├── .dockerignore
├── .gitignore
├── LICENSE
├── README.md
├── blog-api.sln
├── docker-compose.yml
├── keycloak
    └── webinar-realm.json
└── src
    ├── api
        ├── ClaimsPrincipalExtensions.cs
        ├── Controllers
        │   └── Posts.cs
        ├── Dockerfile
        ├── JwtBearerOptions.cs
        ├── KeycloakAuthorization
        │   ├── KeycloakAuthorizationHandler.cs
        │   ├── KeycloakAuthorizationOptions.cs
        │   ├── KeycloakAuthorizationPolicyBuilderExtensions.cs
        │   ├── KeycloakAuthorizationPolicyProvider.cs
        │   ├── KeycloakAuthorizationServiceCollectionExtensions.cs
        │   └── KeycloakRequirement.cs
        ├── KeycloakRolesClaimsTransformation.cs
        ├── Migrations
        │   ├── 20210202090239_Initial.Designer.cs
        │   ├── 20210202090239_Initial.cs
        │   └── BlogContextModelSnapshot.cs
        ├── Models
        │   ├── BlogContext.cs
        │   ├── Post.cs
        │   ├── PostInputModel.cs
        │   └── PostListModel.cs
        ├── Policies.cs
        ├── Program.cs
        ├── Properties
        │   └── launchSettings.json
        ├── Roles.cs
        ├── Startup.cs
        ├── appsettings.Development.json
        ├── appsettings.json
        ├── blog-api.csproj
        └── blog-api.xml
    └── frontend
        ├── .browserslistrc
        ├── .devcontainer
            ├── Dockerfile
            └── devcontainer.json
        ├── .editorconfig
        ├── .gitignore
        ├── Dockerfile
        ├── README.md
        ├── angular.json
        ├── config
            └── nginx.conf
        ├── e2e
            ├── protractor.conf.js
            ├── src
            │   ├── app.e2e-spec.ts
            │   └── app.po.ts
            └── tsconfig.json
        ├── karma.conf.js
        ├── package-lock.json
        ├── package.json
        ├── src
            ├── app
            │   ├── app-routing.module.ts
            │   ├── app.module.ts
            │   ├── components
            │   │   ├── app
            │   │   │   ├── app.component.css
            │   │   │   ├── app.component.html
            │   │   │   └── app.component.ts
            │   │   ├── header
            │   │   │   ├── header.component.css
            │   │   │   ├── header.component.html
            │   │   │   └── header.component.ts
            │   │   ├── new-post
            │   │   │   ├── new-post.component.css
            │   │   │   ├── new-post.component.html
            │   │   │   └── new-post.component.ts
            │   │   ├── post-detail
            │   │   │   ├── post-detail.component.css
            │   │   │   ├── post-detail.component.html
            │   │   │   └── post-detail.component.ts
            │   │   ├── post-item
            │   │   │   ├── post-item.component.css
            │   │   │   ├── post-item.component.html
            │   │   │   └── post-item.component.ts
            │   │   └── post-list
            │   │   │   ├── post-list.component.css
            │   │   │   ├── post-list.component.html
            │   │   │   └── post-list.component.ts
            │   ├── models
            │   │   ├── create-post-model.ts
            │   │   ├── post-list-item.ts
            │   │   └── post.ts
            │   └── services
            │   │   ├── auth.guard.ts
            │   │   ├── blog.service.ts
            │   │   ├── keycloakAuthorization.service.ts
            │   │   └── security.service.ts
            ├── assets
            │   └── .gitkeep
            ├── environments
            │   ├── environment.prod.ts
            │   └── environment.ts
            ├── favicon.ico
            ├── index.html
            ├── main.ts
            ├── polyfills.ts
            ├── styles.css
            └── test.ts
        ├── tsconfig.app.json
        ├── tsconfig.json
        ├── tsconfig.spec.json
        └── tslint.json


/.dockerignore:
--------------------------------------------------------------------------------
 1 | **/.classpath
 2 | **/.dockerignore
 3 | **/.env
 4 | **/.git
 5 | **/.gitignore
 6 | **/.project
 7 | **/.settings
 8 | **/.toolstarget
 9 | **/.vs
10 | **/.vscode
11 | **/*.*proj.user
12 | **/*.dbmdl
13 | **/*.jfm
14 | **/azds.yaml
15 | **/bin
16 | **/charts
17 | **/docker-compose*
18 | **/Dockerfile*
19 | **/node_modules
20 | **/npm-debug.log
21 | **/obj
22 | **/secrets.dev.yaml
23 | **/values.dev.yaml
24 | LICENSE
25 | README.md


--------------------------------------------------------------------------------
/.gitignore:
--------------------------------------------------------------------------------
1 | # Visual Studio
2 | bin/
3 | obj/
4 | .vs/
5 | *.user
6 | 
7 | # sqlite db
8 | data.db


--------------------------------------------------------------------------------
/LICENSE:
--------------------------------------------------------------------------------
 1 | MIT License
 2 | 
 3 | Copyright (c) 2021 Thinktecture Labs
 4 | 
 5 | Permission is hereby granted, free of charge, to any person obtaining a copy
 6 | of this software and associated documentation files (the "Software"), to deal
 7 | in the Software without restriction, including without limitation the rights
 8 | to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 9 | copies of the Software, and to permit persons to whom the Software is
10 | furnished to do so, subject to the following conditions:
11 | 
12 | The above copyright notice and this permission notice shall be included in all
13 | copies or substantial portions of the Software.
14 | 
15 | THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16 | IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17 | FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18 | AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19 | LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20 | OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21 | SOFTWARE.
22 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Demo for Keycloak Integration in ASP.NET Core and Angular.
 2 | 
 3 | ## Start
 4 | 
 5 | Use 
 6 | 
 7 | ```
 8 | docker-compose up
 9 | ```
10 | 
11 | to start Keycloak, the API and Angular Frontend.
12 | 
13 | ## Urls
14 | 
15 | | System   | Url                   |
16 | | -------- | --------------------- |
17 | | Keycloak | http://localhost:8080 |
18 | | API      | http://localhost:5000 |
19 | | Frontend | http://localhost:4200 |
20 | 
21 | ## Logins
22 | 
23 | | Username  | Password  | Description                                     |
24 | | --------- | --------- | ----------------------------------------------- |
25 | | editor    | editor    | Can create posts and delete not published posts |
26 | | publisher | publisher | Can publish and unpublish posts                 |
27 | | legal     | lega      | Can unpublish posts                             |
28 | 
29 | 
30 | ## Point of interest
31 | 
32 | ### API
33 | | File                                                                                                                   | Description                                                   |
34 | | ---------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------- |
35 | | [startup.cs](src/api/Startup.cs#L67-L76)                                                                               | Configures Jwt Bearer authentication to use Keycloak          |
36 | | [KeycloakRolesClaimsTransformation.cs](src/api/KeycloakRolesClaimsTransformation.cs)                                   | Transforms keycloak role claims to be compatible with ASP.NET |
37 | | [startup.cs](src/api/Startup.cs#L80-L87)                                                                               | Configures authorization with Keycloak                        |
38 | | [KeycloakAuthorization\KeycloakAuthorizationHandler.cs](src/api/KeycloakAuthorization/KeycloakAuthorizationHandler.cs) | Authorization handler that makes decision call to Keycloak    |
39 | 
40 | ### Frontend
41 | 
42 | | File                                                                                               | Description                                                 |
43 | | -------------------------------------------------------------------------------------------------- | ----------------------------------------------------------- |
44 | | [keycloakAuthorization.service.ts](src/frontend/src/app/services/keycloakAuthorization.service.ts) | Authorization Service that makes decision call to Keycloak. |
45 | | [security.service.ts](src/frontend/src/app/services/security.service.ts)                           | Security service that checks the roles of the user.         |
46 | | [auth.guard.ts](src/frontend/src/app/services/auth.guard.ts)                                       | Auth guard to protect routes.                               |


--------------------------------------------------------------------------------
/blog-api.sln:
--------------------------------------------------------------------------------
 1 | 
 2 | Microsoft Visual Studio Solution File, Format Version 12.00
 3 | # Visual Studio Version 16
 4 | VisualStudioVersion = 16.0.30907.101
 5 | MinimumVisualStudioVersion = 10.0.40219.1
 6 | Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "blog-api", "src\api\blog-api.csproj", "{5922686F-A708-41F4-930B-0FDB11A2F778}"
 7 | EndProject
 8 | Global
 9 | 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
10 | 		Debug|Any CPU = Debug|Any CPU
11 | 		Release|Any CPU = Release|Any CPU
12 | 	EndGlobalSection
13 | 	GlobalSection(ProjectConfigurationPlatforms) = postSolution
14 | 		{5922686F-A708-41F4-930B-0FDB11A2F778}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
15 | 		{5922686F-A708-41F4-930B-0FDB11A2F778}.Debug|Any CPU.Build.0 = Debug|Any CPU
16 | 		{5922686F-A708-41F4-930B-0FDB11A2F778}.Release|Any CPU.ActiveCfg = Release|Any CPU
17 | 		{5922686F-A708-41F4-930B-0FDB11A2F778}.Release|Any CPU.Build.0 = Release|Any CPU
18 | 	EndGlobalSection
19 | 	GlobalSection(SolutionProperties) = preSolution
20 | 		HideSolutionNode = FALSE
21 | 	EndGlobalSection
22 | 	GlobalSection(ExtensibilityGlobals) = postSolution
23 | 		SolutionGuid = {574F9326-F655-4716-825E-DD484DC81139}
24 | 	EndGlobalSection
25 | EndGlobal
26 | 


--------------------------------------------------------------------------------
/docker-compose.yml:
--------------------------------------------------------------------------------
 1 | version: "3.8"
 2 | services:
 3 |   keycloak:
 4 |     image: quay.io/keycloak/keycloak:12.0.2
 5 |     ports:
 6 |       - 8080:8080
 7 |     environment:
 8 |       - KEYCLOAK_USER=admin
 9 |       - KEYCLOAK_PASSWORD=admin
10 |       - KEYCLOAK_FRONTEND_URL=http://localhost:8080/auth/
11 |       - KEYCLOAK_IMPORT=/tmp/keycloak/webinar-realm.json
12 |       - JAVA_OPTS=-Dkeycloak.profile.feature.upload_scripts=enabled
13 |     volumes:
14 |       - ./keycloak:/tmp/keycloak
15 |   api:
16 |     build:
17 |       context: src/api/.
18 |       dockerfile: Dockerfile
19 |     ports:
20 |       - 5000:80
21 |   frontend:
22 |     build:
23 |       context: src/frontend/.
24 |       dockerfile: Dockerfile
25 |     ports:
26 |       - 4200:80


