Added dynamic access token generation

Signed-off-by: Cem Nura <[email protected]>
quarkusio · Mar 12, 2021 · 7d0cf6c · 7d0cf6c
1 parent a972c78
commit 7d0cf6c
Show file tree

Hide file tree

Showing 2 changed files with 46 additions and 26 deletions.
diff --git a/...n-tests/oidc-wiremock/src/test/java/io/quarkus/it/keycloak/CodeFlowAuthorizationTest.java b/...n-tests/oidc-wiremock/src/test/java/io/quarkus/it/keycloak/CodeFlowAuthorizationTest.java
@@ -1,18 +1,20 @@
 package io.quarkus.it.keycloak;
 
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.IOException;
+
+import org.junit.jupiter.api.Test;
+
 import com.gargoylesoftware.htmlunit.SilentCssErrorHandler;
 import com.gargoylesoftware.htmlunit.WebClient;
 import com.gargoylesoftware.htmlunit.html.HtmlForm;
 import com.gargoylesoftware.htmlunit.html.HtmlPage;
 import com.gargoylesoftware.htmlunit.util.Cookie;
+
 import io.quarkus.test.common.QuarkusTestResource;
 import io.quarkus.test.junit.QuarkusTest;
-import org.junit.jupiter.api.Test;
-
-import java.io.IOException;
-
-import static org.junit.jupiter.api.Assertions.assertEquals;
-import static org.junit.jupiter.api.Assertions.assertTrue;
 
 @QuarkusTest
 @QuarkusTestResource(KeycloakTestResource.class)
@@ -30,7 +32,7 @@ public void testCodeFlow() throws IOException {
 
             page = form.getInputByValue("login").click();
 
-            assertEquals("Welcome to Test App", page.getTitleText());
+            assertEquals("alice", page.getBody().asText());
         }
     }
 

diff --git a/...ration-tests/oidc-wiremock/src/test/java/io/quarkus/it/keycloak/KeycloakTestResource.java b/...ration-tests/oidc-wiremock/src/test/java/io/quarkus/it/keycloak/KeycloakTestResource.java
@@ -1,18 +1,5 @@
 package io.quarkus.it.keycloak;
 
-import com.github.tomakehurst.wiremock.WireMockServer;
-import com.github.tomakehurst.wiremock.client.WireMock;
-import com.github.tomakehurst.wiremock.common.ConsoleNotifier;
-import com.github.tomakehurst.wiremock.extension.responsetemplating.ResponseTemplateTransformer;
-import com.google.common.collect.ImmutableSet;
-import io.quarkus.test.common.QuarkusTestResourceLifecycleManager;
-import org.jboss.logging.Logger;
-
-import javax.ws.rs.core.MediaType;
-import java.util.HashMap;
-import java.util.Map;
-import java.util.Set;
-
 import static com.github.tomakehurst.wiremock.client.WireMock.aResponse;
 import static com.github.tomakehurst.wiremock.client.WireMock.containing;
 import static com.github.tomakehurst.wiremock.client.WireMock.get;
@@ -23,6 +10,25 @@
 import static java.util.Collections.emptySet;
 import static java.util.stream.Collectors.joining;
 
+import java.util.Arrays;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.Map;
+import java.util.Set;
+
+import javax.ws.rs.core.MediaType;
+
+import org.jboss.logging.Logger;
+
+import com.github.tomakehurst.wiremock.WireMockServer;
+import com.github.tomakehurst.wiremock.client.WireMock;
+import com.github.tomakehurst.wiremock.common.ConsoleNotifier;
+import com.github.tomakehurst.wiremock.extension.responsetemplating.ResponseTemplateTransformer;
+import com.google.common.collect.ImmutableSet;
+
+import io.quarkus.test.common.QuarkusTestResourceLifecycleManager;
+import io.smallrye.jwt.build.Jwt;
+
 public class KeycloakTestResource implements QuarkusTestResourceLifecycleManager {
 
     private static final Logger LOG = Logger.getLogger(KeycloakTestResource.class);
@@ -50,8 +56,10 @@ public Map<String, String> start() {
                                         + "/auth/realms/quarkus/protocol/openid-connect/token/introspect\",\n" +
                                         "    \"authorization_endpoint\": \"" + server.baseUrl() + "/auth/realms/quarkus\"," +
                                         "    \"token_endpoint\": \"" + server.baseUrl() + "/auth/realms/quarkus/token\"," +
-                                        "    \"issuer\" : \"https://server.example.com\"" +
-                                        "    \"introspection_endpoint\": \"" + server.baseUrl() +
+                                        "    \"issuer\" : \"https://server.example.com\"," +
+                                        "    \"introspection_endpoint\": \"" + server.baseUrl()
+                                        + "/auth/realms/quarkus/protocol/openid-connect/token/introspect\""
+                                        +
                                         "}")));
 
