KEYCLOAK-16330 Expose ActionTokenLifespans in RealmBean to freemarker login themes

services/src/main/java/org/keycloak/forms/login/freemarker/model/RealmBean.java

@@ -16,10 +16,14 @@
  */
 package org.keycloak.forms.login.freemarker.model;
 
+import org.keycloak.authentication.actiontoken.idpverifyemail.IdpVerifyAccountLinkActionToken;
+import org.keycloak.authentication.actiontoken.resetcred.ResetCredentialsActionToken;
+import org.keycloak.authentication.actiontoken.verifyemail.VerifyEmailActionToken;
 import org.keycloak.models.RealmModel;
 import org.keycloak.representations.idm.CredentialRepresentation;
 
 import java.util.Objects;
+import java.util.concurrent.TimeUnit;
 
 /**
  * @author <a href="mailto:sthorger@redhat.com">Stian Thorgersen</a>
@@ -91,4 +95,35 @@ public class RealmBean {
                 .anyMatch(r -> Objects.equals(r.getType(), CredentialRepresentation.PASSWORD));
     }
 
+    /**
+     * Returns the lifespan for action tokens generated by users in minutes.
+     * @return
+     */
+    public int getActionTokenGeneratedByUserLifespanMinutes() {
+        return (int)TimeUnit.SECONDS.toMinutes(realm.getActionTokenGeneratedByUserLifespan());
+    }
+
+    /**
+     * Returns the lifespan for {@link VerifyEmailActionToken} in minutes.
+     * @return
+     */
+    public int getVerifyEmailActionTokenLifespanMinutes() {
+        return (int)TimeUnit.SECONDS.toMinutes(realm.getActionTokenGeneratedByUserLifespan(VerifyEmailActionToken.TOKEN_TYPE));
+    }
+
+    /**
+     * Returns the lifespan for {@link ResetCredentialsActionToken} in minutes.
+     * @return
+     */
+    public int getResetCredentialsActionTokenLifespanMinutes() {
+        return (int)TimeUnit.SECONDS.toMinutes(realm.getActionTokenGeneratedByUserLifespan(ResetCredentialsActionToken.TOKEN_TYPE));
+    }
+
+    /**
+     * Returns the lifespan for {@link IdpVerifyAccountLinkActionToken} in minutes.
+     * @return
+     */
+    public int getIdpVerifyAccountLinkActionTokenLifespanMinutes() {
+        return (int)TimeUnit.SECONDS.toMinutes(realm.getActionTokenGeneratedByUserLifespan(IdpVerifyAccountLinkActionToken.TOKEN_TYPE));
+    }
 }

services/src/test/java/org/keycloak/forms/login/freemarker/model/LoginRealmBeanTest.java

@@ -0,0 +1,46 @@
+/*
+ * Copyright 2020 Red Hat, Inc. and/or its affiliates
+ * and other contributors as indicated by the @author tags.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package org.keycloak.forms.login.freemarker.model;
+
+import org.junit.Assert;
+import org.junit.Test;
+import org.keycloak.models.RealmModel;
+
+import java.lang.reflect.Proxy;
+
+public class LoginRealmBeanTest {
+
+    @Test
+    public void exposeActionTokenLifespansInMinutesTest() {
+
+        RealmModel realmModel = (RealmModel) Proxy.newProxyInstance(LoginRealmBeanTest.class.getClassLoader(), new Class[]{RealmModel.class}, (proxy, method, args) -> {
+
+            if (method.getName().matches("getActionTokenGeneratedByUserLifespan|getIdpVerifyAccountLinkActionTokenLifespan|getResetCredentialsActionTokenLifespan|getVerifyEmailActionTokenLifespan")) {
+                return 300;
+            }
+
+            return null;
+        });
+        RealmBean realmBean = new RealmBean(realmModel);
+
+        Assert.assertEquals(5, realmBean.getActionTokenGeneratedByUserLifespanMinutes());
+        Assert.assertEquals(5, realmBean.getIdpVerifyAccountLinkActionTokenLifespanMinutes());
+        Assert.assertEquals(5, realmBean.getResetCredentialsActionTokenLifespanMinutes());
+        Assert.assertEquals(5, realmBean.getVerifyEmailActionTokenLifespanMinutes());
+    }
+}