java - 所有 KeyCloak 管理 API 调用上的 NullPointerException
问题描述
我正在尝试使用 Java 客户端调用 KeyCloak Admin API。无论我尝试哪种操作——创建领域、创建用户帐户等——我都会收到以下异常:
javax.ws.rs.ProcessingException:在 org.jboss.resteasy.client.jaxrs.internal.ClientInvocation.filterRequest 的 org.keycloak.admin.client.resource.BearerAuthFilter.filter(BearerAuthFilter.java:53) 的 java.lang.NullPointerException (ClientInvocation.java:573) 在 org.jboss.resteasy.client.jaxrs.internal.ClientInvocation.invoke(ClientInvocation.java:438) 在 org.jboss.resteasy.client.jaxrs.internal.proxy.ClientInvoker.invoke(ClientInvoker .java:102) 在 org.jboss.resteasy.client.jaxrs.internal.proxy.ClientProxy.invoke(ClientProxy.java:76) 在 com.sun.proxy.$Proxy214.create(未知来源)
我的 KeyCloak 代码看起来像这样......
Keycloak kc = KeycloakBuilder.builder().realm("master").clientId("admin-cli").username("admin") .password("password").serverUrl("http://localhost:8880/auth")
.resteasyClient(new ResteasyClientBuilder().connectionPoolSize(10).build()).build();
RealmRepresentation realm = new RealmRepresentation();
realm.setDisplayName(displayName);
realm.setDisplayNameHtml(displayName);
realm.setRealm(realmName);
realm.setEnabled(enabled);
kc.realms().create(realm);
正是在这一点上,我看到了异常。知道这里可能出了什么问题吗?我看到针对管理 API 的所有操作的异常。我知道数据是可用的,因为我能够对管理 API 进行 curl 调用并且它工作正常。
curl -vki -H "Authorization: Bearer XXXXX" http://localhost:8880/auth/admin/realms/master
当我拨打这个电话时,我看到了预期的结果。我只有在使用 Java 客户端时才会失败。知道这里发生了什么吗?
更新
我增加了 KeyCloak 实例上的调试日志。尝试创建安全领域后,我看到以下消息。(注意:无论我执行什么操作,我都会看到类似的错误)
14:36:16,553 DEBUG [org.keycloak.transaction.JtaTransactionWrapper] (default task-24) new JtaTransactionWrapper
14:36:16,553 DEBUG [org.keycloak.transaction.JtaTransactionWrapper] (default task-24) was existing? false
14:36:16,557 DEBUG [org.keycloak.authentication.AuthenticationProcessor] (default task-24) AUTHENTICATE CLIENT
14:36:16,557 DEBUG [org.keycloak.authentication.ClientAuthenticationFlow] (default task-24) client authenticator: client-secret
14:36:16,557 DEBUG [org.keycloak.authentication.ClientAuthenticationFlow] (default task-24) client authenticator SUCCESS: client-secret
14:36:16,557 DEBUG [org.keycloak.authentication.ClientAuthenticationFlow] (default task-24) Client admin-cli authenticated by client-secret
14:36:16,558 DEBUG [org.keycloak.authentication.AuthenticationProcessor] (default task-24) AUTHENTICATE ONLY
14:36:16,559 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) processFlow
14:36:16,559 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) check execution: direct-grant-validate-username requirement: REQUIRED
14:36:16,559 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) authenticator: direct-grant-validate-username
14:36:16,560 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) invoke authenticator.authenticate: direct-grant-validate-username
14:36:16,560 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) authenticator SUCCESS: direct-grant-validate-username
14:36:16,561 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) check execution: direct-grant-validate-password requirement: REQUIRED
14:36:16,561 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) authenticator: direct-grant-validate-password
14:36:16,561 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) invoke authenticator.authenticate: direct-grant-validate-password
14:36:16,658 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) authenticator SUCCESS: direct-grant-validate-password
14:36:16,658 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) check execution: direct-grant-validate-otp requirement: OPTIONAL
14:36:16,659 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) authenticator: direct-grant-validate-otp
14:36:16,659 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) invoke authenticator.authenticate: direct-grant-validate-otp
14:36:16,659 DEBUG [org.keycloak.authentication.DefaultAuthenticationFlow] (default task-24) authenticator ATTEMPTED: direct-grant-validate-otp
14:36:16,661 DEBUG [org.keycloak.services.managers.AuthenticationSessionManager] (default task-24) Removing authSession 'df66e278-8ffe-47ab-84d1-36ffe9152021'. Expire restart cookie: true
14:36:16,673 DEBUG [org.keycloak.events] (default task-24) type=LOGIN, realmId=master, clientId=admin-cli, userId=c830af10-3cfd-4ce0-b1aa-83a857a290d7, ipAddress=172.18.0.1, auth_method=openid-connect, token_id=8876c7ad-3ea4-4356-8fc2-f9b50112b952, grant_type=password, refresh_token_type=Refresh, scope='profile email', refresh_token_id=4c2325fc-0bb5-40d9-af55-4985546fd39a, client_auth_method=client-secret, username=kcadmin
14:36:16,673 DEBUG [org.keycloak.transaction.JtaTransactionWrapper] (default task-24) JtaTransactionWrapper commit
14:36:16,676 DEBUG [org.keycloak.transaction.JtaTransactionWrapper] (default task-24) JtaTransactionWrapper end
更新 2
似乎此问题与在 Java EE 容器中运行此代码有关。如果我在独立类中运行完全相同的代码,它就没有问题。但是,如果我将代码复制并粘贴到 servlet 并尝试运行它,我会收到NullPointerException
. 当我遇到问题时,我正在 Wildfly 13 上运行代码。通过 Arquillian 运行集成测试时,我也看到了这个问题。我的假设是它必须与依赖关系有关,但我不知道需要改变什么。
解决方案
如果您想保持 Java EE 8 对 WildFly 13 的支持,只需创建空的 jackson 提供程序:
public class CustomJacksonProvider extends ResteasyJackson2Provider {
}
register()
并使用以下方法将其添加到您的 KeyCloak 构建器ResteasyClientBuilder
:
Keycloak kc = KeycloakBuilder.builder()
.realm("master")
.clientId("admin-cli")
.username("admin")
.password("password")
.serverUrl("http://localhost:8880/auth")
.resteasyClient(new ResteasyClientBuilder().connectionPoolSize(10).register(new CustomJacksonProvider()).build())
.build();
您还需要添加一些简单的依赖项(as scope=provided
)才能使用ResteasyClientBuilder
and ResteasyClientBuilder
:
<dependency>
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-client</artifactId>
<version>3.6.2.Final</version>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.jboss.resteasy</groupId>
<artifactId>resteasy-jackson2-provider</artifactId>
<version>3.6.2.Final</version>
<scope>provided</scope>
</dependency>
推荐阅读
- sql - 如何复制所有记录并在OracleDB中的同一张表中添加一些更改
- c# - 如何将此实体框架查询转换为 SQL Server 查询
- python-3.x - 如何做到这一点,以便当我按下鼠标时,其中的代码不会变慢?Python
- python - 客户端验证 Django
- c# - C# WPF:资源字典在运行时不加载,但在设计器中正确显示
- c# - 有没有办法将一个属性的处理委托给另一个属性?
- apache-spark - 如何在火花连接中获取单个数据帧的密钥
- python - 如何使用 bulk_update 一次更新多个模型对象?
- javascript - Gatsby 中的简单 Javascript 动画
- apache-spark - Pyspark:保存到 Cassandra 时的日期不正确