69 lines
2.3 KiB
Bash
Executable File
69 lines
2.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
function error_handler() {
|
|
>&2 echo "Exited with BAD EXIT CODE '${2}' in ${0} script at line: ${1}."
|
|
exit "$2"
|
|
}
|
|
trap 'error_handler ${LINENO} $?' ERR
|
|
set -o errtrace -o errexit -o nounset -o pipefail
|
|
|
|
# originally from https://medium.com/keycloak/keycloak-jwt-token-using-curl-post-72c9e791ba8c
|
|
# btw, meta config endpoint: http://localhost:7002/realms/spiffworkflow/.well-known/openid-configuration
|
|
|
|
HOSTNAME=localhost:7002
|
|
REALM_NAME=spiffworkflow
|
|
USERNAME=${1-ciuser1}
|
|
PASSWORD=${2-ciuser1}
|
|
# CLIENT_ID=spiffworkflow-frontend
|
|
CLIENT_ID=spiffworkflow-backend
|
|
CLIENT_SECRET="JXeQExm0JhQPLumgHtIIqf52bDalHz0q" # noqa: S105
|
|
SECURE=false
|
|
|
|
KEYCLOAK_URL=http://$HOSTNAME/realms/$REALM_NAME/protocol/openid-connect/token
|
|
|
|
echo "Using Keycloak: $KEYCLOAK_URL"
|
|
echo "realm: $REALM_NAME"
|
|
echo "client-id: $CLIENT_ID"
|
|
echo "username: $USERNAME"
|
|
echo "password: $PASSWORD"
|
|
echo "secure: $SECURE"
|
|
|
|
|
|
if [[ $SECURE = 'y' ]]; then
|
|
INSECURE=
|
|
else
|
|
INSECURE=--insecure
|
|
fi
|
|
|
|
result=$(curl -s -X POST "$KEYCLOAK_URL" "$INSECURE" \
|
|
-H "Content-Type: application/x-www-form-urlencoded" \
|
|
-d "username=$USERNAME" \
|
|
-d "password=$PASSWORD" \
|
|
-d 'grant_type=password' \
|
|
-d "client_id=$CLIENT_ID" \
|
|
-d "client_secret=$CLIENT_SECRET" \
|
|
)
|
|
|
|
token=$(jq -r '.access_token' <<< "$result")
|
|
|
|
if [[ "$token" != 'null' ]]; then
|
|
echo "token: $token"
|
|
echo "getting user info"
|
|
# curl -s "http://localhost:7002/realms/spiffworkflow/protocol/openid-connect/userinfo" -H "Authorization: Bearer $token"
|
|
curl -s "http://localhost:7002/realms/spiffworkflow/authz/protection/resource_set?matchingUri=true&deep=true&max=-1&exactName=false&uri=%2Fprocess-models%2Fcategory_number_one%2Fprocess-model-with-repeating-form" -H "Authorization: Bearer $token" | jq .
|
|
|
|
# -H "Authorization: Basic $basic_auth" \
|
|
basic_auth=$(echo -n "${CLIENT_ID}:${CLIENT_SECRET}" | base64 -w0)
|
|
# -H "Authorization: Bearer $token" \
|
|
curl -s -X POST "$KEYCLOAK_URL" "$INSECURE" \
|
|
-H "Content-Type: application/x-www-form-urlencoded" \
|
|
-H "Authorization: Basic $basic_auth" \
|
|
-d "audience=${CLIENT_ID}" \
|
|
--data-urlencode "grant_type=urn:ietf:params:oauth:grant-type:uma-ticket" \
|
|
-d "permission=e294304c-796e-4c56-bdf2-8c854f65db59" \
|
|
-d "subject_token=${token}" \
|
|
| jq .
|
|
else
|
|
echo "Failed auth result: $result"
|
|
fi
|