8000 Allow fetching roles when evaluating role licies by pedroigor · Pull Request #27430 · keycloak/keycloak · GitHub
[go: up one dir, main page]

Skip to content

Allow fetching roles when evaluating role licies - #27430

Merged
mposolda merged 1 commit into
keycloak:mainfrom
pedroigor:issue-20736
Mar 5, 2024
Merged

mposolda merged 1 commit into
keycloak:mainfrom
pedroigor:issue-20736

Conversation

@pedroigor
@pedroigor pedroigor commented Mar 1, 2024 •
Copy link
Copy Markdown
Contributor

Closes #20736

  • Introduces a Fetch Roles setting to the role policy to allow checking for any role associated with the user. Otherwise, only roles available from the token that started the authorization request are considered (current behavior)
  • By enabling this option, clients can now leverage lightweight access tokens (as a subject token) because they are no longer forced to map roles to tokens.

jonkoops
jonkoops previously approved these changes Mar 1, 2024
jonkoops
jonkoops previously approved these changes Mar 1, 2024
Closes keycloak#20736

Signed-off-by: Pedro Igor <pigor.craveiro@gmail.com>
@pedroigor
Copy link
Copy Markdown
Contributor Author

@jonkoops Solving conflicts. @jonkoops Could you please re-approve?

@mposolda Would you mind reviewing and merging?

@mposolda
mposolda merged commit d12711e into keycloak:main Mar 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

uma-ticket returns 403 even though user has access, when User Realm Role isn't present in access Token

3 participants

0