Hi,
Just found the answer:
To approve a pending request
curl -v -X PUT
http://localhost:8180/auth/realms/photoz/authz/protection/permission/ticket
-H 'Authorization: Bearer '$access_token_alice -H 'Content-Type:
application/json' -d '{
"id": "5c067c34-129a-4d1e-8911-4591ed29962c",
"owner": "11f3314e-f1c6-40a9-912b-d6f9d0c5a177",
"resource": "dee953ef-1df8-4787-9d32-ce4e407da010",
"scope": "0dc735d5-1ecc-466d-ba9e-e59f8ad563e4",
"granted": true,
"requester": "dceb398e-9f68-4077-8073-ca53137cccb3"
}'
TO revoke an approval
curl -v -X PUT
http://localhost:8180/auth/realms/photoz/authz/protection/permission/ticket
-H 'Authorization: Bearer '$access_token_alice -H 'Content-Type:
application/json' -d '{
"id": "5c067c34-129a-4d1e-8911-4591ed29962c",
"owner": "11f3314e-f1c6-40a9-912b-d6f9d0c5a177",
"resource": "dee953ef-1df8-4787-9d32-ce4e407da010",
"scope": "0dc735d5-1ecc-466d-ba9e-e59f8ad563e4",
"granted": false,
"requester": "dceb398e-9f68-4077-8073-ca53137cccb3"
}' -v
It works great now !!!
Regards,
Olivier
Le 04/07/2019 à 19:46, Rivat Olivier a écrit :
Hi,
I am playing with auth_uma_photoz example.
1. I have created some album resources for alice (album a5).
2. Jdoe has made a request to access to alice album
3. Through Rest API calls, I can see that there is a pending request
on a5 resource owned by alice
access_token_alice=$(curl -d "client_id=photoz-restful-api" -d
"client_secret=secret" -d "username=alice" -d
"password=alice" -d
"grant_type=password"
http://localhost:8180/auth/realms/photoz/protocol/openid-connect/token
| jq -r .access_token)
curl
http://localhost:8180/auth/realms/photoz/authz/protection/permission/tick...
-H 'Authorization: Bearer '$access_token_alice | jq
% Total % Received % Xferd Average Speed Time Time Time
Current
Dload Upload Total Spent Left
Speed
100 258 100 258 0 0 86000 0 --:--:-- --:--:--
--:--:-- 86000
[
{
"id": "29505d42-da8d-46f5-afe2-f90e35845192",
"owner": "11f3314e-f1c6-40a9-912b-d6f9d0c5a177",
"resource": "dee953ef-1df8-4787-9d32-ce4e407da010",
"scope": "0dc735d5-1ecc-466d-ba9e-e59f8ad563e4",
"granted": false,
"requester": "dceb398e-9f68-4077-8073-ca53137cccb3"
}
]
So my question:
What should be the command syntax to approve this request from Jdoe
(I.e set "granted":true) using teh REST API.
I have made several trials, quite unsuccessful, and haven't found any
hint in the keycloak doc.
Regards,
Olivier