io.phasetwo.service.protocol.oidc.mappers.OrganizationRoleMapper Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of keycloak-orgs Show documentation

There is a newer version: 0.79

package io.phasetwo.service.protocol.oidc.mappers;

import com.google.auto.service.AutoService;
import com.google.common.collect.Lists;
import com.google.common.collect.Maps;
import io.phasetwo.service.model.OrganizationProvider;
import java.util.List;
import java.util.Map;
import lombok.extern.jbosslog.JBossLog;
import org.keycloak.models.KeycloakSession;
import org.keycloak.models.ProtocolMapperModel;
import org.keycloak.models.RealmModel;
import org.keycloak.models.UserModel;
import org.keycloak.protocol.ProtocolMapper;
import org.keycloak.protocol.oidc.mappers.OIDCAttributeMapperHelper;
import org.keycloak.provider.ProviderConfigProperty;

@JBossLog
@AutoService(ProtocolMapper.class)
public class OrganizationRoleMapper extends AbstractOrganizationMapper {

  public static final String PROVIDER_ID = "oidc-organization-role-mapper";

  private static final List configProperties = Lists.newArrayList();

  static {
    OIDCAttributeMapperHelper.addAttributeConfig(configProperties, OrganizationRoleMapper.class);
  }

  public OrganizationRoleMapper() {
    super(
        PROVIDER_ID,
        "Organization Role",
        TOKEN_MAPPER_CATEGORY,
        "Map organization roles in a token claim.",
        configProperties);
  }

  /*
   organizations: [
     foo: [
       "admin"
          ],
     bar: []
   ]
   gets all the roles for each organization of which the user is a member
  */
  @Override
  protected Map getOrganizationClaim(
      KeycloakSession session, RealmModel realm, UserModel user, ProtocolMapperModel mappingModel) {
    OrganizationProvider orgs = session.getProvider(OrganizationProvider.class);
    Map claim = Maps.newHashMap();
    orgs.getUserOrganizationsStream(realm, user)
        .forEach(
            o -> {
              List roles = Lists.newArrayList();
              o.getRolesStream()
                  .forEach(
                      r -> {
                        if (r.hasRole(user)) roles.add(r.getName());
                      });
              Map org = Maps.newHashMap();
              org.put("name", o.getName());
              org.put("roles", roles);
              claim.put(o.getId(), org);
            });
    log.debugf("created user %s claim %s", user.getUsername(), claim);
    return claim;
  }
}