org.keycloak.services.resources.admin

Class RealmAdminResource

java.lang.Object

org.keycloak.services.resources.admin.RealmAdminResource

public class RealmAdminResource
extends Object

Base resource class for the admin REST api of one realm

Version:

$Revision: 1 $

Author:

Bill Burke

Field Summary

Fields

Modifier and Type	Field and Description
protected RealmAuth	auth
protected org.keycloak.common.ClientConnection	connection
protected javax.ws.rs.core.HttpHeaders	headers
protected static org.jboss.logging.Logger	logger
protected RealmModel	realm
protected KeycloakSession	session
protected javax.ws.rs.core.UriInfo	uriInfo

Constructor Summary

Constructors

Constructor and Description
RealmAdminResource(RealmAuth auth, RealmModel realm, TokenManager tokenManager, AdminEventBuilder adminEvent)

Method Summary

Modifier and Type	Method and Description
void	addDefaultGroup(String groupId)
void	clearAdminEvents() Delete all admin events
void	clearEvents() Delete all events
ClientRepresentation	convertClientDescription(String description) Base path for importing clients under this realm.
void	deleteRealm() Delete the realm
void	deleteSession(String sessionId) Remove a specific user session.
AuthenticationManagementResource	flows()
AttackDetectionResource	getAttackDetection() Base path for managing attack detection.
ClientInitialAccessResource	getClientInitialAccess() Base path for managing client initial access tokens
ClientsResource	getClients() Base path for managing clients under this realm.
List<Map<String,String>>	getClientSessionStats() Get client session stats Returns a JSON map.
ClientTemplatesResource	getClientTemplates() Base path for managing client templates under this realm.
List<GroupRepresentation>	getDefaultGroups() Get group hierarchy.
List<Event>	getEvents(String client, String user, String dateFrom, String dateTo, String ipAddress, Integer firstResult, Integer maxResults) Get events Returns all events, or filters them based on URL query parameters listed here
List<AdminEvent>	getEvents(String authRealm, String authClient, String authUser, String authIpAddress, String resourcePath, String dateFrom, String dateTo, Integer firstResult, Integer maxResults) Get admin events Returns all admin events, or filters events based on URL query parameters listed here
GroupRepresentation	getGroupByPath(String path)
GroupsResource	getGroups()
IdentityProvidersResource	getIdentityProviderResource()
RealmRepresentation	getRealm() Get the top-level representation of the realm It will not include nested information like User and Client representations.
RealmEventsConfigRepresentation	getRealmEventsConfig() Get the events provider configuration Returns JSON object with events provider configuration
RoleContainerResource	getRoleContainerResource() base path for managing realm-level roles of this realm
GlobalRequestResult	logoutAll() Removes all user sessions.
javax.ws.rs.core.Response	partialImport(PartialImportRepresentation rep) Partial import from a JSON file to an existing realm.
GlobalRequestResult	pushRevocation() Push the realm's revocation policy to any client that has an admin url associated with it.
void	removeDefaultGroup(String groupId)
RoleByIdResource	rolesById() Path for managing all realm-level or client-level roles defined in this realm by its id.
javax.ws.rs.core.Response	testLDAPConnection(String action, String connectionUrl, String bindDn, String bindCredential) Test LDAP connection
javax.ws.rs.core.Response	updateRealm(RealmRepresentation rep) Update the top-level information of the realm Any user, roles or client information in the representation will be ignored.
void	updateRealmEventsConfig(RealmEventsConfigRepresentation rep) Update the events provider Change the events provider and/or its configuration
UserFederationProvidersResource	userFederation()
UsersResource	users() Base path for managing users in this realm.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

logger

protected static final org.jboss.logging.Logger logger

auth

protected RealmAuth auth

realm

protected RealmModel realm

session

@Context
protected KeycloakSession session

uriInfo

@Context
protected javax.ws.rs.core.UriInfo uriInfo

connection

@Context
protected org.keycloak.common.ClientConnection connection

headers

@Context
protected javax.ws.rs.core.HttpHeaders headers

Constructor Detail

RealmAdminResource

public RealmAdminResource(RealmAuth auth,
                          RealmModel realm,
                          TokenManager tokenManager,
                          AdminEventBuilder adminEvent)

Method Detail

convertClientDescription

public ClientRepresentation convertClientDescription(String description)

Base path for importing clients under this realm.

