[keycloak-user] Fw: Associating a REST api end point to multiple resources in Keycloak in Policy Enforcer

[Vishnu Prakash]

Dear Sushil,

Thank you for your valuable response.

Vishnu Prakash

On Fri, Nov 15, 2019 at 3:19 PM Sushil Singh <sushil.singh at guavus.com>
wrote:

>
>
> ________________________________
> From: Sushil Singh <sushil.singh at guavus.com>
> Sent: 15 November 2019 15:14
> To: Vishnu Prakash <vishnuprakash323 at gmail.com>; Pedro Igor Silva <
> psilva at redhat.com>; Stian Thorgersen <sthorger at redhat.com>
> Subject: Re: [keycloak-user] Associating a REST api end point to multiple
> resources in Keycloak in Policy Enforcer
>
> Hi,
>
> I think the use case is similar to what I am proposing
>
> @Vishnu Prakash<mailto:vishnuprakash323 at gmail.com>
>
> I have also proposed to impose custom policy-enforcement on a set of
> resources.
>
> https://github.com/keycloak/keycloak/pull/6448
> [
> https://repository-images.githubusercontent.com/11125589/bd31cf00-70f4-11e9-9fb2-4f241568e586
> ]<https://github.com/keycloak/keycloak/pull/6448>
> KEYCLOAK-11300 : Creating CustomEnforcer functionality for spring adapters
> by sushil-singh-guavus · Pull Request #6448 · keycloak/keycloak<
> https://github.com/keycloak/keycloak/pull/6448>
> KEYCLOAK-11300 : Creating CustomEnforcer functionality for spring adapters
> https://issues.jboss.org/browse/KEYCLOAK-11300
> github.com <https://issues.jboss.org/browse/KEYCLOAK-11300github.com>
>
>
> Where user can specify a Map<Resource, Set<scopes>> and it will evaluate
> to a positive result only if it satisfies permission for all resources in
> the Map
>
> Currently I don't think this functionality is available in keycloak
>
> Thanks,
>
> Sushil
> ________________________________
> From: keycloak-user-bounces at lists.jboss.org <
> keycloak-user-bounces at lists.jboss.org> on behalf of Vishnu Prakash <
> vishnuprakash323 at gmail.com>
> Sent: 15 November 2019 10:01
> To: keycloak-user <keycloak-user at lists.jboss.org>
> Subject: [keycloak-user] Associating a REST api end point to multiple
> resources in Keycloak in Policy Enforcer
>
> Hi,
> I want to protect my REST api's using Keycloak. I am deploying my
> application in Wildfly application server and using keyclaok wildfly
> adapters.
> Is it possible to associate a REST api end point to multiple resources in
> keycloak using the Policy Enforcer. If the user is having permission to
> access all the associated resources, then only access should be granted to
> the api.
>
> Any input will be a great help to me.
>
> Thanks & Regards,
> Vishnu Prakash
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>