java - Keycloak check permissions via Authzclient -


i'm trying check user permissions keycloak server via keycloak authzclient. failing constantly, i'm not sure if have misconceptions process.

authzclient authzclient = authzclient.create(); string eat = authzclient.obtainaccesstoken("tim", "test123").gettoken();  authorizationresource resource = authzclient.authorization(eat);  permissionrequest request = new permissionrequest(); request.setresourcesetname("testresource");  string ticket = authzclient.protection().permission().forresource(request).getticket(); authorizationresponse authresponse = resource.authorize(new authorizationrequest(ticket));  system.out.println(authresponse.getrpt());

the last call authresponse.getrpt() fails 403 forbidden. following settings in admin console evaluates permit?

keycloak evaluation setting

the client config is:

{   "realm": "testrealm",   "auth-server-url": "http://localhost:8080/auth",   "ssl-required": "external",   "resource": "tv",   "credentials": {     "secret": "d0c436f7-ed19-483f-ac84-e3b73b6354f0"   },   "use-resource-role-mappings": true }

the following code: 

authzclient authzclient = authzclient.create(); string eat = authzclient.obtainaccesstoken("tim", "test123").gettoken();  entitlementresponse response = authzclient.entitlement(eat).getall("tv"); string rpt = response.getrpt();  tokenintrospectionresponse requestingpartytoken = authzclient.protection().introspectrequestingpartytoken(rpt);     if (requestingpartytoken.getactive()) {         (permission granted : requestingpartytoken.getpermissions()) {              system.out.println(granted.getresourcesetid()+" "+granted.getresourcesetname()+" "+granted.getscopes());         }     }

just gives me "default resource"

7d0f10d6-6f65-4866-816b-3dc5772fc465 default resource []

but when put default resource in first code snippet 

... permissionrequest request = new permissionrequest(); request.setresourcesetname("default resource"); ...

it fives me 403 . wrong?

kind regards

keycloak server 3.2.1.final. keycloak-authz-client 3.2.0.final.

minutes after posting found problem. sorry. had perform entitlementrequest. 

authzclient authzclient = authzclient.create(); string eat = authzclient.obtainaccesstoken("tim", "test123").gettoken();  permissionrequest request = new permissionrequest(); request.setresourcesetname("testresource");  entitlementrequest entitlementrequest = new entitlementrequest(); entitlementrequest.addpermission(request);  entitlementresponse entitlementresponse = authzclient.entitlement(eat).get("tv", entitlementrequest); string rpt = entitlementresponse.getrpt();  tokenintrospectionresponse requestingpartytoken = authzclient.protection().introspectrequestingpartytoken(rpt); if (requestingpartytoken.getactive()) {     (permission granted : requestingpartytoken.getpermissions()) {         system.out.println(granted.getresourcesetid()+" "+granted.getresourcesetname()+" "+granted.getscopes());     } }

ouputs: 27b3d014-b75a-4f52-a97f-dd01b923d2ef testresource []

kind regards


Comments

Post a Comment

Popular posts from this blog

php - Vagrant up error - Uncaught Reflection Exception: Class DOMDocument does not exist -

i've set bento/ubuntu-16.04 vagrant box using php 5.6, , getting following error quite few times when try , run shell script: "uncaught reflection exception: class domdocument not exist". i've tried adding following top of script (not together), each no success: "sudo apt-get install php5.6-xml", "sudo apt-get install php5-xml", "sudo apt-get install php-dom" i've tried resetting server "sudo service apache2 restart". does have suggestions?
Read more

vue.js - Create hooks for automated testing -

Image
qa guys complained can't automate frontend testing. because our html looks same outside. lazy hack did this <template> <div :role="$options.name"> ... </div> </template> <script> export default { name: 'vmcomponentname' } </script> which takes name script , applies html. in browser get: <div role="vmcomponentname"> ... </div> line :role="$options.name" goes in every component. is there dry er solutions? please share. additional details i'll explain in details looking for. imagine have vmusercreate form creates user. test case can create user . to automatically test without role, have use following selector: .wrapper > .wrapper > .wrapper > .submit-button the test extremely brittle (will break lot). if use roles can use [role="vmusercreateform"] .submit-button selector. many folds less brittle. so basically, i'm ...
Read more

Add new key value to json node in java -

i have json file : { "id":1, "name":"abc", "addressdetails": { "city":"newyork" } } i wanted add 1 more key-value ("pincode" : "414141") node 'addressdetails'. i tried using : objectmapper mapper = new objectmapper(); jsonnode root = mapper.readtree(new file("d://test.json")); objectnode node = mapper.createobjectnode(); node.with("addressdetails").put("pincode", "414141"); but it's not getting added, there way can ? you can try you should modify file path objectmapper mapper = new objectmapper(); objectnode nodes = mapper.readvalue(new file("d:\\test.txt"), objectnode.class); nodes.with("addressdetails").put("pincode", "414141"); mapper.writer().writevalue(new file("d:\\test.txt"), nodes);
Read more