[keycloak-dev] Spring Security Adapter resource_access roles missing

Daniel Teixeira ddtxra at gmail.com
Wed Jul 11 14:19:03 EDT 2018


Hello,
I have noticed that roles belonging to realm_access are present in the
Authentication object. But roles belonging to other client applications
(resource_access) are missing in the Authentication Java object.

Would it make sense to include them?

I am not sure if it makes sense to change it
in KeycloakAuthenticationProvider
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/spring-security/src/main/java/org/keycloak/adapters/springsecurity/authentication/KeycloakAuthenticationProvider.java#L51

Or when creating the SimpleKeycloakAccount using AdapterUtils?
https://github.com/keycloak/keycloak/blob/master/adapters/oidc/adapter-core/src/main/java/org/keycloak/adapters/AdapterUtils.java#L52

Cheers,
Daniel


More information about the keycloak-dev mailing list