Returns:

getAttackDetection

public AttackDetectionResource getAttackDetection()

Base path for managing attack detection.

Returns:

getClients

public ClientsResource getClients()

Base path for managing clients under this realm.

Returns:

getClientTemplates

public ClientTemplatesResource getClientTemplates()

Base path for managing client templates under this realm.

Returns:

getClientInitialAccess

public ClientInitialAccessResource getClientInitialAccess()

Base path for managing client initial access tokens

Returns:

getRoleContainerResource

public RoleContainerResource getRoleContainerResource()

base path for managing realm-level roles of this realm

Returns:

getRealm

public RealmRepresentation getRealm()

Get the top-level representation of the realm It will not include nested information like User and Client representations.

Returns:

updateRealm

public javax.ws.rs.core.Response updateRealm(RealmRepresentation rep)

Update the top-level information of the realm Any user, roles or client information in the representation will be ignored. This will only update top-level attributes of the realm.

Parameters:

rep -

Returns:

deleteRealm

public void deleteRealm()

Delete the realm

users

public UsersResource users()

Base path for managing users in this realm.

Returns:

userFederation

public UserFederationProvidersResource userFederation()

flows

public AuthenticationManagementResource flows()

rolesById

public RoleByIdResource rolesById()

Path for managing all realm-level or client-level roles defined in this realm by its id.

Returns:

pushRevocation

public GlobalRequestResult pushRevocation()

Push the realm's revocation policy to any client that has an admin url associated with it.

logoutAll

public GlobalRequestResult logoutAll()

Removes all user sessions. Any client that has an admin url will also be told to invalidate any sessions they have.

deleteSession

public void deleteSession(String sessionId)

Remove a specific user session. Any client that has an admin url will also be told to invalidate this particular session.

Parameters:

sessionId -

getClientSessionStats

public List<Map<String,String>> getClientSessionStats()

Get client session stats Returns a JSON map. The key is the client id, the value is the number of sessions that currently are active with that client. Only clients that actually have a session associated with them will be in this map.

Returns:

getRealmEventsConfig

public RealmEventsConfigRepresentation getRealmEventsConfig()

Get the events provider configuration Returns JSON object with events provider configuration

Returns:

updateRealmEventsConfig

public void updateRealmEventsConfig(RealmEventsConfigRepresentation rep)

Update the events provider Change the events provider and/or its configuration

Parameters:

rep -

getEvents

public List<Event> getEvents(String client,
                             String user,
                             String dateFrom,
                             String dateTo,
                             String ipAddress,
                             Integer firstResult,
                             Integer maxResults)

Get events Returns all events, or filters them based on URL query parameters listed here

Parameters:

client - App or oauth client name

user - User id

ipAddress - IP address

dateTo - To date

dateFrom - From date

firstResult - Paging offset

maxResults - Paging size

Returns:

getEvents

public List<AdminEvent> getEvents(String authRealm,
                                  String authClient,
                                  String authUser,
                                  String authIpAddress,
                                  String resourcePath,
                                  String dateFrom,
                                  String dateTo,
                                  Integer firstResult,
                                  Integer maxResults)

Get admin events Returns all admin events, or filters events based on URL query parameters listed here

Parameters:

authRealm -

authClient -

authUser - user id

authIpAddress -

resourcePath -

dateTo -

dateFrom -

resourcePath -

firstResult -

maxResults -

Returns:

clearEvents

public void clearEvents()

Delete all events

clearAdminEvents

public void clearAdminEvents()

Delete all admin events

testLDAPConnection

public javax.ws.rs.core.Response testLDAPConnection(String action,
                                                    String connectionUrl,
                                                    String bindDn,
                                                    String bindCredential)

Test LDAP connection

Parameters:

action -

connectionUrl -

bindDn -

bindCredential -

Returns:

getIdentityProviderResource

public IdentityProvidersResource getIdentityProviderResource()

getDefaultGroups

public List<GroupRepresentation> getDefaultGroups()

Get group hierarchy. Only name and ids are returned.

Returns:

addDefaultGroup

public void addDefaultGroup(String groupId)

removeDefaultGroup

public void removeDefaultGroup(String groupId)

getGroups

public GroupsResource getGroups()

getGroupByPath

public GroupRepresentation getGroupByPath(String path)

partialImport

public javax.ws.rs.core.Response partialImport(PartialImportRepresentation rep)

Partial import from a JSON file to an existing realm.

Parameters:

rep -

Returns: