/* * Copyright 2016 Red Hat, Inc. and/or its affiliates * and other contributors as indicated by the @author tags. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.keycloak.protocol.oidc.mappers; import org.keycloak.models.ProtocolMapperModel; import org.keycloak.models.UserSessionModel; import org.keycloak.protocol.oidc.OIDCLoginProtocol; import org.keycloak.provider.ProviderConfigProperty; import org.keycloak.representations.IDToken; import java.util.ArrayList; import java.util.HashMap; import java.util.List; import java.util.Map; /** * * * @author <a href="mailto:bill@burkecentral.com">Bill Burke</a> * @version $Revision: 1 $ */ public class HardcodedClaim extends AbstractOIDCProtocolMapper implements OIDCAccessTokenMapper, OIDCIDTokenMapper, UserInfoTokenMapper { private static final List<ProviderConfigProperty> configProperties = new ArrayList<ProviderConfigProperty>(); public static final String CLAIM_VALUE = "claim.value"; static { OIDCAttributeMapperHelper.addTokenClaimNameConfig(configProperties); ProviderConfigProperty property = new ProviderConfigProperty(); property.setName(CLAIM_VALUE); property.setLabel("Claim value"); property.setType(ProviderConfigProperty.STRING_TYPE); property.setHelpText("Value of the claim you want to hard code. 'true' and 'false can be used for boolean values."); configProperties.add(property); OIDCAttributeMapperHelper.addJsonTypeConfig(configProperties); OIDCAttributeMapperHelper.addIncludeInTokensConfig(configProperties, HardcodedClaim.class); } public static final String PROVIDER_ID = "oidc-hardcoded-claim-mapper"; public List<ProviderConfigProperty> getConfigProperties() { return configProperties; } @Override public String getId() { return PROVIDER_ID; } @Override public String getDisplayType() { return "Hardcoded claim"; } @Override public String getDisplayCategory() { return TOKEN_MAPPER_CATEGORY; } @Override public String getHelpText() { return "Hardcode a claim into the token."; } protected void setClaim(IDToken token, ProtocolMapperModel mappingModel, UserSessionModel userSession) { String attributeValue = mappingModel.getConfig().get(CLAIM_VALUE); if (attributeValue == null) return; OIDCAttributeMapperHelper.mapClaim(token, mappingModel, attributeValue); } public static ProtocolMapperModel create(String name, String hardcodedName, String hardcodedValue, String claimType, boolean consentRequired, String consentText, boolean accessToken, boolean idToken) { ProtocolMapperModel mapper = new ProtocolMapperModel(); mapper.setName(name); mapper.setProtocolMapper(PROVIDER_ID); mapper.setProtocol(OIDCLoginProtocol.LOGIN_PROTOCOL); mapper.setConsentRequired(consentRequired); mapper.setConsentText(consentText); Map<String, String> config = new HashMap<String, String>(); config.put(OIDCAttributeMapperHelper.TOKEN_CLAIM_NAME, hardcodedName); config.put(CLAIM_VALUE, hardcodedValue); config.put(OIDCAttributeMapperHelper.JSON_TYPE, claimType); if (accessToken) config.put(OIDCAttributeMapperHelper.INCLUDE_IN_ACCESS_TOKEN, "true"); if (idToken) config.put(OIDCAttributeMapperHelper.INCLUDE_IN_ID_TOKEN, "true"); mapper.setConfig(config); return mapper; } }