[keycloak-user] Security proxy not supporting policy enforcement

[Stian Thorgersen]

It's not intentionally not supporting it, just hasn't been implemented yet.
Not sure when/if we will have a chance to do that though. We're not 100%
sure at this point if we are going to invest in the security proxy or
deprecate it in favor of something else.

On 16 December 2016 at 07:45, Manfred Duchrow <manfred.duchrow at caprica.biz>
wrote:

> Hi,
>
> is the keycloak security proxy intentionally not supporting the policy
> enforcement (i.e. authorization services)
> or is it a bug?
>
> With activated policy-enforcer I'm getting an exception at startup of
> security proxy:
>
> Exception in thread "main" java.lang.reflect.InvocationTargetException
>         at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>         at
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:
> 62)
>         at
> sun.reflect.DelegatingMethodAccessorImpl.invoke(
> DelegatingMethodAccessorImpl.java:43)
>         at java.lang.reflect.Method.invoke(Method.java:498)
>         at org.keycloak.Launcher.main(Launcher.java:81)
> Caused by: java.lang.NoClassDefFoundError:
> org/keycloak/authorization/client/Configuration
>         at
> org.keycloak.adapters.authorization.PolicyEnforcer.<
> init>(PolicyEnforcer.java:56)
>         at
> org.keycloak.adapters.KeycloakDeploymentBuilder.internalBuild(
> KeycloakDeploymentBuilder.java:126)
>         at
> org.keycloak.adapters.KeycloakDeploymentBuilder.build(
> KeycloakDeploymentBuilder.java:152)
>         at
> org.keycloak.proxy.ProxyServerBuilder$ApplicationBuilder.<init>(
> ProxyServerBuilder.java:164)
>
> Obviously the library 'keycloak-authz-client-2.4.0.Final.jar' is missing
> in bundle keycloak-proxy-2.4.0.Final.zip.
> Should I open a Jira bug?
>
> Workaround: Just copy the keycloak-authz-client-2.4.0.Final.jar from
> another bundle into lib folder of the security proxy.
>
> Regards,
>   Manfred
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>