-
Notifications
You must be signed in to change notification settings - Fork 69
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Closes #856 Signed-off-by: Pedro Igor <[email protected]>
- Loading branch information
Showing
8 changed files
with
702 additions
and
6 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
106 changes: 106 additions & 0 deletions
106
...ain/java/org/keycloak/benchmark/dataset/organization/AbstractOrganizationProvisioner.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,106 @@ | ||
| /* | ||
| * Copyright 2024 Red Hat, Inc. and/or its affiliates | ||
| * and other contributors as indicated by the @author tags. | ||
| * | ||
| * Licensed under the Apache License, Version 2.0 (the "License"); | ||
| * you may not use this file except in compliance with the License. | ||
| * You may obtain a copy of the License at | ||
| * | ||
| * http://www.apache.org/licenses/LICENSE-2.0 | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, software | ||
| * distributed under the License is distributed on an "AS IS" BASIS, | ||
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the License for the specific language governing permissions and | ||
| * limitations under the License. | ||
| * | ||
| */ | ||
|
|
||
| package org.keycloak.benchmark.dataset.organization; | ||
|
|
||
| import static org.keycloak.benchmark.dataset.config.DatasetOperation.CREATE_ORGS; | ||
|
|
||
| import jakarta.ws.rs.NotFoundException; | ||
| import jakarta.ws.rs.core.Response; | ||
| import org.keycloak.benchmark.dataset.DatasetResourceProvider; | ||
| import org.keycloak.benchmark.dataset.ExecutorHelper; | ||
| import org.keycloak.benchmark.dataset.Task; | ||
| import org.keycloak.benchmark.dataset.TaskManager; | ||
| import org.keycloak.benchmark.dataset.TaskResponse; | ||
| import org.keycloak.benchmark.dataset.config.ConfigUtil; | ||
| import org.keycloak.benchmark.dataset.config.DatasetConfig; | ||
| import org.keycloak.benchmark.dataset.config.DatasetException; | ||
| import org.keycloak.models.KeycloakSession; | ||
| import org.keycloak.models.KeycloakSessionTask; | ||
| import org.keycloak.models.RealmModel; | ||
| import org.keycloak.models.utils.KeycloakModelUtils; | ||
| import org.keycloak.organization.OrganizationProvider; | ||
|
|
||
| public class AbstractOrganizationProvisioner extends DatasetResourceProvider { | ||
|
|
||
| private final String realmName; | ||
|
|
||
| public AbstractOrganizationProvisioner(KeycloakSession session) { | ||
| super(session); | ||
| realmName = session.getContext().getRealm().getName(); | ||
| } | ||
|
|
||
| protected Response start(String name, Runnable runnable) { | ||
| DatasetConfig config = getDatasetConfig(); | ||
| Task task = Task.start(name); | ||
| TaskManager taskManager = new TaskManager(baseSession); | ||
| Task existingTask = taskManager.addTaskIfNotInProgress(task, config.getTaskTimeout()); | ||
|
|
||
| if (existingTask != null) { | ||
| return Response.status(400).entity(TaskResponse.errorSomeTaskInProgress(existingTask, getStatusUrl())).build(); | ||
| } | ||
|
|
||
| try { | ||
| new Thread(runnable).start(); | ||
| return Response.ok(TaskResponse.taskStarted(task, getStatusUrl())).build(); | ||
| } catch (DatasetException de) { | ||
| return handleException(handleDatasetException(de)); | ||
| } catch (Exception e) { | ||
| logger.error("Unexpected error", e); | ||
| return handleException(Response.status(500).entity(TaskResponse.error("Unexpected error")).build()); | ||
| } | ||
| } | ||
|
|
||
| protected OrganizationProvider getOrganizationProvider(KeycloakSession session) { | ||
| session.getContext().setRealm(getRealm(session)); | ||
| OrganizationProvider orgProvider = session.getProvider(OrganizationProvider.class); | ||
|
|
||
| if (orgProvider == null) { | ||
| throw new NotFoundException(); | ||
| } | ||
|
|
||
| return orgProvider; | ||
| } | ||
|
|
||
| protected DatasetConfig getDatasetConfig() { | ||
| return ConfigUtil.createConfigFromQueryParams(httpRequest, CREATE_ORGS); | ||
