Hi,
I have been able to use the spring adapter to manage autorizations, however
there is a bug regarding the security context that may be related to your
problem (see KEYCLOAK-3471 <
https://issues.jboss.org/browse/KEYCLOAK-3471>
).
The policy enforcer will check permissions from the incoming request path,
so unauthorized requests should not be processed by your controller.
Did you set the "enforcement-mode" field to "ENFORCING" in your
keycloak.json ?
--
View this message in context:
http://keycloak-user.88327.x6.nabble.com/keycloak-user-Policy-Enforcer-in...
Sent from the keycloak-user mailing list archive at
Nabble.com.