--------------------------------------------------------------------------------
/keycloak/webinar-realm.json:
--------------------------------------------------------------------------------
   1 | {
   2 |   "id" : "webinar",
   3 |   "realm" : "webinar",
   4 |   "notBefore" : 0,
   5 |   "revokeRefreshToken" : false,
   6 |   "refreshTokenMaxReuse" : 0,
   7 |   "accessTokenLifespan" : 300,
   8 |   "accessTokenLifespanForImplicitFlow" : 900,
   9 |   "ssoSessionIdleTimeout" : 1800,
  10 |   "ssoSessionMaxLifespan" : 36000,
  11 |   "ssoSessionIdleTimeoutRememberMe" : 0,
  12 |   "ssoSessionMaxLifespanRememberMe" : 0,
  13 |   "offlineSessionIdleTimeout" : 2592000,
  14 |   "offlineSessionMaxLifespanEnabled" : false,
  15 |   "offlineSessionMaxLifespan" : 5184000,
  16 |   "clientSessionIdleTimeout" : 0,
  17 |   "clientSessionMaxLifespan" : 0,
  18 |   "clientOfflineSessionIdleTimeout" : 0,
  19 |   "clientOfflineSessionMaxLifespan" : 0,
  20 |   "accessCodeLifespan" : 60,
  21 |   "accessCodeLifespanUserAction" : 300,
  22 |   "accessCodeLifespanLogin" : 1800,
  23 |   "actionTokenGeneratedByAdminLifespan" : 43200,
  24 |   "actionTokenGeneratedByUserLifespan" : 300,
  25 |   "enabled" : true,
  26 |   "sslRequired" : "external",
  27 |   "registrationAllowed" : false,
  28 |   "registrationEmailAsUsername" : false,
  29 |   "rememberMe" : false,
  30 |   "verifyEmail" : false,
  31 |   "loginWithEmailAllowed" : true,
  32 |   "duplicateEmailsAllowed" : false,
  33 |   "resetPasswordAllowed" : false,
  34 |   "editUsernameAllowed" : false,
  35 |   "bruteForceProtected" : false,
  36 |   "permanentLockout" : false,
  37 |   "maxFailureWaitSeconds" : 900,
  38 |   "minimumQuickLoginWaitSeconds" : 60,
  39 |   "waitIncrementSeconds" : 60,
  40 |   "quickLoginCheckMilliSeconds" : 1000,
  41 |   "maxDeltaTimeSeconds" : 43200,
  42 |   "failureFactor" : 30,
  43 |   "roles" : {
  44 |     "realm" : [ {
  45 |       "id" : "bc522464-30aa-4bd0-a84e-ee048cebdbc6",
  46 |       "name" : "offline_access",
  47 |       "description" : "${role_offline-access}",
  48 |       "composite" : false,
  49 |       "clientRole" : false,
  50 |       "containerId" : "webinar",
  51 |       "attributes" : { }
  52 |     }, {
  53 |       "id" : "478fa0cd-6c8d-4e9c-a550-76cf99ac51d2",
  54 |       "name" : "uma_authorization",
  55 |       "description" : "${role_uma_authorization}",
  56 |       "composite" : false,
  57 |       "clientRole" : false,
  58 |       "containerId" : "webinar",
  59 |       "attributes" : { }
  60 |     } ],
  61 |     "client" : {
  62 |       "blog-api" : [ {
  63 |         "id" : "95d9607c-a16f-45cb-8a08-000753c7e58a",
  64 |         "name" : "publisher",
  65 |         "composite" : false,
  66 |         "clientRole" : true,
  67 |         "containerId" : "a2a83458-becb-45f3-ad38-12f4eb7e1e61",
  68 |         "attributes" : { }
  69 |       }, {
  70 |         "id" : "68a2e551-9757-46e4-a872-9c9e63ef654a",
  71 |         "name" : "uma_protection",
  72 |         "composite" : false,
  73 |         "clientRole" : true,
  74 |         "containerId" : "a2a83458-becb-45f3-ad38-12f4eb7e1e61",
  75 |         "attributes" : { }
  76 |       }, {
  77 |         "id" : "0a06dba3-d2ea-4bd0-b92c-026b89bba2a7",
  78 |         "name" : "user",
  79 |         "composite" : false,
  80 |         "clientRole" : true,
  81 |         "containerId" : "a2a83458-becb-45f3-ad38-12f4eb7e1e61",
  82 |         "attributes" : { }
  83 |       }, {
  84 |         "id" : "42e3dae9-4843-460d-9312-6d0e40eb5d9a",
  85 |         "name" : "editor",
  86 |         "composite" : false,
  87 |         "clientRole" : true,
  88 |         "containerId" : "a2a83458-becb-45f3-ad38-12f4eb7e1e61",
  89 |         "attributes" : { }
  90 |       } ],
  91 |       "realm-management" : [ {
  92 |         "id" : "9f870650-e174-4790-9361-189a206d89a8",
  93 |         "name" : "query-realms",
  94 |         "description" : "${role_query-realms}",
  95 |         "composite" : false,
  96 |         "clientRole" : true,
  97 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
  98 |         "attributes" : { }
  99 |       }, {
 100 |         "id" : "47f9316a-5cae-4831-9d59-f00f5656f82f",
 101 |         "name" : "query-users",
 102 |         "description" : "${role_query-users}",
 103 |         "composite" : false,
 104 |         "clientRole" : true,
 105 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 106 |         "attributes" : { }
 107 |       }, {
 108 |         "id" : "5450c1ea-176e-478e-bb27-184686f4d691",
 109 |         "name" : "view-clients",
 110 |         "description" : "${role_view-clients}",
 111 |         "composite" : true,
 112 |         "composites" : {
 113 |           "client" : {
 114 |             "realm-management" : [ "query-clients" ]
 115 |           }
 116 |         },
 117 |         "clientRole" : true,
 118 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 119 |         "attributes" : { }
 120 |       }, {
 121 |         "id" : "5505aec8-e5fc-4ad0-aac0-0ea4aa411c6a",
 122 |         "name" : "manage-authorization",
 123 |         "description" : "${role_manage-authorization}",
 124 |         "composite" : false,
 125 |         "clientRole" : true,
 126 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 127 |         "attributes" : { }
 128 |       }, {
 129 |         "id" : "af613abb-483e-4b42-9120-2c8198e16edc",
 130 |         "name" : "view-authorization",
 131 |         "description" : "${role_view-authorization}",
 132 |         "composite" : false,
 133 |         "clientRole" : true,
 134 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 135 |         "attributes" : { }
 136 |       }, {
 137 |         "id" : "736b7c30-195d-4d2b-aae6-f1c10bcaf0b8",
 138 |         "name" : "view-identity-providers",
 139 |         "description" : "${role_view-identity-providers}",
 140 |         "composite" : false,
 141 |         "clientRole" : true,
 142 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 143 |         "attributes" : { }
 144 |       }, {
 145 |         "id" : "cea7471a-43e6-4868-b270-1281e4be016d",
 146 |         "name" : "view-users",
 147 |         "description" : "${role_view-users}",
 148 |         "composite" : true,
 149 |         "composites" : {
 150 |           "client" : {
 151 |             "realm-management" : [ "query-users", "query-groups" ]
 152 |           }
 153 |         },
 154 |         "clientRole" : true,
 155 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 156 |         "attributes" : { }
 157 |       }, {
 158 |         "id" : "03c9cd8f-97a3-4df8-9e03-cf4b2d44b8e0",
 159 |         "name" : "create-client",
 160 |         "description" : "${role_create-client}",
 161 |         "composite" : false,
 162 |         "clientRole" : true,
 163 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 164 |         "attributes" : { }
 165 |       }, {
 166 |         "id" : "80c86b55-1663-46b4-8241-36350ad36e2a",
 167 |         "name" : "manage-clients",
 168 |         "description" : "${role_manage-clients}",
 169 |         "composite" : false,
 170 |         "clientRole" : true,
 171 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 172 |         "attributes" : { }
 173 |       }, {
 174 |         "id" : "a7532995-31a0-4be3-aa28-836bc78aa15c",
 175 |         "name" : "manage-users",
 176 |         "description" : "${role_manage-users}",
 177 |         "composite" : false,
 178 |         "clientRole" : true,
 179 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 180 |         "attributes" : { }
 181 |       }, {
 182 |         "id" : "25268bfa-66f3-42bb-b68d-d4bee10cc1f1",
 183 |         "name" : "manage-identity-providers",
 184 |         "description" : "${role_manage-identity-providers}",
 185 |         "composite" : false,
 186 |         "clientRole" : true,
 187 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 188 |         "attributes" : { }
 189 |       }, {
 190 |         "id" : "5003c473-ea6e-443c-a7e4-058a6c302f65",
 191 |         "name" : "realm-admin",
 192 |         "description" : "${role_realm-admin}",
 193 |         "composite" : true,
 194 |         "composites" : {
 195 |           "client" : {
 196 |             "realm-management" : [ "query-users", "view-clients", "query-realms", "manage-authorization", "view-authorization", "view-identity-providers", "view-users", "create-client", "manage-clients", "manage-users", "manage-identity-providers", "view-realm", "view-events", "query-clients", "manage-realm", "manage-events", "query-groups", "impersonation" ]
 197 |           }
 198 |         },
 199 |         "clientRole" : true,
 200 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 201 |         "attributes" : { }
 202 |       }, {
 203 |         "id" : "f512dd92-6a79-46c0-bfdb-4da1f4cdafcf",
 204 |         "name" : "view-realm",
 205 |         "description" : "${role_view-realm}",
 206 |         "composite" : false,
 207 |         "clientRole" : true,
 208 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 209 |         "attributes" : { }
 210 |       }, {
 211 |         "id" : "c7ea7e61-b6d4-4944-b14a-e97c428ebae0",
 212 |         "name" : "view-events",
 213 |         "description" : "${role_view-events}",
 214 |         "composite" : false,
 215 |         "clientRole" : true,
 216 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 217 |         "attributes" : { }
 218 |       }, {
 219 |         "id" : "6fbe3059-6002-4b0f-9be1-d56de3f7608c",
 220 |         "name" : "manage-realm",
 221 |         "description" : "${role_manage-realm}",
 222 |         "composite" : false,
 223 |         "clientRole" : true,
 224 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 225 |         "attributes" : { }
 226 |       }, {
 227 |         "id" : "22ab21d9-22b2-43f9-94e8-eaedb341f0a3",
 228 |         "name" : "query-clients",
 229 |         "description" : "${role_query-clients}",
 230 |         "composite" : false,
 231 |         "clientRole" : true,
 232 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 233 |         "attributes" : { }
 234 |       }, {
 235 |         "id" : "d9826249-507c-4cb4-9246-bec5034d8f46",
 236 |         "name" : "impersonation",
 237 |         "description" : "${role_impersonation}",
 238 |         "composite" : false,
 239 |         "clientRole" : true,
 240 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 241 |         "attributes" : { }
 242 |       }, {
 243 |         "id" : "4c3e1a13-0e2d-424a-9aae-b6b0da3c5a7e",
 244 |         "name" : "manage-events",
 245 |         "description" : "${role_manage-events}",
 246 |         "composite" : false,
 247 |         "clientRole" : true,
 248 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 249 |         "attributes" : { }
 250 |       }, {
 251 |         "id" : "9a2001ff-8697-4d43-8b97-596b9aec699e",
 252 |         "name" : "query-groups",
 253 |         "description" : "${role_query-groups}",
 254 |         "composite" : false,
 255 |         "clientRole" : true,
 256 |         "containerId" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 257 |         "attributes" : { }
 258 |       } ],
 259 |       "security-admin-console" : [ ],
 260 |       "admin-cli" : [ ],
 261 |       "blog-frontend" : [ ],
 262 |       "account-console" : [ ],
 263 |       "broker" : [ {
 264 |         "id" : "8bd8c968-a1e7-4446-b21b-433e1e5788b9",
 265 |         "name" : "read-token",
 266 |         "description" : "${role_read-token}",
 267 |         "composite" : false,
 268 |         "clientRole" : true,
 269 |         "containerId" : "098377c8-91a6-406e-84f1-4f86cc6eec07",
 270 |         "attributes" : { }
 271 |       } ],
 272 |       "account" : [ {
 273 |         "id" : "f727c8b0-872b-46e2-b549-19758d154ba8",
 274 |         "name" : "view-profile",
 275 |         "description" : "${role_view-profile}",
 276 |         "composite" : false,
 277 |         "clientRole" : true,
 278 |         "containerId" : "2d9a356d-0eed-48fc-b876-4c09d1339216",
 279 |         "attributes" : { }
 280 |       }, {
 281 |         "id" : "d8341dbd-6d4f-4319-b746-e4895779eafd",
 282 |         "name" : "delete-account",
 283 |         "description" : "${role_delete-account}",
 284 |         "composite" : false,
 285 |         "clientRole" : true,
 286 |         "containerId" : "2d9a356d-0eed-48fc-b876-4c09d1339216",
 287 |         "attributes" : { }
 288 |       }, {
 289 |         "id" : "267f7306-e890-4b86-9571-7d69c3ff4cc5",
 290 |         "name" : "manage-account-links",
 291 |         "description" : "${role_manage-account-links}",
 292 |         "composite" : false,
 293 |         "clientRole" : true,
 294 |         "containerId" : "2d9a356d-0eed-48fc-b876-4c09d1339216",
 295 |         "attributes" : { }
 296 |       }, {
 297 |         "id" : "b1088864-74ba-4c77-9826-62c82db61953",
 298 |         "name" : "manage-consent",
 299 |         "description" : "${role_manage-consent}",
 300 |         "composite" : true,
 301 |         "composites" : {
 302 |           "client" : {
 303 |             "account" : [ "view-consent" ]
 304 |           }
 305 |         },
 306 |         "clientRole" : true,
 307 |         "containerId" : "2d9a356d-0eed-48fc-b876-4c09d1339216",
 308 |         "attributes" : { }
 309 |       }, {
 310 |         "id" : "9fdba975-0949-43ec-9dcd-1dd1657fbde4",
 311 |         "name" : "view-applications",
 312 |         "description" : "${role_view-applications}",
 313 |         "composite" : false,
 314 |         "clientRole" : true,
 315 |         "containerId" : "2d9a356d-0eed-48fc-b876-4c09d1339216",
 316 |         "attributes" : { }
 317 |       }, {
 318 |         "id" : "d3bdc366-61dc-4e53-a77f-a7c56461610d",
 319 |         "name" : "view-consent",
 320 |         "description" : "${role_view-consent}",
 321 |         "composite" : false,
 322 |         "clientRole" : true,
 323 |         "containerId" : "2d9a356d-0eed-48fc-b876-4c09d1339216",
 324 |         "attributes" : { }
 325 |       }, {
 326 |         "id" : "05111f13-18f5-4969-bd6f-fde38573351c",
 327 |         "name" : "manage-account",
 328 |         "description" : "${role_manage-account}",
 329 |         "composite" : true,
 330 |         "composites" : {
 331 |           "client" : {
 332 |             "account" : [ "manage-account-links" ]
 333 |           }
 334 |         },
 335 |         "clientRole" : true,
 336 |         "containerId" : "2d9a356d-0eed-48fc-b876-4c09d1339216",
 337 |         "attributes" : { }
 338 |       } ]
 339 |     }
 340 |   },
 341 |   "groups" : [ {
 342 |     "id" : "116f297f-3b1f-4832-9ad1-39c4d39fb98d",
 343 |     "name" : "Legal",
 344 |     "path" : "/Legal",
 345 |     "attributes" : { },
 346 |     "realmRoles" : [ ],
 347 |     "clientRoles" : { },
 348 |     "subGroups" : [ ]
 349 |   } ],
 350 |   "defaultRoles" : [ "offline_access", "uma_authorization" ],
 351 |   "requiredCredentials" : [ "password" ],
 352 |   "otpPolicyType" : "totp",
 353 |   "otpPolicyAlgorithm" : "HmacSHA1",
 354 |   "otpPolicyInitialCounter" : 0,
 355 |   "otpPolicyDigits" : 6,
 356 |   "otpPolicyLookAheadWindow" : 1,
 357 |   "otpPolicyPeriod" : 30,
 358 |   "otpSupportedApplications" : [ "FreeOTP", "Google Authenticator" ],
 359 |   "webAuthnPolicyRpEntityName" : "keycloak",
 360 |   "webAuthnPolicySignatureAlgorithms" : [ "ES256" ],
 361 |   "webAuthnPolicyRpId" : "",
 362 |   "webAuthnPolicyAttestationConveyancePreference" : "not specified",
 363 |   "webAuthnPolicyAuthenticatorAttachment" : "not specified",
 364 |   "webAuthnPolicyRequireResidentKey" : "not specified",
 365 |   "webAuthnPolicyUserVerificationRequirement" : "not specified",
 366 |   "webAuthnPolicyCreateTimeout" : 0,
 367 |   "webAuthnPolicyAvoidSameAuthenticatorRegister" : false,
 368 |   "webAuthnPolicyAcceptableAaguids" : [ ],
 369 |   "webAuthnPolicyPasswordlessRpEntityName" : "keycloak",
 370 |   "webAuthnPolicyPasswordlessSignatureAlgorithms" : [ "ES256" ],
 371 |   "webAuthnPolicyPasswordlessRpId" : "",
 372 |   "webAuthnPolicyPasswordlessAttestationConveyancePreference" : "not specified",
 373 |   "webAuthnPolicyPasswordlessAuthenticatorAttachment" : "not specified",
 374 |   "webAuthnPolicyPasswordlessRequireResidentKey" : "not specified",
 375 |   "webAuthnPolicyPasswordlessUserVerificationRequirement" : "not specified",
 376 |   "webAuthnPolicyPasswordlessCreateTimeout" : 0,
 377 |   "webAuthnPolicyPasswordlessAvoidSameAuthenticatorRegister" : false,
 378 |   "webAuthnPolicyPasswordlessAcceptableAaguids" : [ ],
 379 |   "users" : [ {
 380 |     "id" : "6e2e9379-d271-42f7-82b2-cc9011b8e37e",
 381 |     "createdTimestamp" : 1613997033469,
 382 |     "username" : "editor",
 383 |     "enabled" : true,
 384 |     "totp" : false,
 385 |     "emailVerified" : false,
 386 |     "credentials" : [ {
 387 |       "id" : "42caf90d-5ded-4523-8a1e-57468babfc4d",
 388 |       "type" : "password",
 389 |       "createdDate" : 1613997041312,
 390 |       "secretData" : "{\"value\":\"D0TVQ1YBsKuyx3Ej31elPrc98rKfughTrG9bwBnJSdKkiEuoZ2JpzR9EEvKeBXbk+dqwB7aNXXfUbnKHTvlBEg==\",\"salt\":\"lEzngTgiC5lLHjm26NKBBw==\",\"additionalParameters\":{}}",
 391 |       "credentialData" : "{\"hashIterations\":27500,\"algorithm\":\"pbkdf2-sha256\",\"additionalParameters\":{}}"
 392 |     } ],
 393 |     "disableableCredentialTypes" : [ ],
 394 |     "requiredActions" : [ ],
 395 |     "realmRoles" : [ "offline_access", "uma_authorization" ],
 396 |     "clientRoles" : {
 397 |       "blog-api" : [ "editor" ],
 398 |       "account" : [ "view-profile", "manage-account" ]
 399 |     },
 400 |     "notBefore" : 0,
 401 |     "groups" : [ ]
 402 |   }, {
 403 |     "id" : "1eb36503-f479-4e18-9d45-0abfbfc12548",
 404 |     "createdTimestamp" : 1613997003639,
 405 |     "username" : "legal",
 406 |     "enabled" : true,
 407 |     "totp" : false,
 408 |     "emailVerified" : false,
 409 |     "credentials" : [ {
 410 |       "id" : "96aa78a2-7768-4110-b198-62b12dde07b7",
 411 |       "type" : "password",
 412 |       "createdDate" : 1613997012046,
 413 |       "secretData" : "{\"value\":\"XxacIfEGsv38zg0KYSxbwdFDlgYBg3wLr7rOvUc9pHpn3F3eAARlhiI1J5PpIu55wvngPMX1qDzk+J4BB94ztg==\",\"salt\":\"f7lPNMnZEWx6FLju+RiDHg==\",\"additionalParameters\":{}}",
 414 |       "credentialData" : "{\"hashIterations\":27500,\"algorithm\":\"pbkdf2-sha256\",\"additionalParameters\":{}}"
 415 |     } ],
 416 |     "disableableCredentialTypes" : [ ],
 417 |     "requiredActions" : [ ],
 418 |     "realmRoles" : [ "offline_access", "uma_authorization" ],
 419 |     "clientRoles" : {
 420 |       "blog-api" : [ "user" ],
 421 |       "account" : [ "view-profile", "manage-account" ]
 422 |     },
 423 |     "notBefore" : 0,
 424 |     "groups" : [ "/Legal" ]
 425 |   }, {
 426 |     "id" : "0da23883-75b1-405d-bc35-fbf2159b0b85",
 427 |     "createdTimestamp" : 1613997373839,
 428 |     "username" : "publisher",
 429 |     "enabled" : true,
 430 |     "totp" : false,
 431 |     "emailVerified" : false,
 432 |     "credentials" : [ {
 433 |       "id" : "977221b5-f8cf-4baa-a18c-40b191652033",
 434 |       "type" : "password",
 435 |       "createdDate" : 1613997379867,
 436 |       "secretData" : "{\"value\":\"iYlfBFst/UgHZ643ZnFR7vHXf+SPU75J+0I9lThXA/nzZCu0ImgbXQcElf2Yepcu9jJYBcKYFM3KiRPuy8eRgQ==\",\"salt\":\"EgoTHPjeg8U7N3yUOK0NCw==\",\"additionalParameters\":{}}",
 437 |       "credentialData" : "{\"hashIterations\":27500,\"algorithm\":\"pbkdf2-sha256\",\"additionalParameters\":{}}"
 438 |     } ],
 439 |     "disableableCredentialTypes" : [ ],
 440 |     "requiredActions" : [ ],
 441 |     "realmRoles" : [ "offline_access", "uma_authorization" ],
 442 |     "clientRoles" : {
 443 |       "blog-api" : [ "publisher" ],
 444 |       "account" : [ "view-profile", "manage-account" ]
 445 |     },
 446 |     "notBefore" : 0,
 447 |     "groups" : [ ]
 448 |   }, {
 449 |     "id" : "0da99cee-d996-4636-b742-545d8e8f4c5a",
 450 |     "createdTimestamp" : 1613995575861,
 451 |     "username" : "service-account-blog-api",
 452 |     "enabled" : true,
 453 |     "totp" : false,
 454 |     "emailVerified" : false,
 455 |     "serviceAccountClientId" : "blog-api",
 456 |     "credentials" : [ ],
 457 |     "disableableCredentialTypes" : [ ],
 458 |     "requiredActions" : [ ],
 459 |     "realmRoles" : [ "offline_access", "uma_authorization" ],
 460 |     "clientRoles" : {
 461 |       "blog-api" : [ "uma_protection" ],
 462 |       "account" : [ "view-profile", "manage-account" ]
 463 |     },
 464 |     "notBefore" : 0,
 465 |     "groups" : [ ]
 466 |   } ],
 467 |   "scopeMappings" : [ {
 468 |     "clientScope" : "offline_access",
 469 |     "roles" : [ "offline_access" ]
 470 |   } ],
 471 |   "clientScopeMappings" : {
 472 |     "blog-api" : [ {
 473 |       "client" : "blog-frontend",
 474 |       "roles" : [ "editor", "publisher", "user" ]
 475 |     } ],
 476 |     "account" : [ {
 477 |       "client" : "account-console",
 478 |       "roles" : [ "manage-account" ]
 479 |     }, {
 480 |       "client" : "blog-frontend",
 481 |       "roles" : [ "view-profile" ]
 482 |     } ]
 483 |   },
 484 |   "clients" : [ {
 485 |     "id" : "2d9a356d-0eed-48fc-b876-4c09d1339216",
 486 |     "clientId" : "account",
 487 |     "name" : "${client_account}",
 488 |     "rootUrl" : "${authBaseUrl}",
 489 |     "baseUrl" : "/realms/webinar/account/",
 490 |     "surrogateAuthRequired" : false,
 491 |     "enabled" : true,
 492 |     "alwaysDisplayInConsole" : false,
 493 |     "clientAuthenticatorType" : "client-secret",
 494 |     "secret" : "**********",
 495 |     "defaultRoles" : [ "view-profile", "manage-account" ],
 496 |     "redirectUris" : [ "/realms/webinar/account/*" ],
 497 |     "webOrigins" : [ ],
 498 |     "notBefore" : 0,
 499 |     "bearerOnly" : false,
 500 |     "consentRequired" : false,
 501 |     "standardFlowEnabled" : true,
 502 |     "implicitFlowEnabled" : false,
 503 |     "directAccessGrantsEnabled" : false,
 504 |     "serviceAccountsEnabled" : false,
 505 |     "publicClient" : false,
 506 |     "frontchannelLogout" : false,
 507 |     "protocol" : "openid-connect",
 508 |     "attributes" : { },
 509 |     "authenticationFlowBindingOverrides" : { },
 510 |     "fullScopeAllowed" : false,
 511 |     "nodeReRegistrationTimeout" : 0,
 512 |     "defaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
 513 |     "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
 514 |   }, {
 515 |     "id" : "1d6d86cb-e768-4b9c-858b-44174170d43c",
 516 |     "clientId" : "account-console",
 517 |     "name" : "${client_account-console}",
 518 |     "rootUrl" : "${authBaseUrl}",
 519 |     "baseUrl" : "/realms/webinar/account/",
 520 |     "surrogateAuthRequired" : false,
 521 |     "enabled" : true,
 522 |     "alwaysDisplayInConsole" : false,
 523 |     "clientAuthenticatorType" : "client-secret",
 524 |     "secret" : "**********",
 525 |     "redirectUris" : [ "/realms/webinar/account/*" ],
 526 |     "webOrigins" : [ ],
 527 |     "notBefore" : 0,
 528 |     "bearerOnly" : false,
 529 |     "consentRequired" : false,
 530 |     "standardFlowEnabled" : true,
 531 |     "implicitFlowEnabled" : false,
 532 |     "directAccessGrantsEnabled" : false,
 533 |     "serviceAccountsEnabled" : false,
 534 |     "publicClient" : true,
 535 |     "frontchannelLogout" : false,
 536 |     "protocol" : "openid-connect",
 537 |     "attributes" : {
 538 |       "pkce.code.challenge.method" : "S256"
 539 |     },
 540 |     "authenticationFlowBindingOverrides" : { },
 541 |     "fullScopeAllowed" : false,
 542 |     "nodeReRegistrationTimeout" : 0,
 543 |     "protocolMappers" : [ {
 544 |       "id" : "2d2db824-f699-4a8f-8221-7ea3b4569c54",
 545 |       "name" : "audience resolve",
 546 |       "protocol" : "openid-connect",
 547 |       "protocolMapper" : "oidc-audience-resolve-mapper",
 548 |       "consentRequired" : false,
 549 |       "config" : { }
 550 |     } ],
 551 |     "defaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
 552 |     "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
 553 |   }, {
 554 |     "id" : "36c07e27-9cbb-47cd-84be-36e54f8e2afa",
 555 |     "clientId" : "admin-cli",
 556 |     "name" : "${client_admin-cli}",
 557 |     "surrogateAuthRequired" : false,
 558 |     "enabled" : true,
 559 |     "alwaysDisplayInConsole" : false,
 560 |     "clientAuthenticatorType" : "client-secret",
 561 |     "secret" : "**********",
 562 |     "redirectUris" : [ ],
 563 |     "webOrigins" : [ ],
 564 |     "notBefore" : 0,
 565 |     "bearerOnly" : false,
 566 |     "consentRequired" : false,
 567 |     "standardFlowEnabled" : false,
 568 |     "implicitFlowEnabled" : false,
 569 |     "directAccessGrantsEnabled" : true,
 570 |     "serviceAccountsEnabled" : false,
 571 |     "publicClient" : true,
 572 |     "frontchannelLogout" : false,
 573 |     "protocol" : "openid-connect",
 574 |     "attributes" : {
 575 |       "saml.assertion.signature" : "false",
 576 |       "saml.force.post.binding" : "false",
 577 |       "saml.multivalued.roles" : "false",
 578 |       "saml.encrypt" : "false",
 579 |       "backchannel.logout.revoke.offline.tokens" : "false",
 580 |       "saml.server.signature" : "false",
 581 |       "saml.server.signature.keyinfo.ext" : "false",
 582 |       "exclude.session.state.from.auth.response" : "false",
 583 |       "backchannel.logout.session.required" : "false",
 584 |       "client_credentials.use_refresh_token" : "false",
 585 |       "saml_force_name_id_format" : "false",
 586 |       "saml.client.signature" : "false",
 587 |       "tls.client.certificate.bound.access.tokens" : "false",
 588 |       "saml.authnstatement" : "false",
 589 |       "display.on.consent.screen" : "false",
 590 |       "saml.onetimeuse.condition" : "false"
 591 |     },
 592 |     "authenticationFlowBindingOverrides" : { },
 593 |     "fullScopeAllowed" : false,
 594 |     "nodeReRegistrationTimeout" : 0,
 595 |     "defaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
 596 |     "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
 597 |   }, {
 598 |     "id" : "a2a83458-becb-45f3-ad38-12f4eb7e1e61",
 599 |     "clientId" : "blog-api",
 600 |     "surrogateAuthRequired" : false,
 601 |     "enabled" : true,
 602 |     "alwaysDisplayInConsole" : false,
 603 |     "clientAuthenticatorType" : "client-secret",
 604 |     "secret" : "**********",
 605 |     "redirectUris" : [ ],
 606 |     "webOrigins" : [ ],
 607 |     "notBefore" : 0,
 608 |     "bearerOnly" : false,
 609 |     "consentRequired" : false,
 610 |     "standardFlowEnabled" : false,
 611 |     "implicitFlowEnabled" : false,
 612 |     "directAccessGrantsEnabled" : false,
 613 |     "serviceAccountsEnabled" : true,
 614 |     "authorizationServicesEnabled" : true,
 615 |     "publicClient" : false,
 616 |     "frontchannelLogout" : false,
 617 |     "protocol" : "openid-connect",
 618 |     "attributes" : {
 619 |       "saml.assertion.signature" : "false",
 620 |       "saml.force.post.binding" : "false",
 621 |       "saml.multivalued.roles" : "false",
 622 |       "saml.encrypt" : "false",
 623 |       "backchannel.logout.revoke.offline.tokens" : "false",
 624 |       "saml.server.signature" : "false",
 625 |       "saml.server.signature.keyinfo.ext" : "false",
 626 |       "exclude.session.state.from.auth.response" : "false",
 627 |       "backchannel.logout.session.required" : "false",
 628 |       "client_credentials.use_refresh_token" : "false",
 629 |       "saml_force_name_id_format" : "false",
 630 |       "saml.client.signature" : "false",
 631 |       "tls.client.certificate.bound.access.tokens" : "false",
 632 |       "saml.authnstatement" : "false",
 633 |       "display.on.consent.screen" : "false",
 634 |       "saml.onetimeuse.condition" : "false"
 635 |     },
 636 |     "authenticationFlowBindingOverrides" : { },
 637 |     "fullScopeAllowed" : true,
 638 |     "nodeReRegistrationTimeout" : -1,
 639 |     "protocolMappers" : [ {
 640 |       "id" : "3c516de8-50cd-4d0e-bfc6-b4c58b58ed4e",
 641 |       "name" : "Client ID",
 642 |       "protocol" : "openid-connect",
 643 |       "protocolMapper" : "oidc-usersessionmodel-note-mapper",
 644 |       "consentRequired" : false,
 645 |       "config" : {
 646 |         "user.session.note" : "clientId",
 647 |         "userinfo.token.claim" : "true",
 648 |         "id.token.claim" : "true",
 649 |         "access.token.claim" : "true",
 650 |         "claim.name" : "clientId",
 651 |         "jsonType.label" : "String"
 652 |       }
 653 |     }, {
 654 |       "id" : "a93e0962-eafe-422e-b078-ced733ec28ef",
 655 |       "name" : "Client IP Address",
 656 |       "protocol" : "openid-connect",
 657 |       "protocolMapper" : "oidc-usersessionmodel-note-mapper",
 658 |       "consentRequired" : false,
 659 |       "config" : {
 660 |         "user.session.note" : "clientAddress",
 661 |         "userinfo.token.claim" : "true",
 662 |         "id.token.claim" : "true",
 663 |         "access.token.claim" : "true",
 664 |         "claim.name" : "clientAddress",
 665 |         "jsonType.label" : "String"
 666 |       }
 667 |     }, {
 668 |       "id" : "84029454-04d4-48a9-a7c3-f5c37ef1e9f7",
 669 |       "name" : "Client Host",
 670 |       "protocol" : "openid-connect",
 671 |       "protocolMapper" : "oidc-usersessionmodel-note-mapper",
 672 |       "consentRequired" : false,
 673 |       "config" : {
 674 |         "user.session.note" : "clientHost",
 675 |         "userinfo.token.claim" : "true",
 676 |         "id.token.claim" : "true",
 677 |         "access.token.claim" : "true",
 678 |         "claim.name" : "clientHost",
 679 |         "jsonType.label" : "String"
 680 |       }
 681 |     } ],
 682 |     "defaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
 683 |     "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ],
 684 |     "authorizationSettings" : {
 685 |       "allowRemoteResourceManagement" : false,
 686 |       "policyEnforcementMode" : "ENFORCING",
 687 |       "resources" : [ {
 688 |         "name" : "Posts",
 689 |         "ownerManagedAccess" : false,
 690 |         "attributes" : { },
 691 |         "_id" : "3f8e0dc2-fc77-49d7-99b2-fc86474fad44",
 692 |         "uris" : [ ],
 693 |         "scopes" : [ {
 694 |           "name" : "Unpublish"
 695 |         } ]
 696 |       }, {
 697 |         "name" : "Default Resource",
 698 |         "type" : "urn:blog-api:resources:default",
 699 |         "ownerManagedAccess" : false,
 700 |         "attributes" : { },
 701 |         "_id" : "3ff37f43-0579-44c8-aaed-08e6f77c70c6",
 702 |         "uris" : [ "/*" ]
 703 |       } ],
 704 |       "policies" : [ {
 705 |         "id" : "dda6592c-3034-4cbc-b38c-23a3a5c64f5c",
 706 |         "name" : "Legal Users",
 707 |         "type" : "group",
 708 |         "logic" : "POSITIVE",
 709 |         "decisionStrategy" : "UNANIMOUS",
 710 |         "config" : {
 711 |           "groups" : "[{\"path\":\"/Legal\",\"extendChildren\":false}]"
 712 |         }
 713 |       }, {
 714 |         "id" : "9960ceb6-0317-4383-884c-cb08e87fd2ba",
 715 |         "name" : "Default Policy",
 716 |         "description" : "A policy that grants access only for users within this realm",
 717 |         "type" : "js",
 718 |         "logic" : "POSITIVE",
 719 |         "decisionStrategy" : "AFFIRMATIVE",
 720 |         "config" : {
 721 |           "code" : "// by default, grants any permission associated with this policy\n$evaluation.grant();\n"
 722 |         }
 723 |       }, {
 724 |         "id" : "b50b5648-2c0c-4f54-81ba-d69ebf385ba1",
 725 |         "name" : "Publisher",
 726 |         "type" : "role",
 727 |         "logic" : "POSITIVE",
 728 |         "decisionStrategy" : "UNANIMOUS",
 729 |         "config" : {
 730 |           "roles" : "[{\"id\":\"blog-api/publisher\",\"required\":false}]"
 731 |         }
 732 |       }, {
 733 |         "id" : "dace149a-f85b-4505-8ca1-dd4770d04c4f",
 734 |         "name" : "Default Permission",
 735 |         "description" : "A permission that applies to the default resource type",
 736 |         "type" : "resource",
 737 |         "logic" : "POSITIVE",
 738 |         "decisionStrategy" : "UNANIMOUS",
 739 |         "config" : {
 740 |           "defaultResourceType" : "urn:blog-api:resources:default",
 741 |           "applyPolicies" : "[\"Default Policy\"]"
 742 |         }
 743 |       }, {
 744 |         "id" : "bf0439f2-2754-4da5-bfb9-473354dfa52d",
 745 |         "name" : "CanUnpublishPosts",
 746 |         "type" : "scope",
 747 |         "logic" : "POSITIVE",
 748 |         "decisionStrategy" : "AFFIRMATIVE",
 749 |         "config" : {
 750 |           "resources" : "[\"Posts\"]",
 751 |           "scopes" : "[\"Unpublish\"]",
 752 |           "applyPolicies" : "[\"Legal Users\",\"Publisher\"]"
 753 |         }
 754 |       } ],
 755 |       "scopes" : [ {
 756 |         "id" : "a609d2b3-626c-4f3b-a81f-f47424a5ec04",
 757 |         "name" : "Delete"
 758 |       }, {
 759 |         "id" : "b857ed2d-55e9-44aa-b03c-c3e063f29da2",
 760 |         "name" : "Unpublish"
 761 |       } ],
 762 |       "decisionStrategy" : "UNANIMOUS"
 763 |     }
 764 |   }, {
 765 |     "id" : "fecadf7c-a529-4dbe-bc91-7cdbcd393179",
 766 |     "clientId" : "blog-frontend",
 767 |     "surrogateAuthRequired" : false,
 768 |     "enabled" : true,
 769 |     "alwaysDisplayInConsole" : false,
 770 |     "clientAuthenticatorType" : "client-secret",
 771 |     "secret" : "**********",
 772 |     "redirectUris" : [ "http://localhost:4200/*" ],
 773 |     "webOrigins" : [ "http://localhost:4200" ],
 774 |     "notBefore" : 0,
 775 |     "bearerOnly" : false,
 776 |     "consentRequired" : false,
 777 |     "standardFlowEnabled" : true,
 778 |     "implicitFlowEnabled" : false,
 779 |     "directAccessGrantsEnabled" : false,
 780 |     "serviceAccountsEnabled" : false,
 781 |     "publicClient" : true,
 782 |     "frontchannelLogout" : false,
 783 |     "protocol" : "openid-connect",
 784 |     "attributes" : {
 785 |       "saml.assertion.signature" : "false",
 786 |       "saml.force.post.binding" : "false",
 787 |       "saml.multivalued.roles" : "false",
 788 |       "saml.encrypt" : "false",
 789 |       "backchannel.logout.revoke.offline.tokens" : "false",
 790 |       "saml.server.signature" : "false",
 791 |       "saml.server.signature.keyinfo.ext" : "false",
 792 |       "exclude.session.state.from.auth.response" : "false",
 793 |       "backchannel.logout.session.required" : "false",
 794 |       "client_credentials.use_refresh_token" : "false",
 795 |       "saml_force_name_id_format" : "false",
 796 |       "saml.client.signature" : "false",
 797 |       "tls.client.certificate.bound.access.tokens" : "false",
 798 |       "saml.authnstatement" : "false",
 799 |       "display.on.consent.screen" : "false",
 800 |       "saml.onetimeuse.condition" : "false"
 801 |     },
 802 |     "authenticationFlowBindingOverrides" : { },
 803 |     "fullScopeAllowed" : false,
 804 |     "nodeReRegistrationTimeout" : -1,
 805 |     "defaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
 806 |     "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
 807 |   }, {
 808 |     "id" : "098377c8-91a6-406e-84f1-4f86cc6eec07",
 809 |     "clientId" : "broker",
 810 |     "name" : "${client_broker}",
 811 |     "surrogateAuthRequired" : false,
 812 |     "enabled" : true,
 813 |     "alwaysDisplayInConsole" : false,
 814 |     "clientAuthenticatorType" : "client-secret",
 815 |     "secret" : "**********",
 816 |     "redirectUris" : [ ],
 817 |     "webOrigins" : [ ],
 818 |     "notBefore" : 0,
 819 |     "bearerOnly" : false,
 820 |     "consentRequired" : false,
 821 |     "standardFlowEnabled" : true,
 822 |     "implicitFlowEnabled" : false,
 823 |     "directAccessGrantsEnabled" : false,
 824 |     "serviceAccountsEnabled" : false,
 825 |     "publicClient" : false,
 826 |     "frontchannelLogout" : false,
 827 |     "protocol" : "openid-connect",
 828 |     "attributes" : { },
 829 |     "authenticationFlowBindingOverrides" : { },
 830 |     "fullScopeAllowed" : false,
 831 |     "nodeReRegistrationTimeout" : 0,
 832 |     "defaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
 833 |     "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
 834 |   }, {
 835 |     "id" : "78591a66-2071-49f1-881c-cab9a3a78bcd",
 836 |     "clientId" : "realm-management",
 837 |     "name" : "${client_realm-management}",
 838 |     "surrogateAuthRequired" : false,
 839 |     "enabled" : true,
 840 |     "alwaysDisplayInConsole" : false,
 841 |     "clientAuthenticatorType" : "client-secret",
 842 |     "secret" : "**********",
 843 |     "redirectUris" : [ ],
 844 |     "webOrigins" : [ ],
 845 |     "notBefore" : 0,
 846 |     "bearerOnly" : true,
 847 |     "consentRequired" : false,
 848 |     "standardFlowEnabled" : true,
 849 |     "implicitFlowEnabled" : false,
 850 |     "directAccessGrantsEnabled" : false,
 851 |     "serviceAccountsEnabled" : false,
 852 |     "publicClient" : false,
 853 |     "frontchannelLogout" : false,
 854 |     "protocol" : "openid-connect",
 855 |     "attributes" : { },
 856 |     "authenticationFlowBindingOverrides" : { },
 857 |     "fullScopeAllowed" : false,
 858 |     "nodeReRegistrationTimeout" : 0,
 859 |     "defaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
 860 |     "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
 861 |   }, {
 862 |     "id" : "a795c95d-213f-402c-9732-1bab92f15a51",
 863 |     "clientId" : "security-admin-console",
 864 |     "name" : "${client_security-admin-console}",
 865 |     "rootUrl" : "${authAdminUrl}",
 866 |     "baseUrl" : "/admin/webinar/console/",
 867 |     "surrogateAuthRequired" : false,
 868 |     "enabled" : true,
 869 |     "alwaysDisplayInConsole" : false,
 870 |     "clientAuthenticatorType" : "client-secret",
 871 |     "secret" : "**********",
 872 |     "redirectUris" : [ "/admin/webinar/console/*" ],
 873 |     "webOrigins" : [ "+" ],
 874 |     "notBefore" : 0,
 875 |     "bearerOnly" : false,
 876 |     "consentRequired" : false,
 877 |     "standardFlowEnabled" : true,
 878 |     "implicitFlowEnabled" : false,
 879 |     "directAccessGrantsEnabled" : false,
 880 |     "serviceAccountsEnabled" : false,
 881 |     "publicClient" : true,
 882 |     "frontchannelLogout" : false,
 883 |     "protocol" : "openid-connect",
 884 |     "attributes" : {
 885 |       "pkce.code.challenge.method" : "S256"
 886 |     },
 887 |     "authenticationFlowBindingOverrides" : { },
 888 |     "fullScopeAllowed" : false,
 889 |     "nodeReRegistrationTimeout" : 0,
 890 |     "protocolMappers" : [ {
 891 |       "id" : "fba2eb21-ca16-449c-9680-c53ccc034843",
 892 |       "name" : "locale",
 893 |       "protocol" : "openid-connect",
 894 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
 895 |       "consentRequired" : false,
 896 |       "config" : {
 897 |         "userinfo.token.claim" : "true",
 898 |         "user.attribute" : "locale",
 899 |         "id.token.claim" : "true",
 900 |         "access.token.claim" : "true",
 901 |         "claim.name" : "locale",
 902 |         "jsonType.label" : "String"
 903 |       }
 904 |     } ],
 905 |     "defaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
 906 |     "optionalClientScopes" : [ "address", "phone", "offline_access", "microprofile-jwt" ]
 907 |   } ],
 908 |   "clientScopes" : [ {
 909 |     "id" : "8aa9235a-7e53-4c64-bd00-b4fe9bd5e442",
 910 |     "name" : "address",
 911 |     "description" : "OpenID Connect built-in scope: address",
 912 |     "protocol" : "openid-connect",
 913 |     "attributes" : {
 914 |       "include.in.token.scope" : "true",
 915 |       "display.on.consent.screen" : "true",
 916 |       "consent.screen.text" : "${addressScopeConsentText}"
 917 |     },
 918 |     "protocolMappers" : [ {
 919 |       "id" : "89b18b3d-b4c4-4d7a-aece-23834531cbc5",
 920 |       "name" : "address",
 921 |       "protocol" : "openid-connect",
 922 |       "protocolMapper" : "oidc-address-mapper",
 923 |       "consentRequired" : false,
 924 |       "config" : {
 925 |         "user.attribute.formatted" : "formatted",
 926 |         "user.attribute.country" : "country",
 927 |         "user.attribute.postal_code" : "postal_code",
 928 |         "userinfo.token.claim" : "true",
 929 |         "user.attribute.street" : "street",
 930 |         "id.token.claim" : "true",
 931 |         "user.attribute.region" : "region",
 932 |         "access.token.claim" : "true",
 933 |         "user.attribute.locality" : "locality"
 934 |       }
 935 |     } ]
 936 |   }, {
 937 |     "id" : "d1fa62eb-92e2-4f19-80fe-9be962e6e9c8",
 938 |     "name" : "email",
 939 |     "description" : "OpenID Connect built-in scope: email",
 940 |     "protocol" : "openid-connect",
 941 |     "attributes" : {
 942 |       "include.in.token.scope" : "true",
 943 |       "display.on.consent.screen" : "true",
 944 |       "consent.screen.text" : "${emailScopeConsentText}"
 945 |     },
 946 |     "protocolMappers" : [ {
 947 |       "id" : "0ff6ddc5-21dd-4ed2-b3f2-4a63dc9e581c",
 948 |       "name" : "email verified",
 949 |       "protocol" : "openid-connect",
 950 |       "protocolMapper" : "oidc-usermodel-property-mapper",
 951 |       "consentRequired" : false,
 952 |       "config" : {
 953 |         "userinfo.token.claim" : "true",
 954 |         "user.attribute" : "emailVerified",
 955 |         "id.token.claim" : "true",
 956 |         "access.token.claim" : "true",
 957 |         "claim.name" : "email_verified",
 958 |         "jsonType.label" : "boolean"
 959 |       }
 960 |     }, {
 961 |       "id" : "bdbb691a-7133-40ba-9d9b-4ae0cbcdd233",
 962 |       "name" : "email",
 963 |       "protocol" : "openid-connect",
 964 |       "protocolMapper" : "oidc-usermodel-property-mapper",
 965 |       "consentRequired" : false,
 966 |       "config" : {
 967 |         "userinfo.token.claim" : "true",
 968 |         "user.attribute" : "email",
 969 |         "id.token.claim" : "true",
 970 |         "access.token.claim" : "true",
 971 |         "claim.name" : "email",
 972 |         "jsonType.label" : "String"
 973 |       }
 974 |     } ]
 975 |   }, {
