Hi All,
I have developed custom-Enforcer functionality for spring/springboot adapters . So that
user can specify enforcement on Resource / List of Resource with scopes / Set of scopes
with in application itself.
Currently , what happens in keycloak is that resources are end points and scopes are
either specified in keycloak.json for the paths or we specify http-methods-as-scopes to be
true .
But our business requirement is such that Resources can be independent of endpoints
(basically they are non static) or one endpoint can be internally associated with multiple
protected resource with custom scopes (other than HTTP methods)
So , with this functionality , one can customize policy-enforcing on resources according
to application needs.
Also , for non Rest Resources also it can work , since the enforcement can be coupled in
the application itself
Jira :
https://issues.jboss.org/browse/KEYCLOAK-11300
PR :
https://github.com/keycloak/keycloak/pull/6448
Thanks
Sushil Pratap Singh
________________________________
From: Sushil Singh
Sent: 14 September 2019 18:42
To: keycloak-user(a)lists.jboss.org <keycloak-user(a)lists.jboss.org>
Subject: Feature Request
Hi,
As of now there is support of only http-method-as-scope when policyEnforcer is enabled
inorder to get the mapping between application scopes and keycloak defined scopes. But I
want to use keycloak not only for rest api's but for other use cases where I can have
application specific custom resources (independent of URI requested) and actions(scopes).
i want some API to provide support for custom resources as well as scopes
ex-: I have a pipeline to run and it can have actions like STOP ,RUN , RESTART and some
actions like CREATE AND RESTART. So there can be one scope or a combination of multiple
scopes for a resource to be accessed. So adding a functionality where user can use custom
scopes would be of great help and extend its usability for non rest api's also.
https://issues.jboss.org/browse/KEYCLOAK-11300
Thanks,
Sushil Pratap Singh