Skip to content

Commit

Permalink
feat(config-api): client token mgt endpoint (#9554)
Browse files Browse the repository at this point in the history 
* fix(config-api): asset mgt endpoint fixes

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): asset upload mgt ehancement and fido

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): asset upload mgt ehancement and fido

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): asset upload mgt ehancement and fido

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(config-api): asset upload

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(config-api): lock review comments

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): lock code review comments

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): lock master renamed to lock server

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): lock master renamed to lock server

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): lock master renamed to lock server

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): lock master renamed to lock server

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): fido2 delete functionality

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(config-api): acr validation

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): doc(config-api): IDP schema attribute descriptions #9187

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): sync with main

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): uploading assets via API generates 2 entries #9178

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): asset mgt, fido and IDP changes

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): fido2 device endpoint

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): fido2 endpoint

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): fido2 endpoint

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): sync with main

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): sync with main

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): sync with main

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): resolved sonar review issues

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): sonar review comment fix

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): swagger spec

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): saml config attribute description

Signed-off-by: pujavs <pujas.works@gmail.com>

* doc(config-api): added SAML attribute description

Signed-off-by: pujavs <pujas.works@gmail.com>

* doc(config-api): added SAML attribute description

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): sync with main

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(jans-lock): code review comment fix isssue#9305

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(jans-lock): code review comment fix isssue#9305

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): lock review point

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(lock): code review comment

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(lock): code review comment

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(config-api): sync with main

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): lock endpoint fixes and SAML IDP NPE

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): asset enhancement

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): implement timer for asset mgt to fetch and deploy assets forconfig-api #9403

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(config-api): scope validation issue #9426

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(config-api): asset delete error fix

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): sysnc with main

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(config-ap): lock audit endpoint parameter declaration error#9460

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): client token functionality

Signed-off-by: pujavs <pujas.works@gmail.com>

* fix(Config-api): lock audit endpoint path param rectification

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): clint token endpoint - wip

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): clint token endpoint

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): client token endpoint

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): client token endpoint

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): token endpoint

Signed-off-by: pujavs <pujas.works@gmail.com>

* feat(config-api): token endpoint

Signed-off-by: pujavs <pujas.works@gmail.com>

---------

Signed-off-by: pujavs <pujas.works@gmail.com>
Co-authored-by: YuriyZ <yzabrovarniy@gmail.com>
  • Loading branch information
@pujavs @yuriyz
pujavs and yuriyz committed Sep 21, 2024
1 parent 607a16f commit f4bcaad
Show file tree
Hide file tree
Showing 17 changed files with 637 additions and 21 deletions.
10 changes: 9 additions & 1 deletion jans-config-api/common/src/main/java/io/jans/configapi/util/ApiAccessConstants.java
View file
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,15 @@ private ApiAccessConstants() {
public static final String OPENID_CLIENTS_READ_ACCESS = "https://jans.io/oauth/config/openid/clients.readonly";
public static final String OPENID_CLIENTS_WRITE_ACCESS = "https://jans.io/oauth/config/openid/clients.write";
public static final String OPENID_CLIENTS_DELETE_ACCESS = "https://jans.io/oauth/config/openid/clients.delete";


public static final String TOKEN_READ_ACCESS = "https://jans.io/oauth/config/token.readonly";
public static final String TOKEN_WRITE_ACCESS = "https://jans.io/oauth/config/token.write";
public static final String TOKEN_DELETE_ACCESS = "https://jans.io/oauth/config/token.delete";

public static final String SESSION_READ_ACCESS = "https://jans.io/oauth/config/session.readonly";
public static final String SESSION_WRITE_ACCESS = "https://jans.io/oauth/config/session.write";
public static final String SESSION_DELETE_ACCESS = "https://jans.io/oauth/config/session.delete";

