78 lines
2.1 KiB
TypeScript
78 lines
2.1 KiB
TypeScript
import { Body, Controller, Delete, Get, Path, Post, Put, Route, Security, Tags } from "tsoa";
|
|
import {
|
|
addUserRoles,
|
|
createUser,
|
|
deleteUser,
|
|
editUser,
|
|
listRole,
|
|
removeUserRoles,
|
|
} from "../services/keycloak";
|
|
|
|
@Route("api/v1/keycloak")
|
|
@Tags("Single-Sign On")
|
|
@Security("keycloak")
|
|
export class KeycloakController extends Controller {
|
|
@Post("user")
|
|
async createUser(
|
|
@Body() body: { username: string; password: string; firstName?: string; lastName?: string },
|
|
) {
|
|
return await createUser(body.username, body.password, {
|
|
firstName: body.firstName,
|
|
lastName: body.lastName,
|
|
requiredActions: ["UPDATE_PASSWORD"],
|
|
});
|
|
}
|
|
|
|
@Put("user/{userId}")
|
|
async editUser(
|
|
@Path() userId: string,
|
|
@Body() body: { username?: string; password?: string; firstName?: string; lastName?: string },
|
|
) {
|
|
return await editUser(userId, body);
|
|
}
|
|
|
|
@Delete("user/{userId}")
|
|
async deleteUser(@Path() userId: string) {
|
|
return await deleteUser(userId);
|
|
}
|
|
|
|
@Get("role")
|
|
async getRole() {
|
|
const role = await listRole();
|
|
if (Array.isArray(role))
|
|
return role.filter(
|
|
(a) =>
|
|
!["uma_authorization", "offline_access", "default-roles", "system"].some((b) =>
|
|
a.name.includes(b),
|
|
),
|
|
);
|
|
throw new Error("Failed. Cannot get role.");
|
|
}
|
|
|
|
@Post("{userId}/role")
|
|
async addRole(@Path() userId: string, @Body() body: { role: string[] }) {
|
|
const list = await listRole();
|
|
|
|
if (!Array.isArray(list)) throw new Error("Failed. Cannot get role(s) data from the server.");
|
|
|
|
const result = await addUserRoles(
|
|
userId,
|
|
list.filter((v) => body.role.includes(v.id)),
|
|
);
|
|
|
|
if (!result) throw new Error("Failed. Cannot set user's role.");
|
|
}
|
|
|
|
@Delete("{userId}/role/{roleId}")
|
|
async deleteRole(@Path() userId: string, @Path() roleId: string) {
|
|
const list = await listRole();
|
|
|
|
if (!Array.isArray(list)) throw new Error("Failed. Cannot get role(s) data from the server.");
|
|
|
|
const result = await removeUserRoles(
|
|
userId,
|
|
list.filter((v) => roleId === v.id),
|
|
);
|
|
if (!result) throw new Error("Failed. Cannot remove user's role.");
|
|
}
|
|
}
|