Compare commits
5 Commits
e45a95505a
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
|
dedfe0be4c | ||
|
|
98215b8395 | ||
|
|
c54a34de2d | ||
|
|
a289516a22 | ||
|
|
dcae4756ac |
109
.gitignore
vendored
109
.gitignore
vendored
@@ -1,109 +0,0 @@
|
||||
# ============================================================================
|
||||
# Lions User Manager - Server API - .gitignore
|
||||
# ============================================================================
|
||||
|
||||
# Maven
|
||||
target/
|
||||
pom.xml.tag
|
||||
pom.xml.releaseBackup
|
||||
pom.xml.versionsBackup
|
||||
pom.xml.next
|
||||
release.properties
|
||||
dependency-reduced-pom.xml
|
||||
buildNumber.properties
|
||||
.mvn/timing.properties
|
||||
.mvn/wrapper/maven-wrapper.jar
|
||||
|
||||
# Build artifacts
|
||||
*.jar
|
||||
*.war
|
||||
*.ear
|
||||
*.class
|
||||
*.idx
|
||||
|
||||
# Eclipse
|
||||
.project
|
||||
.classpath
|
||||
.settings/
|
||||
.metadata/
|
||||
bin/
|
||||
|
||||
# IntelliJ IDEA
|
||||
.idea/
|
||||
*.iml
|
||||
*.iws
|
||||
*.ipr
|
||||
out/
|
||||
|
||||
# NetBeans
|
||||
nbproject/
|
||||
nbbuild/
|
||||
nbdist/
|
||||
.nb-gradle/
|
||||
|
||||
# VS Code
|
||||
.vscode/
|
||||
*.code-workspace
|
||||
|
||||
# Mac
|
||||
.DS_Store
|
||||
|
||||
# Windows
|
||||
Thumbs.db
|
||||
ehthumbs.db
|
||||
Desktop.ini
|
||||
|
||||
# Logs
|
||||
logs/
|
||||
*.log
|
||||
*.log.*
|
||||
hs_err_pid*.log
|
||||
|
||||
# Temporary files
|
||||
*.tmp
|
||||
*.bak
|
||||
*.swp
|
||||
*~
|
||||
*.orig
|
||||
|
||||
# Test files and reports
|
||||
test_output*.txt
|
||||
surefire-reports/
|
||||
failsafe-reports/
|
||||
*.dump
|
||||
*.dumpstream
|
||||
|
||||
# Test coverage
|
||||
.jacoco/
|
||||
jacoco.exec
|
||||
coverage/
|
||||
target/site/jacoco/
|
||||
|
||||
# Generated sources
|
||||
generated-sources/
|
||||
generated-test-sources/
|
||||
|
||||
# Maven status
|
||||
maven-status/
|
||||
|
||||
# Build metrics
|
||||
build-metrics.json
|
||||
|
||||
# IDE specific
|
||||
*.sublime-project
|
||||
*.sublime-workspace
|
||||
|
||||
# OS specific
|
||||
.DS_Store?
|
||||
._*
|
||||
.Spotlight-V100
|
||||
.Trashes
|
||||
|
||||
# Lombok configuration (généré automatiquement)
|
||||
lombok.config
|
||||
|
||||
# Environment files
|
||||
.env
|
||||
.env.local
|
||||
.env.*.local
|
||||
|
||||
124
README.md
Normal file
124
README.md
Normal file
@@ -0,0 +1,124 @@
|
||||
# lions-user-manager-server-api
|
||||
|
||||
> Contrats partagés entre le serveur et le client — DTOs, interfaces de services, enums, validations
|
||||
|
||||
## Rôle
|
||||
|
||||
Ce module constitue la couche de contrats (API layer) du projet Lions User Manager. Il est compilé en JAR et publié sur le **Gitea Package Registry** pour être consommé par `server-impl` et `client` comme dépendance Maven.
|
||||
|
||||
---
|
||||
|
||||
## Contenu
|
||||
|
||||
### DTOs
|
||||
|
||||
| DTO | Description |
|
||||
|-----|-------------|
|
||||
| `UserDTO` | Représentation complète d'un utilisateur Keycloak |
|
||||
| `UserCreationDTO` | Données de création d'un utilisateur |
|
||||
| `UserUpdateDTO` | Données de mise à jour |
|
||||
| `RoleDTO` | Rôle Keycloak |
|
||||
| `RealmDTO` | Realm Keycloak |
|
||||
| `RealmAssignmentDTO` | Assignation d'un utilisateur à un realm |
|
||||
| `AuditLogDTO` | Entrée de journal d'audit |
|
||||
| `SyncHistoryDTO` | Historique de synchronisation |
|
||||
| `SyncConsistencyDTO` | Rapport de cohérence sync |
|
||||
| `ImportResultDTO` | Résultat d'import CSV |
|
||||
|
||||
### Interfaces de services
|
||||
|
||||
| Interface | Responsabilité |
|
||||
|-----------|----------------|
|
||||
| `UserService` | CRUD utilisateurs, export/import CSV |
|
||||
| `RoleService` | Gestion des rôles par realm |
|
||||
| `AuditService` | Consultation et export des logs d'audit |
|
||||
| `SyncService` | Synchronisation Keycloak ↔ base de données |
|
||||
| `RealmAuthorizationService` | Gestion des realms autorisés |
|
||||
|
||||
### Interfaces de ressources (JAX-RS)
|
||||
|
||||
| Interface | Path |
|
||||
|-----------|------|
|
||||
| `UserResourceApi` | `/api/users` |
|
||||
| `RoleResourceApi` | `/api/roles` |
|
||||
| `AuditResourceApi` | `/api/audit` |
|
||||
| `SyncResourceApi` | `/api/sync` |
|
||||
| `RealmResourceApi` | `/api/realms` |
|
||||
| `RealmAssignmentResourceApi` | `/api/realm-assignments` |
|
||||
|
||||
### Enums
|
||||
|
||||
- `StatutUser` — ACTIF, INACTIF, SUSPENDU
|
||||
- `TypeRole` — ADMIN, USER, VIEWER
|
||||
- `TypeActionAudit` — CREATE, UPDATE, DELETE, LOGIN, LOGOUT, SYNC
|
||||
|
||||
### Validations
|
||||
|
||||
- `ValidationConstants` — Constantes partagées (longueurs, patterns regex)
|
||||
|
||||
---
|
||||
|
||||
## Dépôt Git
|
||||
|
||||
`https://git.lions.dev/lionsdev/lions-user-manager-server-api`
|
||||
|
||||
---
|
||||
|
||||
## Maven Registry
|
||||
|
||||
Le jar est disponible sur le **Gitea Package Registry** :
|
||||
|
||||
```
|
||||
groupId : dev.lions.user.manager
|
||||
artifactId : lions-user-manager-server-api
|
||||
version : 1.0.0
|
||||
registry : https://git.lions.dev/api/packages/lionsdev/maven
|
||||
```
|
||||
|
||||
### Consommer ce module (server-impl / client)
|
||||
|
||||
```xml
|
||||
<dependency>
|
||||
<groupId>dev.lions.user.manager</groupId>
|
||||
<artifactId>lions-user-manager-server-api</artifactId>
|
||||
<version>1.0.0</version>
|
||||
</dependency>
|
||||
```
|
||||
|
||||
```xml
|
||||
<repositories>
|
||||
<repository>
|
||||
<id>gitea-lionsdev</id>
|
||||
<url>https://git.lions.dev/api/packages/lionsdev/maven</url>
|
||||
</repository>
|
||||
</repositories>
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Publier une nouvelle version
|
||||
|
||||
1. Incrémenter la version dans `../pom.xml` (parent)
|
||||
2. Exécuter depuis la racine du monorepo :
|
||||
|
||||
```bash
|
||||
# Windows
|
||||
script\publish-api.bat
|
||||
|
||||
# Linux / macOS
|
||||
./script/publish-api.sh
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Build local
|
||||
|
||||
```bash
|
||||
mvn clean install -DskipTests
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Licence
|
||||
|
||||
Propriétaire — Lions Dev © 2025
|
||||
6
lombok.config
