Hello
Having Keycloak v18 using a company IdP that is sending claims with an URL as key:
"User Profile JSON Data for provider auth0":{
"http://schemas.microsoft.com/ws/2008/06/identity/claims/role":[
"SG_GR_Business",
"SG_GR_Managers",
"LOM",
"SG_Corporate"
]
}
I try to map those claims to groups or roles without success.
http://schemas.microsoft.com/ws/2008/06/identity/claims/rolehttp://schemas\.microsoft\.com/ws/2008/06/identity/claims/role
If you have any idea on how to solve this, would be much appreciated.
Thankd
I suppose this is the code splitting your claim name. Maybe you can convince it to accept the url as one "level’:
// or any character other than backslash (escaping) and dot (claim component separator)
private static final Pattern CLAIM_COMPONENT = Pattern.compile("^((\\\\.|[^\\\\.])+?)\\.");
private static final Pattern BACKSLASHED_CHARACTER = Pattern.compile("\\\\(.)");
/**
* Splits the given {@code claim} into separate paths if the value contains separators as per {@link #CLAIM_COMPONENT}.
*
* @param claim the claim
* @return a list with the paths
*/
public static List<String> splitClaimPath(String claim) {
final LinkedList<String> claimComponents = new LinkedList<>();
Matcher m = CLAIM_COMPONENT.matcher(claim);
int start = 0;
while (m.find()) {
claimComponents.add(BACKSLASHED_CHARACTER.matcher(m.group(1)).replaceAll("$1"));
start = m.end();
// This is necessary to match the start of region as the start of string as determined by ^
m.region(start, claim.length());
}
if (claim.length() > start) {
Not sure if the
is part of the json object or it’s just you explaining it. If that is part of the json, you need to give the full “path” like:
User Profile JSON Data for provider auth0.http://schemas\.microsoft\.com/ws/2008/06/identity/claims/role
“User Profile JSON Data for provider auth0” is not part of the path, it is the text found in the log file of Keycloak.
The claim name only contains the URL so far and as I am not a Java guy I do not understand how to exploit the piece of code in order to convince Keycloak to deal the claim “as is”.