[keycloak-dev] scope and client templates
Bill Burke
bburke at redhat.com
Thu Dec 17 08:54:34 EST 2015
On 12/17/2015 8:47 AM, Stian Thorgersen wrote:
>
>
> On 17 December 2015 at 14:39, Bill Burke <bburke at redhat.com
> <mailto:bburke at redhat.com>> wrote:
>
> I don't think you've thought this through. Of course you would want
> scope on a client template.
>
> Client Template allows scope for Service A, Service B, and Service C.
>
> Client 1, Client 2, and Client 3 all need to access Service A, B,
> and C. You'd have to define scope in each client when it would be
> easier to define it in the client template.
>
>
> I have thought it through - I just think that it's a lot more likely
> that Client 1 will invoke Service A, Client 2 will invoke Service B.
> Even if all clients invoke all services they will not have the same
> scope, but different scope.
>
An argument of "I don't think people will use this" is just as valid as
my argument that I think people will want to use it. The template would
define the scope that is shared between multiple clients, then each
client would add their own additional scope for the other services they
need to use.
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
More information about the keycloak-dev
mailing list