Normal file
6
lombok.config
Normal file
@@ -0,0 +1,6 @@
|
||||
# This file configures Lombok for the project
|
||||
# See https://projectlombok.org/features/configuration
|
||||
|
||||
# Add @Generated annotation to all generated code
|
||||
# This allows JaCoCo to automatically exclude Lombok-generated code from coverage
|
||||
lombok.addLombokGeneratedAnnotation = true
|
||||
264
parent-pom.xml
Normal file
264
parent-pom.xml
Normal file
@@ -0,0 +1,264 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<project xmlns="http://maven.apache.org/POM/4.0.0"
|
||||
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
||||
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
||||
<modelVersion>4.0.0</modelVersion>
|
||||
|
||||
<groupId>dev.lions.user.manager</groupId>
|
||||
<artifactId>lions-user-manager-parent</artifactId>
|
||||
<version>1.0.0</version>
|
||||
<packaging>pom</packaging>
|
||||
|
||||
<name>Lions User Manager - Parent</name>
|
||||
<description>Module de gestion centralisée des utilisateurs via Keycloak Admin API</description>
|
||||
|
||||
<distributionManagement>
|
||||
<repository>
|
||||
<id>gitea-lionsdev</id>
|
||||
<url>https://git.lions.dev/api/packages/lionsdev/maven</url>
|
||||
</repository>
|
||||
<snapshotRepository>
|
||||
<id>gitea-lionsdev</id>
|
||||
<url>https://git.lions.dev/api/packages/lionsdev/maven</url>
|
||||
</snapshotRepository>
|
||||
</distributionManagement>
|
||||
|
||||
<repositories>
|
||||
<repository>
|
||||
<id>gitea-lionsdev</id>
|
||||
<url>https://git.lions.dev/api/packages/lionsdev/maven</url>
|
||||
<releases><enabled>true</enabled></releases>
|
||||
<snapshots><enabled>true</enabled></snapshots>
|
||||
</repository>
|
||||
</repositories>
|
||||
|
||||
<properties>
|
||||
<maven.compiler.source>17</maven.compiler.source>
|
||||
<maven.compiler.target>17</maven.compiler.target>
|
||||
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
|
||||
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
|
||||
|
||||
<!-- Quarkus & Dependencies -->
|
||||
<quarkus.version>3.17.8</quarkus.version>
|
||||
<quarkus-primefaces.version>3.15.1</quarkus-primefaces.version>
|
||||
<primefaces.version>14.0.5</primefaces.version>
|
||||
<primefaces-freya-extension.version>1.0.0</primefaces-freya-extension.version>
|
||||
<keycloak.version>26.0.7</keycloak.version>
|
||||
<lombok.version>1.18.30</lombok.version>
|
||||
<mapstruct.version>1.5.5.Final</mapstruct.version>
|
||||
|
||||
<!-- Testing -->
|
||||
<junit.version>5.10.1</junit.version>
|
||||
<mockito.version>5.11.0</mockito.version>
|
||||
<testcontainers.version>1.19.3</testcontainers.version>
|
||||
<rest-assured.version>5.4.0</rest-assured.version>
|
||||
|
||||
<!-- Plugins -->
|
||||
<maven-compiler-plugin.version>3.11.0</maven-compiler-plugin.version>
|
||||
<maven-surefire-plugin.version>3.2.2</maven-surefire-plugin.version>
|
||||
<maven-failsafe-plugin.version>3.2.2</maven-failsafe-plugin.version>
|
||||
<jacoco-maven-plugin.version>0.8.11</jacoco-maven-plugin.version>
|
||||
</properties>
|
||||
|
||||
<modules>
|
||||
<module>lions-user-manager-server-api</module>
|
||||
<module>lions-user-manager-server-impl-quarkus</module>
|
||||
<module>lions-user-manager-client-quarkus-primefaces-freya</module>
|
||||
</modules>
|
||||
|
||||
<dependencyManagement>
|
||||
<dependencies>
|
||||
<!-- Quarkus BOM -->
|
||||
<dependency>
|
||||
<groupId>io.quarkus.platform</groupId>
|
||||
<artifactId>quarkus-bom</artifactId>
|
||||
<version>${quarkus.version}</version>
|
||||
<type>pom</type>
|
||||
<scope>import</scope>
|
||||
</dependency>
|
||||
|
||||
<!-- Internal modules -->
|
||||
<dependency>
|
||||
<groupId>dev.lions.user.manager</groupId>
|
||||
<artifactId>lions-user-manager-server-api</artifactId>
|
||||
<version>${project.version}</version>
|
||||
</dependency>
|
||||
|
||||
<!-- PrimeFaces Freya Extension -->
|
||||
<dependency>
|
||||
<groupId>dev.lions</groupId>
|
||||
<artifactId>primefaces-freya-extension</artifactId>
|
||||
<version>${primefaces-freya-extension.version}</version>
|
||||
</dependency>
|
||||
|
||||
<!-- Lombok -->
|
||||
<dependency>
|
||||
<groupId>org.projectlombok</groupId>
|
||||
<artifactId>lombok</artifactId>
|
||||
<version>${lombok.version}</version>
|
||||
<scope>provided</scope>
|
||||
</dependency>
|
||||
|
||||
<!-- MapStruct -->
|
||||
<dependency>
|
||||
<groupId>org.mapstruct</groupId>
|
||||
<artifactId>mapstruct</artifactId>
|
||||
<version>${mapstruct.version}</version>
|
||||
</dependency>
|
||||
|
||||
<!-- Testing -->
|
||||
<dependency>
|
||||
<groupId>org.junit.jupiter</groupId>
|
||||
<artifactId>junit-jupiter</artifactId>
|
||||
<version>${junit.version}</version>
|
||||
<scope>test</scope>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>org.testcontainers</groupId>
|
||||
<artifactId>testcontainers-bom</artifactId>
|
||||
<version>${testcontainers.version}</version>
|
||||
<type>pom</type>
|
||||
<scope>import</scope>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>io.rest-assured</groupId>
|
||||
<artifactId>rest-assured</artifactId>
|
||||
<version>${rest-assured.version}</version>
|
||||
<scope>test</scope>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>org.mockito</groupId>
|
||||
<artifactId>mockito-core</artifactId>
|
||||
<version>${mockito.version}</version>
|
||||
<scope>test</scope>
|
||||
</dependency>
|
||||
|
||||
<dependency>
|
||||
<groupId>org.mockito</groupId>
|
||||
<artifactId>mockito-junit-jupiter</artifactId>
|
||||
<version>${mockito.version}</version>
|
||||
</dependency>
|
||||
|
||||
|
||||
</dependencies>
|
||||
</dependencyManagement>
|
||||
|
||||
<profiles>
|
||||
<profile>
|
||||
<id>dev</id>
|
||||
<activation>
|
||||
<activeByDefault>true</activeByDefault>
|
||||
</activation>
|
||||
<properties>
|
||||
<quarkus.profile>dev</quarkus.profile>
|
||||
</properties>
|
||||
</profile>
|
||||
<profile>
|
||||
<id>prod</id>
|
||||
<properties>
|
||||
<quarkus.profile>prod</quarkus.profile>
|
||||
</properties>
|
||||
</profile>
|
||||
<profile>
|
||||
<id>native</id>
|
||||
<properties>
|
||||
<quarkus.profile>prod</quarkus.profile>
|
||||
<quarkus.package.jar.type>native</quarkus.package.jar.type>
|
||||