         server.stubFor(
@@ -151,14 +159,24 @@ private void defineCodeFlowAuthorizationMockTokenStub() {
                 .willReturn(WireMock.aResponse()
                         .withHeader("Content-Type", MediaType.APPLICATION_JSON)
                         .withBody("{\n" +
-                                "  \"access_token\": \"eyJraWQiOiIxIiwidHlwIjoiSldUIiwiYWxnIjoiUlMyNTYifQ.eyJwcmVmZXJyZWRfdXNlcm5hbWUiOiJhbGljZSIsImdyb3VwcyI6WyJhZG1pbiIsInVzZXIiXSwiaWF0IjoxNjE1NDIzMDgxLCJleHAiOjE2MTU0MjMzODEsImp0aSI6IjIwMTgyNTMxLTQ5ZWUtNDI2OC04YjM5LWQwN2Q5NDQ1OGYyMSJ9.OvSV8ZVY5cUj7nmqJRmlMz6S--wqedm3Fnz8lMPGUkeyAUbPm8_N6aQi4VgduSPbCrH-2-Kgppoh4w1Oy203kVaG_-KV5PgS7Yesrq6SDp3g9I3WL6UYXdM1nRSoDDGYxhWCdJ1TMwhjV8a7HV_M1PtbLfaR_7Do8_BDLhmc_lSWt_ZLiUqweXf-RJw7hm8aNuZ_OaYhiDd_tII6Ldn5CJfXpWf1Sm8x09cieNzvGDxxP9Dn7FSSMX0I9JPsCCPV6pvmrPDNej2bonZPrHG1QU6ChmO6WSwTAyNE0Cj9z_n7UxltI6AAhk8DlGo18voqogasg4uEgp1FhUdmWenaNQ\",\n"
-                                +
+                                "  \"access_token\": \""
+                                + getAccessToken("alice", new HashSet<>(Arrays.asList("user", "admin"))) + "\",\n" +
                                 "  \"refresh_token\": \"07e08903-1263-4dd1-9fd1-4a59b0db5283\",\n" +
-                                "  \"id_token\": \"eyJraWQiOiIxIiwidHlwIjoiSldUIiwiYWxnIjoiUlMyNTYifQ.eyJwcmVmZXJyZWRfdXNlcm5hbWUiOiJhbGljZSIsImdyb3VwcyI6WyJhZG1pbiIsInVzZXIiXSwiaWF0IjoxNjE1NDIzMDgxLCJleHAiOjE2MTU0MjMzODEsImp0aSI6IjIwMTgyNTMxLTQ5ZWUtNDI2OC04YjM5LWQwN2Q5NDQ1OGYyMSJ9.OvSV8ZVY5cUj7nmqJRmlMz6S--wqedm3Fnz8lMPGUkeyAUbPm8_N6aQi4VgduSPbCrH-2-Kgppoh4w1Oy203kVaG_-KV5PgS7Yesrq6SDp3g9I3WL6UYXdM1nRSoDDGYxhWCdJ1TMwhjV8a7HV_M1PtbLfaR_7Do8_BDLhmc_lSWt_ZLiUqweXf-RJw7hm8aNuZ_OaYhiDd_tII6Ldn5CJfXpWf1Sm8x09cieNzvGDxxP9Dn7FSSMX0I9JPsCCPV6pvmrPDNej2bonZPrHG1QU6ChmO6WSwTAyNE0Cj9z_n7UxltI6AAhk8DlGo18voqogasg4uEgp1FhUdmWenaNQ\"\n"
-                                +
+                                "  \"id_token\": \"" + getAccessToken("alice", new HashSet<>(Arrays.asList("user", "admin")))
+                                + "\"\n" +
                                 "}")));
     }
 
+    private String getAccessToken(String userName, Set<String> groups) {
+        return Jwt.preferredUserName(userName)
+                .groups(groups)
+                .issuer("https://server.example.com")
+                .audience("https://service.example.com")
+                .jws()
+                .keyId("1")
+                .sign("privateKey.jwk");
+    }
+
     @Override
     public synchronized void stop() {
         if (server != null) {