You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Exposing selected client roles from all realms
#14630
My end goal is to slim down the access token so it does not contain all client roles from all existing realms.
I would like to expose only some client roles for every realm that exist and will exist
query-realms
view-realm
Roles should be visible through access token of a client existing in master realm.
I think this can be achieved by creating custom Client Scope with built-in mapper "client roles" and Scope that includes wanted roles for each existing client.
This however forces me to modify that Client Scope every time new realm is created.
I could not find a mapper that would expose only roles.
Hardcoded Role mapper would be good here, but I don't think it allows to specify role name in form ${client_id}.view-realm
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Hi all
My end goal is to slim down the access token so it does not contain all client roles from all existing realms.
I would like to expose only some client roles for every realm that exist and will exist
Roles should be visible through access token of a client existing in master realm.
I think this can be achieved by creating custom Client Scope with built-in mapper "client roles" and Scope that includes wanted roles for each existing client.
This however forces me to modify that Client Scope every time new realm is created.
I could not find a mapper that would expose only roles.
Hardcoded Role mapper would be good here, but I don't think it allows to specify role name in form ${client_id}.view-realm
What would be the best way to achieve it?
I think this is relevant?
#8486
Regards
Daniel
All reactions