Merge pull request #1323 from sberyozkin/add_oidc_token_propagation_test

Add OIDC token propagation test with the user role token
quarkusio · Sep 5, 2023 · 04a2e39 · 04a2e39
2 parents 08e8a24 + 5524b19
commit 04a2e39
Show file tree

Hide file tree

Showing 2 changed files with 20 additions and 0 deletions.
diff --git a/...kstart/src/test/java/org/acme/security/openid/connect/OidcClientTokenPropagationTest.java b/...kstart/src/test/java/org/acme/security/openid/connect/OidcClientTokenPropagationTest.java
@@ -30,6 +30,22 @@ public void testGetNameWithAdminTokenPropagated() {
                 .statusCode(200)
                 .body(is("admin"));
     }
+
+    @Test
+    public void testGetNameWithUserTokenPropagated() {
+    	String userToken = getAccessToken("alice");
+
+        RestAssured.given().auth().oauth2(userToken)
+                .when().get("/frontend/user-name-with-propagated-token")
+                .then()
+                .statusCode(200)
+                .body(is("alice"));
+
+        RestAssured.given().auth().oauth2(userToken)
+                .when().get("/frontend/admin-name-with-propagated-token")
+                .then()
+                .statusCode(403);
+    }
 
     @Test
     public void testGetNameWithOidcClient() {

diff --git a/security-openid-connect-quickstart/src/main/resources/application.properties b/security-openid-connect-quickstart/src/main/resources/application.properties
@@ -4,6 +4,7 @@
 quarkus.oidc.client-id=backend-service
 quarkus.oidc.credentials.secret=secret
 quarkus.keycloak.devservices.realm-path=quarkus-realm.json
+quarkus.keycloak.devservices.grant.type=client
 
 # DEBUG console logging
 quarkus.log.console.enable=true
@@ -18,3 +19,6 @@ quarkus.log.file.enable=true
 #quarkus.log.category."io.quarkus.smallrye.jwt".level=TRACE
 #quarkus.log.category."io.undertow.request.security".level=TRACE
 #quarkus.log.category."io.smallrye.jwt".level=TRACE
+
+quarkus.log.category."io.quarkus.oidc.runtime.OidcProvider".level=TRACE
+quarkus.log.category."io.quarkus.oidc.runtime.OidcProvider".min-level=TRACE