[keycloak-user] resource ids

Pedro Igor Silva psilva at redhat.com
Fri Jun 28 10:50:54 EDT 2019


On Thu, Jun 27, 2019 at 11:04 PM Marek Lindner <mareklindner at neomailbox.ch>
wrote:

> On Thursday, 27 June 2019 22:05:00 HKT Pedro Igor Silva wrote:
> > The name attribute is unique for a client+owner basis.
> >
> > The unicity of ids is important as we have optimizations around it.
>
> I fully understand why an ID has to be unique. My question was about the
> name
> being unique per client+owner. What makes the name attribute special to
> require it to be unique per client+owner ?
>

You may have resources with the same name belonging to different owners. I
also forgot to mention that we also have lookups by name on a per owner
basis.


>
>
> > In the future, we are planning to make two main enhancements to resource
> > mgmt:
> >
> > * Resource-less Evaluation, so that you don't actually need to manage
> > resources in Keycloak in order to evaluate policies. This can be done
> today
> > using a single resource and a JS policy though, but we can provide
> > something better.
> > * Resource SPI, so that you can plug your resource store instead of using
> > Keycloak internal database
>
> Great plan!
>
> Cheers,
> Marek
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user


More information about the keycloak-user mailing list