[keycloak-user] Policy Enforcer in Spring Security Adapter

ebondu dev.ebondu at gmail.com
Mon Mar 27 04:25:57 EDT 2017


Hi,

I have been able to use the spring adapter to manage autorizations, however
there is a bug regarding the security context that may be related to your
problem (see  KEYCLOAK-3471 <https://issues.jboss.org/browse/KEYCLOAK-3471> 
).

The policy enforcer will check permissions from the incoming request path,
so unauthorized requests should not be processed by your controller.

Did you set the "enforcement-mode" field to "ENFORCING" in your
keycloak.json ?




--
View this message in context: http://keycloak-user.88327.x6.nabble.com/keycloak-user-Policy-Enforcer-in-Spring-Security-Adapter-tp3324p3326.html
Sent from the keycloak-user mailing list archive at Nabble.com.


More information about the keycloak-user mailing list