improvements to the keycloak_realm_key module (#7698)

* add support for rsa enc key usage, more algorithms, and make certficate optional

* fix formatting

* adding changelog fragment

* made suggested code changes based on review

* fix typo and be more clear

* revert certificate to previous defined settings

changelogs/fragments/7698-improvements-to-keycloak_realm_key.yml

@@ -0,0 +1,4 @@
+minor_changes:
+  - keycloak_realm_key - the ``provider_id`` option now supports RSA encryption key usage (value ``rsa-enc``) (https://github.com/ansible-collections/community.general/pull/7698).
+  - keycloak_realm_key - the ``config.algorithm`` option now supports 8 additional key algorithms (https://github.com/ansible-collections/community.general/pull/7698).
+  - keycloak_realm_key - the ``config.certificate`` option value is no longer defined with ``no_log=True`` (https://github.com/ansible-collections/community.general/pull/7698).

plugins/modules/keycloak_realm_key.py

@@ -74,7 +74,8 @@ options:
     provider_id:
         description:
             - The name of the "provider ID" for the key.
-        choices: ['rsa']
+            - The value V(rsa-enc) has been added in community.general 8.2.0.
+        choices: ['rsa', 'rsa-enc']
         default: 'rsa'
         type: str
     config:
@@ -102,8 +103,10 @@ options:
             algorithm:
                 description:
                     - Key algorithm.
+                    - The values V(RS384), V(RS512), V(PS256), V(PS384), V(PS512), V(RSA1_5),
+                      V(RSA-OAEP), V(RSA-OAEP-256) have been added in community.general 8.2.0.
                 default: RS256
-                choices: ['RS256']
+                choices: ['RS256', 'RS384', 'RS512', 'PS256', 'PS384', 'PS512', 'RSA1_5', 'RSA-OAEP', 'RSA-OAEP-256']
                 type: str
             private_key:
                 description:
@@ -154,6 +157,7 @@ EXAMPLES = '''
     auth_realm: master
     config:
       private_key: "{{ private_key }}"
+      certificate: ""
       enabled: true
       active: true
       priority: 120
@@ -244,16 +248,30 @@ def main():
         name=dict(type='str', required=True),
         force=dict(type='bool', default=False),
         parent_id=dict(type='str', required=True),
-        provider_id=dict(type='str', default='rsa', choices=['rsa']),
+        provider_id=dict(type='str', default='rsa', choices=['rsa', 'rsa-enc']),
         config=dict(
             type='dict',
             options=dict(
                 active=dict(type='bool', default=True),
                 enabled=dict(type='bool', default=True),
                 priority=dict(type='int', required=True),
-                algorithm=dict(type='str', default='RS256', choices=['RS256']),
+                algorithm=dict(
+                    type="str",
+                    default="RS256",
+                    choices=[
+                        "RS256",
+                        "RS384",
+                        "RS512",
+                        "PS256",
+                        "PS384",
+                        "PS512",
+                        "RSA1_5",
+                        "RSA-OAEP",
+                        "RSA-OAEP-256",
+                    ],
+                ),
                 private_key=dict(type='str', required=True, no_log=True),
-                certificate=dict(type='str', required=True, no_log=True)
+                certificate=dict(type='str', required=True)
             )
         )
     )