Re: [keycloak-user] Additional attributes for an authorization request
Hi Scott,
You can't pass additional attributes along with an authorization request.
However, that is something we want to support on future versions.
Right now, the information you get is basically what is in an access token.
So whatever you push as a claim (e.g.: using mappers) it will be available
to your policies.
That is an important addition to our API in order to push more context to
policies, as you are requesting.
One thing to keep in mind is that we can't blindly trust authorization
requests from clients are they can be easily manipulated. What type of
client are you using ?
Another question, what are you missing in the Evaluation API ? Is there
anything we can provide OOTB ?
Regards.
Pedro Igor
On Thu, Feb 2, 2017 at 2:18 PM, Scott Elliott <scottpelliott(a)gmail.com>
wrote:
Would therebe any way to pass additional attributes (say, something
from a
REST API call's headers or body) to an authorization request, and access it
in a Javascript or rules based policy? I see that what is available in the
Evaluation API currently is pretty limited.
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user