[keycloak-user] Fw: Associating a REST api end point to multiple resources in Keycloak in Policy Enforcer
________________________________
From: Sushil Singh <sushil.singh(a)guavus.com>
Sent: 15 November 2019 15:14
To: Vishnu Prakash <vishnuprakash323(a)gmail.com>; Pedro Igor Silva
<psilva(a)redhat.com>; Stian Thorgersen <sthorger(a)redhat.com>
Subject: Re: [keycloak-user] Associating a REST api end point to multiple resources in
Keycloak in Policy Enforcer
Hi,
I think the use case is similar to what I am proposing
@Vishnu Prakash<mailto:vishnuprakash323@gmail.com>
I have also proposed to impose custom policy-enforcement on a set of resources.
https://github.com/keycloak/keycloak/pull/6448
[https://repository-images.githubusercontent.com/11125589/bd31cf00-70f4-11...
KEYCLOAK-11300 : Creating CustomEnforcer functionality for spring adapters by
sushil-singh-guavus · Pull Request #6448 ·
keycloak/keycloak<https://github.com/keycloak/keycloak/pull/6448>
KEYCLOAK-11300 : Creating CustomEnforcer functionality for spring adapters
https://issues.jboss.org/browse/KEYCLOAK-11300
github.com
Where user can specify a Map<Resource, Set<scopes>> and it will evaluate to a
positive result only if it satisfies permission for all resources in the Map
Currently I don't think this functionality is available in keycloak
Thanks,
Sushil
________________________________
From: keycloak-user-bounces(a)lists.jboss.org <keycloak-user-bounces(a)lists.jboss.org>
on behalf of Vishnu Prakash <vishnuprakash323(a)gmail.com>
Sent: 15 November 2019 10:01
To: keycloak-user <keycloak-user(a)lists.jboss.org>
Subject: [keycloak-user] Associating a REST api end point to multiple resources in
Keycloak in Policy Enforcer
Hi,
I want to protect my REST api's using Keycloak. I am deploying my
application in Wildfly application server and using keyclaok wildfly
adapters.
Is it possible to associate a REST api end point to multiple resources in
keycloak using the Policy Enforcer. If the user is having permission to
access all the associated resources, then only access should be granted to
the api.
Any input will be a great help to me.
Thanks & Regards,
Vishnu Prakash
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user