External-Mirrors/keycloak
2
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2026-01-10 15:32:05 -03:30
Code Issues Packages Projects Releases Wiki Activity

Migration step to add the reset-password scope to user resource type resources

Browse Source 
Closes #43736

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
This commit is contained in:
Pedro Igor 2025-10-28 15:56:29 -03:00
parent 3ba8a68f2c
commit ce5dd51921
2 changed files with 72 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

70
model/storage-private/src/main/java/org/keycloak/migration/migrators/MigrateTo26_4_3.java Normal file
View File

@ -0,0 +1,70 @@
package org.keycloak.migration.migrators;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;
import org.keycloak.authorization.AuthorizationProvider;
import org.keycloak.authorization.fgap.AdminPermissionsSchema;
import org.keycloak.authorization.model.Policy;
import org.keycloak.authorization.model.Policy.FilterOption;
import org.keycloak.authorization.model.Resource;
import org.keycloak.authorization.model.ResourceServer;
import org.keycloak.authorization.model.Scope;
import org.keycloak.authorization.store.ResourceStore;
import org.keycloak.authorization.store.ScopeStore;
import org.keycloak.authorization.store.StoreFactory;
import org.keycloak.migration.ModelVersion;
import org.keycloak.models.ClientModel;
import org.keycloak.models.KeycloakSession;
import org.keycloak.models.RealmModel;
public class MigrateTo26_4_3 extends RealmMigration {
public static final ModelVersion VERSION = new ModelVersion("26.4.3");
@Override
public ModelVersion getVersion() {
return VERSION;
}
@Override
public void migrateRealm(KeycloakSession session, RealmModel realm) {
ClientModel client = realm.getAdminPermissionsClient();
if (client == null) {
return;
}
AuthorizationProvider authorizationProvider = session.getProvider(AuthorizationProvider.class);
StoreFactory storeFactory = authorizationProvider.getStoreFactory();
ResourceServer resourceServer = storeFactory.getResourceServerStore().findByClient(client);
if (resourceServer == null) {
return;
}
ScopeStore scopeStore = storeFactory.getScopeStore();
Scope resetPassword = scopeStore.findByName(resourceServer, AdminPermissionsSchema.RESET_PASSWORD);
if (resetPassword == null) {
resetPassword = scopeStore.create(resourceServer, AdminPermissionsSchema.RESET_PASSWORD);
}
ResourceStore resourceStore = storeFactory.getResourceStore();
String userResourceType = AdminPermissionsSchema.USERS.getType();
Resource resourceTypeResource = resourceStore.findByName(resourceServer, userResourceType);
Set<Scope> newScopes = new HashSet<>(resourceTypeResource.getScopes());
newScopes.add(resetPassword);
resourceTypeResource.updateScopes(newScopes);
for (Policy policy : storeFactory.getPolicyStore().find(resourceServer, Map.of(FilterOption.CONFIG, new String[]{"defaultResourceType", userResourceType}), -1, -1)) {
for (Resource resource : policy.getResources()) {
resource.updateScopes(newScopes);
}
}
}
}

2
model/storage-private/src/main/java/org/keycloak/storage/datastore/DefaultMigrationManager.java
View File

@ -45,6 +45,7 @@ import org.keycloak.migration.migrators.MigrateTo26_1_0;
import org.keycloak.migration.migrators.MigrateTo26_2_0;
import org.keycloak.migration.migrators.MigrateTo26_3_0;
import org.keycloak.migration.migrators.MigrateTo26_4_0;
import org.keycloak.migration.migrators.MigrateTo26_4_3;
import org.keycloak.migration.migrators.MigrateTo2_0_0;
import org.keycloak.migration.migrators.MigrateTo2_1_0;
import org.keycloak.migration.migrators.MigrateTo2_2_0;
@ -129,6 +130,7 @@ public class DefaultMigrationManager implements MigrationManager {
new MigrateTo26_2_0(),
new MigrateTo26_3_0(),
new MigrateTo26_4_0(),
new MigrateTo26_4_3()
};
private final KeycloakSession session;