</properties>
|
||||
<dependencies>
|
||||
<dependency>
|
||||
<groupId>io.quarkus</groupId>
|
||||
<artifactId>quarkus-junit5</artifactId>
|
||||
<scope>test</scope>
|
||||
</dependency>
|
||||
</dependencies>
|
||||
</profile>
|
||||
</profiles>
|
||||
|
||||
<build>
|
||||
<pluginManagement>
|
||||
<plugins>
|
||||
<plugin>
|
||||
<groupId>org.apache.maven.plugins</groupId>
|
||||
<artifactId>maven-compiler-plugin</artifactId>
|
||||
<version>${maven-compiler-plugin.version}</version>
|
||||
<configuration>
|
||||
<annotationProcessorPaths>
|
||||
<path>
|
||||
<groupId>org.projectlombok</groupId>
|
||||
<artifactId>lombok</artifactId>
|
||||
<version>${lombok.version}</version>
|
||||
</path>
|
||||
<path>
|
||||
<groupId>org.mapstruct</groupId>
|
||||
<artifactId>mapstruct-processor</artifactId>
|
||||
<version>${mapstruct.version}</version>
|
||||
</path>
|
||||
</annotationProcessorPaths>
|
||||
</configuration>
|
||||
</plugin>
|
||||
|
||||
<plugin>
|
||||
<groupId>io.quarkus.platform</groupId>
|
||||
<artifactId>quarkus-maven-plugin</artifactId>
|
||||
<version>${quarkus.version}</version>
|
||||
</plugin>
|
||||
|
||||
<plugin>
|
||||
<groupId>org.apache.maven.plugins</groupId>
|
||||
<artifactId>maven-surefire-plugin</artifactId>
|
||||
<version>${maven-surefire-plugin.version}</version>
|
||||
</plugin>
|
||||
|
||||
<plugin>
|
||||
<groupId>org.apache.maven.plugins</groupId>
|
||||
<artifactId>maven-failsafe-plugin</artifactId>
|
||||
<version>${maven-failsafe-plugin.version}</version>
|
||||
</plugin>
|
||||
|
||||
<plugin>
|
||||
<groupId>org.jacoco</groupId>
|
||||
<artifactId>jacoco-maven-plugin</artifactId>
|
||||
<version>${jacoco-maven-plugin.version}</version>
|
||||
<executions>
|
||||
<execution>
|
||||
<goals>
|
||||
<goal>prepare-agent</goal>
|
||||
</goals>
|
||||
</execution>
|
||||
<execution>
|
||||
<id>report</id>
|
||||
<phase>test</phase>
|
||||
<goals>
|
||||
<goal>report</goal>
|
||||
</goals>
|
||||
</execution>
|
||||
<execution>
|
||||
<id>jacoco-check</id>
|
||||
<goals>
|
||||
<goal>check</goal>
|
||||
</goals>
|
||||
<configuration>
|
||||
<rules>
|
||||
<rule>
|
||||
<element>PACKAGE</element>
|
||||
<limits>
|
||||
<limit>
|
||||
<counter>LINE</counter>
|
||||
<value>COVEREDRATIO</value>
|
||||
<minimum>0.80</minimum>
|
||||
</limit>
|
||||
</limits>
|
||||
</rule>
|
||||
</rules>
|
||||
</configuration>
|
||||
</execution>
|
||||
</executions>
|
||||
</plugin>
|
||||
</plugins>
|
||||
</pluginManagement>
|
||||
</build>
|
||||
</project>
|
||||
30
script/publish-api.bat
Normal file
30
script/publish-api.bat
Normal file
@@ -0,0 +1,30 @@
|
||||
@echo off
|
||||
REM Publie le parent pom + server-api sur le Gitea Package Registry
|
||||
REM Usage : script\publish-api.bat
|
||||
REM Depuis : n'importe où dans le repo server-api
|
||||
REM Prérequis: credentials dans %USERPROFILE%\.m2\settings.xml (server id: gitea-lionsdev)
|
||||
|
||||
set REGISTRY_URL=https://git.lions.dev/api/packages/lionsdev/maven
|
||||
set REGISTRY_ID=gitea-lionsdev
|
||||
|
||||
cd /d "%~dp0.."
|
||||
|
||||
echo.
|
||||
echo [1/2] Publication du parent pom...
|
||||
call mvn deploy:deploy-file ^
|
||||
-DgroupId=dev.lions.user.manager ^
|
||||
-DartifactId=lions-user-manager-parent ^
|
||||
-Dversion=1.0.0 ^
|
||||
-Dpackaging=pom ^
|
||||
-Dfile=parent-pom.xml ^
|
||||
-DrepositoryId=%REGISTRY_ID% ^
|
||||
-Durl=%REGISTRY_URL%
|
||||
if %errorlevel% neq 0 echo [WARN] Parent pom deja publie pour cette version (409), on continue.
|
||||
|
||||
echo.
|
||||
echo [2/2] Publication du server-api...
|
||||
call mvn deploy -DskipTests
|
||||
if %errorlevel% neq 0 echo [WARN] Server-api deja publie pour cette version (409) - incrementer la version pour republier.
|
||||
|
||||
echo.
|
||||
echo Done -- https://git.lions.dev/lionsdev/-/packages
|
||||
32
script/publish-api.sh
Normal file
32
script/publish-api.sh
Normal file
@@ -0,0 +1,32 @@
|
||||
#!/bin/bash
|
||||
# Publie le parent pom + server-api sur le Gitea Package Registry
|
||||
# Usage : ./script/publish-api.sh
|
||||
# Depuis : n'importe où dans le repo server-api
|
||||
# Prérequis: credentials dans ~/.m2/settings.xml (server id: gitea-lionsdev)
|
||||
|
||||
set -e
|
||||
|
||||
REGISTRY_URL="https://git.lions.dev/api/packages/lionsdev/maven"
|
||||
REGISTRY_ID="gitea-lionsdev"
|
||||
|
||||
cd "$(dirname "$0")/.."
|
||||
|
||||
echo ""
|
||||
echo "[1/2] Publication du parent pom..."
|
||||
mvn deploy:deploy-file \
|
||||
-DgroupId=dev.lions.user.manager \
|
||||
-DartifactId=lions-user-manager-parent \
|
||||
-Dversion=1.0.0 \
|
||||
-Dpackaging=pom \
|
||||
-Dfile=parent-pom.xml \
|
||||
-DrepositoryId="${REGISTRY_ID}" \
|
||||
-Durl="${REGISTRY_URL}" \
|
||||
|| echo "[WARN] Parent pom deja publie pour cette version (409), on continue."
|
||||
|
||||
echo ""
|
||||
echo "[2/2] Publication du server-api..."
|
||||
mvn deploy -DskipTests \
|
||||
|| echo "[WARN] Server-api deja publie pour cette version (409) - incrementer la version pour republier."
|
||||
|
||||
echo ""
|
||||
echo "Done -- https://git.lions.dev/lionsdev/-/packages"
|
||||
111
src/main/java/dev/lions/user/manager/api/AuditResourceApi.java
Normal file
111
src/main/java/dev/lions/user/manager/api/AuditResourceApi.java
Normal file
@@ -0,0 +1,111 @@
|
||||
package dev.lions.user.manager.api;
|
||||
|
||||
import dev.lions.user.manager.dto.audit.AuditLogDTO;
|
||||
import dev.lions.user.manager.dto.common.CountDTO;
|
||||
import dev.lions.user.manager.enums.audit.TypeActionAudit;
|
||||
import jakarta.ws.rs.*;
|
||||
import jakarta.ws.rs.core.MediaType;
|
||||
import jakarta.ws.rs.core.Response;
|
||||
import org.eclipse.microprofile.openapi.annotations.Operation;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Content;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
import org.eclipse.microprofile.openapi.annotations.parameters.Parameter;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponse;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponses;
|
||||
import org.eclipse.microprofile.openapi.annotations.tags.Tag;
|
||||
|
||||
import java.util.List;
|
||||
import java.util.Map;
|
||||
|
||||
/**
|
||||
* Interface JAX-RS pour l'API d'audit.
