├── README.md
├── pom.xml
└── src
    ├── main
        ├── java
        │   └── com
        │   │   └── javatechie
        │   │       └── keycloak
        │   │           ├── SpringBootKeycloakExampleApplication.java
        │   │           ├── config
        │   │               └── SecurityConfig.java
        │   │           ├── entity
        │   │               └── Employee.java
        │   │           ├── repository
        │   │               └── EmployeeRepository.java
        │   │           └── service
        │   │               └── EmployeeService.java
        └── resources
        │   ├── application.properties
        │   └── application.yml
    └── test
        └── java
            └── com
                └── javatechie
                    └── keycloak
                        └── SpringBootKeycloakExampleApplicationTests.java


/README.md:
--------------------------------------------------------------------------------
1 | # spring-boot-keycloak
2 | Securing Spring Boot REST APIs with Keycloak
3 | 


--------------------------------------------------------------------------------
/pom.xml:
--------------------------------------------------------------------------------
 1 | <?xml version="1.0" encoding="UTF-8"?>
 2 | <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
 3 | 	xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
 4 | 	<modelVersion>4.0.0</modelVersion>
 5 | 	<parent>
 6 | 		<groupId>org.springframework.boot</groupId>
 7 | 		<artifactId>spring-boot-starter-parent</artifactId>
 8 | 		<version>2.5.6</version>
 9 | 		<relativePath/> <!-- lookup parent from repository -->
10 | 	</parent>
11 | 	<groupId>com.javatechie</groupId>
12 | 	<artifactId>springboot-keycloak-example</artifactId>
13 | 	<version>0.0.1-SNAPSHOT</version>
14 | 	<name>springboot-keycloak-example</name>
15 | 	<description>Demo project for Spring Boot</description>
16 | 	<properties>
17 | 		<java.version>1.8</java.version>
18 | 	</properties>
19 | 	<dependencies>
20 | 		<dependency>
21 | 			<groupId>org.springframework.boot</groupId>
22 | 			<artifactId>spring-boot-starter-data-jpa</artifactId>
23 | 		</dependency>
24 | 		<dependency>
25 | 			<groupId>org.springframework.boot</groupId>
26 | 			<artifactId>spring-boot-starter-web</artifactId>
27 | 		</dependency>
28 | 
29 | 		<dependency>
30 | 			<groupId>com.h2database</groupId>
31 | 			<artifactId>h2</artifactId>
32 | 			<scope>runtime</scope>
33 | 		</dependency>
34 | 		<dependency>
35 | 			<groupId>org.projectlombok</groupId>
36 | 			<artifactId>lombok</artifactId>
37 | 			<optional>true</optional>
38 | 		</dependency>
39 | 		<dependency>
40 | 			<groupId>org.springframework.boot</groupId>
41 | 			<artifactId>spring-boot-starter-test</artifactId>
42 | 			<scope>test</scope>
43 | 		</dependency>
44 | 		<dependency>
45 | 			<groupId>org.springframework.boot</groupId>
46 | 			<artifactId>spring-boot-starter-security</artifactId>
47 | 		</dependency>
48 | 		<dependency>
49 | 			<groupId>org.keycloak</groupId>
50 | 			<artifactId>keycloak-spring-boot-starter</artifactId>
51 | 		</dependency>
52 | 	</dependencies>
53 | 
54 | 	<dependencyManagement>
55 | 		<dependencies>
56 | 			<dependency>
57 | 				<groupId>org.keycloak.bom</groupId>
58 | 				<artifactId>keycloak-adapter-bom</artifactId>
59 | 				<version>15.0.2</version>
60 | 				<type>pom</type>
61 | 				<scope>import</scope>
62 | 			</dependency>
63 | 		</dependencies>
64 | 	</dependencyManagement>
65 | 	<build>
66 | 		<plugins>
67 | 			<plugin>
68 | 				<groupId>org.springframework.boot</groupId>
69 | 				<artifactId>spring-boot-maven-plugin</artifactId>
70 | 				<configuration>
71 | 					<excludes>
72 | 						<exclude>
73 | 							<groupId>org.projectlombok</groupId>
74 | 							<artifactId>lombok</artifactId>
75 | 						</exclude>
76 | 					</excludes>
77 | 				</configuration>
78 | 			</plugin>
79 | 		</plugins>
80 | 	</build>
81 | 
82 | </project>
83 | 


