You can't pass additional attributes along with an authorization request.
However, that is something we want to support on future versions.
Right now, the information you get is basically what is in an access token.
So whatever you push as a claim (e.g.: using mappers) it will be available
to your policies.
That is an important addition to our API in order to push more context to
policies, as you are requesting.
One thing to keep in mind is that we can't blindly trust authorization
requests from clients are they can be easily manipulated. What type of
client are you using ?
Another question, what are you missing in the Evaluation API ? Is there
anything we can provide OOTB ?
On Thu, Feb 2, 2017 at 2:18 PM, Scott Elliott <scottpelliott(a)gmail.com>
Would therebe any way to pass additional attributes (say, something
REST API call's headers or body) to an authorization request, and access it
Evaluation API currently is pretty limited.
keycloak-user mailing list