java 登陆 注册 角色_java – 如何以编程方式创建keycloak客户端角色并分配给用户...

这是您的请求的解决方案(不是很漂亮,但它的工作原理)：

// Get keycloak client

Keycloak kc = Keycloak.getInstance("http://localhost:8080/auth",

"master", "admin", "admin", "admin-cli");

// Create the role

RoleRepresentation clientRoleRepresentation = new RoleRepresentation();

clientRoleRepresentation.setName("client_role");

clientRoleRepresentation.setClientRole(true);

kc.realm("RealmID").clients().findByClientId("ClientID").forEach(clientRepresentation ->

kc.realm("RealmID").clients().get(clientRepresentation.getId()).roles().create(clientRoleRepresentation)

);

// Create the user

UserRepresentation user = new UserRepresentation();

user.setUsername("test");

user.setEnabled(true);

Response response = kc.realm("RealmID").users().create(user);

String userId = getCreatedId(response);

// Assign role to the user

kc.realm("RealmID").clients().findByClientId("ClientID").forEach(clientRepresentation -> {

RoleRepresentation savedRoleRepresentation = kc.realm("RealmID").clients()

.get(clientRepresentation.getId()).roles().get("client_role").toRepresentation();

kc.realm("RealmID").users().get(userId).roles().clientLevel(clientRepresentation.getId())

.add(asList(savedRoleRepresentation));

});

// Update credentials to make sure, that the user can log in

UserResource userResource = kc.realm("RealmID").users().get(userId);

userResource.resetPassword(credential);

使用帮助方法：

private String getCreatedId(Response response) {

URI location = response.getLocation();

if (!response.getStatusInfo().equals(Response.Status.CREATED)) {

Response.StatusType statusInfo = response.getStatusInfo();

throw new WebApplicationException("Create method returned status " +

statusInfo.getReasonPhrase() + " (Code: " + statusInfo.getStatusCode() + "); expected status: Created (201)", response);

}

if (location == null) {

return null;

}

String path = location.getPath();

return path.substring(path.lastIndexOf('/') + 1);

}