|
|
"config" : {
|
|
|
|
|
"user.session.note" : "gss_delegation_credential",
|
|
|
|
|
"access.token.claim" : "true",
|
|
|
|
|
"claim.name" : "gss_delegation_credential",
|
|
|
|
|
"Claim JSON Type" : "String"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
2016-08-15 13:35:28 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"clientId": "test-app-authz",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"baseUrl": "/test-app-authz",
|
|
|
|
|
"adminUrl": "/test-app-authz",
|
|
|
|
|
"bearerOnly": false,
|
|
|
|
|
"authorizationSettings": {
|
|
|
|
|
"allowRemoteResourceManagement": true,
|
|
|
|
|
"policyEnforcementMode": "ENFORCING",
|
|
|
|
|
"resources": [
|
|
|
|
|
{
|
|
|
|
|
"name": "Admin Resource",
|
|
|
|
|
"uri": "/protected/admin/*",
|
|
|
|
|
"type": "http://test-app-authz/protected/admin",
|
|
|
|
|
"icon_uri" : "http://icons.com/icon-admin",
|
|
|
|
|
"scopes": [
|
|
|
|
|
{
|
|
|
|
|
"name": "admin-access"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Protected Resource",
|
|
|
|
|
"uri": "/*",
|
|
|
|
|
"type": "http://test-app-authz/protected/resource",
|
|
|
|
|
"icon_uri" : "http://icons.com/icon-resource",
|
|
|
|
|
"scopes": [
|
|
|
|
|
{
|
|
|
|
|
"name": "resource-access"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Premium Resource",
|
|
|
|
|
"uri": "/protected/premium/*",
|
|
|
|
|
"type": "urn:test-app-authz:protected:resource",
|
|
|
|
|
"icon_uri" : "http://icons.com/icon-premium",
|
|
|
|
|
"scopes": [
|
|
|
|
|
{
|
|
|
|
|
"name": "premium-access"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Main Page",
|
|
|
|
|
"type": "urn:test-app-authz:protected:resource",
|
|
|
|
|
"icon_uri" : "http://icons.com/icon-main-page",
|
|
|
|
|
"scopes": [
|
|
|
|
|
{
|
|
|
|
|
"name": "urn:test-app-authz:page:main:actionForAdmin"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "urn:test-app-authz:page:main:actionForUser"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "urn:test-app-authz:page:main:actionForPremiumUser"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"policies": [
|
|
|
|
|
{
|
|
|
|
|
"name": "Any Admin Policy",
|
|
|
|
|
"description": "Defines that adminsitrators can do something",
|
|
|
|
|
"type": "role",
|
|
|
|
|
"config": {
|
|
|
|
|
"roles": "[{\"id\":\"admin\"}]"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Any User Policy",
|
|
|
|
|
"description": "Defines that any user can do something",
|
|
|
|
|
"type": "role",
|
|
|
|
|
"config": {
|
|
|
|
|
"roles": "[{\"id\":\"user\"}]"
|
|
|
|
|
}
|
|
|
|
|
},
|
2017-06-02 23:09:33 +00:00
|
|
|
{
|
|
|
|
|
"name": "Client and Realm Role Policy",
|
|
|
|
|
"type": "role",
|
|
|
|
|
"config": {
|
|
|
|
|
"roles": "[{\"id\":\"realm-management/impersonation\",\"required\":false},{\"id\":\"realm-management/manage-authorization\",\"required\":true},{\"id\":\"user\",\"required\":false}]"
|
|
|
|
|
}
|
|
|
|
|
},
|
2016-08-15 13:35:28 +00:00
|
|
|
{
|
|
|
|
|
"name": "Only Premium User Policy",
|
|
|
|
|
"description": "Defines that only premium users can do something",
|
|
|
|
|
"type": "role",
|
|
|
|
|
"logic": "POSITIVE",
|
|
|
|
|
"config": {
|
|
|
|
|
"roles": "[{\"id\":\"customer-user-premium\"}]"
|
|
|
|
|
}
|
|
|
|
|
},
|
2017-01-24 20:57:35 +00:00
|
|
|
{
|
|
|
|
|
"name": "wburke policy",
|
|
|
|
|
"description": "Defines that only wburke can do something",
|
|
|
|
|
"type": "user",
|
|
|
|
|
"logic": "POSITIVE",
|
|
|
|
|
"config": {
|
|
|
|
|
"users" : "[\"wburke\"]"
|
|
|
|
|
}
|
|
|
|
|
},
|
2016-08-15 13:35:28 +00:00
|
|
|
{
|
|
|
|
|
"name": "All Users Policy",
|
|
|
|
|
"description": "Defines that all users can do something",
|
|
|
|
|
"type": "aggregate",
|
|
|
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
|
|
|
"config": {
|
|
|
|
|
"applyPolicies": "[\"Any User Policy\",\"Any Admin Policy\",\"Only Premium User Policy\"]"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Premium Resource Permission",
|
|
|
|
|
"description": "A policy that defines access to premium resources",
|
|
|
|
|
"type": "resource",
|
|
|
|
|
"decisionStrategy": "UNANIMOUS",
|
|
|
|
|
"config": {
|
|
|
|
|
"resources": "[\"Premium Resource\"]",
|
|
|
|
|
"applyPolicies": "[\"Only Premium User Policy\"]"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Administrative Resource Permission",
|
|
|
|
|
"description": "A policy that defines access to administrative resources",
|
|
|
|
|
