Dear Sushil,
Thank you for your valuable response.
Vishnu Prakash
On Fri, Nov 15, 2019 at 3:19 PM Sushil Singh <sushil.singh(a)guavus.com>
wrote:
________________________________
From: Sushil Singh <sushil.singh(a)guavus.com>
Sent: 15 November 2019 15:14
To: Vishnu Prakash <vishnuprakash323(a)gmail.com>; Pedro Igor Silva <
psilva(a)redhat.com>; Stian Thorgersen <sthorger(a)redhat.com>
Subject: Re: [keycloak-user] Associating a REST api end point to multiple
resources in Keycloak in Policy Enforcer
Hi,
I think the use case is similar to what I am proposing
@Vishnu Prakash<mailto:vishnuprakash323@gmail.com>
I have also proposed to impose custom policy-enforcement on a set of
resources.
https://github.com/keycloak/keycloak/pull/6448
[
https://repository-images.githubusercontent.com/11125589/bd31cf00-70f4-11...
]<https://github.com/keycloak/keycloak/pull/6448>
KEYCLOAK-11300 : Creating CustomEnforcer functionality for spring adapters
by sushil-singh-guavus · Pull Request #6448 · keycloak/keycloak<
https://github.com/keycloak/keycloak/pull/6448>
KEYCLOAK-11300 : Creating CustomEnforcer functionality for spring adapters
https://issues.jboss.org/browse/KEYCLOAK-11300
github.com <
https://issues.jboss.org/browse/KEYCLOAK-11300github.com>
Where user can specify a Map<Resource, Set<scopes>> and it will evaluate
to a positive result only if it satisfies permission for all resources in
the Map
Currently I don't think this functionality is available in keycloak
Thanks,
Sushil
________________________________
From: keycloak-user-bounces(a)lists.jboss.org <
keycloak-user-bounces(a)lists.jboss.org> on behalf of Vishnu Prakash <
vishnuprakash323(a)gmail.com>
Sent: 15 November 2019 10:01
To: keycloak-user <keycloak-user(a)lists.jboss.org>
Subject: [keycloak-user] Associating a REST api end point to multiple
resources in Keycloak in Policy Enforcer
Hi,
I want to protect my REST api's using Keycloak. I am deploying my
application in Wildfly application server and using keyclaok wildfly
adapters.
Is it possible to associate a REST api end point to multiple resources in
keycloak using the Policy Enforcer. If the user is having permission to
access all the associated resources, then only access should be granted to
the api.
Any input will be a great help to me.
Thanks & Regards,
Vishnu Prakash
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user