 976 |     "id" : "1e1527c3-fe70-40b2-9a7a-7ed2dd346d72",
 977 |     "name" : "microprofile-jwt",
 978 |     "description" : "Microprofile - JWT built-in scope",
 979 |     "protocol" : "openid-connect",
 980 |     "attributes" : {
 981 |       "include.in.token.scope" : "true",
 982 |       "display.on.consent.screen" : "false"
 983 |     },
 984 |     "protocolMappers" : [ {
 985 |       "id" : "fc4f2a38-a210-4247-bdbb-691bc78a383f",
 986 |       "name" : "groups",
 987 |       "protocol" : "openid-connect",
 988 |       "protocolMapper" : "oidc-usermodel-realm-role-mapper",
 989 |       "consentRequired" : false,
 990 |       "config" : {
 991 |         "multivalued" : "true",
 992 |         "userinfo.token.claim" : "true",
 993 |         "user.attribute" : "foo",
 994 |         "id.token.claim" : "true",
 995 |         "access.token.claim" : "true",
 996 |         "claim.name" : "groups",
 997 |         "jsonType.label" : "String"
 998 |       }
 999 |     }, {
1000 |       "id" : "9d2d832e-8b56-4558-9704-6a24507770c5",
1001 |       "name" : "upn",
1002 |       "protocol" : "openid-connect",
1003 |       "protocolMapper" : "oidc-usermodel-property-mapper",
1004 |       "consentRequired" : false,
1005 |       "config" : {
1006 |         "userinfo.token.claim" : "true",
1007 |         "user.attribute" : "username",
1008 |         "id.token.claim" : "true",
1009 |         "access.token.claim" : "true",
1010 |         "claim.name" : "upn",
1011 |         "jsonType.label" : "String"
1012 |       }
1013 |     } ]
1014 |   }, {
1015 |     "id" : "5a5eb652-a05a-491b-b5b5-67c3189ee4a0",
1016 |     "name" : "offline_access",
1017 |     "description" : "OpenID Connect built-in scope: offline_access",
1018 |     "protocol" : "openid-connect",
1019 |     "attributes" : {
1020 |       "consent.screen.text" : "${offlineAccessScopeConsentText}",
1021 |       "display.on.consent.screen" : "true"
1022 |     }
1023 |   }, {
1024 |     "id" : "bdb40a62-2434-4693-8895-b24eece8285e",
1025 |     "name" : "phone",
1026 |     "description" : "OpenID Connect built-in scope: phone",
1027 |     "protocol" : "openid-connect",
1028 |     "attributes" : {
1029 |       "include.in.token.scope" : "true",
1030 |       "display.on.consent.screen" : "true",
1031 |       "consent.screen.text" : "${phoneScopeConsentText}"
1032 |     },
1033 |     "protocolMappers" : [ {
1034 |       "id" : "bb2796f0-1de4-4b41-9f81-c8c28ea03ff6",
1035 |       "name" : "phone number",
1036 |       "protocol" : "openid-connect",
1037 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1038 |       "consentRequired" : false,
1039 |       "config" : {
1040 |         "userinfo.token.claim" : "true",
1041 |         "user.attribute" : "phoneNumber",
1042 |         "id.token.claim" : "true",
1043 |         "access.token.claim" : "true",
1044 |         "claim.name" : "phone_number",
1045 |         "jsonType.label" : "String"
1046 |       }
1047 |     }, {
1048 |       "id" : "0b1ad546-0594-4931-a840-0bb68f50c1d4",
1049 |       "name" : "phone number verified",
1050 |       "protocol" : "openid-connect",
1051 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1052 |       "consentRequired" : false,
1053 |       "config" : {
1054 |         "userinfo.token.claim" : "true",
1055 |         "user.attribute" : "phoneNumberVerified",
1056 |         "id.token.claim" : "true",
1057 |         "access.token.claim" : "true",
1058 |         "claim.name" : "phone_number_verified",
1059 |         "jsonType.label" : "boolean"
1060 |       }
1061 |     } ]
1062 |   }, {
1063 |     "id" : "88647a96-dbfb-414f-a638-5028e24c5ce7",
1064 |     "name" : "profile",
1065 |     "description" : "OpenID Connect built-in scope: profile",
1066 |     "protocol" : "openid-connect",
1067 |     "attributes" : {
1068 |       "include.in.token.scope" : "true",
1069 |       "display.on.consent.screen" : "true",
1070 |       "consent.screen.text" : "${profileScopeConsentText}"
1071 |     },
1072 |     "protocolMappers" : [ {
1073 |       "id" : "d66a0257-f7f2-4f2e-b141-797e137bf580",
1074 |       "name" : "website",
1075 |       "protocol" : "openid-connect",
1076 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1077 |       "consentRequired" : false,
1078 |       "config" : {
1079 |         "userinfo.token.claim" : "true",
1080 |         "user.attribute" : "website",
1081 |         "id.token.claim" : "true",
1082 |         "access.token.claim" : "true",
1083 |         "claim.name" : "website",
1084 |         "jsonType.label" : "String"
1085 |       }
1086 |     }, {
1087 |       "id" : "99a41c0d-eb3b-4caa-8d62-962345a0d13f",
1088 |       "name" : "gender",
1089 |       "protocol" : "openid-connect",
1090 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1091 |       "consentRequired" : false,
1092 |       "config" : {
1093 |         "userinfo.token.claim" : "true",
1094 |         "user.attribute" : "gender",
1095 |         "id.token.claim" : "true",
1096 |         "access.token.claim" : "true",
1097 |         "claim.name" : "gender",
1098 |         "jsonType.label" : "String"
1099 |       }
1100 |     }, {
1101 |       "id" : "e407e1db-d0d4-4dce-908f-bc9dba757813",
1102 |       "name" : "family name",
1103 |       "protocol" : "openid-connect",
1104 |       "protocolMapper" : "oidc-usermodel-property-mapper",
1105 |       "consentRequired" : false,
1106 |       "config" : {
1107 |         "userinfo.token.claim" : "true",
1108 |         "user.attribute" : "lastName",
1109 |         "id.token.claim" : "true",
1110 |         "access.token.claim" : "true",
1111 |         "claim.name" : "family_name",
1112 |         "jsonType.label" : "String"
1113 |       }
1114 |     }, {
1115 |       "id" : "5e69b039-3658-48b6-a55a-b1e1907ace21",
1116 |       "name" : "profile",
1117 |       "protocol" : "openid-connect",
1118 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1119 |       "consentRequired" : false,
1120 |       "config" : {
1121 |         "userinfo.token.claim" : "true",
1122 |         "user.attribute" : "profile",
1123 |         "id.token.claim" : "true",
1124 |         "access.token.claim" : "true",
1125 |         "claim.name" : "profile",
1126 |         "jsonType.label" : "String"
1127 |       }
1128 |     }, {
1129 |       "id" : "1670e33c-9b2e-428d-892e-f93cf35262c2",
1130 |       "name" : "zoneinfo",
1131 |       "protocol" : "openid-connect",
1132 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1133 |       "consentRequired" : false,
1134 |       "config" : {
1135 |         "userinfo.token.claim" : "true",
1136 |         "user.attribute" : "zoneinfo",
1137 |         "id.token.claim" : "true",
1138 |         "access.token.claim" : "true",
1139 |         "claim.name" : "zoneinfo",
1140 |         "jsonType.label" : "String"
1141 |       }
1142 |     }, {
1143 |       "id" : "7947b31e-cacb-4789-b20f-1377c0a26baa",
1144 |       "name" : "locale",
1145 |       "protocol" : "openid-connect",
1146 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1147 |       "consentRequired" : false,
1148 |       "config" : {
1149 |         "userinfo.token.claim" : "true",
1150 |         "user.attribute" : "locale",
1151 |         "id.token.claim" : "true",
1152 |         "access.token.claim" : "true",
1153 |         "claim.name" : "locale",
1154 |         "jsonType.label" : "String"
1155 |       }
1156 |     }, {
1157 |       "id" : "80a727c9-6b45-4373-8a29-03a83968ce12",
1158 |       "name" : "middle name",
1159 |       "protocol" : "openid-connect",
1160 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1161 |       "consentRequired" : false,
1162 |       "config" : {
1163 |         "userinfo.token.claim" : "true",
1164 |         "user.attribute" : "middleName",
1165 |         "id.token.claim" : "true",
1166 |         "access.token.claim" : "true",
1167 |         "claim.name" : "middle_name",
1168 |         "jsonType.label" : "String"
1169 |       }
1170 |     }, {
1171 |       "id" : "e836ca22-4734-4c47-9144-d4dd7f401327",
1172 |       "name" : "birthdate",
1173 |       "protocol" : "openid-connect",
1174 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1175 |       "consentRequired" : false,
1176 |       "config" : {
1177 |         "userinfo.token.claim" : "true",
1178 |         "user.attribute" : "birthdate",
1179 |         "id.token.claim" : "true",
1180 |         "access.token.claim" : "true",
1181 |         "claim.name" : "birthdate",
1182 |         "jsonType.label" : "String"
1183 |       }
1184 |     }, {
1185 |       "id" : "ef0f3d0c-c9b2-47e8-9a39-b4436b87047e",
1186 |       "name" : "updated at",
1187 |       "protocol" : "openid-connect",
1188 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1189 |       "consentRequired" : false,
1190 |       "config" : {
1191 |         "userinfo.token.claim" : "true",
1192 |         "user.attribute" : "updatedAt",
1193 |         "id.token.claim" : "true",
1194 |         "access.token.claim" : "true",
1195 |         "claim.name" : "updated_at",
1196 |         "jsonType.label" : "String"
1197 |       }
1198 |     }, {
1199 |       "id" : "73c76e5d-1314-4fd5-a553-dfe240ac4c2e",
1200 |       "name" : "username",
1201 |       "protocol" : "openid-connect",
1202 |       "protocolMapper" : "oidc-usermodel-property-mapper",
1203 |       "consentRequired" : false,
1204 |       "config" : {
1205 |         "userinfo.token.claim" : "true",
1206 |         "user.attribute" : "username",
1207 |         "id.token.claim" : "true",
1208 |         "access.token.claim" : "true",
1209 |         "claim.name" : "preferred_username",
1210 |         "jsonType.label" : "String"
1211 |       }
1212 |     }, {
1213 |       "id" : "62221706-141d-41ac-a0ab-3e29d27b5921",
1214 |       "name" : "full name",
1215 |       "protocol" : "openid-connect",
1216 |       "protocolMapper" : "oidc-full-name-mapper",
1217 |       "consentRequired" : false,
1218 |       "config" : {
1219 |         "id.token.claim" : "true",
1220 |         "access.token.claim" : "true",
1221 |         "userinfo.token.claim" : "true"
1222 |       }
1223 |     }, {
1224 |       "id" : "6fcbb398-67df-4329-89a6-96aacc8367cf",
1225 |       "name" : "given name",
1226 |       "protocol" : "openid-connect",
1227 |       "protocolMapper" : "oidc-usermodel-property-mapper",
1228 |       "consentRequired" : false,
1229 |       "config" : {
1230 |         "userinfo.token.claim" : "true",
1231 |         "user.attribute" : "firstName",
1232 |         "id.token.claim" : "true",
1233 |         "access.token.claim" : "true",
1234 |         "claim.name" : "given_name",
1235 |         "jsonType.label" : "String"
1236 |       }
1237 |     }, {
1238 |       "id" : "7595c83a-3372-4ff2-b26d-0459b3cfaee7",
1239 |       "name" : "nickname",
1240 |       "protocol" : "openid-connect",
1241 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1242 |       "consentRequired" : false,
1243 |       "config" : {
1244 |         "userinfo.token.claim" : "true",
1245 |         "user.attribute" : "nickname",
1246 |         "id.token.claim" : "true",
1247 |         "access.token.claim" : "true",
1248 |         "claim.name" : "nickname",
1249 |         "jsonType.label" : "String"
1250 |       }
1251 |     }, {
1252 |       "id" : "96b2828a-3691-408a-8b81-a46681f79577",
1253 |       "name" : "picture",
1254 |       "protocol" : "openid-connect",
1255 |       "protocolMapper" : "oidc-usermodel-attribute-mapper",
1256 |       "consentRequired" : false,
1257 |       "config" : {
1258 |         "userinfo.token.claim" : "true",
1259 |         "user.attribute" : "picture",
1260 |         "id.token.claim" : "true",
1261 |         "access.token.claim" : "true",
1262 |         "claim.name" : "picture",
1263 |         "jsonType.label" : "String"
1264 |       }
1265 |     } ]
1266 |   }, {
1267 |     "id" : "48a82fda-38c1-4ca6-97b0-31183b423dc6",
1268 |     "name" : "role_list",
1269 |     "description" : "SAML role list",
1270 |     "protocol" : "saml",
1271 |     "attributes" : {
1272 |       "consent.screen.text" : "${samlRoleListScopeConsentText}",
1273 |       "display.on.consent.screen" : "true"
1274 |     },
1275 |     "protocolMappers" : [ {
1276 |       "id" : "4611c558-1cb2-4e8f-b868-84095ac22214",
1277 |       "name" : "role list",
1278 |       "protocol" : "saml",
1279 |       "protocolMapper" : "saml-role-list-mapper",
1280 |       "consentRequired" : false,
1281 |       "config" : {
1282 |         "single" : "false",
1283 |         "attribute.nameformat" : "Basic",
1284 |         "attribute.name" : "Role"
1285 |       }
1286 |     } ]
1287 |   }, {
1288 |     "id" : "baa677b1-1681-4abf-b03a-d496cb64796a",
1289 |     "name" : "roles",
1290 |     "description" : "OpenID Connect scope for add user roles to the access token",
1291 |     "protocol" : "openid-connect",
1292 |     "attributes" : {
1293 |       "include.in.token.scope" : "false",
1294 |       "display.on.consent.screen" : "true",
1295 |       "consent.screen.text" : "${rolesScopeConsentText}"
1296 |     },
1297 |     "protocolMappers" : [ {
1298 |       "id" : "b588b802-ad21-461a-8930-65e60a04144d",
1299 |       "name" : "audience resolve",
1300 |       "protocol" : "openid-connect",
1301 |       "protocolMapper" : "oidc-audience-resolve-mapper",
1302 |       "consentRequired" : false,
1303 |       "config" : { }
1304 |     }, {
1305 |       "id" : "f5156d09-401c-4af4-a572-9297a2b4add0",
1306 |       "name" : "realm roles",
1307 |       "protocol" : "openid-connect",
1308 |       "protocolMapper" : "oidc-usermodel-realm-role-mapper",
1309 |       "consentRequired" : false,
1310 |       "config" : {
1311 |         "user.attribute" : "foo",
1312 |         "access.token.claim" : "true",
1313 |         "claim.name" : "realm_access.roles",
1314 |         "jsonType.label" : "String",
1315 |         "multivalued" : "true"
1316 |       }
1317 |     }, {
1318 |       "id" : "8b20f16a-b9ae-4c11-9f49-678b152b4151",
1319 |       "name" : "client roles",
1320 |       "protocol" : "openid-connect",
1321 |       "protocolMapper" : "oidc-usermodel-client-role-mapper",
1322 |       "consentRequired" : false,
1323 |       "config" : {
1324 |         "user.attribute" : "foo",
1325 |         "access.token.claim" : "true",
1326 |         "claim.name" : "resource_access.${client_id}.roles",
1327 |         "jsonType.label" : "String",
1328 |         "multivalued" : "true"
1329 |       }
1330 |     } ]
1331 |   }, {
1332 |     "id" : "365922fa-a581-44e8-a476-9aaadba014cb",
1333 |     "name" : "web-origins",
1334 |     "description" : "OpenID Connect scope for add allowed web origins to the access token",
1335 |     "protocol" : "openid-connect",
1336 |     "attributes" : {
1337 |       "include.in.token.scope" : "false",
1338 |       "display.on.consent.screen" : "false",
1339 |       "consent.screen.text" : ""
1340 |     },
1341 |     "protocolMappers" : [ {
1342 |       "id" : "49326895-7789-48b6-ae61-b8978d7e0815",
1343 |       "name" : "allowed web origins",
1344 |       "protocol" : "openid-connect",
1345 |       "protocolMapper" : "oidc-allowed-origins-mapper",
1346 |       "consentRequired" : false,
1347 |       "config" : { }
1348 |     } ]
1349 |   } ],
1350 |   "defaultDefaultClientScopes" : [ "web-origins", "role_list", "profile", "roles", "email" ],
1351 |   "defaultOptionalClientScopes" : [ "microprofile-jwt", "offline_access", "address", "phone" ],
1352 |   "browserSecurityHeaders" : {
1353 |     "contentSecurityPolicyReportOnly" : "",
1354 |     "xContentTypeOptions" : "nosniff",
1355 |     "xRobotsTag" : "none",
1356 |     "xFrameOptions" : "SAMEORIGIN",
1357 |     "contentSecurityPolicy" : "frame-src 'self'; frame-ancestors 'self'; object-src 'none';",
1358 |     "xXSSProtection" : "1; mode=block",
1359 |     "strictTransportSecurity" : "max-age=31536000; includeSubDomains"
1360 |   },
1361 |   "smtpServer" : { },
1362 |   "eventsEnabled" : false,
1363 |   "eventsListeners" : [ "jboss-logging" ],
1364 |   "enabledEventTypes" : [ ],
1365 |   "adminEventsEnabled" : false,
1366 |   "adminEventsDetailsEnabled" : false,
1367 |   "identityProviders" : [ ],
1368 |   "identityProviderMappers" : [ ],
1369 |   "components" : {
1370 |     "org.keycloak.services.clientregistration.policy.ClientRegistrationPolicy" : [ {
1371 |       "id" : "fae6ae58-3b2d-49ee-973d-b711eaebf255",
1372 |       "name" : "Allowed Client Scopes",
1373 |       "providerId" : "allowed-client-templates",
1374 |       "subType" : "anonymous",
1375 |       "subComponents" : { },
1376 |       "config" : {
1377 |         "allow-default-scopes" : [ "true" ]
1378 |       }
1379 |     }, {
1380 |       "id" : "f845dfce-f60d-4e0e-a0dd-4a8aa8e6ecbd",
1381 |       "name" : "Trusted Hosts",
1382 |       "providerId" : "trusted-hosts",
1383 |       "subType" : "anonymous",
1384 |       "subComponents" : { },
1385 |       "config" : {
1386 |         "host-sending-registration-request-must-match" : [ "true" ],
1387 |         "client-uris-must-match" : [ "true" ]
1388 |       }
1389 |     }, {
1390 |       "id" : "214f65ef-70b3-4f17-a52d-ccb0f253b614",
1391 |       "name" : "Full Scope Disabled",
1392 |       "providerId" : "scope",
1393 |       "subType" : "anonymous",
1394 |       "subComponents" : { },
1395 |       "config" : { }
1396 |     }, {
1397 |       "id" : "002de709-c1ab-4387-b857-2ef5855ecef1",
1398 |       "name" : "Consent Required",
1399 |       "providerId" : "consent-required",
1400 |       "subType" : "anonymous",
1401 |       "subComponents" : { },
1402 |       "config" : { }
1403 |     }, {
1404 |       "id" : "20fa143b-4494-42a2-95f5-8e9f09ab1469",
1405 |       "name" : "Allowed Client Scopes",
1406 |       "providerId" : "allowed-client-templates",
1407 |       "subType" : "authenticated",
1408 |       "subComponents" : { },
1409 |       "config" : {
1410 |         "allow-default-scopes" : [ "true" ]
1411 |       }
1412 |     }, {
1413 |       "id" : "73dea15e-238a-4799-a1f3-02533e234c08",
1414 |       "name" : "Allowed Protocol Mapper Types",
1415 |       "providerId" : "allowed-protocol-mappers",
1416 |       "subType" : "anonymous",
1417 |       "subComponents" : { },
1418 |       "config" : {
1419 |         "allowed-protocol-mapper-types" : [ "oidc-usermodel-attribute-mapper", "oidc-address-mapper", "oidc-full-name-mapper", "saml-user-property-mapper", "saml-user-attribute-mapper", "oidc-sha256-pairwise-sub-mapper", "saml-role-list-mapper", "oidc-usermodel-property-mapper" ]
1420 |       }
1421 |     }, {
1422 |       "id" : "335d0d8e-aaa3-427b-a239-4615a760aa94",
1423 |       "name" : "Max Clients Limit",
1424 |       "providerId" : "max-clients",
1425 |       "subType" : "anonymous",
1426 |       "subComponents" : { },
1427 |       "config" : {
1428 |         "max-clients" : [ "200" ]
1429 |       }
1430 |     }, {
1431 |       "id" : "0c7783c9-5f9e-4438-ab79-471ec89ed503",
1432 |       "name" : "Allowed Protocol Mapper Types",
1433 |       "providerId" : "allowed-protocol-mappers",
1434 |       "subType" : "authenticated",
1435 |       "subComponents" : { },
1436 |       "config" : {
1437 |         "allowed-protocol-mapper-types" : [ "oidc-address-mapper", "oidc-usermodel-property-mapper", "saml-role-list-mapper", "oidc-full-name-mapper", "saml-user-attribute-mapper", "oidc-usermodel-attribute-mapper", "oidc-sha256-pairwise-sub-mapper", "saml-user-property-mapper" ]
1438 |       }
1439 |     } ],
1440 |     "org.keycloak.keys.KeyProvider" : [ {
1441 |       "id" : "c76ddcda-f201-40e4-ab8d-121cf760bf60",
1442 |       "name" : "aes-generated",
1443 |       "providerId" : "aes-generated",
1444 |       "subComponents" : { },
1445 |       "config" : {
1446 |         "kid" : [ "6209f806-81ef-48c8-8151-f42bc22d2e4a" ],
1447 |         "secret" : [ "cHtgY-HxJp8qwfciYty7Tw" ],
1448 |         "priority" : [ "100" ]
1449 |       }
1450 |     }, {
1451 |       "id" : "1a355471-2d12-4d74-b509-656731460868",
1452 |       "name" : "rsa-generated",
1453 |       "providerId" : "rsa-generated",
1454 |       "subComponents" : { },
1455 |       "config" : {
1456 |         "privateKey" : [ "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" ],
1457 |         "certificate" : [ "MIICnTCCAYUCBgF3YvfpazANBgkqhkiG9w0BAQsFADASMRAwDgYDVQQDDAd3ZWJpbmFyMB4XDTIxMDIwMjEzMzczMFoXDTMxMDIwMjEzMzkxMFowEjEQMA4GA1UEAwwHd2ViaW5hcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJoJC5IoP1aCHBvRogAUEX7wf1wlbef4DJHaK6pwtT7RCLzNfSecc3o+GUu+SI7GUClEJ/6gajSt6UWAyqmf9JFTU6AsMv0GrJeO/QbOAdClanmxxjVQGf6spEMJ6r+XUQlPPQPsQnKrkLQ0MawsJMoHGNloQ/1J1tpzibeLLkJndwbrYfD57UGzD8BAGZOOpMpVkIqv0rXKIslels7dVDc8EPxgKrAvWuhLg6Qdl4O/vBC52ZHP1EwUZrWkZKw3r8SymWpPL1k6pVxem8GxwbMHtTue5CO4SkAX/twH0VEw/uXh83ttOPKqqiaJH4jz2UmbCOfOyVK8KC1IarF2dIUCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAHwP+lCbzAZPanP+QfPX4awuX7ihvpRF24DYIKF+0AsgWfciuU7XUdsLrn0t2Y+dpuAnjwCwIwNnzKux7tYiGRw/WTqJDX8jCxNzRRzvs4U7mA28rA+Jr2Sh9eAKbfxJ7WyVz6/PBLntuLJvRuwjUzLEs9j3twoX/529r/gLb+fsaXoE0BOilZ1ANGtkQxeiE/AmtTTO3fQb1bGnxozHMbEltPHXGLj8SGScaBPN0pwEGuAepkqmGKn8FT1E3uUnU7W6oANE5nEWeSubdQrD4LbFn0KzJ+a3xReTpojngVpjI3CRbRXKR+R9o5nNZbmBa/Mh5MKK0hrhKxlcEHP69SQ==" ],
1458 |         "priority" : [ "100" ]
1459 |       }
1460 |     }, {
1461 |       "id" : "c79f8dcf-9e74-4d7e-8016-e9286acb5ccb",
1462 |       "name" : "hmac-generated",
1463 |       "providerId" : "hmac-generated",
1464 |       "subComponents" : { },
1465 |       "config" : {
1466 |         "kid" : [ "bc5e80c7-530c-4670-983b-68038ef15209" ],
1467 |         "secret" : [ "jvKdtd-qcuLCITG3ktj1GVBC_GDciZIPnYUAJuuduRyYCVAvPmZ8YEU_Al_1IP4L_Q8aYurzuxQEXSRKf4TbmA" ],
1468 |         "priority" : [ "100" ],
1469 |         "algorithm" : [ "HS256" ]
1470 |       }
1471 |     } ]
1472 |   },
1473 |   "internationalizationEnabled" : false,
1474 |   "supportedLocales" : [ ],
1475 |   "authenticationFlows" : [ {
1476 |     "id" : "608e1631-760f-456c-9438-b2446c5a749b",
1477 |     "alias" : "Account verification options",
1478 |     "description" : "Method with which to verity the existing account",
1479 |     "providerId" : "basic-flow",
1480 |     "topLevel" : false,
1481 |     "builtIn" : true,
1482 |     "authenticationExecutions" : [ {
1483 |       "authenticator" : "idp-email-verification",
1484 |       "requirement" : "ALTERNATIVE",
1485 |       "priority" : 10,
1486 |       "userSetupAllowed" : false,
1487 |       "autheticatorFlow" : false
1488 |     }, {
1489 |       "requirement" : "ALTERNATIVE",
1490 |       "priority" : 20,
1491 |       "flowAlias" : "Verify Existing Account by Re-authentication",
1492 |       "userSetupAllowed" : false,
1493 |       "autheticatorFlow" : true
1494 |     } ]
1495 |   }, {
1496 |     "id" : "a46f54b7-0294-4a5a-a403-b4a5933b5dee",
1497 |     "alias" : "Authentication Options",
1498 |     "description" : "Authentication options.",
1499 |     "providerId" : "basic-flow",
1500 |     "topLevel" : false,
1501 |     "builtIn" : true,
1502 |     "authenticationExecutions" : [ {
1503 |       "authenticator" : "basic-auth",
1504 |       "requirement" : "REQUIRED",
1505 |       "priority" : 10,
1506 |       "userSetupAllowed" : false,
1507 |       "autheticatorFlow" : false
1508 |     }, {
1509 |       "authenticator" : "basic-auth-otp",
1510 |       "requirement" : "DISABLED",
1511 |       "priority" : 20,
1512 |       "userSetupAllowed" : false,
1513 |       "autheticatorFlow" : false
1514 |     }, {
1515 |       "authenticator" : "auth-spnego",
1516 |       "requirement" : "DISABLED",
1517 |       "priority" : 30,
1518 |       "userSetupAllowed" : false,
1519 |       "autheticatorFlow" : false
1520 |     } ]
1521 |   }, {
1522 |     "id" : "2139b26d-b5bb-4f61-9960-fb3856efc0b4",
1523 |     "alias" : "Browser - Conditional OTP",
1524 |     "description" : "Flow to determine if the OTP is required for the authentication",
1525 |     "providerId" : "basic-flow",
1526 |     "topLevel" : false,
1527 |     "builtIn" : true,
1528 |     "authenticationExecutions" : [ {
1529 |       "authenticator" : "conditional-user-configured",
1530 |       "requirement" : "REQUIRED",
1531 |       "priority" : 10,
1532 |       "userSetupAllowed" : false,
1533 |       "autheticatorFlow" : false
1534 |     }, {
1535 |       "authenticator" : "auth-otp-form",
1536 |       "requirement" : "REQUIRED",
1537 |       "priority" : 20,
1538 |       "userSetupAllowed" : false,
1539 |       "autheticatorFlow" : false
1540 |     } ]
1541 |   }, {
1542 |     "id" : "c2ebc249-1109-465b-96fa-0b5593c5ceb7",
1543 |     "alias" : "Direct Grant - Conditional OTP",
1544 |     "description" : "Flow to determine if the OTP is required for the authentication",
1545 |     "providerId" : "basic-flow",
1546 |     "topLevel" : false,
1547 |     "builtIn" : true,
1548 |     "authenticationExecutions" : [ {
1549 |       "authenticator" : "conditional-user-configured",
1550 |       "requirement" : "REQUIRED",
1551 |       "priority" : 10,
1552 |       "userSetupAllowed" : false,
1553 |       "autheticatorFlow" : false
1554 |     }, {
1555 |       "authenticator" : "direct-grant-validate-otp",
1556 |       "requirement" : "REQUIRED",
1557 |       "priority" : 20,
1558 |       "userSetupAllowed" : false,
1559 |       "autheticatorFlow" : false
1560 |     } ]
1561 |   }, {
1562 |     "id" : "e97072ba-e7f8-4028-9ba2-2bd2e80e34bb",
1563 |     "alias" : "First broker login - Conditional OTP",
1564 |     "description" : "Flow to determine if the OTP is required for the authentication",
1565 |     "providerId" : "basic-flow",
1566 |     "topLevel" : false,
1567 |     "builtIn" : true,
1568 |     "authenticationExecutions" : [ {
1569 |       "authenticator" : "conditional-user-configured",
1570 |       "requirement" : "REQUIRED",
1571 |       "priority" : 10,
1572 |       "userSetupAllowed" : false,
1573 |       "autheticatorFlow" : false
1574 |     }, {
1575 |       "authenticator" : "auth-otp-form",
1576 |       "requirement" : "REQUIRED",
1577 |       "priority" : 20,
1578 |       "userSetupAllowed" : false,
1579 |       "autheticatorFlow" : false
1580 |     } ]
1581 |   }, {
1582 |     "id" : "b4bf9cd5-af0f-49ba-a7e5-3f0b18f3b2bb",
1583 |     "alias" : "Handle Existing Account",
1584 |     "description" : "Handle what to do if there is existing account with same email/username like authenticated identity provider",
1585 |     "providerId" : "basic-flow",
1586 |     "topLevel" : false,
1587 |     "builtIn" : true,
1588 |     "authenticationExecutions" : [ {
1589 |       "authenticator" : "idp-confirm-link",
1590 |       "requirement" : "REQUIRED",
1591 |       "priority" : 10,
1592 |       "userSetupAllowed" : false,
1593 |       "autheticatorFlow" : false
1594 |     }, {
1595 |       "requirement" : "REQUIRED",
1596 |       "priority" : 20,
1597 |       "flowAlias" : "Account verification options",
1598 |       "userSetupAllowed" : false,
1599 |       "autheticatorFlow" : true
1600 |     } ]
1601 |   }, {
1602 |     "id" : "0d22fdac-8683-4812-883e-b79e2d4750f7",
1603 |     "alias" : "Reset - Conditional OTP",
1604 |     "description" : "Flow to determine if the OTP should be reset or not. Set to REQUIRED to force.",
1605 |     "providerId" : "basic-flow",
1606 |     "topLevel" : false,
1607 |     "builtIn" : true,
1608 |     "authenticationExecutions" : [ {
1609 |       "authenticator" : "conditional-user-configured",
1610 |       "requirement" : "REQUIRED",
1611 |       "priority" : 10,
1612 |       "userSetupAllowed" : false,
1613 |       "autheticatorFlow" : false
1614 |     }, {
1615 |       "authenticator" : "reset-otp",
1616 |       "requirement" : "REQUIRED",
1617 |       "priority" : 20,
1618 |       "userSetupAllowed" : false,
1619 |       "autheticatorFlow" : false
1620 |     } ]
1621 |   }, {
1622 |     "id" : "d7b62c8e-92d7-41a0-a085-c03b3dbec7a3",
1623 |     "alias" : "User creation or linking",
1624 |     "description" : "Flow for the existing/non-existing user alternatives",
1625 |     "providerId" : "basic-flow",
1626 |     "topLevel" : false,
1627 |     "builtIn" : true,
1628 |     "authenticationExecutions" : [ {
1629 |       "authenticatorConfig" : "create unique user config",
1630 |       "authenticator" : "idp-create-user-if-unique",
1631 |       "requirement" : "ALTERNATIVE",
1632 |       "priority" : 10,
1633 |       "userSetupAllowed" : false,
1634 |       "autheticatorFlow" : false
1635 |     }, {
1636 |       "requirement" : "ALTERNATIVE",
1637 |       "priority" : 20,
1638 |       "flowAlias" : "Handle Existing Account",
1639 |       "userSetupAllowed" : false,
1640 |       "autheticatorFlow" : true
1641 |     } ]
1642 |   }, {
1643 |     "id" : "37d79393-3215-45a7-9a21-f5928eced413",
1644 |     "alias" : "Verify Existing Account by Re-authentication",
1645 |     "description" : "Reauthentication of existing account",
1646 |     "providerId" : "basic-flow",
1647 |     "topLevel" : false,
1648 |     "builtIn" : true,
1649 |     "authenticationExecutions" : [ {
1650 |       "authenticator" : "idp-username-password-form",
1651 |       "requirement" : "REQUIRED",
1652 |       "priority" : 10,
1653 |       "userSetupAllowed" : false,
1654 |       "autheticatorFlow" : false
1655 |     }, {
1656 |       "requirement" : "CONDITIONAL",
1657 |       "priority" : 20,
1658 |       "flowAlias" : "First broker login - Conditional OTP",
1659 |       "userSetupAllowed" : false,
1660 |       "autheticatorFlow" : true
1661 |     } ]
1662 |   }, {
1663 |     "id" : "9fa54e79-d14d-4495-8d94-b5f887d81e40",
1664 |     "alias" : "browser",
1665 |     "description" : "browser based authentication",
1666 |     "providerId" : "basic-flow",
1667 |     "topLevel" : true,
1668 |     "builtIn" : true,
1669 |     "authenticationExecutions" : [ {
1670 |       "authenticator" : "auth-cookie",
1671 |       "requirement" : "ALTERNATIVE",
1672 |       "priority" : 10,
1673 |       "userSetupAllowed" : false,
1674 |       "autheticatorFlow" : false
1675 |     }, {
1676 |       "authenticator" : "auth-spnego",
1677 |       "requirement" : "DISABLED",
1678 |       "priority" : 20,
1679 |       "userSetupAllowed" : false,
1680 |       "autheticatorFlow" : false
1681 |     }, {
1682 |       "authenticator" : "identity-provider-redirector",
1683 |       "requirement" : "ALTERNATIVE",
1684 |       "priority" : 25,
1685 |       "userSetupAllowed" : false,
1686 |       "autheticatorFlow" : false
1687 |     }, {
1688 |       "requirement" : "ALTERNATIVE",
1689 |       "priority" : 30,
1690 |       "flowAlias" : "forms",
1691 |       "userSetupAllowed" : false,
1692 |       "autheticatorFlow" : true
1693 |     } ]
1694 |   }, {
1695 |     "id" : "099c2b70-684f-4e7a-9670-9b81ca1ee6de",
1696 |     "alias" : "clients",
1697 |     "description" : "Base authentication for clients",
1698 |     "providerId" : "client-flow",
1699 |     "topLevel" : true,
1700 |     "builtIn" : true,
1701 |     "authenticationExecutions" : [ {
1702 |       "authenticator" : "client-secret",
1703 |       "requirement" : "ALTERNATIVE",
1704 |       "priority" : 10,
1705 |       "userSetupAllowed" : false,
1706 |       "autheticatorFlow" : false
1707 |     }, {
1708 |       "authenticator" : "client-jwt",
1709 |       "requirement" : "ALTERNATIVE",
1710 |       "priority" : 20,
1711 |       "userSetupAllowed" : false,
1712 |       "autheticatorFlow" : false
1713 |     }, {
1714 |       "authenticator" : "client-secret-jwt",
1715 |       "requirement" : "ALTERNATIVE",
1716 |       "priority" : 30,
1717 |       "userSetupAllowed" : false,
1718 |       "autheticatorFlow" : false
1719 |     }, {
1720 |       "authenticator" : "client-x509",
1721 |       "requirement" : "ALTERNATIVE",
1722 |       "priority" : 40,
1723 |       "userSetupAllowed" : false,
1724 |       "autheticatorFlow" : false
1725 |     } ]
1726 |   }, {
1727 |     "id" : "f346059f-8903-427b-b612-4d557ed6fe58",
1728 |     "alias" : "direct grant",
1729 |     "description" : "OpenID Connect Resource Owner Grant",
1730 |     "providerId" : "basic-flow",
1731 |     "topLevel" : true,
1732 |     "builtIn" : true,
1733 |     "authenticationExecutions" : [ {
1734 |       "authenticator" : "direct-grant-validate-username",
1735 |       "requirement" : "REQUIRED",
1736 |       "priority" : 10,
1737 |       "userSetupAllowed" : false,
1738 |       "autheticatorFlow" : false
1739 |     }, {
1740 |       "authenticator" : "direct-grant-validate-password",
1741 |       "requirement" : "REQUIRED",
1742 |       "priority" : 20,
1743 |       "userSetupAllowed" : false,
1744 |       "autheticatorFlow" : false
1745 |     }, {
1746 |       "requirement" : "CONDITIONAL",
1747 |       "priority" : 30,
1748 |       "flowAlias" : "Direct Grant - Conditional OTP",
1749 |       "userSetupAllowed" : false,
1750 |       "autheticatorFlow" : true
1751 |     } ]
1752 |   }, {
1753 |     "id" : "35a5f71a-9657-4e42-b9a6-9aaa604fa8c5",
1754 |     "alias" : "docker auth",
1755 |     "description" : "Used by Docker clients to authenticate against the IDP",
1756 |     "providerId" : "basic-flow",
1757 |     "topLevel" : true,
1758 |     "builtIn" : true,
1759 |     "authenticationExecutions" : [ {
1760 |       "authenticator" : "docker-http-basic-authenticator",
1761 |       "requirement" : "REQUIRED",
1762 |       "priority" : 10,
1763 |       "userSetupAllowed" : false,
1764 |       "autheticatorFlow" : false
1765 |     } ]
1766 |   }, {
1767 |     "id" : "f7763910-6101-40bf-9855-7f075d6b1b1f",
1768 |     "alias" : "first broker login",
1769 |     "description" : "Actions taken after first broker login with identity provider account, which is not yet linked to any Keycloak account",
1770 |     "providerId" : "basic-flow",
1771 |     "topLevel" : true,
1772 |     "builtIn" : true,
1773 |     "authenticationExecutions" : [ {
1774 |       "authenticatorConfig" : "review profile config",
1775 |       "authenticator" : "idp-review-profile",
1776 |       "requirement" : "REQUIRED",
1777 |       "priority" : 10,
1778 |       "userSetupAllowed" : false,
1779 |       "autheticatorFlow" : false
1780 |     }, {
1781 |       "requirement" : "REQUIRED",
1782 |       "priority" : 20,
1783 |       "flowAlias" : "User creation or linking",
1784 |       "userSetupAllowed" : false,
1785 |       "autheticatorFlow" : true
1786 |     } ]
1787 |   }, {
1788 |     "id" : "da550a09-fdf3-4c2e-a9df-07e911bc5e1b",
1789 |     "alias" : "forms",
1790 |     "description" : "Username, password, otp and other auth forms.",
1791 |     "providerId" : "basic-flow",
1792 |     "topLevel" : false,
1793 |     "builtIn" : true,
1794 |     "authenticationExecutions" : [ {
1795 |       "authenticator" : "auth-username-password-form",
1796 |       "requirement" : "REQUIRED",
1797 |       "priority" : 10,
1798 |       "userSetupAllowed" : false,
1799 |       "autheticatorFlow" : false
1800 |     }, {
1801 |       "requirement" : "CONDITIONAL",
1802 |       "priority" : 20,
1803 |       "flowAlias" : "Browser - Conditional OTP",
1804 |       "userSetupAllowed" : false,
1805 |       "autheticatorFlow" : true
1806 |     } ]
1807 |   }, {
1808 |     "id" : "487fb43e-5122-4fe4-b26a-3863424becbb",
1809 |     "alias" : "http challenge",
1810 |     "description" : "An authentication flow based on challenge-response HTTP Authentication Schemes",
1811 |     "providerId" : "basic-flow",
1812 |     "topLevel" : true,
1813 |     "builtIn" : true,
1814 |     "authenticationExecutions" : [ {
1815 |       "authenticator" : "no-cookie-redirect",
1816 |       "requirement" : "REQUIRED",
1817 |       "priority" : 10,
1818 |       "userSetupAllowed" : false,
1819 |       "autheticatorFlow" : false
1820 |     }, {
1821 |       "requirement" : "REQUIRED",
1822 |       "priority" : 20,
1823 |       "flowAlias" : "Authentication Options",
1824 |       "userSetupAllowed" : false,
1825 |       "autheticatorFlow" : true
1826 |     } ]
1827 |   }, {
1828 |     "id" : "6f2a8531-9df6-489a-997d-b81b22602e7e",
1829 |     "alias" : "registration",
1830 |     "description" : "registration flow",
1831 |     "providerId" : "basic-flow",
1832 |     "topLevel" : true,
1833 |     "builtIn" : true,
1834 |     "authenticationExecutions" : [ {
1835 |       "authenticator" : "registration-page-form",
1836 |       "requirement" : "REQUIRED",
1837 |       "priority" : 10,
1838 |       "flowAlias" : "registration form",
1839 |       "userSetupAllowed" : false,
1840 |       "autheticatorFlow" : true
1841 |     } ]
1842 |   }, {
1843 |     "id" : "50584d7e-7097-42f6-87f5-04dad777c263",
1844 |     "alias" : "registration form",
1845 |     "description" : "registration form",
1846 |     "providerId" : "form-flow",
1847 |     "topLevel" : false,
1848 |     "builtIn" : true,
1849 |     "authenticationExecutions" : [ {
1850 |       "authenticator" : "registration-user-creation",
1851 |       "requirement" : "REQUIRED",
1852 |       "priority" : 20,
1853 |       "userSetupAllowed" : false,
1854 |       "autheticatorFlow" : false
1855 |     }, {
1856 |       "authenticator" : "registration-profile-action",
1857 |       "requirement" : "REQUIRED",
1858 |       "priority" : 40,
1859 |       "userSetupAllowed" : false,
1860 |       "autheticatorFlow" : false
1861 |     }, {
1862 |       "authenticator" : "registration-password-action",
1863 |       "requirement" : "REQUIRED",
1864 |       "priority" : 50,
1865 |       "userSetupAllowed" : false,
1866 |       "autheticatorFlow" : false
1867 |     }, {
1868 |       "authenticator" : "registration-recaptcha-action",
1869 |       "requirement" : "DISABLED",
1870 |       "priority" : 60,
1871 |       "userSetupAllowed" : false,
1872 |       "autheticatorFlow" : false
1873 |     } ]
1874 |   }, {
1875 |     "id" : "1fe375c9-6b89-405c-a5bd-a9dfb4819c09",
1876 |     "alias" : "reset credentials",
1877 |     "description" : "Reset credentials for a user if they forgot their password or something",
1878 |     "providerId" : "basic-flow",
1879 |     "topLevel" : true,
1880 |     "builtIn" : true,
1881 |     "authenticationExecutions" : [ {
1882 |       "authenticator" : "reset-credentials-choose-user",
1883 |       "requirement" : "REQUIRED",
1884 |       "priority" : 10,
1885 |       "userSetupAllowed" : false,
1886 |       "autheticatorFlow" : false
1887 |     }, {
1888 |       "authenticator" : "reset-credential-email",
1889 |       "requirement" : "REQUIRED",
1890 |       "priority" : 20,
1891 |       "userSetupAllowed" : false,
1892 |       "autheticatorFlow" : false
1893 |     }, {
1894 |       "authenticator" : "reset-password",
1895 |       "requirement" : "REQUIRED",
1896 |       "priority" : 30,
1897 |       "userSetupAllowed" : false,
1898 |       "autheticatorFlow" : false
1899 |     }, {
1900 |       "requirement" : "CONDITIONAL",
1901 |       "priority" : 40,
1902 |       "flowAlias" : "Reset - Conditional OTP",
1903 |       "userSetupAllowed" : false,
1904 |       "autheticatorFlow" : true
1905 |     } ]
1906 |   }, {
1907 |     "id" : "ef43e2d6-173c-40c1-9ad4-f67051d0cfe1",
1908 |     "alias" : "saml ecp",
1909 |     "description" : "SAML ECP Profile Authentication Flow",
1910 |     "providerId" : "basic-flow",
1911 |     "topLevel" : true,
1912 |     "builtIn" : true,
1913 |     "authenticationExecutions" : [ {
1914 |       "authenticator" : "http-basic-authenticator",
1915 |       "requirement" : "REQUIRED",
1916 |       "priority" : 10,
1917 |       "userSetupAllowed" : false,
1918 |       "autheticatorFlow" : false
1919 |     } ]
1920 |   } ],
1921 |   "authenticatorConfig" : [ {
1922 |     "id" : "c9b0ca7c-7e9b-45ea-9c1f-1a93369e2c7e",
1923 |     "alias" : "create unique user config",
1924 |     "config" : {
1925 |       "require.password.update.after.registration" : "false"
1926 |     }
1927 |   }, {
1928 |     "id" : "5d7208a7-039c-489f-875e-50b4db4893b2",
1929 |     "alias" : "review profile config",
1930 |     "config" : {
1931 |       "update.profile.on.first.login" : "missing"
1932 |     }
1933 |   } ],
1934 |   "requiredActions" : [ {
1935 |     "alias" : "CONFIGURE_TOTP",
1936 |     "name" : "Configure OTP",
1937 |     "providerId" : "CONFIGURE_TOTP",
1938 |     "enabled" : true,
1939 |     "defaultAction" : false,
1940 |     "priority" : 10,
1941 |     "config" : { }
1942 |   }, {
1943 |     "alias" : "terms_and_conditions",
1944 |     "name" : "Terms and Conditions",
1945 |     "providerId" : "terms_and_conditions",
1946 |     "enabled" : false,
1947 |     "defaultAction" : false,
1948 |     "priority" : 20,
1949 |     "config" : { }
1950 |   }, {
1951 |     "alias" : "UPDATE_PASSWORD",
1952 |     "name" : "Update Password",
1953 |     "providerId" : "UPDATE_PASSWORD",
1954 |     "enabled" : true,
1955 |     "defaultAction" : false,
1956 |     "priority" : 30,
1957 |     "config" : { }
1958 |   }, {
1959 |     "alias" : "UPDATE_PROFILE",
1960 |     "name" : "Update Profile",
1961 |     "providerId" : "UPDATE_PROFILE",
1962 |     "enabled" : true,
1963 |     "defaultAction" : false,
1964 |     "priority" : 40,
1965 |     "config" : { }
1966 |   }, {
1967 |     "alias" : "VERIFY_EMAIL",
1968 |     "name" : "Verify Email",
1969 |     "providerId" : "VERIFY_EMAIL",
1970 |     "enabled" : true,
1971 |     "defaultAction" : false,
1972 |     "priority" : 50,
1973 |     "config" : { }
1974 |   }, {
1975 |     "alias" : "delete_account",
1976 |     "name" : "Delete Account",
1977 |     "providerId" : "delete_account",
1978 |     "enabled" : false,
1979 |     "defaultAction" : false,
1980 |     "priority" : 60,
1981 |     "config" : { }
1982 |   }, {
1983 |     "alias" : "update_user_locale",
1984 |     "name" : "Update User Locale",
1985 |     "providerId" : "update_user_locale",
1986 |     "enabled" : true,
1987 |     "defaultAction" : false,
1988 |     "priority" : 1000,
1989 |     "config" : { }
1990 |   } ],
1991 |   "browserFlow" : "browser",
1992 |   "registrationFlow" : "registration",
1993 |   "directGrantFlow" : "direct grant",
1994 |   "resetCredentialsFlow" : "reset credentials",
1995 |   "clientAuthenticationFlow" : "clients",
1996 |   "dockerAuthenticationFlow" : "docker auth",
1997 |   "attributes" : {
1998 |     "clientOfflineSessionMaxLifespan" : "0",
1999 |     "clientSessionIdleTimeout" : "0",
2000 |     "clientSessionMaxLifespan" : "0",
2001 |     "clientOfflineSessionIdleTimeout" : "0"
2002 |   },
2003 |   "keycloakVersion" : "12.0.2",
2004 |   "userManagedAccessAllowed" : false
2005 | }