|
||||
*/
|
||||
@Path("/api/audit")
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Consumes(MediaType.APPLICATION_JSON)
|
||||
@Tag(name = "Audit", description = "Consultation des logs d'audit et statistiques")
|
||||
public interface AuditResourceApi {
|
||||
|
||||
@POST
|
||||
@Path("/search")
|
||||
@Operation(summary = "Rechercher des logs d'audit", description = "Recherche avancée de logs selon critères")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "200", description = "Résultats de recherche", content = @Content(schema = @Schema(implementation = AuditLogDTO.class, type = org.eclipse.microprofile.openapi.annotations.enums.SchemaType.ARRAY))),
|
||||
@APIResponse(responseCode = "500", description = "Erreur serveur")
|
||||
})
|
||||
List<AuditLogDTO> searchLogs(
|
||||
@QueryParam("acteur") String acteurUsername,
|
||||
@QueryParam("dateDebut") String dateDebut,
|
||||
@QueryParam("dateFin") String dateFin,
|
||||
@QueryParam("typeAction") TypeActionAudit typeAction,
|
||||
@QueryParam("ressourceType") String ressourceType,
|
||||
@QueryParam("succes") Boolean succes,
|
||||
@QueryParam("page") @DefaultValue("0") int page,
|
||||
@QueryParam("pageSize") @DefaultValue("50") int pageSize);
|
||||
|
||||
@GET
|
||||
@Path("/actor/{acteurUsername}")
|
||||
@Operation(summary = "Récupérer les logs d'un acteur", description = "Liste les derniers logs d'un utilisateur")
|
||||
List<AuditLogDTO> getLogsByActor(
|
||||
@Parameter(description = "Username de l'acteur") @PathParam("acteurUsername") String acteurUsername,
|
||||
@Parameter(description = "Nombre de logs à retourner") @QueryParam("limit") @DefaultValue("100") int limit);
|
||||
|
||||
@GET
|
||||
@Path("/resource/{ressourceType}/{ressourceId}")
|
||||
@Operation(summary = "Récupérer les logs d'une ressource", description = "Liste les derniers logs d'une ressource spécifique")
|
||||
List<AuditLogDTO> getLogsByResource(
|
||||
@PathParam("ressourceType") String ressourceType,
|
||||
@PathParam("ressourceId") String ressourceId,
|
||||
@QueryParam("limit") @DefaultValue("100") int limit);
|
||||
|
||||
@GET
|
||||
@Path("/action/{typeAction}")
|
||||
@Operation(summary = "Récupérer les logs par type d'action", description = "Liste les logs d'un type d'action spécifique")
|
||||
List<AuditLogDTO> getLogsByAction(
|
||||
@PathParam("typeAction") TypeActionAudit typeAction,
|
||||
@QueryParam("dateDebut") String dateDebut,
|
||||
@QueryParam("dateFin") String dateFin,
|
||||
@QueryParam("limit") @DefaultValue("100") int limit);
|
||||
|
||||
@GET
|
||||
@Path("/stats/actions")
|
||||
@Operation(summary = "Statistiques par type d'action", description = "Retourne le nombre de logs par type d'action")
|
||||
Map<TypeActionAudit, Long> getActionStatistics(
|
||||
@QueryParam("dateDebut") String dateDebut,
|
||||
@QueryParam("dateFin") String dateFin);
|
||||
|
||||
@GET
|
||||
@Path("/stats/users")
|
||||
@Operation(summary = "Statistiques par utilisateur", description = "Retourne le nombre d'actions par utilisateur")
|
||||
Map<String, Long> getUserActivityStatistics(
|
||||
@QueryParam("dateDebut") String dateDebut,
|
||||
@QueryParam("dateFin") String dateFin);
|
||||
|
||||
@GET
|
||||
@Path("/stats/failures")
|
||||
@Operation(summary = "Comptage des échecs", description = "Retourne le nombre d'échecs sur une période")
|
||||
CountDTO getFailureCount(
|
||||
@QueryParam("dateDebut") String dateDebut,
|
||||
@QueryParam("dateFin") String dateFin);
|
||||
|
||||
@GET
|
||||
@Path("/stats/success")
|
||||
@Operation(summary = "Comptage des succès", description = "Retourne le nombre de succès sur une période")
|
||||
CountDTO getSuccessCount(
|
||||
@QueryParam("dateDebut") String dateDebut,
|
||||
@QueryParam("dateFin") String dateFin);
|
||||
|
||||
@GET
|
||||
@Path("/export/csv")
|
||||
@Produces(MediaType.TEXT_PLAIN)
|
||||
@Operation(summary = "Exporter les logs en CSV", description = "Génère un fichier CSV des logs d'audit")
|
||||
Response exportLogsToCSV(
|
||||
@QueryParam("dateDebut") String dateDebut,
|
||||
@QueryParam("dateFin") String dateFin);
|
||||
|
||||
@DELETE
|
||||
@Path("/purge")
|
||||
@Operation(summary = "Purger les anciens logs", description = "Supprime les logs de plus de X jours")
|
||||
void purgeOldLogs(
|
||||
@QueryParam("joursAnciennete") @DefaultValue("90") int joursAnciennete);
|
||||
}
|
||||
@@ -0,0 +1,103 @@
|
||||
package dev.lions.user.manager.api;
|
||||
|
||||
import dev.lions.user.manager.dto.realm.AuthorizedRealmsDTO;
|
||||
import dev.lions.user.manager.dto.realm.RealmAccessCheckDTO;
|
||||
import dev.lions.user.manager.dto.realm.RealmAssignmentDTO;
|
||||
import jakarta.validation.Valid;
|
||||
import jakarta.validation.constraints.NotNull;
|
||||
import jakarta.ws.rs.*;
|
||||
import jakarta.ws.rs.core.MediaType;
|
||||
import jakarta.ws.rs.core.Response;
|
||||
import org.eclipse.microprofile.openapi.annotations.Operation;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Content;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
import org.eclipse.microprofile.openapi.annotations.parameters.Parameter;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponse;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponses;
|
||||
import org.eclipse.microprofile.openapi.annotations.tags.Tag;
|
||||
|
||||
import java.util.List;
|
||||
|
||||
/**
|
||||
* Interface JAX-RS pour l'API de gestion des affectations de realms.
