/**
* Jenkinsfile to run keycloak tests on a keycloak enabled app.
* An instance of the application should already be deployed. Two tests
* are included, one that tries to access an API endpoint without any
* authentication and should fail and a second one that uses
* authentication and should succeed.
**/
pipeline {
agent any
environment {
APP_URL = "https://kea.curex-project.eu"
KEYCLOAK_URL = "https://keycloak.curex-project.eu/auth/realms/master/protocol/openid-connect/token"
USER = credentials('keycloak-test-user')
PASSWORD = credentials('keycloak-test-password')
CLIENT_ID = "KEA"
}
stages {
stage('Run tests') {
steps {
script {
echo '*************'
echo '*** TESTS ***'
echo '*************'
/* Here do your tests */
try {
String testName = "KEA_keycloak_fail"
String url = "$APP_URL/api/v1/od/status"
String responseCode = sh(label: testName, script: "curl -m 10 -sLI -w '%{http_code}' -H 'Accept: application/json, text/plain, */*' $url -o /dev/null", returnStdout: true)
if ( responseCode != '401' ) {
error("$testName: Returned status code = $responseCode when calling $url")
}
testName = "KEA_keycloak_success"
String token = sh(label: "get_keycloak_token", script: "curl -s -X POST $KEYCLOAK_URL -H 'Content-Type: application/x-www-form-urlencoded' -d 'username=$USER' -d 'password=$PASSWORD' -d 'grant_type=password' -d 'client_id=$CLIENT_ID' | sed 's/.*access_token\":\"//g' | sed 's/\".*//g'", returnStdout: true)
responseCode = sh(label: testName, script: "curl -m 10 -sLI -w '%{http_code}' -H 'Authorization: Bearer $token' -H 'Accept: application/json, text/plain, */*' $url -o /dev/null", returnStdout: true)
if ( responseCode != '200' ) {
error("$testName: Returned status code = $responseCode when calling $url")
}
} catch (ignored) {
currentBuild.result = 'FAILURE'
echo "KEA Keycloak Tests failed"
}
}
}
}
}
}