"type": "resource",
|
|
|
|
|
"decisionStrategy": "UNANIMOUS",
|
|
|
|
|
"config": {
|
|
|
|
|
"resources": "[\"Admin Resource\"]",
|
|
|
|
|
"applyPolicies": "[\"Any Admin Policy\"]"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Protected Resource Permission",
|
|
|
|
|
"description": "A policy that defines access to any protected resource",
|
|
|
|
|
"type": "resource",
|
|
|
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
|
|
|
"config": {
|
|
|
|
|
"resources": "[\"Protected Resource\"]",
|
|
|
|
|
"applyPolicies": "[\"All Users Policy\"]"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Action 1 on Main Page Resource Permission",
|
|
|
|
|
"description": "A policy that defines access to action 1 on the main page",
|
|
|
|
|
"type": "scope",
|
|
|
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
|
|
|
"config": {
|
|
|
|
|
"scopes": "[\"urn:test-app-authz:page:main:actionForAdmin\"]",
|
|
|
|
|
"applyPolicies": "[\"Any Admin Policy\"]"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Action 2 on Main Page Resource Permission",
|
|
|
|
|
"description": "A policy that defines access to action 2 on the main page",
|
|
|
|
|
"type": "scope",
|
|
|
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
|
|
|
"config": {
|
|
|
|
|
"scopes": "[\"urn:test-app-authz:page:main:actionForUser\"]",
|
|
|
|
|
"applyPolicies": "[\"Any User Policy\"]"
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "Action 3 on Main Page Resource Permission",
|
|
|
|
|
"description": "A policy that defines access to action 3 on the main page",
|
|
|
|
|
"type": "scope",
|
|
|
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
|
|
|
"config": {
|
|
|
|
|
"scopes": "[\"urn:test-app-authz:page:main:actionForPremiumUser\"]",
|
|
|
|
|
"applyPolicies": "[\"Only Premium User Policy\"]"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
},
|
|
|
|
|
"redirectUris": [
|
|
|
|
|
"/test-app-authz/*"
|
|
|
|
|
],
|
|
|
|
|
"secret": "secret"
|
2016-06-23 12:57:39 +00:00
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"oauthClients" : [
|
|
|
|
|
{
|
|
|
|
|
"name" : "oauthclient",
|
|
|
|
|
"enabled": true,
|
|
|
|
|
"secret": "clientpassword"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"clientTemplates" : [
|
|
|
|
|
{
|
|
|
|
|
"name" : "foo-template",
|
|
|
|
|
"description" : "foo-template-desc",
|
|
|
|
|
"protocol" : "openid-connect",
|
|
|
|
|
"protocolMappers" : [
|
|
|
|
|
{
|
|
|
|
|
"name" : "gss delegation credential",
|
|
|
|
|
"protocol" : "openid-connect",
|
|
|
|
|
"protocolMapper" : "oidc-usersessionmodel-note-mapper",
|
|
|
|
|
"consentRequired" : true,
|
|
|
|
|
"consentText" : "gss delegation credential",
|
|
|
|
|
"config" : {
|
|
|
|
|
"user.session.note" : "gss_delegation_credential",
|
|
|
|
|
"access.token.claim" : "true",
|
|
|
|
|
"claim.name" : "gss_delegation_credential",
|
|
|
|
|
"Claim JSON Type" : "String"
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"roles" : {
|
|
|
|
|
"realm" : [
|
|
|
|
|
{
|
|
|
|
|
"name": "admin"
|
2016-08-15 13:35:28 +00:00
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "user"
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "customer-user-premium",
|
|
|
|
|
"description": "Have User Premium privileges"
|
2016-06-23 12:57:39 +00:00
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"application" : {
|
|
|
|
|
"Application" : [
|
|
|
|
|
{
|
|
|
|
|
"name": "app-admin",
|
|
|
|
|
"scopeParamRequired": true
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "app-user"
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"OtherApp" : [
|
|
|
|
|
{
|
|
|
|
|
"name": "otherapp-admin",
|
|
|
|
|
"scopeParamRequired": false
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"name": "otherapp-user"
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
}
|
|
|
|
|
},
|
|
|
|
|
"scopeMappings": [
|
|
|
|
|
{
|
|
|
|
|
"client": "oauthclient",
|
|
|
|
|
"roles": ["admin"]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"clientTemplate": "foo-template",
|
|
|
|
|
"roles": ["admin"]
|
|
|
|
|
}
|
|
|
|
|
],
|
|
|
|
|
"applicationScopeMappings": {
|
|
|
|
|
"Application": [
|
|
|
|
|
{
|
|
|
|
|
"client": "oauthclient",
|
|
|
|
|
"roles": ["app-user"]
|
|
|
|
|
},
|
|
|
|
|
{
|
|
|
|
|
"clientTemplate": "foo-template",
|
|
|
|
|
"roles": ["app-user", "app-admin" ]
|
|
|
|
|
}
|
|
|
|
|
]
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
}
|