| } | ||
|
|
||
| private Response handleException(Response response) { | ||
| new TaskManager(baseSession).removeExistingTask(false); | ||
| return response; | ||
| } | ||
|
|
||
| protected String getRealmName() { | ||
| return realmName; | ||
| } | ||
|
|
||
| protected RealmModel getRealm(KeycloakSession session) { | ||
| RealmModel realm = session.realms().getRealmByName(realmName); | ||
| session.getContext().setRealm(realm); | ||
| return realm; | ||
| } | ||
|
|
||
| protected void runJobInTransactionWithTimeout(KeycloakSessionTask task) { | ||
| KeycloakModelUtils.runJobInTransactionWithTimeout(baseSession.getKeycloakSessionFactory(), task::run, getDatasetConfig().getTransactionTimeoutInSeconds()); | ||
| } | ||
|
|
||
| protected void addTaskRunningInTransaction(ExecutorHelper executor, KeycloakSessionTask task) { | ||
| executor.addTaskRunningInTransaction(task::run); | ||
| } | ||
| } |
144 changes: 144 additions & 0 deletions
144
.../org/keycloak/benchmark/dataset/organization/OrganizationIdentityProviderProvisioner.java
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,144 @@ | ||
| /* | ||
| * Copyright 2024 Red Hat, Inc. and/or its affiliates | ||
| * and other contributors as indicated by the @author tags. | ||
| * | ||
| * Licensed under the Apache License, Version 2.0 (the "License"); | ||
| * you may not use this file except in compliance with the License. | ||
| * You may obtain a copy of the License at | ||
| * | ||
| * http://www.apache.org/licenses/LICENSE-2.0 | ||
| * | ||
| * Unless required by applicable law or agreed to in writing, software | ||
| * distributed under the License is distributed on an "AS IS" BASIS, | ||
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | ||
| * See the License for the specific language governing permissions and | ||
| * limitations under the License. | ||
| * | ||
| */ | ||
|
|
||
| package org.keycloak.benchmark.dataset.organization; | ||
|
|
||
| import java.util.HashMap; | ||
| import java.util.concurrent.CountDownLatch; | ||
|
|
||
| import jakarta.ws.rs.GET; | ||
| import jakarta.ws.rs.Path; | ||
| import jakarta.ws.rs.Produces; | ||
| import jakarta.ws.rs.core.MediaType; | ||
| import jakarta.ws.rs.core.Response; | ||
| import org.jboss.resteasy.reactive.NoCache; | ||
| import org.keycloak.benchmark.dataset.ExecutorHelper; | ||
| import org.keycloak.benchmark.dataset.TaskManager; | ||
| import org.keycloak.benchmark.dataset.config.ConfigUtil; | ||
| import org.keycloak.benchmark.dataset.config.DatasetConfig; | ||
| import org.keycloak.broker.oidc.KeycloakOIDCIdentityProviderFactory; | ||
| import org.keycloak.models.ClientModel; | ||
| import org.keycloak.models.IdentityProviderModel; | ||
| import org.keycloak.models.KeycloakSession; | ||
| import org.keycloak.models.KeycloakSessionFactory; | ||
| import org.keycloak.models.OrganizationModel; | ||
| import org.keycloak.models.RealmModel; | ||
| import org.keycloak.models.utils.KeycloakModelUtils; | ||
| import org.keycloak.organization.OrganizationProvider; | ||
| import org.keycloak.protocol.oidc.OIDCLoginProtocol; | ||
|
|
||
| public class OrganizationIdentityProviderProvisioner extends AbstractOrganizationProvisioner { | ||
|
|
||
| private final OrganizationModel organization; | ||
| private final DatasetConfig config; | ||
|
|
||
| public OrganizationIdentityProviderProvisioner(KeycloakSession session, OrganizationModel organization, DatasetConfig config) { | ||
| super(session); | ||
| this.organization = organization; | ||
| this.config = config; | ||
| } | ||
|
|
||
| @Path("create") | ||
| @GET | ||
| @NoCache | ||
| @Produces(MediaType.APPLICATION_JSON) | ||
| public Response create() { | ||
| return start("Creation of " + config.getCount() + " identity providers in organization " + organization.getName(), addIdentityProviders()); | ||
| } | ||
|
|
||
| private Runnable addIdentityProviders() { | ||
| return () -> { | ||
| String orgId = organization.getId(); | ||
| CountDownLatch latch = new CountDownLatch(config.getCount()); | ||