--------------------------------------------------------------------------------
/src/main/java/com/javatechie/keycloak/SpringBootKeycloakExampleApplication.java:
--------------------------------------------------------------------------------
 1 | package com.javatechie.keycloak;
 2 | 
 3 | import com.javatechie.keycloak.entity.Employee;
 4 | import com.javatechie.keycloak.service.EmployeeService;
 5 | import org.springframework.beans.factory.annotation.Autowired;
 6 | import org.springframework.boot.SpringApplication;
 7 | import org.springframework.boot.autoconfigure.SpringBootApplication;
 8 | import org.springframework.http.ResponseEntity;
 9 | import org.springframework.web.bind.annotation.GetMapping;
10 | import org.springframework.web.bind.annotation.PathVariable;
11 | import org.springframework.web.bind.annotation.RequestMapping;
12 | import org.springframework.web.bind.annotation.RestController;
13 | 
14 | import javax.annotation.security.RolesAllowed;
15 | import java.util.List;
16 | 
17 | @SpringBootApplication
18 | @RestController
19 | @RequestMapping("/employees")
20 | public class SpringBootKeycloakExampleApplication {
21 | 
22 |     @Autowired
23 |     private EmployeeService service;
24 | 
25 |     //this method can be accessed by user whose role is user
26 |     @GetMapping("/{employeeId}")
27 |     @RolesAllowed("user")
28 |     public ResponseEntity<Employee> getEmployee(@PathVariable int employeeId) {
29 |         return ResponseEntity.ok(service.getEmployee(employeeId));
30 |     }
31 | 
32 |     //this method can be accessed by user whose role is admin
33 |     @GetMapping
34 |     @RolesAllowed("admin")
35 |     public ResponseEntity<List<Employee>> findALlEmployees() {
36 |         return ResponseEntity.ok(service.getAllEmployees());
37 |     }
38 | 
39 |     public static void main(String[] args) {
40 |         SpringApplication.run(SpringBootKeycloakExampleApplication.class, args);
41 |     }
42 | 
43 | }
44 | 


--------------------------------------------------------------------------------
/src/main/java/com/javatechie/keycloak/config/SecurityConfig.java:
--------------------------------------------------------------------------------
 1 | package com.javatechie.keycloak.config;
 2 | 
 3 | import org.keycloak.adapters.springboot.KeycloakSpringBootConfigResolver;
 4 | import org.keycloak.adapters.springsecurity.KeycloakConfiguration;
 5 | import org.keycloak.adapters.springsecurity.authentication.KeycloakAuthenticationProvider;
 6 | import org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter;
 7 | import org.springframework.beans.factory.annotation.Autowired;
 8 | import org.springframework.context.annotation.Bean;
 9 | import org.springframework.context.annotation.Import;
10 | import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
11 | import org.springframework.security.config.annotation.method.configuration.EnableGlobalMethodSecurity;
12 | import org.springframework.security.config.annotation.web.builders.HttpSecurity;
13 | import org.springframework.security.core.authority.mapping.SimpleAuthorityMapper;
14 | import org.springframework.security.core.session.SessionRegistryImpl;
15 | import org.springframework.security.web.authentication.session.RegisterSessionAuthenticationStrategy;
16 | import org.springframework.security.web.authentication.session.SessionAuthenticationStrategy;
17 | 
18 | @KeycloakConfiguration
19 | @EnableGlobalMethodSecurity(jsr250Enabled = true)
20 | @Import(KeycloakSpringBootConfigResolver.class)
21 | public class SecurityConfig extends KeycloakWebSecurityConfigurerAdapter {
22 |     /**
23 |      * Registers the KeycloakAuthenticationProvider with the authentication manager.
24 |      */
25 |     @Autowired
26 |     public void configureGlobal(AuthenticationManagerBuilder auth) throws Exception {
27 |         KeycloakAuthenticationProvider authenticationProvider = new KeycloakAuthenticationProvider();
28 |         authenticationProvider.setGrantedAuthoritiesMapper(new SimpleAuthorityMapper());
29 |         auth.authenticationProvider(authenticationProvider);
30 |     }
31 | 
32 |     /**
33 |      * Defines the session authentication strategy.
34 |      */
35 |     @Bean
36 |     @Override
37 |     protected SessionAuthenticationStrategy sessionAuthenticationStrategy() {
38 |         return new RegisterSessionAuthenticationStrategy(new SessionRegistryImpl());
39 |     }
40 | 
41 |     @Override
42 |     protected void configure(HttpSecurity http) throws Exception {
43 |         super.configure(http);
44 |         http
45 |                 .authorizeRequests()
46 |                 .anyRequest().permitAll();
47 |     }
48 | }
49 | 


