package de.ahus1.keycloak.dropwizard; import org.keycloak.KeycloakSecurityContext; import javax.servlet.http.HttpServletRequest; import javax.ws.rs.ForbiddenException; /** * This is a default implementation for a user. Consider extending this class or AbstractUser * with any needed wrapper around AccessToken and IDToken. */ public class User extends AbstractUser { public User(KeycloakSecurityContext securityContext, HttpServletRequest request, KeycloakConfiguration keycloakConfiguration) { super(request, securityContext, keycloakConfiguration); } public void checkUserInRole(String role) { if (!getRoles().contains(role)) { throw new ForbiddenException(); } } public String getName() { return securityContext.getToken().getName(); } }