Hi Ali,
Have you tried this quickstart that shows how tu use the authz service from
KC
Also make sure you enable the policy enforcer on the app side in the
configuration , i.e :
keycloak.policy-enforcer-config.on-deny-redirect-to=/accessDenied
sebi
On Tue, May 7, 2019 at 7:07 AM Ali Ahmadzadeh Asl <ahmadzadehasl(a)outlook.com>
wrote:
Hi Michal,
I'm configured my server exactly like this tutorial, but I'm not defined
any keycloak.securityConstraints in application.properties file, I want to
define permissions and policies in Keycloak admin panel. Does this require
any special setting? Do anybody have any sample or tutorial for this?
________________________________
From: Michal Hajas <mhajas(a)redhat.com>
Sent: Monday, May 6, 2019 12:09 PM
To: Ali Ahmadzadeh Asl
Cc: keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] Help for using Keycloak in Spring Boot
Hi Ali,
it looks like you have wrongly configured Spring Boot Keycloak adapter.
Make sure you configured everything which is shown here (especially the
part with security constraints):
https://www.keycloak.org/docs/latest/securing_apps/index.html#_spring_boo...
Michal
On Sat, May 4, 2019 at 2:21 PM Ali Ahmadzadeh Asl <
ahmadzadehasl@outlook.com<mailto:ahmadzadehasl@outlook.com>> wrote:
Hi
First of all, excuse me for poor English.
I am trying to use Keycloak in Spring Boot 2, I read many articles about
this matter, such as follow link:
https://www.keycloak.org/docs/2.5/securing_apps/topics/oidc/java/spring-b...
There was an issue that i can't resolve it. Resource and policy and
permissions defined in admin panel for client, does not any effect on my
server. For example I defined a resource for URL pattern /rest/* and a
policy for having ROLE_REST, also I defined a permission for mapping this
resource and policy.
But after running the server, I can use rest services without any
limitation and authentication.
Now the question is: How can I manage Spring Boot application security and
permissions from Keycloak admin panel?
Thank you
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user