[Client Credentials] #keycloak #client

client.groovy

@Grab('com.github.scribejava:scribejava-apis:6.9.0')
import com.github.scribejava.apis.KeycloakApi;
import com.github.scribejava.core.builder.ServiceBuilder;
import com.github.scribejava.core.model.OAuth2AccessToken;
import com.github.scribejava.core.model.OAuthRequest;
import com.github.scribejava.core.model.Response;
import com.github.scribejava.core.model.Verb;
import com.github.scribejava.core.oauth.OAuth20Service;

import java.io.IOException;
import java.util.Scanner;
import java.util.concurrent.ExecutionException;


// Replace these with your own api key, secret, callback, base url and realm
final String apiKey = "clientId";
final String apiSecret = "client secret";
final String baseUrl = "https://rh-sso server";
final String realm = "realm";

final String protectedResourceUrl = baseUrl + "/auth/realms/" + realm + "/protocol/openid-connect/userinfo";

final OAuth20Service service = new ServiceBuilder(apiKey)
        .apiSecret(apiSecret)
        .defaultScope("openid")
        .build(KeycloakApi.instance(baseUrl, realm));

System.out.println("=== Keyloack's OAuth Workflow ===");
System.out.println();

OAuth2AccessToken accessToken = service.getAccessTokenClientCredentialsGrant();
System.out.println(accessToken.getExpiresIn())
accessToken = service.refreshAccessToken(accessToken.getRefreshToken());
System.out.println("(The raw response looks like this: " + accessToken.getRawResponse() + "')");

System.out.println("Now we're going to access a protected resource...");
final OAuthRequest request = new OAuthRequest(Verb.GET, protectedResourceUrl);
service.signRequest(accessToken, request);
Response response = service.execute(request)
System.out.println("Got it! Lets see what we found...");
System.out.println();
System.out.println(response.getCode());
System.out.println(response.getBody());