public static final String UMA_RESOURCES_READ_ACCESS = "https://jans.io/oauth/config/uma/resources.readonly";
public static final String UMA_RESOURCES_WRITE_ACCESS = "https://jans.io/oauth/config/uma/resources.write";
public static final String UMA_RESOURCES_DELETE_ACCESS = "https://jans.io/oauth/config/uma/resources.delete";
Expand Down
5 changes: 5 additions & 0 deletions jans-config-api/common/src/main/java/io/jans/configapi/util/ApiConstants.java
View file
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,7 @@ private ApiConstants() {}
public static final String UMA = "/uma";
public static final String DYN_REGISTRATION = "/dyn_registration";
public static final String SESSION = "/session";
public static final String CLIENT = "/client";
public static final String CLIENTS = "/clients";
public static final String OPENID = "/openid";
public static final String SCOPES = "/scopes";
Expand All @@ -42,6 +43,7 @@ private ApiConstants() {}
public static final String GRANT = "/grant";
public static final String SUBJECT = "/subject";
public static final String TOKEN = "/token";
public static final String REVOKE = "/revoke";
public static final String SEPARATOR = "/";
public static final String SERVER_CONFIG = "/server-config";
public static final String SERVER_CLEANUP = "/server-cleanup";
Expand Down Expand Up @@ -104,6 +106,8 @@ private ApiConstants() {}
public static final String AUTHORIZATIONS = "/authorizations";
public static final String USERID_PATH = "{userId}";
public static final String SERVICE_NAME_PARAM_PATH = "/{service-name}";
public static final String TOKEN_PATH = "/{token}";
public static final String TOKEN_CODE_PATH = "/{tknCde}";

public static final String USERID = "userId";
public static final String USERNAME = "username";
Expand All @@ -128,6 +132,7 @@ private ApiConstants() {}
public static final String USERDN = "userDn";
public static final String PLUGIN_NAME = "pluginName";
public static final String SERVICE_NAME = "service-name";
public static final String TOKEN_CODE_PARAM = "tknCde";


public static final String ALL = "all";
Expand Down
147 changes: 140 additions & 7 deletions jans-config-api/docs/jans-config-api-swagger.yaml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,8 @@ tags:
- name: Configuration – Config API
- name: Client Authorization
- name: Jans Assets
- name: Tokens
- name: Sessions
paths:
/api/v1/health/app-version:
get:
Expand Down Expand Up @@ -7612,6 +7614,129 @@ paths:
- oauth2:
- https://jans.io/oauth/config/stats.readonly
- jans_stat
/api/v1/token/client/{clientId}:
get:
tags:
- OAuth - OpenID Connect - Clients
summary: Get client token details
description: Get client token details
operationId: get-token-details
parameters:
- name: clientId
in: path
description: Script identifier
required: true
schema:
type: string
responses:
"200":
description: Ok
content:
application/json:
schema:
$ref: '#/components/schemas/PagedResult'
examples:
Response example:
description: Response example
value: |
{
"start": 0,
"totalEntriesCount": 3,
"entriesCount": 3,
"entries": [
{
"dn": "tknCde=4960533184fab18d8932045b70de17f827c916010ab5d5c86f7202ca6cf7c176,ou=tokens,o=jans",
"grantId": "82736426-1a72-46bb-8e76-52f3bca2c614",
"clientId": "2000.cc8b29ae-cb4a-49ea-b176-8695e53919d9",
"creationDate": "2024-09-20T12:55:30",
"expirationDate": "2024-10-30T12:55:30",
"deletable": true,
"scope": "jans_stat openid https://jans.io/oauth/jans-auth-server/config/adminui/properties.readonly https://jans.io/oauth/jans-auth-server/config/adminui/license.write https://jans.io/oauth/config/stats.readonly https://jans.io/oauth/jans-auth-server/config/adminui/license.readonly",
"tokenCode": "4960533184fab18d8932045b70de17f827c916010ab5d5c86f7202ca6cf7c176",
"tokenType": "access_token",
"grantType": "client_credentials",
"referenceId": "uIw3N7qeRiKR1pvzE1OmxQ",
"attributes": {
"online_access": false,
"statusListIndex": 1101
},
"tokenTypeEnum": "ACCESS_TOKEN"
},
{
"dn": "tknCde=5495ac7fedd47f57a10f314896fe88d415dbec067c7cea5d57138e2723b73e84,ou=tokens,o=jans",
"grantId": "2c4123dd-886f-447e-a65d-207bf60c3307",
"clientId": "2000.cc8b29ae-cb4a-49ea-b176-8695e53919d9",
"creationDate": "2024-09-20T12:55:37",
"expirationDate": "2024-10-30T12:55:37",
"deletable": true,
"scope": "jans_stat openid https://jans.io/oauth/jans-auth-server/config/adminui/properties.readonly https://jans.io/oauth/jans-auth-server/config/adminui/license.write https://jans.io/oauth/config/stats.readonly https://jans.io/oauth/jans-auth-server/config/adminui/license.readonly",
"tokenCode": "5495ac7fedd47f57a10f314896fe88d415dbec067c7cea5d57138e2723b73e84",
"tokenType": "access_token",
"grantType": "client_credentials",
"referenceId": "bgPvtouST66zHFaH4vrWhA",
"attributes": {
"online_access": false,
"statusListIndex": 1102
},
"tokenTypeEnum": "ACCESS_TOKEN"
},
{
"dn": "tknCde=f0977b8c359446ff7a5aa157a930c89506485b266d988507478e367f53fd5445,ou=tokens,o=jans",
"grantId": "d0c427ec-0c6e-4fdf-83eb-43a19e633eec",
"clientId": "2000.cc8b29ae-cb4a-49ea-b176-8695e53919d9",
"creationDate": "2024-09-20T12:55:37",
"expirationDate": "2024-10-20T12:55:37",
"deletable": true,
"scope": "jans_stat openid https://jans.io/oauth/jans-auth-server/config/adminui/properties.readonly https://jans.io/oauth/jans-auth-server/config/adminui/license.write https://jans.io/oauth/config/stats.readonly https://jans.io/oauth/jans-auth-server/config/adminui/license.readonly",
"tokenCode": "f0977b8c359446ff7a5aa157a930c89506485b266d988507478e367f53fd5445",
"tokenType": "access_token",
"grantType": "client_credentials",
"referenceId": "1DnmKY6pS1S6XeKSHAj2Ag",
"attributes": {
"online_access": false,
"statusListIndex": 1103
},
"tokenTypeEnum": "ACCESS_TOKEN"
}
]
}
"401":
description: Unauthorized
"404":
description: Not Found
"500":
description: InternalServerError
security:
- oauth2:
- https://jans.io/oauth/config/token.readonly
/api/v1/token/revoke/{tknCde}:
delete:
tags:
- OAuth - OpenID Connect - Clients
summary: Revoke client token.
description: Revoke client token.
operationId: revoke-token
parameters:
- name: tknCde
in: path
description: Token Code
required: true
schema:
type: string
responses:
"204":
description: No Content
"400":
description: Bad Request
"401":
description: Unauthorized
"404":
description: Not Found
"500":
description: InternalServerError
security:
- oauth2:
- https://jans.io/oauth/config/token.delete
/api/v1/uma/resources:
get:
tags:
Expand Down Expand Up @@ -8370,17 +8495,16 @@ components:
type: string
selected:
type: boolean
adminCanView:
userCanEdit:
type: boolean
adminCanEdit:
type: boolean
userCanView:
type: boolean
userCanEdit:
adminCanView:
type: boolean
userCanAccess:
type: boolean

