json - Keycloak:是否可以在配置 json 文件中编写脚本组？

Question

我可以在我的 users.json 文件中配置 keycloak 用户:

{
  "realm" : "my_realm",
  "users" : [ {
    "id" : "my_id",
    "createdTimestamp" : 1568195319743,
    "username" : "my_user_name",
    "enabled" : true,
    "totp" : false,
    "emailVerified" : false,
    "credentials" : [ {
      "type" : "password",
      "hashedSaltedValue" : "XXXXX",
      "salt" : "XXXXX",
      "hashIterations" : 27500,
      "counter" : 0,
      "algorithm" : "pbkdf2-sha256",
      "digits" : 0,
      "period" : 0,
      "createdDate" : 1568195377551,
      "config" : { }
    } ],
    "disableableCredentialTypes" : [ "password" ],
    "requiredActions" : [ ],
    "realmRoles" : [ "offline_access", "uma_authorization" ],
    "clientRoles" : {
      "account" : [ "manage-account", "view-profile" ]
    },
    "notBefore" : 0,
    "groups" : [ ]
  }]
}

当我启动 keycloak 容器时，它们会加载到 keycloak 数据库中。

我可以用同样的方式编写用户组脚本吗(在这个文件或其他文件中)？并将用户映射到组？

Answer 1

事实证明这很简单(但也没有记录):

{
  "realm" : "my_realm",  
......................
  "groups": [
    {
      "id": "<my group id>",
      "name": "<my_group_name>",
      "path": "/<my_group_name>",
      "attributes": {},
      "realmRoles": [],
      "clientRoles": {},
      "subGroups": []
    }
   ]
  }
}

我通过在 keycloak 管理界面中创建组，单击“导出”并读取下载的文件来解决这个问题。