--------------------------------------------------------------------------------
/src/api/ClaimsPrincipalExtensions.cs:
--------------------------------------------------------------------------------
 1 | using System.Security.Claims;
 2 | 
 3 | namespace blog_api
 4 | {
 5 |     /// <summary>
 6 |     /// Extensions for claims principal
 7 |     /// </summary>
 8 |     public static class ClaimsPrincipalExtensions
 9 |     {
10 |         /// <summary>
11 |         /// Determines whether the user has the editor- or publisher-role.
12 |         /// </summary>
13 |         /// <param name="principal">The principal.</param>
14 |         /// <returns>
15 |         ///   <c>true</c> if the user has the editor- or publisher-role; otherwise, <c>false</c>.
16 |         /// </returns>
17 |         public static bool IsEditorOrPublisher(this ClaimsPrincipal principal)
18 |         {
19 |             return principal.IsInRole(Roles.Editor) || principal.IsInRole(Roles.Publisher);
20 |         }
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/src/api/Controllers/Posts.cs:
--------------------------------------------------------------------------------
  1 | using blog_api.Models;
  2 | using Microsoft.AspNetCore.Authorization;
  3 | using Microsoft.AspNetCore.Http;
  4 | using Microsoft.AspNetCore.Mvc;
  5 | using Microsoft.EntityFrameworkCore;
  6 | using System;
  7 | using System.Linq;
  8 | using System.Threading.Tasks;
  9 | 
 10 | namespace blog_api.Controllers
 11 | {
 12 |     /// <summary>
 13 |     /// Controller to handle posts
 14 |     /// </summary>
 15 |     /// <seealso cref="Controller" />
 16 |     [ApiController]
 17 |     [Route("api/[controller]")]
 18 |     public class Posts : Controller
 19 |     {
 20 |         private readonly BlogContext _context;
 21 | 
 22 |         /// <summary>
 23 |         /// Initializes a new instance of the <see cref="Posts"/> class.
 24 |         /// </summary>
 25 |         /// <param name="context">The context.</param>
 26 |         public Posts(BlogContext context)
 27 |         {
 28 |             _context = context;
 29 |         }
 30 | 
 31 |         /// <summary>
 32 |         /// Endpoint to retrieve a list of all posts.
 33 |         /// </summary>
 34 |         /// <returns></returns>
 35 |         [HttpGet]
 36 |         public async Task<PostListModel[]> Index()
 37 |         {
 38 |             var query = _context.Posts.AsQueryable();
 39 | 
 40 |             if (!User.IsEditorOrPublisher())
 41 |             {
 42 |                 query = query.Where(p => p.PublishDate != null);
 43 |             }
 44 | 
 45 |             query = query.OrderBy(p => p.PublishDate);
 46 | 
 47 |             return await query
 48 |                 .Select(p => new PostListModel(p.Id, p.Excerpt, p.PublishDate, p.Title))
 49 |                 .ToArrayAsync();
 50 |         }
 51 | 
 52 |         /// <summary>
 53 |         /// Endpoint to retrieve a single post.
 54 |         /// </summary>
 55 |         /// <param name="id">The identifier of the post.</param>
 56 |         /// <returns></returns>
 57 |         [HttpGet("{id}")]
 58 |         [ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Post))]
 59 |         [ProducesResponseType(StatusCodes.Status404NotFound)]
 60 |         public async Task<ActionResult<Post>> Index(int id)
 61 |         {
 62 |             var query = _context.Posts.AsQueryable();
 63 |             Post? post = null;
 64 | 
 65 |             if (!User.IsEditorOrPublisher())
 66 |             {
 67 |                 query = query.Where(p => p.PublishDate != null);
 68 |             }
 69 | 
 70 |             post = await query.FirstOrDefaultAsync(p => p.Id == id);
 71 |             return (post != null) ? post : NotFound();
 72 |         }
 73 | 
 74 |         /// <summary>
 75 |         /// Endpoint to create a new post.
 76 |         /// </summary>
 77 |         /// <param name="model">The model.</param>
 78 |         /// <returns></returns>
 79 |         [Authorize(Roles = Roles.Editor)]
 80 |         [HttpPost]
 81 |         [ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Post))]
 82 |         public async Task<Post> Post(PostInputModel model)
 83 |         {
 84 |             var post = new Post(model.Body, model.Excerpt, model.Title);
 85 | 
 86 |             await _context.Posts.AddAsync(post);
 87 |             await _context.SaveChangesAsync();
 88 | 
 89 |             return post;
 90 |         }
 91 | 
 92 |         /// <summary>
 93 |         /// Endpoint to publish a post.
 94 |         /// </summary>
 95 |         /// <param name="id">The identifier of the post.</param>
 96 |         /// <returns></returns>
 97 |         [Authorize(Roles = Roles.Publisher)]
 98 |         [HttpPost("{id}/publish")]
 99 |         [ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Post))]
100 |         [ProducesResponseType(StatusCodes.Status404NotFound)]
101 |         public async Task<ActionResult<Post>> Publish(int id)
102 |         {
103 |             var post = await _context.Posts.FindAsync(id);
104 |             if (post == null)
105 |             {
106 |                 return NotFound();
107 |             }
108 | 
109 |             post.PublishDate = DateTime.Now;
110 | 
111 |             await _context.SaveChangesAsync();
112 | 
113 |             return post;
114 |         }
115 | 
116 |         /// <summary>
117 |         /// Endpoint to unpublish a post.
118 |         /// </summary>
119 |         /// <param name="id">The identifier of the post.</param>
120 |         /// <returns></returns>
121 |         [Authorize(Policies.CanUnpublish)]
122 |         [HttpPost("{id}/unpublish")]
123 |         [ProducesResponseType(StatusCodes.Status200OK, Type = typeof(Post))]
124 |         [ProducesResponseType(StatusCodes.Status404NotFound)]
125 |         public async Task<ActionResult<Post>> Unpublish(int id)
126 |         {
127 |             var post = await _context.Posts.FindAsync(id);
128 |             if (post == null)
129 |             {
130 |                 return NotFound();
131 |             }
132 | 
133 |             post.PublishDate = null;
134 | 
135 |             await _context.SaveChangesAsync();
136 | 
137 |             return post;
138 |         }
139 | 
140 |         /// <summary>
141 |         /// Endpoint to delete a post.
142 |         /// </summary>
143 |         /// <param name="id">The identifier of the post.</param>
144 |         /// <returns></returns>
145 |         [Authorize(Roles = Roles.Editor)]
146 |         [HttpDelete("{id}")]
147 |         [ProducesResponseType(StatusCodes.Status204NoContent)]
148 |         [ProducesResponseType(StatusCodes.Status404NotFound)]
149 |         public async Task<ActionResult> Delete(int id)
150 |         {
151 |             var post = await _context.Posts.FindAsync(id);
152 |             if (post == null)
153 |             {
154 |                 return NotFound();
155 |             }
156 | 
157 |             if (post.PublishDate != null)
158 |             {
159 |                 return Forbid();
160 |             }
161 | 
162 |             _context.Posts.Remove(post);
163 |             await _context.SaveChangesAsync();
164 | 
165 |             return NoContent();
166 |         }
167 |     }
168 | }
169 | 


