MVC 測試 Spring 啟動 Mocking Keycloak 令牌

Question

我正在嘗試使用 keycloak 保護 API 為我的 MVC 單元測試。

使用https://github.com/ch4mpy/spring-addons ，根據示例，測試應該可以正常工作。

測試：

    @RunWith(SpringRunner.class)
@WebMvcTest(controllers = StudentController.class)
@AutoConfigureMockMvc
@Import({ServletKeycloakAuthUnitTestingSupport.UnitTestConfig.class,
        KeycloakSecurityConfig.class})
public class StudentControllerTests {

    @Autowired
    private MockMvc mockMvc;

    @MockBean
    private StudentService service;

    @MockBean
    private StudentRepository repository;

    //TODO: Fix keycloak bug
    @Test
    @WithMockKeycloakAuth(
            authorities = { "USER", "AUTHORIZED_PERSONNEL" },
            id = @IdTokenClaims(sub = "42"),
            oidc = @OidcStandardClaims(
                    email = "test@testing.com",
                    emailVerified = true,
                    nickName = "TesterNickName",
                    preferredUsername = "testName"),
            accessToken = @KeycloakAccessToken(
                    realmAccess = @KeycloakAccess(roles = { "TESTER" }),
                    authorization = @KeycloakAuthorization(
                            permissions = @KeycloakPermission(rsid = "toto", rsname = "truc", scopes = "abracadabra"))),
            privateClaims = @ClaimSet(stringClaims = @StringClaim(name = "foo", value = "bar")))
    public void shouldTest() throws Exception {
        MvcResult result = this.mockMvc.perform(get("/students/test")).andReturn();
        assertEquals("abc", result.getResponse().getContentAsString());
    }
}

應用程序.yml

keycloak:
  realm: xxx
  auth-server-url: http://localhost:8081/auth
  ssl-required: external
  resource: client-interface
  use-resource-role-mappings: true
  credentials:
    secret: xxx
  bearer-only: true
  principal-attribute: preferred_username

我得到以下堆棧跟蹤：

java.lang.NullPointerException
    at org.keycloak.adapters.KeycloakDeploymentBuilder.internalBuild(KeycloakDeploymentBuilder.java:57)
    at org.keycloak.adapters.KeycloakDeploymentBuilder.build(KeycloakDeploymentBuilder.java:202)
    at org.keycloak.adapters.springboot.KeycloakSpringBootConfigResolver.resolve(KeycloakSpringBootConfigResolver.java:39)
    at org.keycloak.adapters.springsecurity.config.KeycloakSpringConfigResolverWrapper.resolve(KeycloakSpringConfigResolverWrapper.java:40)
    at org.keycloak.adapters.AdapterDeploymentContext.resolveDeployment(AdapterDeploymentContext.java:89)
    at org.keycloak.adapters.springsecurity.filter.KeycloakPreAuthActionsFilter.doFilter(KeycloakPreAuthActionsFilter.java:82)
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
    at org.springframework.security.web.header.HeaderWriterFilter.doHeadersAfter(HeaderWriterFilter.java:92)
    at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:77)
    at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
    at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)
    at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
[...]

知道如何解決嗎？

問候，羅薩里奧

Answer 1

實時調頻

根據堆棧跟蹤，適配器配置是 KeycloakDeploymentBuilder 中的KeycloakDeploymentBuilder 。 經過幾跳后，它似乎沒有注入KeycloakSpringBootConfigResolver 。

正如我的lib 主自述文件中所述：“由於從 9.0.2 到 12.0.0 的回歸，您必須實施一種解決方法，如 KeycloakSpringBootSampleApp 中所示”

在鏈接的示例中：

    // Work-around https://issues.redhat.com/browse/KEYCLOAK-14520 until keycloak 12.0.0
    @Configuration
    public class SpringBootKeycloakConfigResolver implements KeycloakConfigResolver {

        private KeycloakDeployment keycloakDeployment;

        private AdapterConfig adapterConfig;

        @Autowired
        public SpringBootKeycloakConfigResolver(AdapterConfig adapterConfig) {
            this.adapterConfig = adapterConfig;
        }

        @Override
        public KeycloakDeployment resolve(OIDCHttpFacade.Request request) {
            if (keycloakDeployment != null) {
                return keycloakDeployment;
            }

            keycloakDeployment = KeycloakDeploymentBuilder.build(adapterConfig);

            return keycloakDeployment;
        }
    }