Client Policies

/**
 * List client profiles with optional global profile inclusion
 * @param params - Query parameters for profile listing
 * @returns ClientProfilesRepresentation containing all profiles
 */
listProfiles(params?: { includeGlobalProfiles?: boolean }): Promise<ClientProfilesRepresentation>;

/**
 * Create or update client profiles
 * @param profiles - Client profiles representation to create/update
 * @returns void
 */
createProfiles(profiles: ClientProfilesRepresentation): Promise<void>;

/**
 * List client policies with optional global policy inclusion
 * @param params - Query parameters for policy listing
 * @returns ClientPoliciesRepresentation containing all policies
 */
listPolicies(params?: { includeGlobalPolicies?: boolean }): Promise<ClientPoliciesRepresentation>;

/**
 * Update client policies
 * @param policies - Client policies representation to update
 * @returns void
 */
updatePolicy(policies: ClientPoliciesRepresentation): Promise<void>;

import KeycloakAdminClient from "@keycloak/keycloak-admin-client";

const kcAdminClient = new KeycloakAdminClient({
  baseUrl: 'http://localhost:8080',
  realmName: 'myrealm',
});

await kcAdminClient.auth({
  username: 'admin',
  password: 'admin',
  grantType: 'password',
  clientId: 'admin-cli',
});

// List all client profiles including global ones
const profiles = await kcAdminClient.clientPolicies.listProfiles({
  includeGlobalProfiles: true
});

// List client policies
const policies = await kcAdminClient.clientPolicies.listPolicies({
  includeGlobalPolicies: true
});

// Update client policies
await kcAdminClient.clientPolicies.updatePolicy({
  policies: [
    {
      name: "secure-clients-policy",
      description: "Enforce security settings for all clients",
      enabled: true,
      conditions: [
        {
          condition: "any-client",
          configuration: {}
        }
      ],
      profiles: ["security-profile"]
    }
  ]
});

interface ClientProfilesRepresentation {
  profiles?: ClientProfileRepresentation[];
  globalProfiles?: ClientProfileRepresentation[];
}

interface ClientPoliciesRepresentation {
  policies?: ClientPolicyRepresentation[];
  globalPolicies?: ClientPolicyRepresentation[];
}

interface ClientProfileRepresentation {
  name?: string;
  description?: string;
  executors?: ClientPolicyExecutorRepresentation[];
}

interface ClientPolicyRepresentation {
  name?: string;
  description?: string;
  enabled?: boolean;
  conditions?: ClientPolicyConditionRepresentation[];
  profiles?: string[];
}

interface ClientPolicyExecutorRepresentation {
  executor?: string;
  configuration?: Record<string, any>;
}

interface ClientPolicyConditionRepresentation {
  condition?: string;
  configuration?: Record<string, any>;
}