mirror of
https://github.com/ansible-middleware/keycloak.git
synced 2026-05-11 12:02:01 +00:00
c6189bfc51
The collection was missing modules for managing client scopes and authentication flows, forcing users to write raw uri calls against the Keycloak Admin REST API. This adds two new modules that leverage the existing KeycloakAPI helper methods: - keycloak_client_scope: create/update/delete client scopes with protocol mappers (supports check_mode and diff) - keycloak_authentication_flow: create/delete authentication flows with execution steps, or copy existing flows (supports check_mode and diff) Also adds three example playbooks using the new modules: - keycloak_client_scope.yml - keycloak_authentication_flow.yml - keycloak_realm_client.yml Made-with: Cursor
49 lines
1.7 KiB
YAML
49 lines
1.7 KiB
YAML
---
|
|
- name: Playbook for Keycloak Client Scope Configuration
|
|
hosts: all
|
|
vars:
|
|
keycloak_admin_user: admin
|
|
keycloak_admin_password: "remembertochangeme"
|
|
keycloak_url: "http://localhost:8080"
|
|
keycloak_realm: TestRealm
|
|
tasks:
|
|
- name: Create client scope with protocol mappers
|
|
middleware_automation.keycloak.keycloak_client_scope:
|
|
auth_keycloak_url: "{{ keycloak_url }}"
|
|
auth_realm: master
|
|
auth_username: "{{ keycloak_admin_user }}"
|
|
auth_password: "{{ keycloak_admin_password }}"
|
|
realm: "{{ keycloak_realm }}"
|
|
name: TestClientScope
|
|
description: "Client scope created via Ansible"
|
|
protocol: openid-connect
|
|
protocol_mappers:
|
|
- name: email
|
|
protocolMapper: oidc-usermodel-attribute-mapper
|
|
config:
|
|
user.attribute: email
|
|
claim.name: email
|
|
jsonType.label: String
|
|
id.token.claim: "true"
|
|
access.token.claim: "true"
|
|
userinfo.token.claim: "true"
|
|
- name: firstName
|
|
protocolMapper: oidc-usermodel-attribute-mapper
|
|
config:
|
|
user.attribute: firstName
|
|
claim.name: given_name
|
|
jsonType.label: String
|
|
id.token.claim: "true"
|
|
access.token.claim: "true"
|
|
userinfo.token.claim: "true"
|
|
- name: username
|
|
protocolMapper: oidc-usermodel-attribute-mapper
|
|
config:
|
|
user.attribute: username
|
|
claim.name: preferred_username
|
|
jsonType.label: String
|
|
id.token.claim: "true"
|
|
access.token.claim: "true"
|
|
userinfo.token.claim: "true"
|
|
state: present
|