adminCanAccess:
type: boolean
whitePagesCanView:
Expand Down Expand Up @@ -9009,6 +9133,9 @@ components:
type: boolean
disableU2fEndpoint:
type: boolean
deviceSessionLifetimeInSeconds:
type: integer
format: int32
rotateDeviceSecret:
type: boolean
returnDeviceSecretFromAuthzEndpoint:
Expand Down Expand Up @@ -10372,14 +10499,14 @@ components:
type: boolean
internal:
type: boolean
locationPath:
type: string
locationType:
type: string
enum:
- ldap
- db
- file
locationPath:
type: string
baseDn:
type: string
ScriptError:
Expand Down Expand Up @@ -10808,10 +10935,10 @@ components:
ttl:
type: integer
format: int32
persisted:
type: boolean
opbrowserState:
type: string
persisted:
type: boolean
SessionIdAccessMap:
type: object
properties:
Expand Down Expand Up @@ -11009,3 +11136,9 @@ components:
https://jans.io/oauth/config/jans_asset-read: View Jans Assets
https://jans.io/oauth/config/jans_asset-write: Manage Jans Assets
https://jans.io/oauth/config/jans_asset-delete: Delete Jans Assets
https://jans.io/oauth/config/token.readonly: View Token details
https://jans.io/oauth/config/token.write: Manage Token details
https://jans.io/oauth/config/token.delete: Delete Token details
https://jans.io/oauth/config/session.readonly: View Session details
https://jans.io/oauth/config/session.write: Manage Session details
https://jans.io/oauth/config/session.delete: Delete Session details
Loading

0 comments on commit f4bcaad

Please sign in to comment.