IMO the easiest option is to create security-constraints in web.xml just for the REST endpoints, which are supposed to be secured . Then the public endpoints, which won't be mapped in web.xml can be accessed by anonymous user.

Marek

On 26.6.2015 01:14, Juan Diego wrote:

I have some services that should be public, I am allowing anonymous users in my page. They should be able to access some minor features of my site.

Should I create another security-constrain for public users, is there a way to create a public role and get a token for that.

Or that is more like creating a role for an app, maybe I understood that part wrong.

Thanks.

Juan Diego
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user