Repository navigation
Replies: 1 comment
|
Crap I figured it out but I have a different problem, I have two instances of keycloak, they are both connected to the same DB, one have admin dashboard access and the other one doesn't (via firewall), I'm adding/updating the clients in the admin one but the changes are not reflected in the other instance, will open a different discussion for it. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Hey all,
I'm trying to map real roles to be part of the JWT token, in the evalute tool inside my client, its showing the following access token payload
{ "exp": 1759335256, "iat": 1759334956, "jti": "onrtna:d28058cd-96a2-6c9c-41d7-c751ba175101", "iss": "https://some_url/realms/some_realm", "sub": "41be9a27-731f-4b15-9b0f-cd2524869e8d", "typ": "Bearer", "azp": "some_app", "sid": "dd35c330-7a20-4a8f-9fa5-82ac882bb204", "acr": "1", "allowed-origins": [ "/*" ], "realm_access": { "roles": [ "logistics_specialist" ] }, "scope": "openid profile email", "email_verified": true, "name": "TestHandHeld TestHandHeld", "preferred_username": "test@test.test", "given_name": "TestHandHeld", "family_name": "TestHandHeld", "email": "test@test.test" }However, when I try to get the JWT token via curl
I'm getting this
{ "exp": 1759335603, "iat": 1759335303, "jti": "onrtro:d359c207-0448-c370-85b5-4ba27187b8b7", "iss": "https://some_url/realms/some_realm", "aud": "account", "sub": "41be9a27-731f-4b15-9b0f-cd2524869e8d", "typ": "Bearer", "azp": "some_app", "sid": "65ff1696-02c6-4ab6-b589-1c682f31dad3", "acr": "1", "allowed-origins": [ "/*" ], "realm_access": { "roles": [ "default-roles-bradford_realm", "offline_access", "uma_authorization" ] }, "resource_access": { "account": { "roles": [ "manage-account", "manage-account-links", "view-profile" ] } }, "scope": "openid testScope profile email", "email_verified": true, "name": "TestHandHeld TestHandHeld", "groups": [ "default-roles-bradford_realm", "offline_access", "uma_authorization" ], "preferred_username": "test@test.test", "given_name": "TestHandHeld", "family_name": "TestHandHeld", "email": "test@test.test" }is there some caching happening that is not sending the roles?
All reactions