Re: [keycloak-user] Group attribute lookup via NodeJS

One option would be to create a custom mapper in Keycloak whereby you add the data you're describing as a claim inside the token. You'll probably need to use a script based mapper, which requires you to explicitly enable the preview feature when launching Keycloak. See this related issue for tips: https://stackoverflow.com/questions/53367566/unable-to-setup-idp-token-ex... Otherwise, your backend can speak to the Admin REST API to get the data your want. With this option you'll probably need to make multiple API calls, one to get a list of the user's groups, and then another to get all the metadata about each group: https://www.keycloak.org/docs-api/4.6/rest-api/index.html On Thu, 6 Dec 2018 at 22:54, Tom Barber <tom(a)spicule.co.uk&gt; wrote: > Hello folks > > I’ve got Keycloak hooked up to the NodeJS connector and I saw the info > about getting the username and stuff back via: > > console.log(req.kauth.grant.access_token.content) > > I’d also like to assign users to groups and store some metadata with those > groups that the application can access. Is that possible using NodeJS > either using the adapter or by some other mechanism? > > Thanks > > Tom > > -- > > > Spicule Limited is registered in England & Wales. Company Number: > 09954122. Registered office: First Floor, Telecom House, 125-135 Preston > Road, Brighton, England, BN1 6AF. VAT No. 251478891. > > > > > All engagements > are subject to Spicule Terms and Conditions of Business. This email and > its > contents are intended solely for the individual to whom it is addressed > and > may contain information that is confidential, privileged or otherwise > protected from disclosure, distributing or copying. Any views or opinions > presented in this email are solely those of the author and do not > necessarily represent those of Spicule Limited. The company accepts no > liability for any damage caused by any virus transmitted by this email. > If > you have received this message in error, please notify us immediately by > reply email before deleting it from your system. Service of legal notice > cannot be effected on Spicule Limited by email. > _______________________________________________ > keycloak-user mailing list > keycloak-user(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-user -- Regards, Geoffrey Cleaves