IMO the easiest option is to create security-constraints in web.xml just
for the REST endpoints, which are supposed to be secured . Then the
public endpoints, which won't be mapped in web.xml can be accessed by
anonymous user.
Marek
On 26.6.2015 01:14, Juan Diego wrote:
I have some services that should be public, I am allowing anonymous
users in my page. They should be able to access some minor features
of my site.
Should I create another security-constrain for public users, is there
a way to create a public role and get a token for that.
Or that is more like creating a role for an app, maybe I understood
that part wrong.
Thanks.
Juan Diego
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user