Hi all,
I'm trying to protect a servlet application which can be
accessed either as anonymous user and as authenticated
user. Some resources are protected and my application
takes in charge the access control (not role based) so I
can't use the war protection using role user constraint.
In this case I've removed the role constraint in the
web.xml and the keycloak wildfly (undertow) adapter let me
access the application as unauthentified user (anonymous)
which is perfect.
What I want to handle on some AccessDeniedException is to
redirect the user to the authentication server manually. In
this case, user authentified an come back to the protected
URL but is no more anonymous but a authentified user.
Is ther is a way to handle this redirection to the
authentication server manually (I don't know where to store
the state variable allowing keycloak wildfly adapter to handle
properly the auth redirect that include the code).