--------------------------------------------------------------------------------
/src/api/Dockerfile:
--------------------------------------------------------------------------------
 1 | #See https://aka.ms/containerfastmode to understand how Visual Studio uses this Dockerfile to build your images for faster debugging.
 2 | 
 3 | FROM mcr.microsoft.com/dotnet/aspnet:5.0-buster-slim AS base
 4 | WORKDIR /app
 5 | EXPOSE 80
 6 | EXPOSE 443
 7 | 
 8 | FROM mcr.microsoft.com/dotnet/sdk:5.0-buster-slim AS build
 9 | WORKDIR /src
10 | COPY ["blog-api.csproj", ""]
11 | RUN dotnet restore "blog-api.csproj"
12 | COPY . .
13 | WORKDIR "/src"
14 | RUN dotnet build "blog-api.csproj" -c Release -o /app/build
15 | 
16 | FROM build AS publish
17 | RUN dotnet publish "blog-api.csproj" -c Release -o /app/publish
18 | 
19 | FROM base AS final
20 | WORKDIR /app
21 | COPY --from=publish /app/publish .
22 | ENTRYPOINT ["dotnet", "blog-api.dll"]


--------------------------------------------------------------------------------
/src/api/JwtBearerOptions.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | 
 3 | namespace blog_api
 4 | {
 5 |     /// <summary>
 6 |     /// Options for JWT Bearer authentication.
 7 |     /// </summary>
 8 |     public class JwtBearerOptions
 9 |     {
10 |         /// <summary>
11 |         /// Gets or sets the authority.
12 |         /// </summary>
13 |         /// <value>
14 |         /// The authority.
15 |         /// </value>
16 |         public string Authority { get; set; } = String.Empty;
17 | 
18 |         /// <summary>
19 |         /// Gets or sets the audience.
20 |         /// </summary>
21 |         /// <value>
22 |         /// The audience.
23 |         /// </value>
24 |         public string Audience { get; set; } = String.Empty;
25 |     }
26 | }
27 | 


--------------------------------------------------------------------------------
/src/api/KeycloakAuthorization/KeycloakAuthorizationHandler.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authentication;
 2 | using Microsoft.AspNetCore.Authorization;
 3 | using Microsoft.AspNetCore.Http;
 4 | using Microsoft.Extensions.Options;
 5 | using System.Collections.Generic;
 6 | using System.Net.Http;
 7 | using System.Net.Http.Headers;
 8 | using System.Threading.Tasks;
 9 | 
10 | namespace blog_api.KeycloakAuthorization
11 | {
12 |     /// <summary>
13 |     /// Authorization handler that handles Keycloak requirements.
14 |     /// </summary>
15 |     public class KeycloakAuthorizationHandler : AuthorizationHandler<KeycloakRequirement>
16 |     {
17 |         private readonly IOptions<KeycloakAuthorizationOptions> _options;
18 |         private readonly IHttpContextAccessor _httpContextAccessor;
19 | 
20 |         public KeycloakAuthorizationHandler(IOptions<KeycloakAuthorizationOptions> options, IHttpContextAccessor httpContextAccessor)
21 |         {
22 |             _options = options;
23 |             _httpContextAccessor = httpContextAccessor;
24 |         }
25 | 
26 |         /// <summary>
27 |         /// Makes a decision if authorization is allowed based on a specific requirement.
28 |         /// </summary>
29 |         /// <param name="context">The authorization context.</param>
30 |         /// <param name="requirement">The requirement to evaluate.</param>
31 |         protected override async Task HandleRequirementAsync(AuthorizationHandlerContext context, KeycloakRequirement requirement)
32 |         {
33 |             var options = _options.Value;
34 |             var httpContext = _httpContextAccessor.HttpContext;
35 |             var auth = await httpContext.AuthenticateAsync(options.RequiredScheme);
36 |             if (!auth.Succeeded)
37 |             {
38 |                 context.Fail();
39 |                 return;
40 |             }
41 | 
42 |             var data = new Dictionary<string, string>();
43 |             data.Add("grant_type", "urn:ietf:params:oauth:grant-type:uma-ticket");
44 |             data.Add("response_mode", "decision");
45 |             data.Add("audience", options.Audience);
46 |             data.Add("permission", $"{requirement.PolicyName}");
47 | 
48 |             var client = new HttpClient(options.BackchannelHandler);
49 |             var token = await httpContext.GetTokenAsync(options.RequiredScheme, "access_token");
50 |             client.DefaultRequestHeaders.Authorization = new AuthenticationHeaderValue("Bearer", token);
51 | 
52 |             var response = await client.PostAsync(options.TokenEndpoint, new FormUrlEncodedContent(data));
53 |             if (response.IsSuccessStatusCode)
54 |             {
55 |                 context.Succeed(requirement);
56 |                 return;
57 |             }
58 | 
59 |             context.Fail();
60 |         }
61 |     }
62 | }
63 | 


--------------------------------------------------------------------------------
/src/api/KeycloakAuthorization/KeycloakAuthorizationOptions.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authentication.JwtBearer;
 2 | using System.Net.Http;
 3 | 
 4 | namespace blog_api.KeycloakAuthorization
 5 | {
 6 |     /// <summary>
 7 |     /// Defines options for Keycloak authorization
 8 |     /// </summary>
 9 |     public class KeycloakAuthorizationOptions
10 |     {
11 |         /// <summary>
12 |         /// Gets or sets the required aithentication scheme that holds the token.
13 |         /// </summary>
14 |         /// <value>
15 |         /// The required scheme.
16 |         /// </value>
17 |         public string RequiredScheme { get; set; } = JwtBearerDefaults.AuthenticationScheme;
18 | 
19 |         /// <summary>
20 |         /// Gets or sets the token endpoint.
21 |         /// </summary>
22 |         /// <value>
23 |         /// The token endpoint.
24 |         /// </value>
25 |         public string TokenEndpoint { get; set; }
26 | 
27 |         /// <summary>
28 |         /// Gets or sets the backchannel handler.
29 |         /// </summary>
30 |         /// <value>
31 |         /// The backchannel handler.
32 |         /// </value>
33 |         public HttpMessageHandler BackchannelHandler { get; set; } = new HttpClientHandler();
34 | 
35 |         /// <summary>
36 |         /// Gets or sets the audience.
37 |         /// </summary>
38 |         /// <value>
39 |         /// The audience.
40 |         /// </value>
41 |         public string Audience { get; set; }
42 |     }
43 | }
44 | 


--------------------------------------------------------------------------------
/src/api/KeycloakAuthorization/KeycloakAuthorizationPolicyBuilderExtensions.cs:
--------------------------------------------------------------------------------
 1 | using blog_api.KeycloakAuthorization;
 2 | using Microsoft.AspNetCore.Authorization;
 3 | 
 4 | namespace Microsoft.Extensions.DependencyInjection
 5 | {
 6 | 
 7 |     public static class KeycloakAuthorizationPolicyBuilderExtensions
 8 |     {
 9 |         /// <summary>
10 |         /// Adds a Keycloak requirement to the Requirements.
11 |         /// </summary>
12 |         /// <param name="builder">The builder.</param>
13 |         /// <param name="resource">The resource.</param>
14 |         /// <param name="scope">The scope.</param>
15 |         /// <returns></returns>
16 |         public static AuthorizationPolicyBuilder RequiresKeycloakEntitlement(this AuthorizationPolicyBuilder builder, string resource, string scope)
17 |         {
18 |             builder.AddRequirements(new KeycloakRequirement($"{resource}#{scope}"));
19 |             return builder;
20 |         }
21 |     }
22 | }
23 | 


--------------------------------------------------------------------------------
/src/api/KeycloakAuthorization/KeycloakAuthorizationPolicyProvider.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | using Microsoft.Extensions.Options;
 3 | using System.Threading.Tasks;
 4 | 
 5 | namespace blog_api.KeycloakAuthorization
 6 | {
 7 |     public class KeycloakAuthorizationPolicyProvider : IAuthorizationPolicyProvider
 8 |     {
 9 |         private readonly IOptions<KeycloakAuthorizationOptions> _options;
10 |         private readonly IOptions<AuthorizationOptions> _authorizationOptions;
11 |         private readonly DefaultAuthorizationPolicyProvider _fallbackPolicyProvider;
12 | 
13 |         public KeycloakAuthorizationPolicyProvider(IOptions<KeycloakAuthorizationOptions> options, IOptions<AuthorizationOptions> authorizationOptions)
14 |         {
15 |             _options = options;
16 |             _authorizationOptions = authorizationOptions;
17 |             _fallbackPolicyProvider = new DefaultAuthorizationPolicyProvider(_authorizationOptions);
18 |         }
19 | 
20 |         public Task<AuthorizationPolicy> GetDefaultPolicyAsync() => _fallbackPolicyProvider.GetDefaultPolicyAsync();
21 | 
22 |         public Task<AuthorizationPolicy> GetFallbackPolicyAsync() => _fallbackPolicyProvider.GetFallbackPolicyAsync();
23 | 
24 |         public Task<AuthorizationPolicy> GetPolicyAsync(string policyName)
25 |         {
26 |             if (_authorizationOptions.Value.GetPolicy(policyName) != null)
27 |             {
28 |                 return _fallbackPolicyProvider.GetPolicyAsync(policyName);
29 |             }
30 | 
31 |             var builder = new AuthorizationPolicyBuilder();
32 |             builder.AuthenticationSchemes.Add(_options.Value.RequiredScheme);
33 |             builder.AddRequirements(new KeycloakRequirement(policyName));
34 | 
35 |             return Task.FromResult(builder.Build());
36 |         }
37 |     }
38 | }
39 | 


--------------------------------------------------------------------------------
/src/api/KeycloakAuthorization/KeycloakAuthorizationServiceCollectionExtensions.cs:
--------------------------------------------------------------------------------
 1 | using blog_api.KeycloakAuthorization;
 2 | using Microsoft.AspNetCore.Authorization;
 3 | using System;
 4 | 
 5 | namespace Microsoft.Extensions.DependencyInjection
 6 | {
 7 |     public static class KeycloakAuthorizationServiceCollectionExtensions
 8 |     {
 9 |         /// <summary>
10 |         /// Add keycloak authorization components.
11 |         /// </summary>
12 |         /// <param name="services">The services.</param>
13 |         /// <param name="configure">The configure.</param>
14 |         /// <returns></returns>
15 |         public static IServiceCollection AddKeycloakAuthorization(this IServiceCollection services, Action<KeycloakAuthorizationOptions> configure)
16 |         {
17 |             services.Configure(configure);
18 |             services.AddHttpContextAccessor();
19 |             services.AddSingleton<IAuthorizationHandler, KeycloakAuthorizationHandler>();
20 | 
21 |             return services;
22 |         }
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/src/api/KeycloakAuthorization/KeycloakRequirement.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authorization;
 2 | 
 3 | namespace blog_api.KeycloakAuthorization
 4 | {
 5 |     public class KeycloakRequirement : IAuthorizationRequirement
 6 |     {
 7 |         /// <summary>
 8 |         /// Initializes a new instance of the <see cref="KeycloakRequirement"/> class.
 9 |         /// </summary>
10 |         /// <param name="policyName">Name of the policy.</param>
11 |         public KeycloakRequirement(string policyName)
12 |         {
13 |             PolicyName = policyName;
14 |         }
15 | 
16 |         /// <summary>
17 |         /// Gets the name of the policy.
18 |         /// </summary>
19 |         /// <value>
20 |         /// The name of the policy.
21 |         /// </value>
22 |         public string PolicyName { get; }
23 |     }
24 | }
25 | 


--------------------------------------------------------------------------------
/src/api/KeycloakRolesClaimsTransformation.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.AspNetCore.Authentication;
 2 | using System.Security.Claims;
 3 | using System.Text.Json;
 4 | using System.Threading.Tasks;
 5 | 
 6 | namespace blog_api
 7 | {
 8 |     /// <summary>
 9 |     /// Transforms keycloak roles in the resource_access claim to jwt role claims.
10 |     /// </summary>
11 |     /// <example>
12 |     /// Example of keycloack resource_access claim
13 |     /// "resource_access": {
14 |     ///     "blog-api": {
15 |     ///         "roles": [
16 |     ///             "editor"
17 |     ///         ]
18 |     ///     },
19 |     ///     "account": {
20 |     ///         "roles": [
21 |     ///             "view-profile"
22 |     ///         ]
23 |     ///     }
24 |     /// },
25 |     /// </example>
26 |     /// <seealso cref="IClaimsTransformation" />
27 |     public class KeycloakRolesClaimsTransformation : IClaimsTransformation
28 |     {
29 |         private readonly string _roleClaimType;
30 |         private readonly string _audience;
31 | 
32 |         /// <summary>
33 |         /// Initializes a new instance of the <see cref="KeycloakRolesClaimsTransformation"/> class.
34 |         /// </summary>
35 |         /// <param name="roleClaimType">Type of the role claim.</param>
36 |         /// <param name="audience">The audience.</param>
37 |         public KeycloakRolesClaimsTransformation(string roleClaimType, string audience)
38 |         {
39 |             _roleClaimType = roleClaimType;
40 |             _audience = audience;
41 |         }
42 | 
43 |         /// <summary>
44 |         /// Provides a central transformation point to change the specified principal.
45 |         /// Note: this will be run on each AuthenticateAsync call, so its safer to
46 |         /// return a new ClaimsPrincipal if your transformation is not idempotent.
47 |         /// </summary>
48 |         /// <param name="principal">The <see cref="T:System.Security.Claims.ClaimsPrincipal" /> to transform.</param>
49 |         /// <returns>
50 |         /// The transformed principal.
51 |         /// </returns>
52 |         public Task<ClaimsPrincipal> TransformAsync(ClaimsPrincipal principal)
53 |         {
54 |             var result = principal.Clone();
55 |             if (result.Identity is not ClaimsIdentity identity)
56 |             {
57 |                 return Task.FromResult(result);
58 |             }
59 | 
60 |             var resourceAccessValue = principal.FindFirst("resource_access")?.Value;
61 |             if (string.IsNullOrWhiteSpace(resourceAccessValue))
62 |             {
63 |                 return Task.FromResult(result);
64 |             }
65 | 
66 |             using var resourceAccess = JsonDocument.Parse(resourceAccessValue);
67 |             var clientRoles = resourceAccess
68 |                 .RootElement
69 |                 .GetProperty(_audience)
70 |                 .GetProperty("roles");
71 | 
72 |             foreach (var role in clientRoles.EnumerateArray())
73 |             {
74 |                 var value = role.GetString();
75 |                 if (!string.IsNullOrWhiteSpace(value))
76 |                 {
77 |                     identity.AddClaim(new Claim(_roleClaimType, value));
78 |                 }
79 |             }
80 | 
81 |             return Task.FromResult(result);
82 |         }
83 |     }
84 | }
85 | 


--------------------------------------------------------------------------------
/src/api/Migrations/20210202090239_Initial.Designer.cs:
--------------------------------------------------------------------------------
 1 | // <auto-generated />
 2 | using System;
 3 | using Microsoft.EntityFrameworkCore;
 4 | using Microsoft.EntityFrameworkCore.Infrastructure;
 5 | using Microsoft.EntityFrameworkCore.Migrations;
 6 | using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
 7 | using blog_api.Models;
 8 | 
 9 | namespace blog_api.Migrations
10 | {
11 |     [DbContext(typeof(BlogContext))]
12 |     [Migration("20210202090239_Initial")]
13 |     partial class Initial
14 |     {
15 |         protected override void BuildTargetModel(ModelBuilder modelBuilder)
16 |         {
17 | #pragma warning disable 612, 618
18 |             modelBuilder
19 |                 .HasAnnotation("ProductVersion", "5.0.2");
20 | 
21 |             modelBuilder.Entity("blog_api.Models.Post", b =>
22 |                 {
23 |                     b.Property<int>("Id")
24 |                         .ValueGeneratedOnAdd()
25 |                         .HasColumnType("INTEGER");
26 | 
27 |                     b.Property<string>("Body")
28 |                         .IsRequired()
29 |                         .HasColumnType("TEXT");
30 | 
31 |                     b.Property<string>("Excerpt")
32 |                         .IsRequired()
33 |                         .HasColumnType("TEXT");
34 | 
35 |                     b.Property<DateTime?>("PublishDate")
36 |                         .HasColumnType("TEXT");
37 | 
38 |                     b.Property<string>("Title")
39 |                         .IsRequired()
40 |                         .HasColumnType("TEXT");
41 | 
42 |                     b.HasKey("Id");
43 | 
44 |                     b.ToTable("Posts");
45 |                 });
46 | #pragma warning restore 612, 618
47 |         }
48 |     }
49 | }
50 | 


--------------------------------------------------------------------------------
/src/api/Migrations/20210202090239_Initial.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.EntityFrameworkCore.Migrations;
 2 | using System;
 3 | 
 4 | namespace blog_api.Migrations
 5 | {
 6 |     /// <summary>
 7 |     /// Initial database migration
 8 |     /// </summary>
 9 |     /// <seealso cref="Migration" />
10 |     public partial class Initial : Migration
11 |     {
12 |         /// <summary>
13 |         /// <para>
14 |         /// Builds the operations that will migrate the database 'up'.
15 |         /// </para>
16 |         /// <para>
17 |         /// That is, builds the operations that will take the database from the state left in by the
18 |         /// previous migration so that it is up-to-date with regard to this migration.
19 |         /// </para>
20 |         /// <para>
21 |         /// This method must be overridden in each class the inherits from <see cref="T:Microsoft.EntityFrameworkCore.Migrations.Migration" />.
22 |         /// </para>
23 |         /// </summary>
24 |         /// <param name="migrationBuilder">The <see cref="T:Microsoft.EntityFrameworkCore.Migrations.MigrationBuilder" /> that will build the operations.</param>
25 |         protected override void Up(MigrationBuilder migrationBuilder)
26 |         {
27 |             migrationBuilder.CreateTable(
28 |                 name: "Posts",
29 |                 columns: table => new
30 |                 {
31 |                     Id = table.Column<int>(type: "INTEGER", nullable: false)
32 |                         .Annotation("Sqlite:Autoincrement", true),
33 |                     Body = table.Column<string>(type: "TEXT", nullable: false),
34 |                     Excerpt = table.Column<string>(type: "TEXT", nullable: false),
35 |                     PublishDate = table.Column<DateTime>(type: "TEXT", nullable: true),
36 |                     Title = table.Column<string>(type: "TEXT", nullable: false)
37 |                 },
38 |                 constraints: table => table.PrimaryKey("PK_Posts", x => x.Id));
39 |         }
40 | 
41 |         /// <summary>
42 |         /// <para>
43 |         /// Builds the operations that will migrate the database 'down'.
44 |         /// </para>
45 |         /// <para>
46 |         /// That is, builds the operations that will take the database from the state left in by
47 |         /// this migration so that it returns to the state that it was in before this migration was applied.
48 |         /// </para>
49 |         /// <para>
50 |         /// This method must be overridden in each class the inherits from <see cref="T:Microsoft.EntityFrameworkCore.Migrations.Migration" /> if
51 |         /// both 'up' and 'down' migrations are to be supported. If it is not overridden, then calling it
52 |         /// will throw and it will not be possible to migrate in the 'down' direction.
53 |         /// </para>
54 |         /// </summary>
55 |         /// <param name="migrationBuilder">The <see cref="T:Microsoft.EntityFrameworkCore.Migrations.MigrationBuilder" /> that will build the operations.</param>
56 |         protected override void Down(MigrationBuilder migrationBuilder)
57 |         {
58 |             migrationBuilder.DropTable(
59 |                 name: "Posts");
60 |         }
61 |     }
62 | }
63 | 


--------------------------------------------------------------------------------
/src/api/Migrations/BlogContextModelSnapshot.cs:
--------------------------------------------------------------------------------
 1 | // <auto-generated />
 2 | using System;
 3 | using Microsoft.EntityFrameworkCore;
 4 | using Microsoft.EntityFrameworkCore.Infrastructure;
 5 | using Microsoft.EntityFrameworkCore.Storage.ValueConversion;
 6 | using blog_api.Models;
 7 | 
 8 | namespace blog_api.Migrations
 9 | {
10 |     [DbContext(typeof(BlogContext))]
11 |     partial class BlogContextModelSnapshot : ModelSnapshot
12 |     {
13 |         protected override void BuildModel(ModelBuilder modelBuilder)
14 |         {
15 | #pragma warning disable 612, 618
16 |             modelBuilder
17 |                 .HasAnnotation("ProductVersion", "5.0.2");
18 | 
19 |             modelBuilder.Entity("blog_api.Models.Post", b =>
20 |                 {
21 |                     b.Property<int>("Id")
22 |                         .ValueGeneratedOnAdd()
23 |                         .HasColumnType("INTEGER");
24 | 
25 |                     b.Property<string>("Body")
26 |                         .IsRequired()
27 |                         .HasColumnType("TEXT");
28 | 
29 |                     b.Property<string>("Excerpt")
30 |                         .IsRequired()
31 |                         .HasColumnType("TEXT");
32 | 
33 |                     b.Property<DateTime?>("PublishDate")
34 |                         .HasColumnType("TEXT");
35 | 
36 |                     b.Property<string>("Title")
37 |                         .IsRequired()
38 |                         .HasColumnType("TEXT");
39 | 
40 |                     b.HasKey("Id");
41 | 
42 |                     b.ToTable("Posts");
43 |                 });
44 | #pragma warning restore 612, 618
45 |         }
46 |     }
47 | }
48 | 


--------------------------------------------------------------------------------
/src/api/Models/BlogContext.cs:
--------------------------------------------------------------------------------
 1 | using Microsoft.EntityFrameworkCore;
 2 | 
 3 | namespace blog_api.Models
 4 | {
 5 |     /// <summary>
 6 |     /// Database context that holds the blog data
 7 |     /// </summary>
 8 |     /// <seealso cref="Microsoft.EntityFrameworkCore.DbContext" />
 9 |     public class BlogContext : DbContext
10 |     {
11 |         /// <summary>
12 |         /// Initializes a new instance of the <see cref="BlogContext"/> class.
13 |         /// </summary>
14 |         /// <param name="options">The options.</param>
15 |         public BlogContext(DbContextOptions<BlogContext> options) : base(options)
16 |         {
17 |         }
18 | 
19 |         /// <summary>
20 |         /// Collection to hold posts.
21 |         /// </summary>
22 |         /// <value>
23 |         /// The posts.
24 |         /// </value>
25 |         public DbSet<Post> Posts => Set<Post>();
26 |     }
27 | }
28 | 


--------------------------------------------------------------------------------
/src/api/Models/Post.cs:
--------------------------------------------------------------------------------
 1 | using System;
 2 | 
 3 | namespace blog_api.Models
 4 | {
 5 |     /// <summary>
 6 |     /// Represents a blog post
 7 |     /// </summary>
 8 |     public class Post
 9 |     {
10 |         /// <summary>
11 |         /// Gets or sets the identifier.
12 |         /// </summary>
13 |         /// <value>
14 |         /// The identifier.
15 |         /// </value>
16 |         public int Id { get; set; }
17 | 
18 |         /// <summary>
19 |         /// Gets or sets the body.
20 |         /// </summary>
21 |         /// <value>
22 |         /// The body.
23 |         /// </value>
24 |         public string Body { get; set; }
25 | 
26 |         /// <summary>
27 |         /// Gets or sets the excerpt.
28 |         /// </summary>
29 |         /// <value>
30 |         /// The excerpt.
31 |         /// </value>
32 |         public string Excerpt { get; set; }
33 | 
34 |         /// <summary>
35 |         /// Gets or sets the publish date.
36 |         /// </summary>
37 |         /// <value>
38 |         /// The publish date.
39 |         /// </value>
40 |         public DateTime? PublishDate { get; set; }
41 | 
42 |         /// <summary>
43 |         /// Gets or sets the title.
44 |         /// </summary>
45 |         /// <value>
46 |         /// The title.
47 |         /// </value>
48 |         public string Title { get; set; }
49 | 
50 |         /// <summary>
51 |         /// Initializes a new instance of the <see cref="Post"/> class.
52 |         /// </summary>
53 |         /// <param name="body">The body.</param>
54 |         /// <param name="excerpt">The excerpt.</param>
55 |         /// <param name="title">The title.</param>
56 |         public Post(string body, string excerpt, string title)
57 |         {
58 |             Body = body;
59 |             Excerpt = excerpt;
60 |             Title = title;
61 |         }
62 |     }
63 | }
64 | 


--------------------------------------------------------------------------------
/src/api/Models/PostInputModel.cs:
--------------------------------------------------------------------------------
1 | namespace blog_api.Models
2 | {
3 |     public record PostInputModel(string Body, string Excerpt, string Title);
4 | }
5 | 


--------------------------------------------------------------------------------
/src/api/Models/PostListModel.cs:
--------------------------------------------------------------------------------
1 | using System;
2 | 
3 | namespace blog_api.Models
4 | {
5 |     public record PostListModel(int Id, string Excerpt, DateTime? PublishDate, string Title);
6 | }
7 | 


--------------------------------------------------------------------------------
/src/api/Policies.cs:
--------------------------------------------------------------------------------
 1 | namespace blog_api
 2 | {
 3 |     /// <summary>
 4 |     /// Policies defined for the application.
 5 |     /// </summary>
 6 |     public static class Policies
 7 |     {
 8 |         /// <summary>
 9 |         /// Name of the policy to check if a user can unpublish posts.
10 |         /// </summary>
11 |         public const string CanUnpublish = "CanUnpublish";
12 |     }
13 | }
14 | 