|
||||
*/
|
||||
@Path("/api/realm-assignments")
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Consumes(MediaType.APPLICATION_JSON)
|
||||
@Tag(name = "Realm Assignments", description = "Gestion des affectations de realms (contrôle d'accès multi-tenant)")
|
||||
public interface RealmAssignmentResourceApi {
|
||||
|
||||
@GET
|
||||
@Operation(summary = "Lister toutes les affectations", description = "Liste toutes les affectations de realms")
|
||||
List<RealmAssignmentDTO> getAllAssignments();
|
||||
|
||||
@GET
|
||||
@Path("/user/{userId}")
|
||||
@Operation(summary = "Affectations par utilisateur", description = "Liste les realms assignés à un utilisateur")
|
||||
List<RealmAssignmentDTO> getAssignmentsByUser(
|
||||
@Parameter(description = "ID de l'utilisateur") @PathParam("userId") String userId);
|
||||
|
||||
@GET
|
||||
@Path("/realm/{realmName}")
|
||||
@Operation(summary = "Affectations par realm", description = "Liste les utilisateurs ayant accès à un realm")
|
||||
List<RealmAssignmentDTO> getAssignmentsByRealm(
|
||||
@Parameter(description = "Nom du realm") @PathParam("realmName") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/{assignmentId}")
|
||||
@Operation(summary = "Récupérer une affectation", description = "Récupère une affectation par son ID")
|
||||
RealmAssignmentDTO getAssignmentById(
|
||||
@Parameter(description = "ID de l'affectation") @PathParam("assignmentId") String assignmentId);
|
||||
|
||||
@GET
|
||||
@Path("/check")
|
||||
@Operation(summary = "Vérifier l'accès", description = "Vérifie si un utilisateur peut gérer un realm")
|
||||
RealmAccessCheckDTO canManageRealm(
|
||||
@Parameter(description = "ID de l'utilisateur") @QueryParam("userId") String userId,
|
||||
@Parameter(description = "Nom du realm") @QueryParam("realmName") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/authorized-realms/{userId}")
|
||||
@Operation(summary = "Realms autorisés", description = "Liste les realms qu'un utilisateur peut gérer")
|
||||
AuthorizedRealmsDTO getAuthorizedRealms(
|
||||
@Parameter(description = "ID de l'utilisateur") @PathParam("userId") String userId);
|
||||
|
||||
@POST
|
||||
@Operation(summary = "Assigner un realm", description = "Assigne un realm à un utilisateur")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "201", description = "Affectation créée", content = @Content(schema = @Schema(implementation = RealmAssignmentDTO.class)))
|
||||
})
|
||||
Response assignRealmToUser(@Valid @NotNull RealmAssignmentDTO assignment);
|
||||
|
||||
@DELETE
|
||||
@Path("/user/{userId}/realm/{realmName}")
|
||||
@Operation(summary = "Révoquer un realm", description = "Retire l'accès d'un utilisateur à un realm")
|
||||
void revokeRealmFromUser(
|
||||
@Parameter(description = "ID de l'utilisateur") @PathParam("userId") String userId,
|
||||
@Parameter(description = "Nom du realm") @PathParam("realmName") String realmName);
|
||||
|
||||
@DELETE
|
||||
@Path("/user/{userId}")
|
||||
@Operation(summary = "Révoquer tous les realms", description = "Retire tous les accès d'un utilisateur")
|
||||
void revokeAllRealmsFromUser(
|
||||
@Parameter(description = "ID de l'utilisateur") @PathParam("userId") String userId);
|
||||
|
||||
@PUT
|
||||
@Path("/{assignmentId}/deactivate")
|
||||
@Operation(summary = "Désactiver une affectation", description = "Désactive une affectation sans la supprimer")
|
||||
void deactivateAssignment(
|
||||
@Parameter(description = "ID de l'affectation") @PathParam("assignmentId") String assignmentId);
|
||||
|
||||
@PUT
|
||||
@Path("/{assignmentId}/activate")
|
||||
@Operation(summary = "Activer une affectation", description = "Réactive une affectation")
|
||||
void activateAssignment(
|
||||
@Parameter(description = "ID de l'affectation") @PathParam("assignmentId") String assignmentId);
|
||||
|
||||
@PUT
|
||||
@Path("/super-admin/{userId}")
|
||||
@Operation(summary = "Définir super admin", description = "Définit ou retire le statut de super admin")
|
||||
void setSuperAdmin(
|
||||
@Parameter(description = "ID de l'utilisateur") @PathParam("userId") String userId,
|
||||
@Parameter(description = "Super admin (true/false)") @QueryParam("superAdmin") @NotNull Boolean superAdmin);
|
||||
}
|
||||
@@ -0,0 +1,44 @@
|
||||
package dev.lions.user.manager.api;
|
||||
|
||||
import jakarta.ws.rs.GET;
|
||||
import jakarta.ws.rs.Path;
|
||||
import jakarta.ws.rs.PathParam;
|
||||
import jakarta.ws.rs.Produces;
|
||||
import jakarta.ws.rs.core.MediaType;
|
||||
import org.eclipse.microprofile.openapi.annotations.parameters.Parameter;
|
||||
import org.eclipse.microprofile.openapi.annotations.Operation;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Content;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponse;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponses;
|
||||
import org.eclipse.microprofile.openapi.annotations.tags.Tag;
|
||||
|
||||
import java.util.List;
|
||||
|
||||
/**
|
||||
* Interface JAX-RS pour la gestion des realms Keycloak.
|
||||
*/
|
||||
@Path("/api/realms")
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Tag(name = "Realms", description = "Gestion des realms Keycloak")
|
||||
public interface RealmResourceApi {
|
||||
|
||||
@GET
|
||||
@Path("/list")
|
||||
@Operation(summary = "Lister tous les realms", description = "Récupère la liste de tous les realms disponibles dans Keycloak")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "200", description = "Liste des realms", content = @Content(schema = @Schema(type = org.eclipse.microprofile.openapi.annotations.enums.SchemaType.ARRAY, implementation = String.class))),
|
||||
@APIResponse(responseCode = "500", description = "Erreur serveur")
|
||||
})
|
||||
List<String> getAllRealms();
|
||||
|
||||
@GET
|
||||
@Path("/{realm}/clients")
|
||||
@Operation(summary = "Lister les clients d'un realm", description = "Récupère la liste des clientId de tous les clients d'un realm")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "200", description = "Liste des clients"),
|
||||
@APIResponse(responseCode = "500", description = "Erreur serveur")
|
||||
})
|
||||
List<String> getRealmClients(
|
||||
@Parameter(description = "Nom du realm") @PathParam("realm") String realmName);
|
||||
}
|
||||
163
src/main/java/dev/lions/user/manager/api/RoleResourceApi.java
Normal file
163
src/main/java/dev/lions/user/manager/api/RoleResourceApi.java
Normal file
@@ -0,0 +1,163 @@
|
||||
package dev.lions.user.manager.api;
|
||||
|
||||
import dev.lions.user.manager.dto.role.RoleAssignmentRequestDTO;
|
||||
import dev.lions.user.manager.dto.role.RoleDTO;
|
||||
import jakarta.validation.Valid;
|
||||
import jakarta.validation.constraints.NotNull;
|
||||
import jakarta.ws.rs.*;
|
||||
import jakarta.ws.rs.core.MediaType;
|
||||
import jakarta.ws.rs.core.Response;
|
||||
import org.eclipse.microprofile.openapi.annotations.Operation;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Content;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
import org.eclipse.microprofile.openapi.annotations.parameters.Parameter;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponse;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponses;
|
||||
import org.eclipse.microprofile.openapi.annotations.tags.Tag;
|
||||
|
||||
import java.util.List;
|
||||
|
||||
/**
|
||||
* Interface JAX-RS pour la gestion des rôles Keycloak.
|
||||
*/
|
||||
@Path("/api/roles")
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Consumes(MediaType.APPLICATION_JSON)
|
||||
@Tag(name = "Roles", description = "Gestion des rôles Keycloak (realm et client)")
|
||||
public interface RoleResourceApi {
|
||||
|
||||
// ==================== Endpoints Realm Roles ====================
|
||||
|
||||
@POST
|
||||
@Path("/realm")
|
||||
@Operation(summary = "Créer un rôle realm", description = "Crée un nouveau rôle au niveau du realm")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "201", description = "Rôle créé", content = @Content(schema = @Schema(implementation = RoleDTO.class)))
|
||||
})
|
||||
Response createRealmRole(
|
||||
@Valid @NotNull RoleDTO roleDTO,
|
||||
@Parameter(description = "Nom du realm") @QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/realm/{roleName}")
|
||||
@Operation(summary = "Récupérer un rôle realm par nom", description = "Récupère les détails d'un rôle realm")
