Java Code Examples for org.keycloak.representations.idm.RealmRepresentation#setPasswordPolicy()

The following examples show how to use org.keycloak.representations.idm.RealmRepresentation#setPasswordPolicy() . You can vote up the ones you like or vote down the ones you don't like, and go to the original project or source file by following the links above each example. You may check out the related API usage on the sidebar.
Example 1
Source File: UserTest.java    From keycloak with Apache License 2.0 6 votes vote down vote up 
@Test
public void createUserWithInvalidPolicyPassword() {
    RealmRepresentation rep = realm.toRepresentation();
    String passwordPolicy = rep.getPasswordPolicy();
    rep.setPasswordPolicy("length(8)");
    realm.update(rep);
    UserRepresentation user = new UserRepresentation();
    user.setUsername("user4");
    user.setEmail("user4@localhost");
    CredentialRepresentation rawPassword = new CredentialRepresentation();
    rawPassword.setValue("ABCD");
    rawPassword.setType(CredentialRepresentation.PASSWORD);
    user.setCredentials(Arrays.asList(rawPassword));
    Response response = realm.users().create(user);
    assertEquals(400, response.getStatus());
    ErrorRepresentation error = response.readEntity(ErrorRepresentation.class);
    Assert.assertEquals("Password policy not met", error.getErrorMessage());
    rep.setPasswordPolicy(passwordPolicy);
    realm.update(rep);
    response.close();
}
Example 2
Source File: PasswordPolicyTest.java    From keycloak with Apache License 2.0 6 votes vote down vote up 
@Test
public void testPasswordHistoryPolicy() {
    RealmRepresentation realm = testRealmResource().toRepresentation();
    realm.setPasswordPolicy("passwordHistory(2)");
    testRealmResource().update(realm);

    testUserCredentialsPage.navigateTo();
    testUserCredentialsPage.resetPassword("firstPassword");
    assertTrue("Setting the first password should succeed.", alert.isDisplayed() && alert.isSuccess());

    testUserCredentialsPage.resetPassword("secondPassword");
    assertTrue("Setting the second password should succeed.", alert.isDisplayed() && alert.isSuccess());
    
    testUserCredentialsPage.resetPassword("firstPassword");
    assertTrue("Setting a password from recent history should fail.", alert.isDisplayed() && alert.isDanger());

    testUserCredentialsPage.resetPassword("thirdPassword");
    assertTrue("Setting the third password should succeed.", alert.isDisplayed() && alert.isSuccess());

    testUserCredentialsPage.resetPassword("firstPassword");
    assertTrue("Setting an older password should succeed.", alert.isDisplayed() && alert.isSuccess());
}
Example 3
Source File: PasswordPolicyTest.java    From keycloak with Apache License 2.0 5 votes vote down vote up 
@Test
public void testRegexPatternsPolicy() {
    RealmRepresentation realm = testRealmResource().toRepresentation();
    realm.setPasswordPolicy("regexPattern(^[A-Z]+#[a-z]{8}$) and ");
    testRealmResource().update(realm);

    testUserCredentialsPage.navigateTo();
    testUserCredentialsPage.resetPassword("invalidPassword");
    assertAlertDanger();

    testUserCredentialsPage.resetPassword("VALID#password");
    assertAlertSuccess();
}
Example 4
Source File: PasswordPolicyTest.java    From keycloak with Apache License 2.0 5 votes vote down vote up 
@Test
public void testNotUsernamePolicy() {
    RealmRepresentation realm = testRealmResource().toRepresentation();
    realm.setPasswordPolicy("notUsername(1) and ");
    testRealmResource().update(realm);

    testUserCredentialsPage.navigateTo();
    testUserCredentialsPage.resetPassword(testUser.getUsername());
    assertAlertDanger();

    testUserCredentialsPage.resetPassword("validpassword");
    assertAlertSuccess();
}
Example 5
Source File: PasswordPolicyTest.java    From keycloak with Apache License 2.0 5 votes vote down vote up 
@Test
public void testSpecialCharsPolicy() {
    RealmRepresentation realm = testRealmResource().toRepresentation();
    realm.setPasswordPolicy("specialChars(2) and ");
    testRealmResource().update(realm);

    testUserCredentialsPage.navigateTo();
    testUserCredentialsPage.resetPassword("invalidPassword*");
    assertAlertDanger();

    testUserCredentialsPage.resetPassword("validPassword*#");
    assertAlertSuccess();
}
Example 6
Source File: PasswordPolicyTest.java    From keycloak with Apache License 2.0 5 votes vote down vote up 
@Test
public void testUpperCasePolicy() {
    RealmRepresentation realm = testRealmResource().toRepresentation();
    realm.setPasswordPolicy("upperCase(2) and ");
    testRealmResource().update(realm);