--------------------------------------------------------------------------------
/src/api/Program.cs:
--------------------------------------------------------------------------------
 1 | using blog_api.Models;
 2 | using Microsoft.AspNetCore.Hosting;
 3 | using Microsoft.EntityFrameworkCore;
 4 | using Microsoft.Extensions.DependencyInjection;
 5 | using Microsoft.Extensions.Hosting;
 6 | using System;
 7 | using System.Threading.Tasks;
 8 | 
 9 | namespace blog_api
10 | {
11 |     /// <summary>
12 |     /// Main Entry Point
13 |     /// </summary>
14 |     public static class Program
15 |     {
16 |         /// <summary>
17 |         /// Defines the entry point of the application.
18 |         /// </summary>
19 |         /// <param name="args">The arguments.</param>
20 |         public static async Task Main(string[] args)
21 |         {
22 |             var host = CreateHostBuilder(args).Build();
23 | 
24 |             using (var scope = host.Services.GetRequiredService<IServiceProvider>().CreateScope())
25 |             {
26 |                 var context = scope.ServiceProvider.GetRequiredService<BlogContext>();
27 |                 await context.Database.MigrateAsync();
28 |             }
29 | 
30 |             await host.RunAsync();
31 |         }
32 | 
33 |         /// <summary>
34 |         /// Creates the host builder.
35 |         /// </summary>
36 |         /// <param name="args">The arguments.</param>
37 |         /// <returns></returns>
38 |         public static IHostBuilder CreateHostBuilder(string[] args) =>
39 |             Host.CreateDefaultBuilder(args)
40 |                 .ConfigureWebHostDefaults(webBuilder => webBuilder.UseStartup<Startup>());
41 |     }
42 | }
43 | 


--------------------------------------------------------------------------------
/src/api/Properties/launchSettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "iisSettings": {
 3 |     "windowsAuthentication": false,
 4 |     "anonymousAuthentication": true,
 5 |     "iisExpress": {
 6 |       "applicationUrl": "http://localhost:53425",
 7 |       "sslPort": 44314
 8 |     }
 9 |   },
10 |   "$schema": "http://json.schemastore.org/launchsettings.json",
11 |   "profiles": {
12 |     "IIS Express": {
13 |       "commandName": "IISExpress",
14 |       "launchBrowser": true,
15 |       "launchUrl": "swagger",
16 |       "environmentVariables": {
17 |         "ASPNETCORE_ENVIRONMENT": "Development"
18 |       }
19 |     },
20 |     "blog_api": {
21 |       "commandName": "Project",
22 |       "launchBrowser": true,
23 |       "launchUrl": "swagger",
24 |       "environmentVariables": {
25 |         "ASPNETCORE_ENVIRONMENT": "Development"
26 |       },
27 |       "dotnetRunMessages": "true",
28 |       "applicationUrl": "https://localhost:5001;http://localhost:5000"
29 |     },
30 |     "Docker": {
31 |       "commandName": "Docker",
32 |       "launchBrowser": true,
33 |       "launchUrl": "{Scheme}://{ServiceHost}:{ServicePort}/swagger",
34 |       "publishAllPorts": true,
35 |       "useSSL": true
36 |     }
37 |   }
38 | }


--------------------------------------------------------------------------------
/src/api/Roles.cs:
--------------------------------------------------------------------------------
 1 | namespace blog_api
 2 | {
 3 |     /// <summary>
 4 |     /// Roles defined for the application.
 5 |     /// </summary>
 6 |     public static class Roles
 7 |     {
 8 |         /// <summary>
 9 |         /// The editor role
10 |         /// </summary>
11 |         public const string Editor = "editor";
12 | 
13 |         /// <summary>
14 |         /// The publisher role
15 |         /// </summary>
16 |         public const string Publisher = "publisher";
17 |     }
18 | }
19 | 


--------------------------------------------------------------------------------
/src/api/Startup.cs:
--------------------------------------------------------------------------------
  1 | using blog_api.Models;
  2 | using Microsoft.AspNetCore.Authentication;
  3 | using Microsoft.AspNetCore.Authentication.JwtBearer;
  4 | using Microsoft.AspNetCore.Builder;
  5 | using Microsoft.AspNetCore.Hosting;
  6 | using Microsoft.EntityFrameworkCore;
  7 | using Microsoft.Extensions.Configuration;
  8 | using Microsoft.Extensions.DependencyInjection;
  9 | using Microsoft.Extensions.Hosting;
 10 | using Microsoft.OpenApi.Models;
 11 | 
 12 | namespace blog_api
 13 | {
 14 |     /// <summary>
 15 |     /// Startup class of the ASP.NET Core application.
 16 |     /// </summary>
 17 |     public class Startup
 18 |     {
 19 |         private const string _roleClaimType = "role";
 20 | 
 21 |         /// <summary>
 22 |         /// Initializes a new instance of the <see cref="Startup"/> class.
 23 |         /// </summary>
 24 |         /// <param name="configuration">The configuration.</param>
 25 |         public Startup(IConfiguration configuration)
 26 |         {
 27 |             Configuration = configuration;
 28 |         }
 29 | 
 30 |         /// <summary>
 31 |         /// Gets the configuration.
 32 |         /// </summary>
 33 |         /// <value>
 34 |         /// The configuration.
 35 |         /// </value>
 36 |         public IConfiguration Configuration { get; }
 37 | 
 38 |         /// <summary>
 39 |         /// Configures the services.
 40 |         /// </summary>
 41 |         /// <param name="services">The services.</param>
 42 |         public void ConfigureServices(IServiceCollection services)
 43 |         {
 44 |             var jwtOptions = Configuration.GetSection("JwtBearer").Get<JwtBearerOptions>();
 45 | 
 46 |             services.AddControllers();
 47 |             services.AddSwaggerGen(options =>
 48 |             {
 49 |                 options.IncludeXmlComments("blog-api.xml");
 50 |                 options.SwaggerDoc("v1", new OpenApiInfo { Title = "blog_api", Version = "v1" });
 51 |             });
 52 | 
 53 |             services.AddDbContext<BlogContext>(options =>
 54 |             {
 55 |                 options.UseSqlite(
 56 |                     Configuration.GetConnectionString("Data"),
 57 |                     builder => builder.MigrationsAssembly(this.GetType().Assembly.FullName));
 58 |             });
 59 | 
 60 |             services.AddCors(options => options.AddDefaultPolicy(b =>
 61 |             {
 62 |                 b.AllowAnyOrigin()
 63 |                     .AllowAnyMethod()
 64 |                     .AllowAnyHeader();
 65 |             }));
 66 | 
 67 |             services
 68 |                 .AddAuthentication(JwtBearerDefaults.AuthenticationScheme)
 69 |                 .AddJwtBearer(options =>
 70 |                 {
 71 |                     options.Authority = jwtOptions.Authority;
 72 |                     options.Audience = jwtOptions.Audience;
 73 |                     options.RequireHttpsMetadata = false;
 74 |                     options.TokenValidationParameters.NameClaimType = "preferred_username";
 75 |                     options.TokenValidationParameters.RoleClaimType = _roleClaimType;
 76 |                 });
 77 | 
 78 |             services.AddTransient<IClaimsTransformation>(_ => new KeycloakRolesClaimsTransformation(_roleClaimType, jwtOptions.Audience));
 79 | 
 80 |             services.AddAuthorization(options =>
 81 |             {
 82 |                 options.AddPolicy(Policies.CanUnpublish, policy => policy.RequiresKeycloakEntitlement("Posts", "Unpublish"));
 83 |             }).AddKeycloakAuthorization(options =>
 84 |             {
 85 |                 options.Audience = jwtOptions.Audience;
 86 |                 options.TokenEndpoint = $"{jwtOptions.Authority}/protocol/openid-connect/token";
 87 |             });
 88 |         }
 89 | 
 90 |         /// <summary>
 91 |         /// Configures the specified application.
 92 |         /// </summary>
 93 |         /// <param name="app">The application.</param>
 94 |         /// <param name="env">The env.</param>
 95 |         public void Configure(IApplicationBuilder app, IWebHostEnvironment env)
 96 |         {
 97 |             if (env.IsDevelopment())
 98 |             {
 99 |                 app.UseDeveloperExceptionPage();
100 |             }
101 | 
102 |             app.UseHttpsRedirection();
103 | 
104 |             app.UseRouting();
105 |             app.UseCors();
106 | 
107 |             app.UseAuthentication();
108 |             app.UseAuthorization();
109 | 
110 |             app.UseEndpoints(endpoints => endpoints.MapControllers());
111 | 
112 |             app.UseSwagger();
113 |             app.UseSwaggerUI(c => c.SwaggerEndpoint("/swagger/v1/swagger.json", "blog_api v1"));
114 |         }
115 |     }
116 | }
117 | 


--------------------------------------------------------------------------------
/src/api/appsettings.Development.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "Logging": {
 3 |     "LogLevel": {
 4 |       "Default": "Information",
 5 |       "Microsoft": "Information",
 6 |       "Microsoft.Hosting.Lifetime": "Information"
 7 |     }
 8 |   },
 9 |   "JwtBearer": {
10 |     "Authority": "http://localhost:8080/auth/realms/webinar"
11 |   }
12 | }
13 | 


--------------------------------------------------------------------------------
/src/api/appsettings.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "ConnectionStrings": {
 3 |     "Data": "Data Source=data.db;"
 4 |   },
 5 |   "Logging": {
 6 |     "LogLevel": {
 7 |       "Default": "Information",
 8 |       "Microsoft": "Warning",
 9 |       "Microsoft.Hosting.Lifetime": "Information"
10 |     }
11 |   },
12 |   "AllowedHosts": "*",
13 |   "JwtBearer": {
14 |     "Authority": "http://keycloak:8080/auth/realms/webinar",
15 |     "Audience": "blog-api"
16 |   }
17 | }
18 | 


--------------------------------------------------------------------------------
/src/api/blog-api.csproj:
--------------------------------------------------------------------------------
 1 | <Project Sdk="Microsoft.NET.Sdk.Web">
 2 | 
 3 | 	<PropertyGroup>
 4 | 		<TargetFramework>net5.0</TargetFramework>
 5 | 		<RootNamespace>blog_api</RootNamespace>
 6 | 		<Nullable>enable</Nullable>
 7 | 		<UserSecretsId>5c076d39-43e0-4f8a-8826-ef0b8f9907e6</UserSecretsId>
 8 | 		<DockerDefaultTargetOS>Linux</DockerDefaultTargetOS>
 9 | 		<DockerfileContext>..\..</DockerfileContext>
10 | 	</PropertyGroup>
11 | 
12 | 	<PropertyGroup>
13 | 	  <DocumentationFile>blog-api.xml</DocumentationFile>
14 | 	</PropertyGroup>
15 | 
16 | 	<ItemGroup>
17 | 		<PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="5.0.2" />
18 | 		<PackageReference Include="Microsoft.EntityFrameworkCore.Design" Version="5.0.2">
19 | 		  <PrivateAssets>all</PrivateAssets>
20 | 		  <IncludeAssets>runtime; build; native; contentfiles; analyzers; buildtransitive</IncludeAssets>
21 | 		</PackageReference>
22 | 		<PackageReference Include="Microsoft.EntityFrameworkCore.Sqlite" Version="5.0.2" />
23 | 		<PackageReference Include="Microsoft.VisualStudio.Azure.Containers.Tools.Targets" Version="1.10.9" />
24 | 		<PackageReference Include="Swashbuckle.AspNetCore" Version="5.6.3" />
25 | 	</ItemGroup>
26 | 
27 | 	<ItemGroup>
28 | 	  <None Update="blog-api.xml">
29 | 	    <CopyToOutputDirectory>PreserveNewest</CopyToOutputDirectory>
30 | 	  </None>
31 | 	</ItemGroup>
32 | 
33 | </Project>
34 | 


--------------------------------------------------------------------------------
/src/api/blog-api.xml:
--------------------------------------------------------------------------------
  1 | <?xml version="1.0"?>
  2 | <doc>
  3 |     <assembly>
  4 |         <name>blog-api</name>
  5 |     </assembly>
  6 |     <members>
  7 |         <member name="T:blog_api.ClaimsPrincipalExtensions">
  8 |             <summary>
  9 |             Extensions for claims principal
 10 |             </summary>
 11 |         </member>
 12 |         <member name="M:blog_api.ClaimsPrincipalExtensions.IsEditorOrPublisher(System.Security.Claims.ClaimsPrincipal)">
 13 |             <summary>
 14 |             Determines whether the user has the editor- or publisher-role.
 15 |             </summary>
 16 |             <param name="principal">The principal.</param>
 17 |             <returns>
 18 |               <c>true</c> if the user has the editor- or publisher-role; otherwise, <c>false</c>.
 19 |             </returns>
 20 |         </member>
 21 |         <member name="T:blog_api.Controllers.Posts">
 22 |             <summary>
 23 |             Controller to handle posts
 24 |             </summary>
 25 |             <seealso cref="T:Microsoft.AspNetCore.Mvc.Controller" />
 26 |         </member>
 27 |         <member name="M:blog_api.Controllers.Posts.#ctor(blog_api.Models.BlogContext)">
 28 |             <summary>
 29 |             Initializes a new instance of the <see cref="T:blog_api.Controllers.Posts"/> class.
 30 |             </summary>
 31 |             <param name="context">The context.</param>
 32 |         </member>
 33 |         <member name="M:blog_api.Controllers.Posts.Index">
 34 |             <summary>
 35 |             Endpoint to retrieve a list of all posts.
 36 |             </summary>
 37 |             <returns></returns>
 38 |         </member>
 39 |         <member name="M:blog_api.Controllers.Posts.Index(System.Int32)">
 40 |             <summary>
 41 |             Endpoint to retrieve a single post.
 42 |             </summary>
 43 |             <param name="id">The identifier of the post.</param>
 44 |             <returns></returns>
 45 |         </member>
 46 |         <member name="M:blog_api.Controllers.Posts.Post(blog_api.Models.PostInputModel)">
 47 |             <summary>
 48 |             Endpoint to create a new post.
 49 |             </summary>
 50 |             <param name="model">The model.</param>
 51 |             <returns></returns>
 52 |         </member>
 53 |         <member name="M:blog_api.Controllers.Posts.Publish(System.Int32)">
 54 |             <summary>
 55 |             Endpoint to publish a post.
 56 |             </summary>
 57 |             <param name="id">The identifier of the post.</param>
 58 |             <returns></returns>
 59 |         </member>
 60 |         <member name="M:blog_api.Controllers.Posts.Unpublish(System.Int32)">
 61 |             <summary>
 62 |             Endpoint to unpublish a post.
 63 |             </summary>
 64 |             <param name="id">The identifier of the post.</param>
 65 |             <returns></returns>
 66 |         </member>
 67 |         <member name="M:blog_api.Controllers.Posts.Delete(System.Int32)">
 68 |             <summary>
 69 |             Endpoint to delete a post.
 70 |             </summary>
 71 |             <param name="id">The identifier of the post.</param>
 72 |             <returns></returns>
 73 |         </member>
 74 |         <member name="T:blog_api.JwtBearerOptions">
 75 |             <summary>
 76 |             Options for JWT Bearer authentication.
 77 |             </summary>
 78 |         </member>
 79 |         <member name="P:blog_api.JwtBearerOptions.Authority">
 80 |             <summary>
 81 |             Gets or sets the authority.
 82 |             </summary>
 83 |             <value>
 84 |             The authority.
 85 |             </value>
 86 |         </member>
 87 |         <member name="P:blog_api.JwtBearerOptions.Audience">
 88 |             <summary>
 89 |             Gets or sets the audience.
 90 |             </summary>
 91 |             <value>
 92 |             The audience.
 93 |             </value>
 94 |         </member>
 95 |         <member name="T:blog_api.KeycloakRolesClaimsTransformation">
 96 |             <summary>
 97 |             Transforms keycloak roles in the resource_access claim to jwt role claims.
 98 |             </summary>
 99 |             <example>
100 |             Example of keycloack resource_access claim
101 |             "resource_access": {
102 |                 "blog-api": {
103 |                     "roles": [
104 |                         "editor"
105 |                     ]
106 |                 },
107 |                 "account": {
108 |                     "roles": [
109 |                         "view-profile"
110 |                     ]
111 |                 }
112 |             },
113 |             </example>
114 |             <seealso cref="T:Microsoft.AspNetCore.Authentication.IClaimsTransformation" />
115 |         </member>
116 |         <member name="M:blog_api.KeycloakRolesClaimsTransformation.#ctor(System.String,System.String)">
117 |             <summary>
118 |             Initializes a new instance of the <see cref="T:blog_api.KeycloakRolesClaimsTransformation"/> class.
119 |             </summary>
120 |             <param name="roleClaimType">Type of the role claim.</param>
121 |             <param name="audience">The audience.</param>
122 |         </member>
123 |         <member name="M:blog_api.KeycloakRolesClaimsTransformation.TransformAsync(System.Security.Claims.ClaimsPrincipal)">
124 |             <summary>
125 |             Provides a central transformation point to change the specified principal.
126 |             Note: this will be run on each AuthenticateAsync call, so its safer to
127 |             return a new ClaimsPrincipal if your transformation is not idempotent.
128 |             </summary>
129 |             <param name="principal">The <see cref="T:System.Security.Claims.ClaimsPrincipal" /> to transform.</param>
130 |             <returns>
131 |             The transformed principal.
132 |             </returns>
133 |         </member>
134 |         <member name="T:blog_api.Migrations.Initial">
135 |             <summary>
136 |             Initial database migration
137 |             </summary>
138 |             <seealso cref="T:Microsoft.EntityFrameworkCore.Migrations.Migration" />
139 |         </member>
140 |         <member name="M:blog_api.Migrations.Initial.Up(Microsoft.EntityFrameworkCore.Migrations.MigrationBuilder)">
141 |             <summary>
142 |             <para>
143 |             Builds the operations that will migrate the database 'up'.
144 |             </para>
145 |             <para>
146 |             That is, builds the operations that will take the database from the state left in by the
147 |             previous migration so that it is up-to-date with regard to this migration.
148 |             </para>
149 |             <para>
150 |             This method must be overridden in each class the inherits from <see cref="T:Microsoft.EntityFrameworkCore.Migrations.Migration" />.
151 |             </para>
152 |             </summary>
153 |             <param name="migrationBuilder">The <see cref="T:Microsoft.EntityFrameworkCore.Migrations.MigrationBuilder" /> that will build the operations.</param>
154 |         </member>
155 |         <member name="M:blog_api.Migrations.Initial.Down(Microsoft.EntityFrameworkCore.Migrations.MigrationBuilder)">
156 |             <summary>
157 |             <para>
158 |             Builds the operations that will migrate the database 'down'.
159 |             </para>
160 |             <para>
161 |             That is, builds the operations that will take the database from the state left in by
162 |             this migration so that it returns to the state that it was in before this migration was applied.
163 |             </para>
164 |             <para>
165 |             This method must be overridden in each class the inherits from <see cref="T:Microsoft.EntityFrameworkCore.Migrations.Migration" /> if
166 |             both 'up' and 'down' migrations are to be supported. If it is not overridden, then calling it
167 |             will throw and it will not be possible to migrate in the 'down' direction.
168 |             </para>
169 |             </summary>
170 |             <param name="migrationBuilder">The <see cref="T:Microsoft.EntityFrameworkCore.Migrations.MigrationBuilder" /> that will build the operations.</param>
171 |         </member>
172 |         <member name="T:blog_api.Models.BlogContext">
173 |             <summary>
174 |             Database context that holds the blog data
175 |             </summary>
176 |             <seealso cref="T:Microsoft.EntityFrameworkCore.DbContext" />
177 |         </member>
178 |         <member name="M:blog_api.Models.BlogContext.#ctor(Microsoft.EntityFrameworkCore.DbContextOptions{blog_api.Models.BlogContext})">
179 |             <summary>
180 |             Initializes a new instance of the <see cref="T:blog_api.Models.BlogContext"/> class.
181 |             </summary>
182 |             <param name="options">The options.</param>
183 |         </member>
184 |         <member name="P:blog_api.Models.BlogContext.Posts">
185 |             <summary>
186 |             Collection to hold posts.
187 |             </summary>
188 |             <value>
189 |             The posts.
190 |             </value>
191 |         </member>
192 |         <member name="T:blog_api.Models.Post">
193 |             <summary>
194 |             Represents a blog post
195 |             </summary>
196 |         </member>
197 |         <member name="P:blog_api.Models.Post.Id">
198 |             <summary>
199 |             Gets or sets the identifier.
200 |             </summary>
201 |             <value>
202 |             The identifier.
203 |             </value>
204 |         </member>
205 |         <member name="P:blog_api.Models.Post.Body">
206 |             <summary>
207 |             Gets or sets the body.
208 |             </summary>
209 |             <value>
210 |             The body.
211 |             </value>
212 |         </member>
213 |         <member name="P:blog_api.Models.Post.Excerpt">
214 |             <summary>
215 |             Gets or sets the excerpt.
216 |             </summary>
217 |             <value>
218 |             The excerpt.
219 |             </value>
220 |         </member>
221 |         <member name="P:blog_api.Models.Post.PublishDate">
222 |             <summary>
223 |             Gets or sets the publish date.
224 |             </summary>
225 |             <value>
226 |             The publish date.
227 |             </value>
228 |         </member>
229 |         <member name="P:blog_api.Models.Post.Title">
230 |             <summary>
231 |             Gets or sets the title.
232 |             </summary>
233 |             <value>
234 |             The title.
235 |             </value>
236 |         </member>
237 |         <member name="M:blog_api.Models.Post.#ctor(System.String,System.String,System.String)">
238 |             <summary>
239 |             Initializes a new instance of the <see cref="T:blog_api.Models.Post"/> class.
240 |             </summary>
241 |             <param name="body">The body.</param>
242 |             <param name="excerpt">The excerpt.</param>
243 |             <param name="title">The title.</param>
244 |         </member>
245 |         <member name="T:blog_api.Program">
246 |             <summary>
247 |             Main Entry Point
248 |             </summary>
249 |         </member>
250 |         <member name="M:blog_api.Program.Main(System.String[])">
251 |             <summary>
252 |             Defines the entry point of the application.
253 |             </summary>
254 |             <param name="args">The arguments.</param>
255 |         </member>
256 |         <member name="M:blog_api.Program.CreateHostBuilder(System.String[])">
257 |             <summary>
258 |             Creates the host builder.
259 |             </summary>
260 |             <param name="args">The arguments.</param>
261 |             <returns></returns>
262 |         </member>
263 |         <member name="T:blog_api.Roles">
264 |             <summary>
265 |             Roles defined for the application.
266 |             </summary>
267 |         </member>
268 |         <member name="F:blog_api.Roles.Editor">
269 |             <summary>
270 |             The editor role
271 |             </summary>
272 |         </member>
273 |         <member name="F:blog_api.Roles.Publisher">
274 |             <summary>
275 |             The publisher role
276 |             </summary>
277 |         </member>
278 |         <member name="T:blog_api.Startup">
279 |             <summary>
280 |             Startup class of the ASP.NET Core application.
281 |             </summary>
282 |         </member>
283 |         <member name="M:blog_api.Startup.#ctor(Microsoft.Extensions.Configuration.IConfiguration)">
284 |             <summary>
285 |             Initializes a new instance of the <see cref="T:blog_api.Startup"/> class.
286 |             </summary>
287 |             <param name="configuration">The configuration.</param>
288 |         </member>
289 |         <member name="P:blog_api.Startup.Configuration">
290 |             <summary>
291 |             Gets the configuration.
292 |             </summary>
293 |             <value>
294 |             The configuration.
295 |             </value>
296 |         </member>
297 |         <member name="M:blog_api.Startup.ConfigureServices(Microsoft.Extensions.DependencyInjection.IServiceCollection)">
298 |             <summary>
299 |             Configures the services.
300 |             </summary>
301 |             <param name="services">The services.</param>
302 |         </member>
303 |         <member name="M:blog_api.Startup.Configure(Microsoft.AspNetCore.Builder.IApplicationBuilder,Microsoft.AspNetCore.Hosting.IWebHostEnvironment)">
304 |             <summary>
305 |             Configures the specified application.
306 |             </summary>
307 |             <param name="app">The application.</param>
308 |             <param name="env">The env.</param>
309 |         </member>
310 |     </members>
311 | </doc>
312 | 


--------------------------------------------------------------------------------
/src/frontend/.browserslistrc:
--------------------------------------------------------------------------------
 1 | # This file is used by the build system to adjust CSS and JS output to support the specified browsers below.
 2 | # For additional information regarding the format and rule options, please see:
 3 | # https://github.com/browserslist/browserslist#queries
 4 | 
 5 | # For the full list of supported browsers by the Angular framework, please see:
 6 | # https://angular.io/guide/browser-support
 7 | 
 8 | # You can see what browsers were selected by your queries by running:
 9 | #   npx browserslist
10 | 
11 | last 1 Chrome version
12 | last 1 Firefox version
13 | last 2 Edge major versions
14 | last 2 Safari major versions
15 | last 2 iOS major versions
16 | Firefox ESR
17 | not IE 11 # Angular supports IE 11 only as an opt-in. To opt-in, remove the 'not' prefix on this line.
18 | 


--------------------------------------------------------------------------------
/src/frontend/.devcontainer/Dockerfile:
--------------------------------------------------------------------------------
 1 | # See here for image contents: https://github.com/microsoft/vscode-dev-containers/tree/v0.155.1/containers/javascript-node/.devcontainer/base.Dockerfile
 2 | 
 3 | # [Choice] Node.js version: 14, 12, 10
 4 | ARG VARIANT="14-buster"
 5 | FROM mcr.microsoft.com/vscode/devcontainers/javascript-node:0-${VARIANT}
 6 | 
 7 | # [Optional] Uncomment this section to install additional OS packages.
 8 | # RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
 9 | #     && apt-get -y install --no-install-recommends <your-package-list-here>
10 | 
11 | # [Optional] Uncomment if you want to install an additional version of node using nvm
12 | # ARG EXTRA_NODE_VERSION=10
13 | # RUN su node -c "source /usr/local/share/nvm/nvm.sh && nvm install ${EXTRA_NODE_VERSION}"
14 | 
15 | # [Optional] Uncomment if you want to install more global node modules
16 | # RUN su node -c "npm install -g <your-package-list-here>"
17 | 


--------------------------------------------------------------------------------
/src/frontend/.devcontainer/devcontainer.json:
--------------------------------------------------------------------------------
 1 | // For format details, see https://aka.ms/devcontainer.json. For config options, see the README at:
 2 | // https://github.com/microsoft/vscode-dev-containers/tree/v0.155.1/containers/javascript-node
 3 | {
 4 | 	"name": "Node.js",
 5 | 	"build": {
 6 | 		"dockerfile": "Dockerfile",
 7 | 		// Update 'VARIANT' to pick a Node version: 10, 12, 14
 8 | 		"args": { "VARIANT": "14" }
 9 | 	},
10 | 
11 | 	// Set *default* container specific settings.json values on container create.
12 | 	"settings": { 
13 | 		"terminal.integrated.shell.linux": "/bin/bash"
14 | 	},
15 | 
16 | 	// Add the IDs of extensions you want installed when the container is created.
17 | 	"extensions": [
18 | 		"dbaeumer.vscode-eslint",
19 | 		"johnpapa.angular-essentials"
20 | 	],
21 | 
22 | 	// Use 'forwardPorts' to make a list of ports inside the container available locally.
23 | 	"forwardPorts": [ 4200 ],
24 | 
25 | 	// Use 'postCreateCommand' to run commands after the container is created.
26 | 	// "postCreateCommand": "yarn install",
27 | 
28 | 	// Comment out connect as root instead. More info: https://aka.ms/vscode-remote/containers/non-root.
29 | 	"remoteUser": "node"
30 | }
31 | 