|
||||
RoleDTO getRealmRole(
|
||||
@Parameter(description = "Nom du rôle") @PathParam("roleName") String roleName,
|
||||
@Parameter(description = "Nom du realm") @QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/realm")
|
||||
@Operation(summary = "Lister tous les rôles realm", description = "Liste tous les rôles du realm")
|
||||
List<RoleDTO> getAllRealmRoles(
|
||||
@Parameter(description = "Nom du realm") @QueryParam("realm") String realmName);
|
||||
|
||||
@PUT
|
||||
@Path("/realm/{roleName}")
|
||||
@Operation(summary = "Mettre à jour un rôle realm", description = "Met à jour les informations d'un rôle realm")
|
||||
RoleDTO updateRealmRole(
|
||||
@PathParam("roleName") String roleName,
|
||||
@Valid @NotNull RoleDTO roleDTO,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@DELETE
|
||||
@Path("/realm/{roleName}")
|
||||
@Operation(summary = "Supprimer un rôle realm", description = "Supprime un rôle realm")
|
||||
void deleteRealmRole(
|
||||
@PathParam("roleName") String roleName,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
// ==================== Endpoints Client Roles ====================
|
||||
|
||||
@POST
|
||||
@Path("/client/{clientId}")
|
||||
@Operation(summary = "Créer un rôle client", description = "Crée un nouveau rôle pour un client spécifique")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "201", description = "Rôle créé", content = @Content(schema = @Schema(implementation = RoleDTO.class)))
|
||||
})
|
||||
Response createClientRole(
|
||||
@PathParam("clientId") String clientId,
|
||||
@Valid @NotNull RoleDTO roleDTO,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/client/{clientId}/{roleName}")
|
||||
@Operation(summary = "Récupérer un rôle client par nom", description = "Récupère les détails d'un rôle client")
|
||||
RoleDTO getClientRole(
|
||||
@PathParam("clientId") String clientId,
|
||||
@PathParam("roleName") String roleName,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/client/{clientId}")
|
||||
@Operation(summary = "Lister tous les rôles d'un client", description = "Liste tous les rôles d'un client spécifique")
|
||||
List<RoleDTO> getAllClientRoles(
|
||||
@PathParam("clientId") String clientId,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@DELETE
|
||||
@Path("/client/{clientId}/{roleName}")
|
||||
@Operation(summary = "Supprimer un rôle client", description = "Supprime un rôle d'un client")
|
||||
void deleteClientRole(
|
||||
@PathParam("clientId") String clientId,
|
||||
@PathParam("roleName") String roleName,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
// ==================== Endpoints Attribution de rôles ====================
|
||||
|
||||
@POST
|
||||
@Path("/assign/realm/{userId}")
|
||||
@Operation(summary = "Attribuer des rôles realm à un utilisateur", description = "Assigne un ou plusieurs rôles realm à un utilisateur")
|
||||
void assignRealmRoles(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName,
|
||||
@NotNull RoleAssignmentRequestDTO request);
|
||||
|
||||
@POST
|
||||
@Path("/revoke/realm/{userId}")
|
||||
@Operation(summary = "Révoquer des rôles realm d'un utilisateur", description = "Révoque un ou plusieurs rôles realm d'un utilisateur")
|
||||
void revokeRealmRoles(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName,
|
||||
@NotNull RoleAssignmentRequestDTO request);
|
||||
|
||||
@POST
|
||||
@Path("/assign/client/{clientId}/{userId}")
|
||||
@Operation(summary = "Attribuer des rôles client à un utilisateur", description = "Assigne un ou plusieurs rôles client à un utilisateur")
|
||||
void assignClientRoles(
|
||||
@PathParam("clientId") String clientId,
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName,
|
||||
@NotNull RoleAssignmentRequestDTO request);
|
||||
|
||||
@GET
|
||||
@Path("/user/realm/{userId}")
|
||||
@Operation(summary = "Récupérer les rôles realm d'un utilisateur", description = "Liste tous les rôles realm d'un utilisateur")
|
||||
List<RoleDTO> getUserRealmRoles(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/user/client/{clientId}/{userId}")
|
||||
@Operation(summary = "Récupérer les rôles client d'un utilisateur", description = "Liste tous les rôles client d'un utilisateur")
|
||||
List<RoleDTO> getUserClientRoles(
|
||||
@PathParam("clientId") String clientId,
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
// ==================== Endpoints Rôles composites ====================
|
||||
|
||||
@POST
|
||||
@Path("/composite/{roleName}/add")
|
||||
@Operation(summary = "Ajouter des rôles composites", description = "Ajoute des rôles composites à un rôle")
|
||||
void addComposites(
|
||||
@PathParam("roleName") String roleName,
|
||||
@QueryParam("realm") String realmName,
|
||||
@NotNull RoleAssignmentRequestDTO request);
|
||||
|
||||
@GET
|
||||
@Path("/composite/{roleName}")
|
||||
@Operation(summary = "Récupérer les rôles composites", description = "Liste tous les rôles composites d'un rôle")
|
||||
List<RoleDTO> getComposites(
|
||||
@PathParam("roleName") String roleName,
|
||||
@QueryParam("realm") String realmName);
|
||||
}
|
||||
@@ -0,0 +1,54 @@
|
||||
package dev.lions.user.manager.api;
|
||||
|
||||
import dev.lions.user.manager.dto.sync.HealthStatusDTO;
|
||||
import dev.lions.user.manager.dto.sync.SyncConsistencyDTO;
|
||||
import dev.lions.user.manager.dto.sync.SyncHistoryDTO;
|
||||
import dev.lions.user.manager.dto.sync.SyncResultDTO;
|
||||
import jakarta.ws.rs.*;
|
||||
import jakarta.ws.rs.core.MediaType;
|
||||
import org.eclipse.microprofile.openapi.annotations.Operation;
|
||||
import org.eclipse.microprofile.openapi.annotations.tags.Tag;
|
||||
|
||||
/**
|
||||
* Interface JAX-RS définissant le contrat de l'API de synchronisation.
|
||||
* Cette interface doit être implémentée par le serveur et utilisée par le
|
||||
* client (via MicroProfile Rest Client).
|
||||
*/
|
||||
@Path("/api/sync")
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Consumes(MediaType.APPLICATION_JSON)
|
||||
@Tag(name = "Sync", description = "Synchronisation avec Keycloak et health checks")
|
||||
public interface SyncResourceApi {
|
||||
|
||||
@GET
|
||||
@Path("/health/keycloak")
|
||||
@Operation(summary = "Vérifier la santé de Keycloak", description = "Retourne le statut de santé de Keycloak")
|
||||
HealthStatusDTO checkKeycloakHealth();
|
||||
|
||||
@POST
|
||||
@Path("/users")
|
||||
@Operation(summary = "Synchroniser les utilisateurs", description = "Synchronise tous les utilisateurs depuis Keycloak")
|
||||
SyncResultDTO syncUsers(@QueryParam("realm") String realmName);
|
||||
|
||||
@POST
|
||||
@Path("/roles")
|
||||
@Operation(summary = "Synchroniser les rôles", description = "Synchronise les rôles (realm et/ou client)")
|
||||
SyncResultDTO syncRoles(
|
||||
@QueryParam("realm") String realmName,
|
||||
@QueryParam("clientName") String clientName);
|
||||
|
||||
@GET
|
||||
@Path("/consistency")
|
||||
@Operation(summary = "Vérifier la cohérence des données", description = "Compare le cache local et Keycloak pour un realm")
|
||||
SyncConsistencyDTO checkDataConsistency(@QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/status")
|
||||
@Operation(summary = "Statut de la dernière synchro", description = "Retourne le statut de la dernière synchronisation du realm")
|
||||
SyncHistoryDTO getLastSyncStatus(@QueryParam("realm") String realmName);
|
||||
|
||||
@POST
|
||||
@Path("/force")
|
||||
@Operation(summary = "Forcer une synchro", description = "Lance une synchronisation complète du realm (users + roles)")
|
||||
SyncHistoryDTO forceSyncRealm(@QueryParam("realm") String realmName);
|
||||
}
|
||||
@@ -0,0 +1,32 @@
|
||||
package dev.lions.user.manager.api;
|
||||
|
||||
import dev.lions.user.manager.dto.common.UserSessionStatsDTO;
|
||||
import jakarta.ws.rs.GET;
|
||||
import jakarta.ws.rs.Path;
|
||||
import jakarta.ws.rs.Produces;
|
||||
import jakarta.ws.rs.QueryParam;
|
||||
import jakarta.ws.rs.core.MediaType;
|
||||
import org.eclipse.microprofile.openapi.annotations.Operation;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponse;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponses;
|
||||
import org.eclipse.microprofile.openapi.annotations.tags.Tag;
|
||||
|
||||
/**
|
||||
* API de métriques liées aux utilisateurs (sessions, utilisateurs en ligne, etc.).