| KeycloakSessionFactory sessionFactory = baseSession.getKeycloakSessionFactory(); | ||
| ExecutorHelper executor = new ExecutorHelper(config.getThreadsCount(), sessionFactory, config); | ||
|
|
||
| executor.addTask(() -> runJobInTransactionWithTimeout(session -> addIdentityProviders(session, orgId, latch))); | ||
|
|
||
| try { | ||
| executor.waitForAllToFinish(); | ||
| success(); | ||
| logger.infof("Added %d identity providers to organization %s", config.getCount() - latch.getCount(), organization.getName()); | ||
| } catch (Exception e) { | ||
| KeycloakModelUtils.runJobInTransaction(sessionFactory, session | ||
| -> new TaskManager(session).removeExistingTask(false)); | ||
| } | ||
| }; | ||
| } | ||
|
|
||
| protected void addIdentityProviders(KeycloakSession session, String orgId, CountDownLatch latch) { | ||
| OrganizationProvider provider = getOrganizationProvider(session); | ||
| OrganizationModel organization = provider.getById(orgId); | ||
| int startIndex = getLastIndex(session, organization.getName()); | ||
| RealmModel realm = session.getContext().getRealm(); | ||
| ClientModel client = realm.getClientByClientId("org-broker-client"); | ||
|
|
||
| if (client == null) { | ||
| client = realm.addClient("org-broker-client"); | ||
| client.setSecret("secret"); | ||
| client.setProtocol(OIDCLoginProtocol.LOGIN_PROTOCOL); | ||
| client.setPublicClient(false); | ||
| } | ||
|
|
||
| long count = latch.getCount(); | ||
|
|
||
| for (int i = startIndex; i < count; i++) { | ||
| String idpAlias = "idp-" + organization.getName() + "-" + i; | ||
|
|
||
| IdentityProviderModel identityProvider = realm.getIdentityProviderByAlias(idpAlias); | ||
|
|
||
| if (identityProvider != null && identityProvider.getInternalId() != null && identityProvider.getOrganizationId() != null) { | ||
| continue; | ||
| } | ||
|
|
||
| if (identityProvider == null || identityProvider.getInternalId() == null) { | ||
| identityProvider = new IdentityProviderModel(); | ||
|
|
||
| identityProvider.setAlias(idpAlias); | ||
| identityProvider.setProviderId(KeycloakOIDCIdentityProviderFactory.PROVIDER_ID); | ||
| identityProvider.setLoginHint(true); | ||
| identityProvider.setEnabled(true); | ||
| HashMap<String, String> idpConfig = new HashMap<>(); | ||
| identityProvider.setConfig(idpConfig); | ||
| idpConfig.put("issuer", "http://localhost:8180/realms/" + config.getRealmName()); | ||
| idpConfig.put("jwksUrl", "http://localhost:8180/realms/realm-0/protocol/openid-connect/certs"); | ||
| idpConfig.put("logoutUrl", "http://localhost:8180/realms/realm-0/protocol/openid-connect/auth"); | ||
| idpConfig.put("metadataDescriptorUrl", "http://localhost:8180/realms/realm-0/.well-known/openid-configuration"); | ||
| idpConfig.put("tokenUrl", "http://localhost:8180/realms/realm-0/protocol/openid-connect/token"); | ||
| idpConfig.put("authorizationUrl", "http://localhost:8180/realms/realm-0/protocol/openid-connect/auth"); | ||
| idpConfig.put("useJwksUrl", "true"); | ||
| idpConfig.put("userInfoUrl", "http://localhost:8180/realms/realm-0/protocol/openid-connect/userinfo"); | ||
| idpConfig.put("validateSignature", "true"); | ||
| idpConfig.put("clientId", "org-broker-client"); | ||
| idpConfig.put("clientSecret", "secret"); | ||
| idpConfig.put("clientAuthMethod", "client_secret_post"); | ||
| realm.addIdentityProvider(identityProvider); | ||
| client.addRedirectUri("http://localhost:8180/realms/" + config.getRealmName() + "/broker/" + identityProvider.getAlias() + "/endpoint"); | ||
| } | ||
|
|
||
| if (provider.addIdentityProvider(organization, identityProvider)) { | ||
| latch.countDown(); | ||
| } | ||
| } | ||
| } | ||
|
|
||
| private int getLastIndex(KeycloakSession session, String orgName) { | ||
| RealmModel realm = session.getContext().getRealm(); | ||
| return ConfigUtil.findFreeEntityIndex(index -> realm.getIdentityProvidersStream().anyMatch(idp -> idp.getAlias().equals("idp-" + orgName + "-" + index))); | ||
| } | ||
| } |
Oops, something went wrong.