Keycloak用户存储SPI实现

Question

我试图解决的用例是

用户将显示keycloak登录屏幕。Onsubmission用户将根据外部数据源验证。

从外部数据源中检索一些属性，将其映射到KeyCloak的id和访问令牌。

我所做的是从实现自定义身份验证器SPI开始，认为这不是正确的方法，现在实现了UserStorageProvider。

/***
 * From UserLookupProvider
 */
public UserModel getUserById(String id, RealmModel realm) {
    System.out.println("ID: " + id + ":REALM:" + realm);
    StorageId storageId = new StorageId(id);
    /**
     * StorageId.getExternalId() method is invoked to obtain 
     * the username embeded in the id parameter
     */
    String username = storageId.getExternalId();
    System.out.println("Name:" + username);
    return getUserByUsername(username, realm);
}

/***
 * From UserLookupProvider
 * This method is invoked by the Keycloak login page when a user logs in
 */
public UserModel getUserByUsername(String username, RealmModel realm) {
    System.out.println("USERNAME: " + username + ":REALM:" + realm);
    UserModel userModel = loadedUsers.get(username);
    if (userModel == null) {
        String password = properties.getProperty(username);
        if (password != null) {
            userModel = createUserModel(realm, username);
            System.out.println("New UserModel:");
            System.out.println(userModel.toString());
            loadedUsers.put(username, userModel);
        }
    }
    return userModel;
}

protected UserModel createUserModel(RealmModel realm, String username) {
    return new AbstractUserAdapter(session, realm, model) {
        @Override
        public String getUsername() {
            return username;
        }
    };
}

遵循文档(https://www.keycloak.org/docs/latest/server_development/index.html#packaging-and-deployment-2)

提供程序实现的类文件应该放在一个JAR中。您还必须在meta-inf/services/org.keycloak.storage.UserStorageProviderFactory文件中声明provider工厂类。

如有任何建议/帮助，我们将不胜感激！！

谢谢你的建议。