|
||||
*/
|
||||
@Path("/api/metrics/users")
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Tag(name = "User Metrics", description = "Statistiques sur les utilisateurs et leurs sessions")
|
||||
public interface UserMetricsResourceApi {
|
||||
|
||||
@GET
|
||||
@Path("/sessions")
|
||||
@Operation(summary = "Statistiques de sessions utilisateurs",
|
||||
description = "Retourne des statistiques agrégées sur les utilisateurs et leurs sessions pour un realm")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "200", description = "Statistiques retournées avec succès"),
|
||||
@APIResponse(responseCode = "500", description = "Erreur serveur")
|
||||
})
|
||||
UserSessionStatsDTO getUserSessionStats(@QueryParam("realm") String realmName);
|
||||
}
|
||||
|
||||
134
src/main/java/dev/lions/user/manager/api/UserResourceApi.java
Normal file
134
src/main/java/dev/lions/user/manager/api/UserResourceApi.java
Normal file
@@ -0,0 +1,134 @@
|
||||
package dev.lions.user.manager.api;
|
||||
|
||||
import dev.lions.user.manager.dto.importexport.ImportResultDTO;
|
||||
import dev.lions.user.manager.dto.user.*;
|
||||
import jakarta.validation.Valid;
|
||||
import jakarta.validation.constraints.NotNull;
|
||||
import jakarta.ws.rs.*;
|
||||
import jakarta.ws.rs.core.MediaType;
|
||||
import jakarta.ws.rs.core.Response;
|
||||
import org.eclipse.microprofile.openapi.annotations.Operation;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Content;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
import org.eclipse.microprofile.openapi.annotations.parameters.Parameter;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponse;
|
||||
import org.eclipse.microprofile.openapi.annotations.responses.APIResponses;
|
||||
import org.eclipse.microprofile.openapi.annotations.tags.Tag;
|
||||
|
||||
import java.util.List;
|
||||
|
||||
/**
|
||||
* Interface JAX-RS pour la gestion des utilisateurs.
|
||||
*/
|
||||
@Path("/api/users")
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Consumes(MediaType.APPLICATION_JSON)
|
||||
@Tag(name = "Users", description = "Gestion des utilisateurs Keycloak")
|
||||
public interface UserResourceApi {
|
||||
|
||||
@POST
|
||||
@Path("/search")
|
||||
@Operation(summary = "Rechercher des utilisateurs", description = "Recherche d'utilisateurs selon des critères")
|
||||
UserSearchResultDTO searchUsers(@Valid @NotNull UserSearchCriteriaDTO criteria);
|
||||
|
||||
@GET
|
||||
@Path("/{userId}")
|
||||
@Operation(summary = "Récupérer un utilisateur par ID", description = "Récupère les détails d'un utilisateur")
|
||||
UserDTO getUserById(
|
||||
@Parameter(description = "ID de l'utilisateur") @PathParam("userId") String userId,
|
||||
@Parameter(description = "Nom du realm") @QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Operation(summary = "Lister tous les utilisateurs", description = "Liste paginée de tous les utilisateurs")
|
||||
UserSearchResultDTO getAllUsers(
|
||||
@QueryParam("realm") String realmName,
|
||||
@QueryParam("page") @DefaultValue("0") int page,
|
||||
@QueryParam("pageSize") @DefaultValue("20") int pageSize);
|
||||
|
||||
@POST
|
||||
@Operation(summary = "Créer un utilisateur", description = "Crée un nouvel utilisateur dans Keycloak")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "201", description = "Utilisateur créé", content = @Content(schema = @Schema(implementation = UserDTO.class)))
|
||||
})
|
||||
Response createUser(
|
||||
@Valid @NotNull UserDTO user,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@PUT
|
||||
@Path("/{userId}")
|
||||
@Operation(summary = "Mettre à jour un utilisateur", description = "Met à jour les informations d'un utilisateur")
|
||||
UserDTO updateUser(
|
||||
@PathParam("userId") String userId,
|
||||
@Valid @NotNull UserDTO user,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@DELETE
|
||||
@Path("/{userId}")
|
||||
@Operation(summary = "Supprimer un utilisateur", description = "Supprime un utilisateur (soft ou hard delete)")
|
||||
void deleteUser(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName,
|
||||
@QueryParam("hardDelete") @DefaultValue("false") boolean hardDelete);
|
||||
|
||||
@POST
|
||||
@Path("/{userId}/activate")
|
||||
@Operation(summary = "Activer un utilisateur", description = "Active un utilisateur désactivé")
|
||||
void activateUser(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@POST
|
||||
@Path("/{userId}/deactivate")
|
||||
@Operation(summary = "Désactiver un utilisateur", description = "Désactive un utilisateur")
|
||||
void deactivateUser(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName,
|
||||
@QueryParam("raison") String raison);
|
||||
|
||||
@POST
|
||||
@Path("/{userId}/reset-password")
|
||||
@Operation(summary = "Réinitialiser le mot de passe", description = "Définit un nouveau mot de passe pour l'utilisateur")
|
||||
void resetPassword(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName,
|
||||
@NotNull PasswordResetRequestDTO request);
|
||||
|
||||
@POST
|
||||
@Path("/{userId}/send-verification-email")
|
||||
@Operation(summary = "Envoyer email de vérification", description = "Envoie un email de vérification à l'utilisateur")
|
||||
void sendVerificationEmail(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@POST
|
||||
@Path("/{userId}/logout-sessions")
|
||||
@Operation(summary = "Déconnecter toutes les sessions", description = "Révoque toutes les sessions actives de l'utilisateur")
|
||||
SessionsRevokedDTO logoutAllSessions(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/{userId}/sessions")
|
||||
@Operation(summary = "Récupérer les sessions actives", description = "Liste les sessions actives de l'utilisateur")
|
||||
@APIResponses({
|
||||
@APIResponse(responseCode = "200", description = "Liste des sessions", content = @Content(schema = @Schema(type = org.eclipse.microprofile.openapi.annotations.enums.SchemaType.ARRAY, implementation = String.class)))
|
||||
})
|
||||
List<String> getActiveSessions(
|
||||
@PathParam("userId") String userId,
|
||||
@QueryParam("realm") String realmName);
|
||||
|
||||
@GET
|
||||
@Path("/export/csv")
|
||||
@Produces("text/csv")
|
||||
@Operation(summary = "Exporter les utilisateurs en CSV", description = "Exporte la liste des utilisateurs du realm au format CSV")
|
||||
Response exportUsersToCSV(@QueryParam("realm") String realmName);
|
||||
|
||||
@POST
|
||||
@Path("/import/csv")
|
||||
@Consumes(MediaType.TEXT_PLAIN)
|
||||
@Produces(MediaType.APPLICATION_JSON)
|
||||
@Operation(summary = "Importer des utilisateurs depuis un CSV", description = "Importe des utilisateurs à partir d'un fichier CSV")
|
||||
ImportResultDTO importUsersFromCSV(
|
||||
@QueryParam("realm") String realmName,
|
||||
String csvContent);
|
||||
}
|
||||
@@ -0,0 +1,21 @@
|
||||
package dev.lions.user.manager.dto.common;
|
||||
|
||||
import io.quarkus.runtime.annotations.RegisterForReflection;
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
|
||||
import java.io.Serializable;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
@RegisterForReflection
|
||||
@Schema(description = "Réponse d'erreur standard")
|
||||
public class ApiErrorDTO implements Serializable {
|
||||
@Schema(description = "Message d'erreur")
|
||||
private String message;
|
||||
}
|
||||
@@ -0,0 +1,21 @@
|
||||
package dev.lions.user.manager.dto.common;
|
||||
|
||||
import io.quarkus.runtime.annotations.RegisterForReflection;
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
|
||||
import java.io.Serializable;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
@RegisterForReflection
|
||||
@Schema(description = "Réponse de comptage générique")
|
||||
public class CountDTO implements Serializable {
