kaji 0.0.1

Steer your Keycloak configuration to a stable, declared state.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

use kaji::models::*;
use serde_json::json;
use std::collections::HashMap;

#[test]
fn test_credential_debug() {
    let cred = CredentialRepresentation {
        id: Some("id1".to_string()),
        type_: Some("password".to_string()),
        value: Some("secret_password".to_string()),
        temporary: Some(false),
        extra: HashMap::new(),
    };
    let debug_str = format!("{:?}", cred);
    assert!(debug_str.contains("id: Some(\"id1\")"));
    assert!(debug_str.contains("value: Some(\"********\")"));
    assert!(!debug_str.contains("secret_password"));
}

#[test]
fn test_idp_debug() {
    let mut config = HashMap::new();
    config.insert("clientSecret".to_string(), "very_secret".to_string());
    config.insert("normalParam".to_string(), "normal_val".to_string());

    let idp = IdentityProviderRepresentation {
        internal_id: None,
        alias: Some("google".to_string()),
        provider_id: Some("google".to_string()),
        enabled: Some(true),
        config: Some(config),
        update_profile_first_login_mode: None,
        trust_email: None,
        store_token: None,
        add_read_token_role_on_create: None,
        authenticate_by_default: None,
        link_only: None,
        first_broker_login_flow_alias: None,
        post_broker_login_flow_alias: None,
        display_name: None,
        extra: HashMap::new(),
    };

    let debug_str = format!("{:?}", idp);
    assert!(debug_str.contains("alias: Some(\"google\")"));
    assert!(debug_str.contains("config: Some(\"********\")"));
    assert!(!debug_str.contains("normalParam")); // Config is completely redacted now
    assert!(!debug_str.contains("very_secret"));
}

#[test]
fn test_component_debug() {
    let mut config = HashMap::new();
    config.insert("bindCredential".to_string(), json!(["secret_val"]));
    config.insert("other".to_string(), json!(["val"]));

    let comp = ComponentRepresentation {
        id: Some("c1".to_string()),
        name: Some("ldap".to_string()),
        provider_id: Some("ldap".to_string()),
        provider_type: Some("org.keycloak.storage.UserStorageProvider".to_string()),
        parent_id: None,
        sub_type: None,
        config: Some(config),
        extra: HashMap::new(),
    };

    let debug_str = format!("{:?}", comp);
    assert!(debug_str.contains("name: Some(\"ldap\")"));
    assert!(debug_str.contains("config: Some(\"********\")"));
    assert!(!debug_str.contains("other")); // Config is completely redacted now
    assert!(!debug_str.contains("secret_val"));
}