Repository navigation
Replies: 1 comment
|
I moved the question to StackOverflow: https://stackoverflow.com/questions/75855902/pushing-claims-to-regex-based-policy-in-keycloak/75896620#75896620 |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Similar to a previously answered question on StackOverflow, I would like to push claims to the token endpoint to use them in policy evaluation in Keycloak v21.0.1.
In contrast to the mentioned question, I want to use the pushed claims in Regex-based policies instead of JavaScript-based policies and set
response_mode=permissionsto obtain the result of the evaluation directly. Is this actually possible?My request looks like this:
The response contains the pushed claims:
The Regex-based policies do not seem to get triggered. From the source code, I can see that a Regex-based policy expects the claims to be contained in
evaluation.getContext().getIdentity().getAttributes(). In my experiments,getClaimValue(evaluation, policy)always returnsnull.Is there any way to map my pushed claims to those identity attributes in the policy evaluation?
All reactions