Re: [keycloak-user] Policy API endpoint lacks crucial information (in my opinion ; )
We should return the resource too, not only the scopes. Created
https://issues.jboss.org/browse/KEYCLOAK-8867 to include resource id to the
responses.
Regards.
Pedro Igor
On Mon, Nov 19, 2018 at 10:03 AM Geoffrey Cleaves <geoff(a)opticks.io> wrote:
Hi. When querying the
http://${host}:${post}/auth/realms/${realm}/authz/protection/uma-policy
endpoint I get a response similar to this:
[
{
"id": "6d5ffed7-5f1c-4b43-b2a8-986528aaee92",
"name": "b189864a-754e-4b5d-9c5b-f36fd9aad102",
"type": "uma",
"scopes": [
"campaign:view"
],
"logic": "POSITIVE",
"decisionStrategy": "UNANIMOUS",
"owner": "45cb05ba-5485-459e-9cfc-25128adb1854",
"users": [
"user(a)domain.com"
]
}
]
The problem here is that we don't know what resource this policy applies
to. As far as I know, there is no way to extract that information. Please
let me know if I am missing something.
I tried inspecting the network calls that the Admin Console does when
listing a user's UMA policies, but unfortunately for me the information
seems to be rendered server side instead of using the UMA REST API.
The goal is to recreate and enhance the Keycloak supplied UMA My Resources
functionality.
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user