--------------------------------------------------------------------------------
/src/main/java/com/javatechie/keycloak/entity/Employee.java:
--------------------------------------------------------------------------------
 1 | package com.javatechie.keycloak.entity;
 2 | 
 3 | import lombok.Data;
 4 | import lombok.NoArgsConstructor;
 5 | 
 6 | import javax.persistence.Entity;
 7 | import javax.persistence.GeneratedValue;
 8 | import javax.persistence.Id;
 9 | 
10 | @Entity
11 | @NoArgsConstructor
12 | @Data
13 | public class Employee {
14 |     @Id
15 |     @GeneratedValue
16 |     private int id;
17 |     private String name;
18 |     private double salary;
19 | 
20 |     public Employee(String name, double salary) {
21 |         this.name = name;
22 |         this.salary = salary;
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/src/main/java/com/javatechie/keycloak/repository/EmployeeRepository.java:
--------------------------------------------------------------------------------
1 | package com.javatechie.keycloak.repository;
2 | 
3 | import com.javatechie.keycloak.entity.Employee;
4 | import org.springframework.data.jpa.repository.JpaRepository;
5 | 
6 | public interface EmployeeRepository extends JpaRepository<Employee,Integer> {
7 | }
8 | 


--------------------------------------------------------------------------------
/src/main/java/com/javatechie/keycloak/service/EmployeeService.java:
--------------------------------------------------------------------------------
 1 | package com.javatechie.keycloak.service;
 2 | 
 3 | import com.javatechie.keycloak.entity.Employee;
 4 | import com.javatechie.keycloak.repository.EmployeeRepository;
 5 | import org.springframework.beans.factory.annotation.Autowired;
 6 | import org.springframework.stereotype.Service;
 7 | 
 8 | import javax.annotation.PostConstruct;
 9 | import java.util.List;
10 | import java.util.stream.Collectors;
11 | import java.util.stream.Stream;
12 | 
13 | @Service
14 | public class EmployeeService {
15 | 
16 |     @Autowired
17 |     private EmployeeRepository employeeRepository;
18 | 
19 |     @PostConstruct
20 |     public void initializeEmployeeTable() {
21 |         employeeRepository.saveAll(
22 |                 Stream.of(
23 |                         new Employee("john", 20000),
24 |                         new Employee("mak", 55000),
25 |                         new Employee("peter", 120000)
26 |                 ).collect(Collectors.toList()));
27 |     }
28 | 
29 |     public Employee getEmployee(int employeeId) {
30 |         return employeeRepository
31 |                 .findById(employeeId)
32 |                 .orElse(null);
33 |     }
34 | 
35 |     public List<Employee> getAllEmployees() {
36 |         return employeeRepository
37 |                 .findAll();
38 |     }
39 | }
40 | 


--------------------------------------------------------------------------------
/src/main/resources/application.properties:
--------------------------------------------------------------------------------
1 | 
2 | 


--------------------------------------------------------------------------------
/src/main/resources/application.yml:
--------------------------------------------------------------------------------
 1 | server:
 2 |   port: 9090
 3 | 
 4 | spring:
 5 |   h2:
 6 |     console:
 7 |       enabled: true
 8 | 
 9 | keycloak:
10 |   realm: javatechie
11 |   auth-server-url: http://localhost:8180/auth
12 |   resource: springboot-keycloak
13 |   public-client: true
14 |   bearer-only: true


--------------------------------------------------------------------------------
/src/test/java/com/javatechie/keycloak/SpringBootKeycloakExampleApplicationTests.java:
--------------------------------------------------------------------------------
 1 | package com.javatechie.keycloak;
 2 | 
 3 | import org.junit.jupiter.api.Test;
 4 | import org.springframework.boot.test.context.SpringBootTest;
 5 | 
 6 | @SpringBootTest
 7 | class SpringBootKeycloakExampleApplicationTests {
 8 | 
 9 | 	@Test
10 | 	void contextLoads() {
11 | 	}
12 | 
13 | }
14 | 


--------------------------------------------------------------------------------