From 85cd3a4499bce94ca801dc594f8bcb40120f170e Mon Sep 17 00:00:00 2001 From: Galip Tolga Erdem Date: Thu, 28 Dec 2023 13:14:53 -0500 Subject: [PATCH] Added administration service client creation and role assignment --- .../AdministrationServiceDataSeedContributor.cs | 6 +++--- .../KeycloakDataSeeder.cs | 14 +++++++++++--- 2 files changed, 14 insertions(+), 6 deletions(-) diff --git a/services/administration/src/EShopOnAbp.AdministrationService.HttpApi.Host/DbMigrations/AdministrationServiceDataSeedContributor.cs b/services/administration/src/EShopOnAbp.AdministrationService.HttpApi.Host/DbMigrations/AdministrationServiceDataSeedContributor.cs index 1e0abf84..b8b60132 100644 --- a/services/administration/src/EShopOnAbp.AdministrationService.HttpApi.Host/DbMigrations/AdministrationServiceDataSeedContributor.cs +++ b/services/administration/src/EShopOnAbp.AdministrationService.HttpApi.Host/DbMigrations/AdministrationServiceDataSeedContributor.cs @@ -25,8 +25,8 @@ public class AdministrationServiceDataSeedContributor : IDataSeedContributor, IT private async Task SeedClientCredentialPermissionsAsync() { - // await _permissionManager.SetAsync(IdentityUsersDefaultPermission, "C", "EShopOnAbp_AdministrationService", true); - // await _permissionManager.SetAsync(IdentityUsersDefaultPermission, "C", "EShopOnAbp_CmskitService", true); - // await _permissionManager.SetAsync(IdentityUsersLookupPermission, "C", "EShopOnAbp_CmskitService", true); + await _permissionManager.SetAsync(IdentityUsersDefaultPermission, "C", "EShopOnAbp_AdministrationService", true); + await _permissionManager.SetAsync(IdentityUsersDefaultPermission, "C", "EShopOnAbp_CmskitService", true); + await _permissionManager.SetAsync(IdentityUsersLookupPermission, "C", "EShopOnAbp_CmskitService", true); } } \ No newline at end of file diff --git a/shared/EShopOnAbp.Keycloak.DbMigrator/KeycloakDataSeeder.cs b/shared/EShopOnAbp.Keycloak.DbMigrator/KeycloakDataSeeder.cs index 3f297757..8e5dbfb7 100644 --- a/shared/EShopOnAbp.Keycloak.DbMigrator/KeycloakDataSeeder.cs +++ b/shared/EShopOnAbp.Keycloak.DbMigrator/KeycloakDataSeeder.cs @@ -119,8 +119,7 @@ public class KeyCloakDataSeeder : IDataSeedContributor, ITransientDependency _ProtocolMapper = "oidc-audience-mapper", Config = new - Dictionary() //TODO: Update when //https://github.com/AnderssonPeter/Keycloak.Net/pull/5 is merged + Dictionary { { "id.token.claim", "false" }, { "access.token.claim", "true" }, @@ -137,7 +136,7 @@ public class KeyCloakDataSeeder : IDataSeedContributor, ITransientDependency private async Task CreateClientsAsync() { await CreatePublicWebClientAsync(); - await CreateSwaggerClientAsync(); // TODO: Test when Volo.Abp.Swashbuckle v6.0.1 is released (https://github.com/abpframework/abp/pull/14409) + await CreateSwaggerClientAsync(); await CreateWebClientAsync(); await CreateCmskitClientAsync(); await CreateAdministrationClientAsync(); @@ -329,6 +328,15 @@ public class KeyCloakDataSeeder : IDataSeedContributor, ITransientDependency }; await _keycloakClient.CreateClientAsync(_keycloakOptions.RealmName, swaggerClient); + + await AddOptionalClientScopesAsync( + "SwaggerClient", + new List + { + "AdministrationService", "IdentityService", "BasketService", "CatalogService", + "OrderingService", "PaymentService", "CmskitService" + } + ); } }