mirror of
https://github.com/ansible-collections/community.general.git
synced 2025-04-07 03:00:33 -07:00
4a41ab583a
Fb keycloak client improvement (#9644)
* Fix for failed test
TASK [keycloak_client : Assert changes not detected in last two tasks (desire when same, and check)] ***
task path: /root/ansible_collections/community/general/tests/output/.tmp/integration/keycloak_client-p3ttqf7d-ÅÑŚÌβŁÈ/tests/integration/targets/keycloak_client/tasks/main.yml:79
fatal: [testhost]: FAILED! => {
"assertion": "check_client_when_present_and_same is not changed",
"changed": false,
"evaluated_to": false,
"msg": "Assertion failed"
}
* Improved test data to test more scenarios, e.g documentation uses True in examples
* Normalize values in config
* add changelog
* Apply suggestions from code review
Co-authored-by: Alexei Znamensky <103110+russoz@users.noreply.github.com>
* Update tests/integration/targets/keycloak_client/vars/main.yml
Co-authored-by: Alexei Znamensky <103110+russoz@users.noreply.github.com>
* Update changelogs/fragments/9644-kc_client-test-improvement-and-fix.yaml
Co-authored-by: Alexei Znamensky <103110+russoz@users.noreply.github.com>
---------
Co-authored-by: Alexei Znamensky <103110+russoz@users.noreply.github.com>
(cherry picked from commit 250dc1139c)
Co-authored-by: amPrimeSign <146177975+amPrimeSign@users.noreply.github.com>
61 lines
1.7 KiB
YAML
61 lines
1.7 KiB
YAML
---
|
|
# Copyright (c) Ansible Project
|
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
url: http://localhost:8080/auth
|
|
admin_realm: master
|
|
admin_user: admin
|
|
admin_password: password
|
|
realm: myrealm
|
|
client_id: myclient
|
|
role: myrole
|
|
description_1: desc 1
|
|
description_2: desc 2
|
|
|
|
auth_args:
|
|
auth_keycloak_url: "{{ url }}"
|
|
auth_realm: "{{ admin_realm }}"
|
|
auth_username: "{{ admin_user }}"
|
|
auth_password: "{{ admin_password }}"
|
|
|
|
redirect_uris1:
|
|
- "http://example.c.com/"
|
|
- "http://example.b.com/"
|
|
- "http://example.a.com/"
|
|
|
|
client_attributes1: {"backchannel.logout.session.required": true, "backchannel.logout.revoke.offline.tokens": false, "client.secret.creation.time": 0}
|
|
|
|
protocol_mappers1:
|
|
- name: 'email'
|
|
protocol: 'openid-connect'
|
|
protocolMapper: 'oidc-usermodel-property-mapper'
|
|
config:
|
|
"claim.name": "email"
|
|
"user.attribute": "email"
|
|
"jsonType.label": "String"
|
|
"id.token.claim": true
|
|
"access.token.claim": true
|
|
"userinfo.token.claim": true
|
|
|
|
- name: 'email_verified'
|
|
protocol: 'openid-connect'
|
|
protocolMapper: 'oidc-usermodel-property-mapper'
|
|
config:
|
|
"claim.name": "email_verified"
|
|
"user.attribute": "emailVerified"
|
|
"jsonType.label": "boolean"
|
|
"id.token.claim": true
|
|
"access.token.claim": true
|
|
"userinfo.token.claim": true
|
|
|
|
- name: 'family_name'
|
|
protocol: 'openid-connect'
|
|
protocolMapper: 'oidc-usermodel-property-mapper'
|
|
config:
|
|
"claim.name": "family_name"
|
|
"user.attribute": "lastName"
|
|
"jsonType.label": "String"
|
|
"id.token.claim": "true"
|
|
"access.token.claim": "true"
|
|
"userinfo.token.claim": "true"
|