You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hello, I would like to know what is the most appropriate way to use keycloak authorization to protect a given resource / action.
Let's say we have the simple use case where a user uses online banking.
I login using keycloak basic code flow
I am redirected to my bank account
I can check my messages, dashboard and so on
I go to "transfer money"
Before I can send the money, a redirect to keycloak is done with a custom flow that requires an SMS pin validation (or other 2FA)
(Bonus): The challenge is only shown if sum is bigger than X
I understand that I can use keycloak Authorization JS policies where I can have fine-grained property based authorization logic, but I have no idea how to put everything together.
Any advise or reference to appropriate documentation / tutorial is very appreciated !
Best Regards
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Hello, I would like to know what is the most appropriate way to use keycloak authorization to protect a given resource / action.
Let's say we have the simple use case where a user uses online banking.
I understand that I can use keycloak Authorization JS policies where I can have fine-grained property based authorization logic, but I have no idea how to put everything together.
Any advise or reference to appropriate documentation / tutorial is very appreciated !
Best Regards
All reactions