    testUserCredentialsPage.navigateTo();
    testUserCredentialsPage.resetPassword("Invalidpassword");
    assertAlertDanger();

    testUserCredentialsPage.resetPassword("VAlidpassword");
    assertAlertSuccess();
}
Example 7
Source File: PasswordPolicyTest.java    From keycloak with Apache License 2.0 5 votes vote down vote up 
@Test
public void testLengthPolicy() {
    RealmRepresentation realm = testRealmResource().toRepresentation();
    realm.setPasswordPolicy("length(8) and ");
    testRealmResource().update(realm);

    testUserCredentialsPage.navigateTo();
    testUserCredentialsPage.resetPassword("1234567");
    assertAlertDanger();

    testUserCredentialsPage.resetPassword("12345678");
    assertAlertSuccess();
}
Example 8
Source File: PasswordPolicyTest.java    From keycloak with Apache License 2.0 5 votes vote down vote up 
@Test
public void testDigitsPolicy() {
    RealmRepresentation realm = testRealmResource().toRepresentation();
    realm.setPasswordPolicy("digits(2) and ");
    testRealmResource().update(realm);

    testUserCredentialsPage.navigateTo();
    testUserCredentialsPage.resetPassword("invalidPassword1");
    assertAlertDanger();

    testUserCredentialsPage.resetPassword("validPassword12");
    assertAlertSuccess();
}
Example 9
Source File: PasswordPolicyTest.java    From keycloak with Apache License 2.0 5 votes vote down vote up 
@Test
public void testLowerCasePolicy() {
    RealmRepresentation realm = testRealmResource().toRepresentation();
    realm.setPasswordPolicy("lowerCase(2) and ");
    testRealmResource().update(realm);

    testUserCredentialsPage.navigateTo();
    testUserCredentialsPage.resetPassword("iNVALIDPASSWORD");
    assertAlertDanger();

    testUserCredentialsPage.resetPassword("vaLIDPASSWORD");
    assertAlertSuccess();
}
Example 10
Source File: HtmlUnitLoginLogoutPerfTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
@Override
public void addAdapterTestRealms(List<RealmRepresentation> testRealms) {
    RealmRepresentation examplesRealm = loadRealm("/examples-realm.json");
    examplesRealm.setPasswordPolicy("hashIterations(" + PASSWORD_HASH_ITERATIONS + ")");
    testRealms.add(examplesRealm);
}
Example 11
Source File: RealmsConfigurationLoader.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
private static void readRealm(JsonParser p) throws IOException {

        // as soon as we encounter users, roles, clients we create a CreateRealmJob
        // TODO: if after that point in a realm we encounter realm attribute, we report a warning but continue

        boolean skip = false;
        try {
            RealmRepresentation r = new RealmRepresentation();
            JsonToken t = p.nextToken();
            outer:
            while (t != JsonToken.END_OBJECT && !skip) {

                //System.out.println(t + ", name: " + p.getCurrentName() + ", text: '" + p.getText() + "', value: " + p.getValueAsString());

                switch (p.getCurrentName()) {
                    case "realm":
                        r.setRealm(getStringValue(p));
                        skip = !started && realmSkipped(r.getRealm()) ;
                        if (skip) {
                            break outer;
                        }
                        break;
                    case "enabled":
                        r.setEnabled(getBooleanValue(p));
                        break;
                    case "accessTokenLifespan":
                        r.setAccessCodeLifespan(getIntegerValue(p));
                        break;
                    case "registrationAllowed":
                        r.setRegistrationAllowed(getBooleanValue(p));
                        break;
                    case "passwordPolicy":
                        r.setPasswordPolicy(getStringValue(p));
                        break;
                    case "sslRequired":
                        r.setSslRequired(getStringValue(p));
                        break;
                    case "users":
                        ensureRealm(r);
                        if (seekToStart()) {
                            enqueueFetchRealmRoles(r);
                            completePending();
                        }
                        readUsers(r, p);
                        break;
                    case "roles":
                        ensureRealm(r);
                        readRoles(r, p);
                        break;
                    case "clients":
                        ensureRealm(r);
                        readClients(r, p);
                        completePending();
                        if (seekToStart()) {
                            enqueueFetchMissingClients(r);
                            completePending();
                        }
                        break;
                    default: {
                        // if we don't understand the field we ignore it - but report that
                        log.warn("Realm attribute ignored: " + p.getCurrentName());
                        consumeAttribute(p);
                        continue; // skip p.nextToken() at end of loop - consumeAttribute() already did it
                    }
                }

                t = p.nextToken();
            }

            if (skip) {
                log.info("Realm skipped: " + r.getRealm());
                consumeParent(p);
            }

