Repository navigation
Replies: 3 comments 3 replies
|
@Basil1991 what do you mean you need both role and permission code ? Does that mean you need exact roles and permissions mapped for users in the token that you receive while logging in ? You can check out client-scope protocol mappers which allows you to add custom claims to your tokens. |
|
@souravs17031999 in my opnion，role like ‘user’，‘admin’，permission like ‘user_manager’,'order_create','order_query'. |
|
@Basil1991 There is one thing you need to note is that in KeyCloak the authentication is happen at the realm level. So that you will be getting the roles which are given for the user in the realm roles. But the permission you will be configured in the Client level by enabling the Authorization. As far as I know you can't get the permission details during the Authentication. |
|
@sridhar1495 thanks. so i should use just realm level authentication , then put client level permission in the application. |
|
@Basil1991 yes you are correct. As per the document link I given itself they have mentioned to get the permission we need to follow those steps. I had gone through different forum and looked for alternatives but could not find any solution for getting the permission in authentication step. |
Uh oh!
There was an error while loading. Please reload this page.
i want to use only authentication, i need add both role and permission code in access_token or userinfo. what should i do?
All reactions