This sort of question fits more to wildfly forum, as this is more
developers forum.
In custom http mechanism you can access X-ROLES header in same manner
as you access X-USERNAME header now;
request.getFirstRequestHeaderValue(USERNAME_HEADER)
On Fri, Aug 24, 2018 at 8:18 PM, David van Balen <dvanbale(a)redhat.com> wrote:
Hi,
I have a web frontend application that is communicating with a beckend REST
service. I would like the web frontend to automatically
authenticate/authorize with the REST services by including the username and
roles of the authenticated user as HTTP headers in the REST call. I found a
wildfly quickstart (http-custom-mechanism) which allows me to the
authentication part. However, I haven't not been able to figure out how to
provide the roles in the same fashion. In the case of the quickstart I
mentioned, it would be something like adding an additional HTTP header to
the curl call, like so:
-H "X-ROLES:admin,ops"
which would result in the user being assigned the "admin" and "ops"
roles in
the REST service.
Does anyone have any pointers on how I can do this?
Thanks in advance.
_______________________________________________
wildfly-dev mailing list
wildfly-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/wildfly-dev