|
||||
@Schema(description = "Nombre d'éléments")
|
||||
private long count;
|
||||
}
|
||||
@@ -0,0 +1,32 @@
|
||||
package dev.lions.user.manager.dto.common;
|
||||
|
||||
import io.quarkus.runtime.annotations.RegisterForReflection;
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
|
||||
import java.io.Serializable;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
@RegisterForReflection
|
||||
@Schema(description = "Statistiques de sessions et d'utilisateurs en ligne pour un realm")
|
||||
public class UserSessionStatsDTO implements Serializable {
|
||||
|
||||
@Schema(description = "Nom du realm concerné")
|
||||
private String realmName;
|
||||
|
||||
@Schema(description = "Nombre total d'utilisateurs dans le realm")
|
||||
private long totalUsers;
|
||||
|
||||
@Schema(description = "Nombre total de sessions actives (approximation)")
|
||||
private long activeSessions;
|
||||
|
||||
@Schema(description = "Nombre d'utilisateurs considérés comme en ligne (approximation)")
|
||||
private long onlineUsers;
|
||||
}
|
||||
|
||||
@@ -0,0 +1,25 @@
|
||||
package dev.lions.user.manager.dto.realm;
|
||||
|
||||
import io.quarkus.runtime.annotations.RegisterForReflection;
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
|
||||
import java.io.Serializable;
|
||||
import java.util.List;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
@RegisterForReflection
|
||||
@Schema(description = "Liste des realms autorisés pour un utilisateur")
|
||||
public class AuthorizedRealmsDTO implements Serializable {
|
||||
@Schema(description = "Liste des realms (peut être vide si super admin)")
|
||||
private List<String> realms;
|
||||
|
||||
@Schema(description = "L'utilisateur est super admin")
|
||||
private boolean isSuperAdmin;
|
||||
}
|
||||
@@ -0,0 +1,27 @@
|
||||
package dev.lions.user.manager.dto.realm;
|
||||
|
||||
import io.quarkus.runtime.annotations.RegisterForReflection;
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
|
||||
import java.io.Serializable;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
@RegisterForReflection
|
||||
@Schema(description = "Réponse de vérification d'accès au realm")
|
||||
public class RealmAccessCheckDTO implements Serializable {
|
||||
@Schema(description = "L'utilisateur peut gérer le realm")
|
||||
private boolean canManage;
|
||||
|
||||
@Schema(description = "ID de l'utilisateur")
|
||||
private String userId;
|
||||
|
||||
@Schema(description = "Nom du realm")
|
||||
private String realmName;
|
||||
}
|
||||
@@ -0,0 +1,22 @@
|
||||
package dev.lions.user.manager.dto.role;
|
||||
|
||||
import io.quarkus.runtime.annotations.RegisterForReflection;
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
|
||||
import java.io.Serializable;
|
||||
import java.util.List;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
@RegisterForReflection
|
||||
@Schema(description = "Requête d'attribution ou de révocation de rôles")
|
||||
public class RoleAssignmentRequestDTO implements Serializable {
|
||||
@Schema(description = "Liste des noms de rôles", required = true)
|
||||
private List<String> roleNames;
|
||||
}
|
||||
@@ -0,0 +1,29 @@
|
||||
package dev.lions.user.manager.dto.sync;
|
||||
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
|
||||
import java.util.Set;
|
||||
|
||||
/**
|
||||
* DTO rapport de cohérence entre données Keycloak et cache local.
|
||||
*/
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
public class SyncConsistencyDTO {
|
||||
private String realmName;
|
||||
private String status; // OK, MISMATCH, ERROR
|
||||
private Integer usersKeycloakCount;
|
||||
private Integer usersLocalCount;
|
||||
private Set<String> missingUsersInLocal;
|
||||
private Set<String> missingUsersInKeycloak;
|
||||
private Integer rolesKeycloakCount;
|
||||
private Integer rolesLocalCount;
|
||||
private Set<String> missingRolesInLocal;
|
||||
private Set<String> missingRolesInKeycloak;
|
||||
private String error;
|
||||
}
|
||||
@@ -0,0 +1,23 @@
|
||||
package dev.lions.user.manager.dto.sync;
|
||||
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import lombok.AllArgsConstructor;
|
||||
|
||||
import java.time.LocalDateTime;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
public class SyncHistoryDTO {
|
||||
private String id;
|
||||
private String realmName;
|
||||
private LocalDateTime syncDate;
|
||||
private String syncType; // FULL, PARTIAL, USER, ROLE
|
||||
private String status; // SUCCESS, FAILURE
|
||||
private Integer itemsProcessed;
|
||||
private Long durationMs;
|
||||
private String errorMessage;
|
||||
}
|
||||
@@ -0,0 +1,25 @@
|
||||
package dev.lions.user.manager.dto.user;
|
||||
|
||||
import io.quarkus.runtime.annotations.RegisterForReflection;
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
|
||||
import java.io.Serializable;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
@RegisterForReflection
|
||||
@Schema(description = "Requête de réinitialisation de mot de passe")
|
||||
public class PasswordResetRequestDTO implements Serializable {
|
||||
@Schema(description = "Nouveau mot de passe", required = true)
|
||||
private String password;
|
||||
|
||||
@Schema(description = "Indique si le mot de passe est temporaire", defaultValue = "true")
|
||||
@Builder.Default
|
||||
private boolean temporary = true;
|
||||
}
|
||||
@@ -0,0 +1,21 @@
|
||||
package dev.lions.user.manager.dto.user;
|
||||
|
||||
import io.quarkus.runtime.annotations.RegisterForReflection;
|
||||
import lombok.AllArgsConstructor;
|
||||
import lombok.Builder;
|
||||
import lombok.Data;
|
||||
import lombok.NoArgsConstructor;
|
||||
import org.eclipse.microprofile.openapi.annotations.media.Schema;
|
||||
|
||||
import java.io.Serializable;
|
||||
|
||||
@Data
|
||||
@Builder
|
||||
@NoArgsConstructor
|
||||
@AllArgsConstructor
|
||||
@RegisterForReflection
|
||||
@Schema(description = "Réponse de révocation de sessions")
|
||||
public class SessionsRevokedDTO implements Serializable {
|
||||
@Schema(description = "Nombre de sessions révoquées")
|
||||
private int count;
|
||||
}
|
||||
@@ -24,6 +24,7 @@ public enum TypeActionAudit {
|
||||
USER_PASSWORD_RESET("Réinitialisation mot de passe", "USER", "PASSWORD_RESET"),
|
||||
USER_EMAIL_VERIFY("Vérification email", "USER", "EMAIL_VERIFY"),
|
||||
USER_FORCE_LOGOUT("Déconnexion forcée", "USER", "FORCE_LOGOUT"),
|
||||
USER_IMPORT("Import utilisateurs CSV", "USER", "IMPORT"), // Ajout
|
||||
|
||||
// Actions Rôle
|
||||
ROLE_CREATE("Création rôle", "ROLE", "CREATE"),
|
||||
@@ -41,8 +42,10 @@ public enum TypeActionAudit {
|
||||
GROUP_ADD_MEMBER("Ajout membre groupe", "GROUP", "ADD_MEMBER"),
|
||||
GROUP_REMOVE_MEMBER("Retrait membre groupe", "GROUP", "REMOVE_MEMBER"),
|
||||
|
||||
// Actions Realm
|
||||
REALM_SYNC("Synchronisation realm", "REALM", "SYNC"),
|
||||
// Actions Realm & Sync
|
||||
REALM_SYNC("Synchronisation realm (Général)", "REALM", "SYNC"),
|
||||
SYNC_USERS("Synchronisation utilisateurs", "REALM", "SYNC_USERS"), // Ajout
|
||||
SYNC_ROLES("Synchronisation rôles", "REALM", "SYNC_ROLES"), // Ajout
|
||||
REALM_EXPORT("Export realm", "REALM", "EXPORT"),
|
||||
REALM_IMPORT("Import realm", "REALM", "IMPORT"),
|
||||
REALM_ASSIGN("Assignation realm", "REALM", "ASSIGN"),
|
||||
@@ -105,9 +108,9 @@ public enum TypeActionAudit {
|
||||
*/
|
||||
public boolean isCritical() {
|
||||
return this == USER_DELETE
|
||||
|| this == ROLE_DELETE
|
||||
|| this == USER_SUSPEND
|
||||
|| this == SESSION_REVOKE_ALL
|
||||
|| this == SYSTEM_RESTORE;
|
||||
|| this == ROLE_DELETE
|
||||
|| this == USER_SUSPEND
|
||||
|| this == SESSION_REVOKE_ALL
|
||||
|| this == SYSTEM_RESTORE;
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user