rkbalgi

    AccessTokenResponse token = authzClient
        .obtainAccessToken(userName, password);

    final AuthorizationRequest authReq = new AuthorizationRequest();
    //checking for a specific permission
    authReq.setMetadata(new Metadata());
    authReq.getMetadata().setResponseMode("decision");
    authReq.addPermission("payroll", "write");

    AuthorizationResponse authResponse = null;

rkbalgi

How to add a bind dn on AD LDS

https://proofid.com/blog/blogset-okta-ldap-integration-microsoft-ad-lds/
(Basically, add a new DN (say cn=admin,cn=service-accounts,dc=example,dc=com), reset password and then add this as a "member" of cn=Readers 

rkbalgi

package com.example;

import java.nio.file.Paths;
import java.sql.SQLException;
import java.util.HashMap;
import java.util.Map;
import java.util.stream.Stream;
import org.h2.tools.Server;
import org.hibernate.jpa.HibernatePersistenceProvider;
import org.junit.BeforeClass;

rkbalgi

http://lists.jboss.org/pipermail/keycloak-user/2018-March/013417.html
https://github.com/pedroigor/keycloak/tree/1e1de85685bb5d5f180f510630cd7133f8a35375/testsuite/integration-arquillian/tests/base/src/test/java/org/keycloak/testsuite/admin/client/authorization

rkbalgi

import static java.time.temporal.ChronoField.HOUR_OF_DAY;
import static java.time.temporal.ChronoField.MINUTE_OF_HOUR;
import static java.time.temporal.ChronoField.SECOND_OF_MINUTE;

import java.sql.Connection;
import java.sql.DriverManager;
import java.sql.PreparedStatement;
import java.sql.ResultSet;
import java.sql.SQLException;
import java.sql.Timestamp;

rkbalgi

@Configuration
public class AppConfig{
  

  @Bean
  public KeycloakConfigResolver KeycloakConfigResolver(KeycloakSpringBootProperties props) {
    return new SimpleKcConfigResolver(props);
  }

rkbalgi

      <plugin>
        <groupId>com.github.kongchen</groupId>
        <artifactId>swagger-maven-plugin</artifactId>

        <configuration>
          <apiSources>
            <apiSource>
              <springmvc>true</springmvc>
              <locations>
                <location>com.example.resources.DemoResource</location>

rkbalgi

https://github.com/rkbalgi/keycloak-cli/blob/master/src/main/java/com/github/rkbalgi/apps/keycloak/IdReplacer.java

rkbalgi

Ubuntu 19.10 on VirtualBox (Using osboxes server edition image)

I had few problems setting up Ubuntu 19.10 using a osbox image on my windows 10 (NAT mode). Hopefully, this gist will help those trying the same

Set up networking as NAT mode in Virtual Box

• Attached Mode: NAT
• Promiscuos Mode: Allow All
• Cable Attached - Selected (Port forwarding if necessary - I included 22 as I work by ssh'ing into the box)

Figure out your network interface name

rkbalgi

Building envoy on Windows

This is targeted for Windows users (who wish to build outside of a docker container - which BTW is still the preferred way to build the image)

• git clone envoy (or your fork) on your Windows box
• Setup a Ubuntu 19.10 on VirtualBox (try osboxes) -This might help
• Map your clone envoy to your VM (shared folder between you host and guest OS) - or just clone within the VM
• Run commands from here https://github.com/envoyproxy/envoy/blob/4b6e81c112e204ef04445318d2cbfa168cf22ca7/bazel/README.md

sudo apt-get install build-essential
sudo wget -O /usr/local/bin/bazel https://github.com/bazelbuild/bazelisk/releases/download/v0.0.8/bazelisk-linux-amd64
sudo chmod +x /usr/local/bin/bazel