--------------------------------------------------------------------------------
/src/frontend/.editorconfig:
--------------------------------------------------------------------------------
 1 | # Editor configuration, see https://editorconfig.org
 2 | root = true
 3 | 
 4 | [*]
 5 | charset = utf-8
 6 | indent_style = space
 7 | indent_size = 2
 8 | insert_final_newline = true
 9 | trim_trailing_whitespace = true
10 | 
11 | [*.ts]
12 | quote_type = single
13 | 
14 | [*.md]
15 | max_line_length = off
16 | trim_trailing_whitespace = false
17 | 


--------------------------------------------------------------------------------
/src/frontend/.gitignore:
--------------------------------------------------------------------------------
 1 | # See http://help.github.com/ignore-files/ for more about ignoring files.
 2 | 
 3 | # compiled output
 4 | /dist
 5 | /tmp
 6 | /out-tsc
 7 | # Only exists if Bazel was run
 8 | /bazel-out
 9 | 
10 | # dependencies
11 | /node_modules
12 | 
13 | # profiling files
14 | chrome-profiler-events*.json
15 | speed-measure-plugin*.json
16 | 
17 | # IDEs and editors
18 | /.idea
19 | .project
20 | .classpath
21 | .c9/
22 | *.launch
23 | .settings/
24 | *.sublime-workspace
25 | 
26 | # IDE - VSCode
27 | .vscode/*
28 | !.vscode/settings.json
29 | !.vscode/tasks.json
30 | !.vscode/launch.json
31 | !.vscode/extensions.json
32 | .history/*
33 | 
34 | # misc
35 | /.sass-cache
36 | /connect.lock
37 | /coverage
38 | /libpeerconnection.log
39 | npm-debug.log
40 | yarn-error.log
41 | testem.log
42 | /typings
43 | 
44 | # System Files
45 | .DS_Store
46 | Thumbs.db
47 | 


--------------------------------------------------------------------------------
/src/frontend/Dockerfile:
--------------------------------------------------------------------------------
 1 | # Build Env
 2 | FROM node:16-alpine AS build-env
 3 | WORKDIR /app
 4 | 
 5 | COPY package.json ./
 6 | COPY package-lock.json ./
 7 | 
 8 | RUN npm i
 9 | 
10 | COPY src ./src
11 | COPY config ./config
12 | COPY angular.json ./
13 | COPY tsconfig.json ./
14 | COPY tsconfig.app.json ./
15 | COPY tslint.json ./
16 | 
17 | RUN npm run build-prod
18 | 
19 | # Prod Env
20 | FROM nginx:alpine
21 | WORKDIR /app
22 | 
23 | COPY --from=build-env /app/dist/blog-frontend /usr/share/nginx/html
24 | COPY --from=build-env /app/config/nginx.conf /etc/nginx/conf.d/default.conf
25 | 


--------------------------------------------------------------------------------
/src/frontend/README.md:
--------------------------------------------------------------------------------
 1 | # BlogFrontend
 2 | 
 3 | This project was generated with [Angular CLI](https://github.com/angular/angular-cli) version 11.1.2.
 4 | 
 5 | ## Development server
 6 | 
 7 | Run `ng serve` for a dev server. Navigate to `http://localhost:4200/`. The app will automatically reload if you change any of the source files.
 8 | 
 9 | ## Code scaffolding
10 | 
11 | Run `ng generate component component-name` to generate a new component. You can also use `ng generate directive|pipe|service|class|guard|interface|enum|module`.
12 | 
13 | ## Build
14 | 
15 | Run `ng build` to build the project. The build artifacts will be stored in the `dist/` directory. Use the `--prod` flag for a production build.
16 | 
17 | ## Running unit tests
18 | 
19 | Run `ng test` to execute the unit tests via [Karma](https://karma-runner.github.io).
20 | 
21 | ## Running end-to-end tests
22 | 
23 | Run `ng e2e` to execute the end-to-end tests via [Protractor](http://www.protractortest.org/).
24 | 
25 | ## Further help
26 | 
27 | To get more help on the Angular CLI use `ng help` or go check out the [Angular CLI Overview and Command Reference](https://angular.io/cli) page.
28 | 


--------------------------------------------------------------------------------
/src/frontend/angular.json:
--------------------------------------------------------------------------------
  1 | {
  2 |   "$schema": "./node_modules/@angular/cli/lib/config/schema.json",
  3 |   "version": 1,
  4 |   "newProjectRoot": "projects",
  5 |   "projects": {
  6 |     "blog-frontend": {
  7 |       "projectType": "application",
  8 |       "schematics": {
  9 |         "@schematics/angular:application": {
 10 |           "strict": true
 11 |         }
 12 |       },
 13 |       "root": "",
 14 |       "sourceRoot": "src",
 15 |       "prefix": "app",
 16 |       "architect": {
 17 |         "build": {
 18 |           "builder": "@angular-devkit/build-angular:browser",
 19 |           "options": {
 20 |             "allowedCommonJsDependencies":[
 21 |               "keycloak-js"
 22 |             ],
 23 |             "outputPath": "dist/blog-frontend",
 24 |             "index": "src/index.html",
 25 |             "main": "src/main.ts",
 26 |             "polyfills": "src/polyfills.ts",
 27 |             "tsConfig": "tsconfig.app.json",
 28 |             "aot": true,
 29 |             "assets": [
 30 |               "src/favicon.ico",
 31 |               "src/assets"
 32 |             ],
 33 |             "styles": [
 34 |               "node_modules/bootstrap/dist/css/bootstrap.css",
 35 |               "src/styles.css"
 36 |             ],
 37 |             "scripts": [
 38 |               "node_modules/bootstrap/dist/js/bootstrap.js"
 39 |             ]
 40 |           },
 41 |           "configurations": {
 42 |             "production": {
 43 |               "fileReplacements": [
 44 |                 {
 45 |                   "replace": "src/environments/environment.ts",
 46 |                   "with": "src/environments/environment.prod.ts"
 47 |                 }
 48 |               ],
 49 |               "optimization": true,
 50 |               "outputHashing": "all",
 51 |               "sourceMap": false,
 52 |               "namedChunks": false,
 53 |               "extractLicenses": true,
 54 |               "vendorChunk": false,
 55 |               "buildOptimizer": true,
 56 |               "budgets": [
 57 |                 {
 58 |                   "type": "initial",
 59 |                   "maximumWarning": "500kb",
 60 |                   "maximumError": "1mb"
 61 |                 },
 62 |                 {
 63 |                   "type": "anyComponentStyle",
 64 |                   "maximumWarning": "2kb",
 65 |                   "maximumError": "4kb"
 66 |                 }
 67 |               ]
 68 |             }
 69 |           }
 70 |         },
 71 |         "serve": {
 72 |           "builder": "@angular-devkit/build-angular:dev-server",
 73 |           "options": {
 74 |             "browserTarget": "blog-frontend:build"
 75 |           },
 76 |           "configurations": {
 77 |             "production": {
 78 |               "browserTarget": "blog-frontend:build:production"
 79 |             }
 80 |           }
 81 |         },
 82 |         "extract-i18n": {
 83 |           "builder": "@angular-devkit/build-angular:extract-i18n",
 84 |           "options": {
 85 |             "browserTarget": "blog-frontend:build"
 86 |           }
 87 |         },
 88 |         "test": {
 89 |           "builder": "@angular-devkit/build-angular:karma",
 90 |           "options": {
 91 |             "main": "src/test.ts",
 92 |             "polyfills": "src/polyfills.ts",
 93 |             "tsConfig": "tsconfig.spec.json",
 94 |             "karmaConfig": "karma.conf.js",
 95 |             "assets": [
 96 |               "src/favicon.ico",
 97 |               "src/assets"
 98 |             ],
 99 |             "styles": [
100 |               "./node_modules/@angular/material/prebuilt-themes/pink-bluegrey.css",
101 |               "src/styles.css"
102 |             ],
103 |             "scripts": []
104 |           }
105 |         },
106 |         "lint": {
107 |           "builder": "@angular-devkit/build-angular:tslint",
108 |           "options": {
109 |             "tsConfig": [
110 |               "tsconfig.app.json",
111 |               "tsconfig.spec.json",
112 |               "e2e/tsconfig.json"
113 |             ],
114 |             "exclude": [
115 |               "**/node_modules/**"
116 |             ]
117 |           }
118 |         },
119 |         "e2e": {
120 |           "builder": "@angular-devkit/build-angular:protractor",
121 |           "options": {
122 |             "protractorConfig": "e2e/protractor.conf.js",
123 |             "devServerTarget": "blog-frontend:serve"
124 |           },
125 |           "configurations": {
126 |             "production": {
127 |               "devServerTarget": "blog-frontend:serve:production"
128 |             }
129 |           }
130 |         }
131 |       }
132 |     }
133 |   },
134 |   "defaultProject": "blog-frontend"
135 | }
136 | 


--------------------------------------------------------------------------------
/src/frontend/config/nginx.conf:
--------------------------------------------------------------------------------
 1 | server {
 2 |   listen 80;
 3 | 
 4 |   location / {
 5 |     root /usr/share/nginx/html;
 6 |     index index.html index.htm;
 7 |     try_files $uri $uri/ /index.html =404;
 8 |   }
 9 | }
10 | 


--------------------------------------------------------------------------------
/src/frontend/e2e/protractor.conf.js:
--------------------------------------------------------------------------------
 1 | // @ts-check
 2 | // Protractor configuration file, see link for more information
 3 | // https://github.com/angular/protractor/blob/master/lib/config.ts
 4 | 
 5 | const { SpecReporter, StacktraceOption } = require('jasmine-spec-reporter');
 6 | 
 7 | /**
 8 |  * @type { import("protractor").Config }
 9 |  */
10 | exports.config = {
11 |   allScriptsTimeout: 11000,
12 |   specs: [
13 |     './src/**/*.e2e-spec.ts'
14 |   ],
15 |   capabilities: {
16 |     browserName: 'chrome'
17 |   },
18 |   directConnect: true,
19 |   SELENIUM_PROMISE_MANAGER: false,
20 |   baseUrl: 'http://localhost:4200/',
21 |   framework: 'jasmine',
22 |   jasmineNodeOpts: {
23 |     showColors: true,
24 |     defaultTimeoutInterval: 30000,
25 |     print: function() {}
26 |   },
27 |   onPrepare() {
28 |     require('ts-node').register({
29 |       project: require('path').join(__dirname, './tsconfig.json')
30 |     });
31 |     jasmine.getEnv().addReporter(new SpecReporter({
32 |       spec: {
33 |         displayStacktrace: StacktraceOption.PRETTY
34 |       }
35 |     }));
36 |   }
37 | };


--------------------------------------------------------------------------------
/src/frontend/e2e/src/app.e2e-spec.ts:
--------------------------------------------------------------------------------
 1 | import { browser, logging } from 'protractor';
 2 | import { AppPage } from './app.po';
 3 | 
 4 | describe('workspace-project App', () => {
 5 |   let page: AppPage;
 6 | 
 7 |   beforeEach(() => {
 8 |     page = new AppPage();
 9 |   });
10 | 
11 |   it('should display welcome message', async () => {
12 |     await page.navigateTo();
13 |     expect(await page.getTitleText()).toEqual('blog-frontend app is running!');
14 |   });
15 | 
16 |   afterEach(async () => {
17 |     // Assert that there are no errors emitted from the browser
18 |     const logs = await browser.manage().logs().get(logging.Type.BROWSER);
19 |     expect(logs).not.toContain(jasmine.objectContaining({
20 |       level: logging.Level.SEVERE,
21 |     } as logging.Entry));
22 |   });
23 | });
24 | 


--------------------------------------------------------------------------------
/src/frontend/e2e/src/app.po.ts:
--------------------------------------------------------------------------------
 1 | import { browser, by, element } from 'protractor';
 2 | 
 3 | export class AppPage {
 4 |   async navigateTo(): Promise<unknown> {
 5 |     return browser.get(browser.baseUrl);
 6 |   }
 7 | 
 8 |   async getTitleText(): Promise<string> {
 9 |     return element(by.css('app-root .content span')).getText();
10 |   }
11 | }
12 | 


--------------------------------------------------------------------------------
/src/frontend/e2e/tsconfig.json:
--------------------------------------------------------------------------------
 1 | /* To learn more about this file see: https://angular.io/config/tsconfig. */
 2 | {
 3 |   "extends": "../tsconfig.json",
 4 |   "compilerOptions": {
 5 |     "outDir": "../out-tsc/e2e",
 6 |     "module": "commonjs",
 7 |     "target": "es2018",
 8 |     "types": [
 9 |       "jasmine",
10 |       "node"
11 |     ]
12 |   }
13 | }
14 | 


--------------------------------------------------------------------------------
/src/frontend/karma.conf.js:
--------------------------------------------------------------------------------
 1 | // Karma configuration file, see link for more information
 2 | // https://karma-runner.github.io/1.0/config/configuration-file.html
 3 | 
 4 | module.exports = function (config) {
 5 |   config.set({
 6 |     basePath: '',
 7 |     frameworks: ['jasmine', '@angular-devkit/build-angular'],
 8 |     plugins: [
 9 |       require('karma-jasmine'),
10 |       require('karma-chrome-launcher'),
11 |       require('karma-jasmine-html-reporter'),
12 |       require('karma-coverage'),
13 |       require('@angular-devkit/build-angular/plugins/karma')
14 |     ],
15 |     client: {
16 |       jasmine: {
17 |         // you can add configuration options for Jasmine here
18 |         // the possible options are listed at https://jasmine.github.io/api/edge/Configuration.html
19 |         // for example, you can disable the random execution with `random: false`
20 |         // or set a specific seed with `seed: 4321`
21 |       },
22 |       clearContext: false // leave Jasmine Spec Runner output visible in browser
23 |     },
24 |     jasmineHtmlReporter: {
25 |       suppressAll: true // removes the duplicated traces
26 |     },
27 |     coverageReporter: {
28 |       dir: require('path').join(__dirname, './coverage/blog-frontend'),
29 |       subdir: '.',
30 |       reporters: [
31 |         { type: 'html' },
32 |         { type: 'text-summary' }
33 |       ]
34 |     },
35 |     reporters: ['progress', 'kjhtml'],
36 |     port: 9876,
37 |     colors: true,
38 |     logLevel: config.LOG_INFO,
39 |     autoWatch: true,
40 |     browsers: ['Chrome'],
41 |     singleRun: false,
42 |     restartOnFileChange: true
43 |   });
44 | };
45 | 


--------------------------------------------------------------------------------
/src/frontend/package.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "name": "blog-frontend",
 3 |   "version": "0.0.0",
 4 |   "scripts": {
 5 |     "ng": "ng",
 6 |     "start": "ng serve",
 7 |     "build": "ng build",
 8 |     "build-prod": "ng build --prod",
 9 |     "test": "ng test",
10 |     "lint": "ng lint",
11 |     "e2e": "ng e2e"
12 |   },
13 |   "private": true,
14 |   "dependencies": {
15 |     "@angular/animations": "~11.1.1",
16 |     "@angular/cdk": "^11.1.1",
17 |     "@angular/common": "~11.1.1",
18 |     "@angular/compiler": "~11.1.1",
19 |     "@angular/core": "~11.1.1",
20 |     "@angular/forms": "~11.1.1",
21 |     "@angular/platform-browser": "~11.1.1",
22 |     "@angular/platform-browser-dynamic": "~11.1.1",
23 |     "@angular/router": "~11.1.1",
24 |     "bootstrap": "^5.0.0-beta1",
25 |     "keycloak-angular": "^8.1.0",
26 |     "keycloak-js": "^12.0.2",
27 |     "rxjs": "~6.6.0",
28 |     "tslib": "^2.0.0",
29 |     "zone.js": "~0.11.3"
30 |   },
31 |   "devDependencies": {
32 |     "@angular-devkit/build-angular": "~0.1101.2",
33 |     "@angular/cli": "^11.1.2",
34 |     "@angular/compiler-cli": "~11.1.1",
35 |     "@types/jasmine": "~3.6.0",
36 |     "@types/node": "^12.11.1",
37 |     "codelyzer": "^6.0.0",
38 |     "jasmine-core": "~3.6.0",
39 |     "jasmine-spec-reporter": "~5.0.0",
40 |     "karma": "~5.2.0",
41 |     "karma-chrome-launcher": "~3.1.0",
42 |     "karma-coverage": "~2.0.3",
43 |     "karma-jasmine": "~4.0.0",
44 |     "karma-jasmine-html-reporter": "^1.5.0",
45 |     "protractor": "~7.0.0",
46 |     "ts-node": "~8.3.0",
47 |     "tslint": "~6.1.0",
48 |     "typescript": "~4.1.2"
49 |   }
50 | }
51 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/app-routing.module.ts:
--------------------------------------------------------------------------------
 1 | import { NgModule } from '@angular/core';
 2 | import { RouterModule, Routes } from '@angular/router';
 3 | import { NewPostComponent } from './components/new-post/new-post.component';
 4 | import { PostDetailComponent } from './components/post-detail/post-detail.component';
 5 | import { PostListComponent } from './components/post-list/post-list.component';
 6 | import { AuthGuard } from './services/auth.guard';
 7 | 
 8 | const routes: Routes = [
 9 |   {
10 |     path: '',
11 |     pathMatch: 'full',
12 |     component: PostListComponent,
13 |   },
14 |   {
15 |     path: 'post/new',
16 |     component: NewPostComponent,
17 |     data: {
18 |       roles: ['editor'],
19 |     },
20 |     canActivate: [AuthGuard],
21 |   },
22 |   {
23 |     path: 'post/:id',
24 |     component: PostDetailComponent,
25 |   },
26 | ];
27 | 
28 | @NgModule({
29 |   imports: [RouterModule.forRoot(routes)],
30 |   exports: [RouterModule],
31 | })
32 | export class AppRoutingModule {}
33 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/app.module.ts:
--------------------------------------------------------------------------------
 1 | import { APP_INITIALIZER, NgModule } from '@angular/core';
 2 | import { HttpClientModule } from '@angular/common/http';
 3 | import { BrowserModule } from '@angular/platform-browser';
 4 | 
 5 | import { AppRoutingModule } from './app-routing.module';
 6 | import { AppComponent } from './components/app/app.component';
 7 | import { BrowserAnimationsModule } from '@angular/platform-browser/animations';
 8 | 
 9 | import { PostListComponent } from './components/post-list/post-list.component';
10 | import { BlogService } from './services/blog.service';
11 | import { HeaderComponent } from './components/header/header.component';
12 | import { PostDetailComponent } from './components/post-detail/post-detail.component';
13 | import { KeycloakAngularModule, KeycloakService } from 'keycloak-angular';
14 | import { NewPostComponent } from './components/new-post/new-post.component';
15 | import { ReactiveFormsModule } from '@angular/forms';
16 | import { SecurityService } from './services/security.service';
17 | import { AuthGuard } from './services/auth.guard';
18 | import { PostItemComponent } from './components/post-item/post-item.component';
19 | import { environment } from '../environments/environment';
20 | import { KeycloakAuthorizationService } from './services/keycloakAuthorization.service';
21 | 
22 | function initializeKeycloak(keycloak: KeycloakService): () => Promise<void> {
23 |   return async () => {
24 |     await keycloak.init(environment.keycloak);
25 |   };
26 | }
27 | 
28 | @NgModule({
29 |   declarations: [
30 |     AppComponent,
31 |     PostListComponent,
32 |     HeaderComponent,
33 |     PostDetailComponent,
34 |     NewPostComponent,
35 |     PostItemComponent,
36 |   ],
37 |   imports: [
38 |     BrowserModule,
39 |     AppRoutingModule,
40 |     HttpClientModule,
41 |     BrowserAnimationsModule,
42 |     KeycloakAngularModule,
43 |     ReactiveFormsModule
44 |   ],
45 |   providers: [
46 |     AuthGuard,
47 |     BlogService,
48 |     SecurityService,
49 |     {
50 |       provide: APP_INITIALIZER,
51 |       useFactory: initializeKeycloak,
52 |       multi: true,
53 |       deps: [KeycloakService],
54 |     },
55 |     KeycloakAuthorizationService
56 |   ],
57 |   bootstrap: [AppComponent],
58 | })
59 | export class AppModule {}
60 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/app/app.component.css:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/thinktecture-labs/webinar-keycloak/8e0c838124ff40a246011f4d41ec163ba6d666f0/src/frontend/src/app/components/app/app.component.css


--------------------------------------------------------------------------------
/src/frontend/src/app/components/app/app.component.html:
--------------------------------------------------------------------------------
1 | <app-header></app-header>
2 | <main class="container-lg my-md-4">
3 |   <router-outlet></router-outlet>
4 | </main>
5 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/app/app.component.ts:
--------------------------------------------------------------------------------
 1 | import { Component } from '@angular/core';
 2 | 
 3 | @Component({
 4 |   selector: 'app-root',
 5 |   templateUrl: './app.component.html',
 6 |   styleUrls: ['./app.component.css']
 7 | })
 8 | export class AppComponent {
 9 |   title = 'blog-frontend';
10 | }
11 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/header/header.component.css:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/thinktecture-labs/webinar-keycloak/8e0c838124ff40a246011f4d41ec163ba6d666f0/src/frontend/src/app/components/header/header.component.css


--------------------------------------------------------------------------------
/src/frontend/src/app/components/header/header.component.html:
--------------------------------------------------------------------------------
 1 | <nav class="navbar navbar-expand-lg navbar-dark bg-dark">
 2 |   <div class="container-fluid">
 3 |     <a class="navbar-brand" [routerLink]="['/']">Company Blog</a>
 4 |     <button class="navbar-toggler" type="button" data-bs-toggle="collapse" data-bs-target="#navbarSupportedContent" aria-controls="navbarSupportedContent" aria-expanded="false" aria-label="Toggle navigation">
 5 |       <span class="navbar-toggler-icon"></span>
 6 |     </button>
 7 |     <div class="collapse navbar-collapse" id="navbarSupportedContent">
 8 |       <ul class="navbar-nav me-auto">
 9 |         <li class="nav-item">
10 |           <a class="nav-link active" aria-current="page" [routerLink]="['/']">Home</a>
11 |         </li>
12 |       </ul>
13 |       <ul class="navbar-nav ms-auto">
14 |         <li *ngIf="!isLoggedIn" class="nav-item" >
15 |           <a class="nav-link active" (click)="keycloak.login()">Login</a>
16 |         </li>
17 |         <li *ngIf="isLoggedIn" class="nav-item dropdown">
18 |           <a class="nav-link active dropdown-toggle" href="#" id="navbarDropdown" role="button" data-bs-toggle="dropdown" aria-expanded="false">
19 |             Hello {{ keycloak.getUsername() }}
20 |           </a>
21 |           <ul class="dropdown-menu" aria-labelledby="navbarDropdown">
22 |             <li *ngIf="security.isEditor()"><a class="dropdown-item"  [routerLink]="['post', 'new']">New Post</a></li>
23 |             <li><hr class="dropdown-divider"></li>
24 |             <li *ngIf="isLoggedIn"><a class="dropdown-item" (click)="keycloak.logout()">Logout</a></li>
25 |           </ul>
26 |         </li>
27 |       </ul>
28 |     </div>
29 |   </div>
30 | </nav>
31 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/header/header.component.ts:
--------------------------------------------------------------------------------
 1 | import { Component, OnInit } from '@angular/core';
 2 | import { KeycloakService } from 'keycloak-angular';
 3 | import { KeycloakProfile } from 'keycloak-js';
 4 | import { SecurityService } from '../../services/security.service';
 5 | 
 6 | @Component({
 7 |   selector: 'app-header',
 8 |   templateUrl: './header.component.html',
 9 |   styleUrls: ['./header.component.css']
10 | })
11 | export class HeaderComponent implements OnInit {
12 | 
13 |   public isLoggedIn = false;
14 |   public userProfile: KeycloakProfile = {};
15 | 
16 |   constructor(public keycloak: KeycloakService, public security: SecurityService) { }
17 | 
18 |   public async ngOnInit() {
19 |     this.isLoggedIn = await this.keycloak.isLoggedIn();
20 | 
21 |     if (this.isLoggedIn) {
22 |       this.userProfile = await this.keycloak.loadUserProfile();
23 |     }
24 |   }
25 | 
26 |   public async login(){
27 |     await this.keycloak.login({
28 |       redirectUri: window.location.toString()
29 |     });
30 |   }
31 | 
32 | }
33 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/new-post/new-post.component.css:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/thinktecture-labs/webinar-keycloak/8e0c838124ff40a246011f4d41ec163ba6d666f0/src/frontend/src/app/components/new-post/new-post.component.css


--------------------------------------------------------------------------------
/src/frontend/src/app/components/new-post/new-post.component.html:
--------------------------------------------------------------------------------
 1 | <h2>New Post</h2>
 2 | <form [formGroup]="postForm" (ngSubmit)="onSubmit()">
 3 |   <div class="mb-3">
 4 |     <label for="title" class="form-label">Title:</label>
 5 |     <input type="text" class="form-control" id="title" formControlName="title">
 6 |   </div>
 7 |   <div class="mb-3">
 8 |     <label for="excerpt" class="form-label">Excerpt:</label>
 9 |     <input type="text" class="form-control" id="excerpt" formControlName="excerpt">
10 |   </div>
11 |   <div class="mb-3">
12 |     <label for="body" class="form-label">Body:</label>
13 |     <textarea  class="form-control" id="body" formControlName="body" rows="10"></textarea>
14 |   </div>
15 |   <div class="col-12">
16 |     <button type="submit" class="btn btn-primary">Save</button>
17 |   </div>
18 | </form>
19 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/new-post/new-post.component.ts:
--------------------------------------------------------------------------------
 1 | import { Component, OnInit } from '@angular/core';
 2 | import { FormControl, FormGroup } from '@angular/forms';
 3 | import { Router } from '@angular/router';
 4 | import { BlogService } from '../../services/blog.service';
 5 | 
 6 | @Component({
 7 |   selector: 'app-new-post',
 8 |   templateUrl: './new-post.component.html',
 9 |   styleUrls: ['./new-post.component.css']
10 | })
11 | export class NewPostComponent implements OnInit {
12 | 
13 |   postForm = new FormGroup({
14 |     title: new FormControl(''),
15 |     excerpt: new FormControl(''),
16 |     body: new FormControl('')
17 |   });
18 | 
19 |   constructor(private blog: BlogService, private router: Router) { }
20 | 
21 |   ngOnInit(): void {
22 |   }
23 | 
24 |   async onSubmit() {
25 |     await this.blog.create(this.postForm.value);
26 |     this.router.navigate(["/"]);
27 |   }
28 | 
29 | }
30 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-detail/post-detail.component.css:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/thinktecture-labs/webinar-keycloak/8e0c838124ff40a246011f4d41ec163ba6d666f0/src/frontend/src/app/components/post-detail/post-detail.component.css


