mirror/keycloak
1
0
Fork 0
mirror of https://github.com/keycloak/keycloak.git synced 2025-12-30 11:29:57 -06:00
Code Issues Packages Projects Releases Wiki Activity

Make set creadential label use reset-password scope

Browse Source 
Closes #43460

Signed-off-by: vramik <vramik@redhat.com>
This commit is contained in:
vramik
2025-10-26 14:16:29 +01:00
committed by Pedro Igor
parent fead1b1ab6
commit ece96e397e
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
services/src/main/java/org/keycloak/services/resources/admin/UserResource.java
View File

@@ -892,7 +892,7 @@ public class UserResource {
@APIResponse(responseCode = "404", description = "Not Found")
})
public void setCredentialUserLabel(final @PathParam("credentialId") String credentialId, String userLabel) {
auth.users().requireManage(user);
auth.users().requireResetPassword(user);
CredentialModel credential = user.credentialManager().getStoredCredentialById(credentialId);
if (credential == null) {
// we do this to make sure somebody can't phish ids
@@ -1324,4 +1324,4 @@ public class UserResource {
this.lifespan = lifespan;
}
}
}
}

6
tests/base/src/test/java/org/keycloak/tests/admin/authz/fgap/UserResourceTypeEvaluationTest.java
View File

@@ -18,6 +18,7 @@
package org.keycloak.tests.admin.authz.fgap;
import static org.hamcrest.MatcherAssert.assertThat;
import static org.hamcrest.Matchers.hasSize;
import static org.hamcrest.Matchers.instanceOf;
import static org.hamcrest.Matchers.notNullValue;
import static org.junit.jupiter.api.Assertions.assertEquals;
@@ -474,6 +475,11 @@ public class UserResourceTypeEvaluationTest extends AbstractPermissionTest {
createPermission(client, userAlice.admin().toRepresentation().getId(), usersType, Set.of(VIEW), allowMyAdminPermission);
users.get(search.get(0).getId()).resetPassword(credential);
// set credential label - admin UI sets the label upon resetting the password
List<CredentialRepresentation> credentials = users.get(search.get(0).getId()).credentials();
assertThat(credentials, hasSize(1));
users.get(search.get(0).getId()).setCredentialUserLabel(credentials.get(0).getId(), "User Label");
}
@Test