        } finally {
            // we wait for realm to complete
            completePending();

            // reset realm specific cache
            realmCreated = false;
            clientIdMap.clear();
            realmRoleIdMap.clear();
            clientRoleIdMap.clear();
        }
    }
Example 12
Source File: HttpClientLoginLogoutPerfTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
@Override
public void addAdapterTestRealms(List<RealmRepresentation> testRealms) {
    RealmRepresentation examplesRealm = loadRealm("/test-realm.json");
    examplesRealm.setPasswordPolicy("hashIterations(" + PASSWORD_HASH_ITERATIONS + ")");
    testRealms.add(examplesRealm);
}
Example 13
Source File: AccountFormServiceTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
private void setPasswordPolicy(String policy) {
    RealmRepresentation testRealm = testRealm().toRepresentation();
    testRealm.setPasswordPolicy(policy);
    testRealm().update(testRealm);
}
Example 14
Source File: PasswordHistoryPolicyTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
private void setPasswordHistory(String passwordHistory) {
    log.info(String.format("Setting %s", passwordHistory));
    RealmRepresentation testRealmRepresentation = testRealmResource().toRepresentation();
    testRealmRepresentation.setPasswordPolicy(passwordHistory);
    testRealmResource().update(testRealmRepresentation);
}
Example 15
Source File: LoginTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
private void setPasswordPolicy(String policy) {
    RealmRepresentation realmRep = adminClient.realm("test").toRepresentation();
    realmRep.setPasswordPolicy(policy);
    adminClient.realm("test").update(realmRep);
}
Example 16
Source File: ResetPasswordTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
private void setPasswordPolicy(String policy) {
    RealmRepresentation realmRep = testRealm().toRepresentation();
    realmRep.setPasswordPolicy(policy);
    testRealm().update(realmRep);
}
Example 17
Source File: RegisterTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
@Test
public void registerPasswordPolicy() {
    /*keycloakRule.configure(new KeycloakRule.KeycloakSetup() {
        @Override
        public void config(RealmManager manager, RealmModel adminstrationRealm, RealmModel appRealm) {
            appRealm.setPasswordPolicy(new PasswordPolicy("length"));
        }
    });*/
    RealmRepresentation realm = testRealm().toRepresentation();
    realm.setPasswordPolicy("length");
    testRealm().update(realm);

    try {
        loginPage.open();
        loginPage.clickRegister();
        registerPage.assertCurrent();

        registerPage.register("firstName", "lastName", "registerPasswordPolicy@email", "registerPasswordPolicy", "pass", "pass");

        registerPage.assertCurrent();
        assertEquals("Invalid password: minimum length 8.", registerPage.getError());

        events.expectRegister("registerPasswordPolicy", "registerPasswordPolicy@email")
                .removeDetail(Details.USERNAME)
                .removeDetail(Details.EMAIL)
                .user((String) null).error("invalid_registration").assertEvent();

        registerPage.register("firstName", "lastName", "registerPasswordPolicy@email", "registerPasswordPolicy", "password", "password");
        assertEquals(RequestType.AUTH_RESPONSE, appPage.getRequestType());

        String userId = events.expectRegister("registerPasswordPolicy", "registerPasswordPolicy@email").assertEvent().getUserId();

        events.expectLogin().user(userId).detail(Details.USERNAME, "registerpasswordpolicy").assertEvent();
    } finally {
        /*keycloakRule.configure(new KeycloakRule.KeycloakSetup() {
            @Override
            public void config(RealmManager manager, RealmModel adminstrationRealm, RealmModel appRealm) {
                appRealm.setPasswordPolicy(new PasswordPolicy(null));
            }
        });*/
    }
}
Example 18
Source File: PasswordHashingTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
private void setPasswordPolicy(String policy) {
    RealmRepresentation realmRep = testRealm().toRepresentation();
    realmRep.setPasswordPolicy(policy);
    testRealm().update(realmRep);
}
Example 19
Source File: RealmTest.java    From keycloak with Apache License 2.0 4 votes vote down vote up 
@Test
public void createRealmCheckDefaultPasswordPolicy() {
    RealmRepresentation rep = new RealmRepresentation();
    rep.setRealm("new-realm");

    adminClient.realms().create(rep);

    assertEquals(null, adminClient.realm("new-realm").toRepresentation().getPasswordPolicy());

    adminClient.realms().realm("new-realm").remove();

    rep.setPasswordPolicy("length(8)");

    adminClient.realms().create(rep);

    assertEquals("length(8)", adminClient.realm("new-realm").toRepresentation().getPasswordPolicy());

    adminClient.realms().realm("new-realm").remove();
}