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-detail/post-detail.component.html:
--------------------------------------------------------------------------------
 1 | <article class="post" *ngIf="post != null">
 2 |   <header class="post-header">
 3 |     <h1 class="post-title" id="aspnet-core-dev-cert-for-ubuntu">
 4 |       {{ post.title }}
 5 |     </h1>
 6 |     <div class="post-meta">
 7 |       <span *ngIf="post.publishDate == null" class="badge bg-secondary">Not published</span>
 8 |       <div *ngIf="post.publishDate != null">
 9 |         <svg
10 |           xmlns="http://www.w3.org/2000/svg"
11 |           width="24"
12 |           height="24"
13 |           viewBox="0 0 24 24"
14 |           fill="none"
15 |           stroke="currentColor"
16 |           stroke-width="2"
17 |           stroke-linecap="round"
18 |           stroke-linejoin="round"
19 |           class="icon icon-calendar"
20 |         >
21 |           <title>calendar</title>
22 |           <rect x="3" y="4" width="18" height="18" rx="2" ry="2"></rect>
23 |           <line x1="16" y1="2" x2="16" y2="6"></line>
24 |           <line x1="8" y1="2" x2="8" y2="6"></line>
25 |           <line x1="3" y1="10" x2="21" y2="10"></line>
26 |         </svg>
27 |         {{ post.publishDate }}
28 |       </div>
29 |     </div>
30 |   </header>
31 |   <div class="post-content">
32 |     {{ post.body }}
33 |   </div>
34 |   <div class="post-footer"></div>
35 | </article>
36 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-detail/post-detail.component.ts:
--------------------------------------------------------------------------------
 1 | import { Component, OnInit } from '@angular/core';
 2 | import { ActivatedRoute } from '@angular/router';
 3 | import { Post } from '../../models/post';
 4 | import { BlogService } from '../../services/blog.service';
 5 | 
 6 | @Component({
 7 |   selector: 'app-post-detail',
 8 |   templateUrl: './post-detail.component.html',
 9 |   styleUrls: ['./post-detail.component.css']
10 | })
11 | export class PostDetailComponent implements OnInit {
12 | 
13 |   public post: Post | null = null;
14 | 
15 |   constructor(private route: ActivatedRoute, private blog: BlogService) { }
16 | 
17 |   async ngOnInit(): Promise<void> {
18 |     this.post = await this.blog.detail(this.route.snapshot.params.id);
19 |   }
20 | 
21 | }
22 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-item/post-item.component.css:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/thinktecture-labs/webinar-keycloak/8e0c838124ff40a246011f4d41ec163ba6d666f0/src/frontend/src/app/components/post-item/post-item.component.css


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-item/post-item.component.html:
--------------------------------------------------------------------------------
 1 | <div class="card" *ngIf="post != null">
 2 |   <div class="card-body">
 3 |     <h5 class="card-title">
 4 |       {{ post.title }}
 5 |       <span *ngIf="post.publishDate == null" class="badge bg-secondary"
 6 |         >Not published</span
 7 |       >
 8 |     </h5>
 9 |     <p class="card-text">{{ post.excerpt }}</p>
10 |     <div class="d-flex flex-row bd-highlight mb-3">
11 |       <div class="p-2">
12 |         <button [routerLink]="['post', post.id]" class="btn btn-primary">
13 |           Read more
14 |         </button>
15 |       </div>
16 |       <div>
17 |         <div class="p-2" *ngIf="security.isPublisher() && post.publishDate == null">
18 |           <button (click)="publish()" class="btn btn-success">Publish</button>
19 |         </div>
20 |         <div class="p-2" *ngIf="canUnpublish && post.publishDate != null">
21 |           <button (click)="unpublish()" class="btn btn-danger">
22 |             Unpublish
23 |           </button>
24 |         </div>
25 |       </div>
26 |       <div *ngIf="security.isEditor()">
27 |         <div class="p-2" *ngIf="post.publishDate == null">
28 |           <button (click)="delete()" class="btn btn-danger">Delete</button>
29 |         </div>
30 |       </div>
31 |     </div>
32 |   </div>
33 | </div>
34 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-item/post-item.component.ts:
--------------------------------------------------------------------------------
 1 | import { Component, Input, OnInit } from '@angular/core';
 2 | import { PostListItem } from '../../models/post-list-item';
 3 | import { BlogService } from '../../services/blog.service';
 4 | import { SecurityService } from '../../services/security.service';
 5 | 
 6 | @Component({
 7 |   selector: 'app-post-item',
 8 |   templateUrl: './post-item.component.html',
 9 |   styleUrls: ['./post-item.component.css'],
10 | })
11 | export class PostItemComponent implements OnInit {
12 |   @Input()
13 |   public post: PostListItem | null = null;
14 | 
15 |   public canUnpublish = false;
16 | 
17 |   constructor(private blog: BlogService, public security: SecurityService) {}
18 | 
19 |   async ngOnInit(): Promise<void> {
20 |     this.canUnpublish = await this.security.canUnpublish();
21 |   }
22 | 
23 |   public async publish() {
24 |     if (this.post != null) {
25 |       this.post = await this.blog.publish(this.post.id);
26 |     }
27 |   }
28 | 
29 |   public async unpublish() {
30 |     if (this.post != null) {
31 |       this.post = await this.blog.unpublish(this.post.id);
32 |     }
33 |   }
34 | 
35 |   public async delete() {
36 |     if (this.post != null) {
37 |       this.post = await this.blog.delete(this.post.id);
38 |       this.post = null;
39 |     }
40 |   }
41 | }
42 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-list/post-list.component.css:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/thinktecture-labs/webinar-keycloak/8e0c838124ff40a246011f4d41ec163ba6d666f0/src/frontend/src/app/components/post-list/post-list.component.css


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-list/post-list.component.html:
--------------------------------------------------------------------------------
1 | <app-post-item *ngFor="let post of posts" [post]="post"></app-post-item>
2 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/components/post-list/post-list.component.ts:
--------------------------------------------------------------------------------
 1 | import { Component, OnInit } from '@angular/core';
 2 | import { promise } from 'protractor';
 3 | import { PostListItem } from '../../models/post-list-item';
 4 | import { BlogService } from '../../services/blog.service';
 5 | 
 6 | @Component({
 7 |   selector: 'app-post-list',
 8 |   templateUrl: './post-list.component.html',
 9 |   styleUrls: ['./post-list.component.css']
10 | })
11 | export class PostListComponent implements OnInit {
12 | 
13 |   public posts: PostListItem[] = [];
14 | 
15 |   constructor(private blog: BlogService) { }
16 | 
17 |   async ngOnInit(): Promise<void> {
18 |     this.posts = await this.blog.get();
19 |   }
20 | }
21 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/models/create-post-model.ts:
--------------------------------------------------------------------------------
1 | 
2 | export class CreatePostModel {
3 |   public title: string = "";
4 |   public excerpt: string = "";
5 |   public body: string = "";
6 | }
7 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/models/post-list-item.ts:
--------------------------------------------------------------------------------
1 | export class PostListItem {
2 |   public id: number = 0;
3 |   public title: string = "";
4 |   public excerpt: string = "";
5 |   public publishDate: Date | null = null;
6 | }
7 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/models/post.ts:
--------------------------------------------------------------------------------
1 | export class Post {
2 |   public id: number = 0;
3 |   public title: string = "";
4 |   public excerpt: string = ""
5 |   public body: string = ""
6 |   public publishDate: Date | null = null;
7 | }
8 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/services/auth.guard.ts:
--------------------------------------------------------------------------------
 1 | import { Injectable } from '@angular/core';
 2 | import { ActivatedRouteSnapshot, Router, RouterStateSnapshot } from '@angular/router';
 3 | import { KeycloakAuthGuard, KeycloakService } from 'keycloak-angular';
 4 | 
 5 | @Injectable({
 6 |   providedIn: 'root',
 7 | })
 8 | export class AuthGuard extends KeycloakAuthGuard {
 9 |   constructor(protected readonly router: Router, protected readonly keycloak: KeycloakService) {
10 |     super(router, keycloak);
11 |   }
12 | 
13 |   public async isAccessAllowed(route: ActivatedRouteSnapshot, state: RouterStateSnapshot) {
14 |     // Force the user to log in if currently unauthenticated.
15 |     if (!this.authenticated) {
16 |       await this.keycloak.login({
17 |         redirectUri: window.location.origin + state.url
18 |       });
19 |     }
20 | 
21 | 
22 |     // Get the roles required from the route.
23 |     const requiredRoles = route.data.roles;
24 | 
25 |     // Allow the user to to proceed if no additional roles are required to access the route.
26 |     if (!(requiredRoles instanceof Array) || requiredRoles.length === 0) {
27 |       return true;
28 |     }
29 | 
30 |     // Allow the user to proceed if all the required roles are present.
31 |     return requiredRoles.some(role => this.roles.includes(role));
32 |   }
33 | }
34 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/services/blog.service.ts:
--------------------------------------------------------------------------------
 1 | import { HttpClient } from '@angular/common/http';
 2 | import { Injectable } from '@angular/core';
 3 | import { environment } from '../../environments/environment';
 4 | import { CreatePostModel } from '../models/create-post-model';
 5 | import { Post } from '../models/post';
 6 | import { PostListItem } from '../models/post-list-item';
 7 | 
 8 | @Injectable({
 9 |   providedIn: 'root',
10 | })
11 | export class BlogService {
12 |   constructor(private http: HttpClient) {}
13 | 
14 |   public get(): Promise<PostListItem[]> {
15 |     return this.http
16 |       .get<PostListItem[]>(`${environment.apiBaseUrl}/api/posts`)
17 |       .toPromise<PostListItem[]>();
18 |   }
19 | 
20 |   public detail(id: number): Promise<Post> {
21 |     return this.http
22 |       .get<Post>(`${environment.apiBaseUrl}/api/posts/${id}`)
23 |       .toPromise<Post>();
24 |   }
25 | 
26 |   public create(post: CreatePostModel): Promise<CreatePostModel> {
27 |     return this.http
28 |       .post<CreatePostModel>(`${environment.apiBaseUrl}/api/posts`, post)
29 |       .toPromise<CreatePostModel>();
30 |   }
31 | 
32 |   public publish(id: number): Promise<Post> {
33 |     return this.http
34 |       .post<Post>(`${environment.apiBaseUrl}/api/posts/${id}/publish`, null)
35 |       .toPromise<Post>();
36 |   }
37 | 
38 |   public unpublish(id: number): Promise<Post> {
39 |     return this.http
40 |       .post<Post>(`${environment.apiBaseUrl}/api/posts/${id}/unpublish`, null)
41 |       .toPromise<Post>();
42 |   }
43 | 
44 |   public delete(id: number): Promise<any> {
45 |     return this.http
46 |       .delete(`${environment.apiBaseUrl}/api/posts/${id}`)
47 |       .toPromise();
48 |   }
49 | }
50 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/services/keycloakAuthorization.service.ts:
--------------------------------------------------------------------------------
 1 | import { HttpClient, HttpHeaders } from '@angular/common/http';
 2 | import { Injectable } from '@angular/core';
 3 | import { KeycloakService } from 'keycloak-angular';
 4 | 
 5 | @Injectable({
 6 |   providedIn: 'root',
 7 | })
 8 | export class KeycloakAuthorizationService {
 9 |   private config: any;
10 |   private clientId: string = '';
11 | 
12 |   constructor(
13 |     private keycloakService: KeycloakService,
14 |     private httpClient: HttpClient
15 |   ) {}
16 | 
17 |   public async hasEntitlement(
18 |     resource: string,
19 |     resourceId: string,
20 |     scope: string
21 |   ): Promise<boolean> {
22 |     if (!this.config) {
23 |       const keycloak = this.keycloakService.getKeycloakInstance();
24 |       this.clientId = keycloak.clientId ?? '';
25 |       this.config = await this.httpClient
26 |         .get(
27 |           keycloak.authServerUrl +
28 |             '/realms/' +
29 |             keycloak.realm +
30 |             '/.well-known/uma2-configuration'
31 |         )
32 |         .toPromise();
33 |     }
34 | 
35 |     const body = new URLSearchParams();
36 |     body.set('grant_type', 'urn:ietf:params:oauth:grant-type:uma-ticket');
37 |     body.set('client_id', this.clientId);
38 |     body.set('permission', `${resourceId}#${scope}`);
39 |     body.set('audience', resource);
40 |     body.set('response_mode', 'decision');
41 | 
42 |     try {
43 |       const result = await this.httpClient
44 |       .post(this.config.token_endpoint, body.toString(), {
45 |         headers: new HttpHeaders().set(
46 |           'Content-Type',
47 |           'application/x-www-form-urlencoded'
48 |         ),
49 |       })
50 |       .toPromise<any>();
51 | 
52 |       return result.result;
53 |     } catch (error) {
54 |       return false;
55 |     }
56 |   }
57 | }
58 | 


--------------------------------------------------------------------------------
/src/frontend/src/app/services/security.service.ts:
--------------------------------------------------------------------------------
 1 | import { Injectable } from '@angular/core';
 2 | import { KeycloakService } from 'keycloak-angular';
 3 | import { KeycloakAuthorizationService } from './keycloakAuthorization.service';
 4 | 
 5 | @Injectable({
 6 |   providedIn: 'root',
 7 | })
 8 | export class SecurityService {
 9 |   private readonly resource = "blog-api";
10 | 
11 |   constructor(
12 |     private keycloak: KeycloakService,
13 |     private keycloakAuthorization: KeycloakAuthorizationService) {
14 |   }
15 | 
16 |   public isEditor() {
17 |     return this.keycloak.isUserInRole('editor', this.resource);
18 |   }
19 | 
20 |   public isPublisher() {
21 |     return this.keycloak.isUserInRole('publisher', this.resource);
22 |   }
23 | 
24 |   public async canUnpublish(): Promise<boolean> {
25 |     if (!(await this.keycloak.isLoggedIn())) {
26 |       return false;
27 |     }
28 | 
29 |     try {
30 |       return await this.keycloakAuthorization.hasEntitlement(this.resource, "Posts", "Unpublish");
31 |     } catch (error) {
32 |       return false;
33 |     }
34 |   }
35 | }
36 | 


--------------------------------------------------------------------------------
/src/frontend/src/assets/.gitkeep:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/thinktecture-labs/webinar-keycloak/8e0c838124ff40a246011f4d41ec163ba6d666f0/src/frontend/src/assets/.gitkeep


--------------------------------------------------------------------------------
/src/frontend/src/environments/environment.prod.ts:
--------------------------------------------------------------------------------
 1 | export const environment = {
 2 |   production: true,
 3 |   apiBaseUrl: "http://localhost:5000",
 4 |   keycloak: {
 5 |     config: {
 6 |       url: 'http://localhost:8080/auth',
 7 |       realm: 'webinar',
 8 |       clientId: 'blog-frontend',
 9 |     },
10 |     loadUserProfileAtStartUp: false
11 |   }
12 | };


--------------------------------------------------------------------------------
/src/frontend/src/environments/environment.ts:
--------------------------------------------------------------------------------
 1 | // This file can be replaced during build by using the `fileReplacements` array.
 2 | // `ng build --prod` replaces `environment.ts` with `environment.prod.ts`.
 3 | // The list of file replacements can be found in `angular.json`.
 4 | 
 5 | export const environment = {
 6 |   production: false,
 7 |   apiBaseUrl: "https://localhost:5001",
 8 |   keycloak: {
 9 |     config: {
10 |       url: 'http://localhost:8080/auth',
11 |       realm: 'webinar',
12 |       clientId: 'blog-frontend',
13 |     },
14 |     loadUserProfileAtStartUp: false
15 |   }
16 | };
17 | 
18 | /*
19 |  * For easier debugging in development mode, you can import the following file
20 |  * to ignore zone related error stack frames such as `zone.run`, `zoneDelegate.invokeTask`.
21 |  *
22 |  * This import should be commented out in production mode because it will have a negative impact
23 |  * on performance if an error is thrown.
24 |  */
25 | // import 'zone.js/dist/zone-error';  // Included with Angular CLI.
26 | 


--------------------------------------------------------------------------------
/src/frontend/src/favicon.ico:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/thinktecture-labs/webinar-keycloak/8e0c838124ff40a246011f4d41ec163ba6d666f0/src/frontend/src/favicon.ico


--------------------------------------------------------------------------------
/src/frontend/src/index.html:
--------------------------------------------------------------------------------
 1 | <!doctype html>
 2 | <html lang="en">
 3 | <head>
 4 |   <meta charset="utf-8">
 5 |   <title>Company Blog</title>
 6 |   <base href="/">
 7 | 
 8 |   <meta name="viewport" content="width=device-width, initial-scale=1">
 9 |   <link rel="icon" type="image/x-icon" href="favicon.ico">
10 |   <link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
11 | </head>
12 | <body>
13 |   <app-root></app-root>
14 | </body>
15 | </html>
16 | 


--------------------------------------------------------------------------------
/src/frontend/src/main.ts:
--------------------------------------------------------------------------------
 1 | import { enableProdMode } from '@angular/core';
 2 | import { platformBrowserDynamic } from '@angular/platform-browser-dynamic';
 3 | 
 4 | import { AppModule } from './app/app.module';
 5 | import { environment } from './environments/environment';
 6 | 
 7 | if (environment.production) {
 8 |   enableProdMode();
 9 | }
10 | 
11 | platformBrowserDynamic().bootstrapModule(AppModule)
12 |   .catch(err => console.error(err));
13 | 


--------------------------------------------------------------------------------
/src/frontend/src/polyfills.ts:
--------------------------------------------------------------------------------
 1 | /**
 2 |  * This file includes polyfills needed by Angular and is loaded before the app.
 3 |  * You can add your own extra polyfills to this file.
 4 |  *
 5 |  * This file is divided into 2 sections:
 6 |  *   1. Browser polyfills. These are applied before loading ZoneJS and are sorted by browsers.
 7 |  *   2. Application imports. Files imported after ZoneJS that should be loaded before your main
 8 |  *      file.
 9 |  *
10 |  * The current setup is for so-called "evergreen" browsers; the last versions of browsers that
11 |  * automatically update themselves. This includes Safari >= 10, Chrome >= 55 (including Opera),
12 |  * Edge >= 13 on the desktop, and iOS 10 and Chrome on mobile.
13 |  *
14 |  * Learn more in https://angular.io/guide/browser-support
15 |  */
16 | 
17 | /***************************************************************************************************
18 |  * BROWSER POLYFILLS
19 |  */
20 | 
21 | /**
22 |  * IE11 requires the following for NgClass support on SVG elements
23 |  */
24 | // import 'classlist.js';  // Run `npm install --save classlist.js`.
25 | 
26 | /**
27 |  * Web Animations `@angular/platform-browser/animations`
28 |  * Only required if AnimationBuilder is used within the application and using IE/Edge or Safari.
29 |  * Standard animation support in Angular DOES NOT require any polyfills (as of Angular 6.0).
30 |  */
31 | // import 'web-animations-js';  // Run `npm install --save web-animations-js`.
32 | 
33 | /**
34 |  * By default, zone.js will patch all possible macroTask and DomEvents
35 |  * user can disable parts of macroTask/DomEvents patch by setting following flags
36 |  * because those flags need to be set before `zone.js` being loaded, and webpack
37 |  * will put import in the top of bundle, so user need to create a separate file
38 |  * in this directory (for example: zone-flags.ts), and put the following flags
39 |  * into that file, and then add the following code before importing zone.js.
40 |  * import './zone-flags';
41 |  *
42 |  * The flags allowed in zone-flags.ts are listed here.
43 |  *
44 |  * The following flags will work for all browsers.
45 |  *
46 |  * (window as any).__Zone_disable_requestAnimationFrame = true; // disable patch requestAnimationFrame
47 |  * (window as any).__Zone_disable_on_property = true; // disable patch onProperty such as onclick
48 |  * (window as any).__zone_symbol__UNPATCHED_EVENTS = ['scroll', 'mousemove']; // disable patch specified eventNames
49 |  *
50 |  *  in IE/Edge developer tools, the addEventListener will also be wrapped by zone.js
51 |  *  with the following flag, it will bypass `zone.js` patch for IE/Edge
52 |  *
53 |  *  (window as any).__Zone_enable_cross_context_check = true;
54 |  *
55 |  */
56 | 
57 | /***************************************************************************************************
58 |  * Zone JS is required by default for Angular itself.
59 |  */
60 | import 'zone.js/dist/zone';  // Included with Angular CLI.
61 | 
62 | 
63 | /***************************************************************************************************
64 |  * APPLICATION IMPORTS
65 |  */
66 | 


--------------------------------------------------------------------------------
/src/frontend/src/styles.css:
--------------------------------------------------------------------------------
1 | a { cursor: pointer; }
2 | 


--------------------------------------------------------------------------------
/src/frontend/src/test.ts:
--------------------------------------------------------------------------------
 1 | // This file is required by karma.conf.js and loads recursively all the .spec and framework files
 2 | 
 3 | import 'zone.js/dist/zone-testing';
 4 | import { getTestBed } from '@angular/core/testing';
 5 | import {
 6 |   BrowserDynamicTestingModule,
 7 |   platformBrowserDynamicTesting
 8 | } from '@angular/platform-browser-dynamic/testing';
 9 | 
10 | declare const require: {
11 |   context(path: string, deep?: boolean, filter?: RegExp): {
12 |     keys(): string[];
13 |     <T>(id: string): T;
14 |   };
15 | };
16 | 
17 | // First, initialize the Angular testing environment.
18 | getTestBed().initTestEnvironment(
19 |   BrowserDynamicTestingModule,
20 |   platformBrowserDynamicTesting()
21 | );
22 | // Then we find all the tests.
23 | const context = require.context('./', true, /\.spec\.ts$/);
24 | // And load the modules.
25 | context.keys().map(context);
26 | 


--------------------------------------------------------------------------------
/src/frontend/tsconfig.app.json:
--------------------------------------------------------------------------------
 1 | /* To learn more about this file see: https://angular.io/config/tsconfig. */
 2 | {
 3 |   "extends": "./tsconfig.json",
 4 |   "compilerOptions": {
 5 |     "outDir": "./out-tsc/app",
 6 |     "types": []
 7 |   },
 8 |   "files": [
 9 |     "src/main.ts",
10 |     "src/polyfills.ts"
11 |   ],
12 |   "include": [
13 |     "src/**/*.d.ts"
14 |   ]
15 | }
16 | 


--------------------------------------------------------------------------------
/src/frontend/tsconfig.json:
--------------------------------------------------------------------------------
 1 | {
 2 |   "compileOnSave": false,
 3 |   "compilerOptions": {
 4 |     "baseUrl": "./",
 5 |     "outDir": "./dist/out-tsc",
 6 |     "forceConsistentCasingInFileNames": true,
 7 |     "strict": true,
 8 |     "noImplicitReturns": true,
 9 |     "noFallthroughCasesInSwitch": true,
10 |     "sourceMap": true,
11 |     "declaration": false,
12 |     "downlevelIteration": true,
13 |     "experimentalDecorators": true,
14 |     "moduleResolution": "node",
15 |     "importHelpers": true,
16 |     "target": "es2015",
17 |     "module": "es2020",
18 |     "lib": [
19 |       "es2018",
20 |       "dom"
21 |     ]
22 |   },
23 |   "angularCompilerOptions": {
24 |     "enableI18nLegacyMessageIdFormat": false,
25 |     "strictInjectionParameters": true,
26 |     "strictInputAccessModifiers": true,
27 |     "strictTemplates": true
28 |   }
29 | }
30 | 


--------------------------------------------------------------------------------
/src/frontend/tsconfig.spec.json:
--------------------------------------------------------------------------------
 1 | /* To learn more about this file see: https://angular.io/config/tsconfig. */
 2 | {
 3 |   "extends": "./tsconfig.json",
 4 |   "compilerOptions": {
 5 |     "outDir": "./out-tsc/spec",
 6 |     "types": [
 7 |       "jasmine"
 8 |     ]
 9 |   },
10 |   "files": [
11 |     "src/test.ts",
12 |     "src/polyfills.ts"
13 |   ],
14 |   "include": [
15 |     "src/**/*.spec.ts",
16 |     "src/**/*.d.ts"
17 |   ]
18 | }
19 | 


--------------------------------------------------------------------------------
/src/frontend/tslint.json:
--------------------------------------------------------------------------------
  1 | {
  2 |   "extends": "tslint:recommended",
  3 |   "rulesDirectory": [
  4 |     "codelyzer"
  5 |   ],
  6 |   "rules": {
  7 |     "align": {
  8 |       "options": [
  9 |         "parameters",
 10 |         "statements"
 11 |       ]
 12 |     },
 13 |     "array-type": false,
 14 |     "arrow-return-shorthand": true,
 15 |     "curly": true,
 16 |     "deprecation": {
 17 |       "severity": "warning"
 18 |     },
 19 |     "eofline": true,
 20 |     "import-blacklist": [
 21 |       true,
 22 |       "rxjs/Rx"
 23 |     ],
 24 |     "import-spacing": true,
 25 |     "indent": {
 26 |       "options": [
 27 |         "spaces"
 28 |       ]
 29 |     },
 30 |     "max-classes-per-file": false,
 31 |     "max-line-length": [
 32 |       true,
 33 |       140
 34 |     ],
 35 |     "member-ordering": [
 36 |       true,
 37 |       {
 38 |         "order": [
 39 |           "static-field",
 40 |           "instance-field",
 41 |           "static-method",
 42 |           "instance-method"
 43 |         ]
 44 |       }
 45 |     ],
 46 |     "no-console": [
 47 |       true,
 48 |       "debug",
 49 |       "info",
 50 |       "time",
 51 |       "timeEnd",
 52 |       "trace"
 53 |     ],
 54 |     "no-empty": false,
 55 |     "no-inferrable-types": [
 56 |       true,
 57 |       "ignore-params"
 58 |     ],
 59 |     "no-non-null-assertion": true,
 60 |     "no-redundant-jsdoc": true,
 61 |     "no-switch-case-fall-through": true,
 62 |     "no-var-requires": false,
 63 |     "object-literal-key-quotes": [
 64 |       true,
 65 |       "as-needed"
 66 |     ],
 67 |     "quotemark": [
 68 |       true,
 69 |       "single"
 70 |     ],
 71 |     "semicolon": {
 72 |       "options": [
 73 |         "always"
 74 |       ]
 75 |     },
 76 |     "space-before-function-paren": {
 77 |       "options": {
 78 |         "anonymous": "never",
 79 |         "asyncArrow": "always",
 80 |         "constructor": "never",
 81 |         "method": "never",
 82 |         "named": "never"
 83 |       }
 84 |     },
 85 |     "typedef": [
 86 |       true,
 87 |       "call-signature"
 88 |     ],
 89 |     "typedef-whitespace": {
 90 |       "options": [
 91 |         {
 92 |           "call-signature": "nospace",
 93 |           "index-signature": "nospace",
 94 |           "parameter": "nospace",
 95 |           "property-declaration": "nospace",
 96 |           "variable-declaration": "nospace"
 97 |         },
 98 |         {
 99 |           "call-signature": "onespace",
100 |           "index-signature": "onespace",
101 |           "parameter": "onespace",
102 |           "property-declaration": "onespace",
103 |           "variable-declaration": "onespace"
104 |         }
105 |       ]
106 |     },
107 |     "variable-name": {
108 |       "options": [
109 |         "ban-keywords",
110 |         "check-format",
111 |         "allow-pascal-case"
112 |       ]
113 |     },
114 |     "whitespace": {
115 |       "options": [
116 |         "check-branch",
117 |         "check-decl",
118 |         "check-operator",
119 |         "check-separator",
120 |         "check-type",
121 |         "check-typecast"
122 |       ]
123 |     },
124 |     "component-class-suffix": true,
125 |     "contextual-lifecycle": true,
126 |     "directive-class-suffix": true,
127 |     "no-conflicting-lifecycle": true,
128 |     "no-host-metadata-property": true,
129 |     "no-input-rename": true,
130 |     "no-inputs-metadata-property": true,
131 |     "no-output-native": true,
132 |     "no-output-on-prefix": true,
133 |     "no-output-rename": true,
134 |     "no-outputs-metadata-property": true,
135 |     "template-banana-in-box": true,
136 |     "template-no-negated-async": true,
137 |     "use-lifecycle-interface": true,
138 |     "use-pipe-transform-interface": true,
139 |     "directive-selector": [
140 |       true,
141 |       "attribute",
142 |       "app",
143 |       "camelCase"
144 |     ],
145 |     "component-selector": [
146 |       true,
147 |       "element",
148 |       "app",
149 |       "kebab-case"
150 |     ]
151 |   }
152 | }
153 | 


--------------------------------------------------------------------------------