Merge pull request #53 from ing-bank/feature/keycloak-service

add keycloak service to insert a user
ing-bank · Aug 28, 2020 · 6dbafde · 6dbafde
2 parents aceae84 + e90daed
commit 6dbafde
Showing 1 changed file with 20 additions and 1 deletion.
diff --git a/src/main/scala/com/ing/wbaa/rokku/sts/api/AdminApi.scala b/src/main/scala/com/ing/wbaa/rokku/sts/api/AdminApi.scala
@@ -19,7 +19,7 @@ trait AdminApi extends LazyLogging with Encryption with JwtToken {
   protected[this] def stsSettings: StsSettings
 
   val adminRoutes: Route = pathPrefix("admin") {
-    listAllNPAs ~ addNPA ~ addServiceNPA ~ setAccountStatus ~ insertUserToKeycloak
+    listAllNPAs ~ addNPA ~ addServiceNPA ~ setAccountStatus ~ insertServiceUserToKeycloak ~ insertUserToKeycloak
   }
 
   case class ResponseMessage(code: String, message: String, target: String)
@@ -164,4 +164,23 @@ trait AdminApi extends LazyLogging with Encryption with JwtToken {
       }
     }
   }
+
+  def insertServiceUserToKeycloak: Route = logRequestResult("debug") {
+    post {
+      path("service" / "keycloak" / "user") {
+        formFields((Symbol("username"))) { username =>
+          headerValueByName("Authorization") { bearerToken =>
+            if (verifyInternalToken(bearerToken)) {
+              onComplete(insertUserToKeycloak(UserName(username))) {
+                case Success(_)  => complete(ResponseMessage(s"Add user ok", s"$username added", "keycloak"))
+                case Failure(ex) => complete(ResponseMessage(s"Add user error", ex.getMessage, "keycloak"))
+              }
+            } else {
+              reject(AuthorizationFailedRejection)
+            }
+          }
+        }
+      }
+    }
+  }
 }