libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases Packages Activity Actions

KEYCLOAK-16330 Expose ActionTokenLifespans in RealmBean to freemarker login themes

Browse source
This commit is contained in:
Thomas Darimont 2020-11-13 23:33:14 +01:00 committed by Hynek Mlnařík
parent 70a20ef50d
commit 42c47c1732
2 changed files with 81 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

35
services/src/main/java/org/keycloak/forms/login/freemarker/model/RealmBean.java
View file

@ -16,10 +16,14 @@
*/
package org.keycloak.forms.login.freemarker.model;
import org.keycloak.authentication.actiontoken.idpverifyemail.IdpVerifyAccountLinkActionToken;
import org.keycloak.authentication.actiontoken.resetcred.ResetCredentialsActionToken;
import org.keycloak.authentication.actiontoken.verifyemail.VerifyEmailActionToken;
import org.keycloak.models.RealmModel;
import org.keycloak.representations.idm.CredentialRepresentation;
import java.util.Objects;
import java.util.concurrent.TimeUnit;
/**
* @author <a href="mailto:sthorger@redhat.com">Stian Thorgersen</a>
@ -91,4 +95,35 @@ public class RealmBean {
.anyMatch(r -> Objects.equals(r.getType(), CredentialRepresentation.PASSWORD));
}
/**
* Returns the lifespan for action tokens generated by users in minutes.
* @return
*/
public int getActionTokenGeneratedByUserLifespanMinutes() {
return (int)TimeUnit.SECONDS.toMinutes(realm.getActionTokenGeneratedByUserLifespan());
}
/**
* Returns the lifespan for {@link VerifyEmailActionToken} in minutes.
* @return
*/
public int getVerifyEmailActionTokenLifespanMinutes() {
return (int)TimeUnit.SECONDS.toMinutes(realm.getActionTokenGeneratedByUserLifespan(VerifyEmailActionToken.TOKEN_TYPE));
}
/**
* Returns the lifespan for {@link ResetCredentialsActionToken} in minutes.
* @return
*/
public int getResetCredentialsActionTokenLifespanMinutes() {
return (int)TimeUnit.SECONDS.toMinutes(realm.getActionTokenGeneratedByUserLifespan(ResetCredentialsActionToken.TOKEN_TYPE));
}
/**
* Returns the lifespan for {@link IdpVerifyAccountLinkActionToken} in minutes.
* @return
*/
public int getIdpVerifyAccountLinkActionTokenLifespanMinutes() {
return (int)TimeUnit.SECONDS.toMinutes(realm.getActionTokenGeneratedByUserLifespan(IdpVerifyAccountLinkActionToken.TOKEN_TYPE));
}
}

46
services/src/test/java/org/keycloak/forms/login/freemarker/model/LoginRealmBeanTest.java Normal file
View file

@ -0,0 +1,46 @@
/*
* Copyright 2020 Red Hat, Inc. and/or its affiliates
* and other contributors as indicated by the @author tags.
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
package org.keycloak.forms.login.freemarker.model;
import org.junit.Assert;
import org.junit.Test;
import org.keycloak.models.RealmModel;
import java.lang.reflect.Proxy;
public class LoginRealmBeanTest {
@Test
public void exposeActionTokenLifespansInMinutesTest() {
RealmModel realmModel = (RealmModel) Proxy.newProxyInstance(LoginRealmBeanTest.class.getClassLoader(), new Class[]{RealmModel.class}, (proxy, method, args) -> {
if (method.getName().matches("getActionTokenGeneratedByUserLifespan|getIdpVerifyAccountLinkActionTokenLifespan|getResetCredentialsActionTokenLifespan|getVerifyEmailActionTokenLifespan")) {
return 300;
}
return null;
});
RealmBean realmBean = new RealmBean(realmModel);
Assert.assertEquals(5, realmBean.getActionTokenGeneratedByUserLifespanMinutes());
Assert.assertEquals(5, realmBean.getIdpVerifyAccountLinkActionTokenLifespanMinutes());
Assert.assertEquals(5, realmBean.getResetCredentialsActionTokenLifespanMinutes());
Assert.assertEquals(5, realmBean.getVerifyEmailActionTokenLifespanMinutes());
}
}