Merge pull request #19741 from strapi/feat/keycloak-grant

feat: Add keycloak native users-permissions provider

packages/plugins/users-permissions/server/bootstrap/grant-config.js

@@ -128,4 +128,13 @@ module.exports = (baseURL) => ({
     callback: `${baseURL}/patreon/callback`,
     scope: ['identity', 'identity[email]'],
   },
+  keycloak: {
+    enabled: false,
+    icon: '',
+    key: '',
+    secret: '',
+    subdomain: 'myKeycloakProvider.com/realms/myrealm',
+    callback: `${baseURL}/keycloak/callback`,
+    scope: ['openid', 'email', 'profile'],
+  },
 });

packages/plugins/users-permissions/server/services/providers-registry.js

@@ -331,6 +331,21 @@ const getInitialProviders = ({ purest }) => ({
         };
       });
   },
+  async keycloak({ accessToken, providers }) {
+    const keycloak = purest({ provider: 'keycloak' });
+
+    return keycloak
+      .subdomain(providers.keycloak.subdomain)
+      .get('protocol/openid-connect/userinfo')
+      .auth(accessToken)
+      .request()
+      .then(({ body }) => {
+        return {
+          username: body.preferred_username,
+          email: body.email,
+        };
+      });
+  },
 });
 
 module.exports = () => {