Repository navigation
Tags
Tags
Admin v2: Mask client secrets for view-only users (keycloak#52731) * Admin v2: Mask client secrets for view-only users When a user lacks manage permission on a client, strip client secrets from GET /clients/{client} and GET /clients responses to match v1 behavior. Closes keycloak#52197 Signed-off-by: Shatrughan Rai <polyglot.dev@outlook.com> # Conflicts: # rest/admin-v2/services/src/main/java/org/keycloak/services/client/DefaultClientService.java * Refactor getClientListSecretMaskedForViewOnly test Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Signed-off-by: Shatrughan Rai <polyglot.dev@outlook.com> * Fix: test scope fixes an unclosed Stream in the authorization test by wrapping it in try-with-resources, matching the pattern used in tests. Fixes: keycloak#52197 Signed-off-by: Shatrughan Rai <polyglot.dev@outlook.com> * moving the fix to the new client resource type Signed-off-by: Steve Hawkins <shawkins@redhat.com> --------- Signed-off-by: Shatrughan Rai <polyglot.dev@outlook.com> Signed-off-by: Steve Hawkins <shawkins@redhat.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Steve Hawkins <shawkins@redhat.com>
PreviousNext