Comments (2)
@charlykno64, @DurandA the realm creation needs a few addition for the permission to work.
Added client roles
"client": { "nodejs-apiserver": [ { "name": "user", "clientRole": true }, { "name": "admin", "clientRole": true } ], "nodejs-connect": [] }
Added policy to authorization
"policies": [ { "name": "Default Policy", "description": "A policy that grants access only for users within this realm", "type": "role", "config": { "roles": "[{\"id\":\"user\",\"required\":false},{\"id\":\"nodejs-apiserver/admin\",\"required\":false},{\"id\":\"nodejs-apiserver/user\",\"required\":false},{\"id\":\"admin\",\"required\":false}]" } }, { "name": "Default Permission", "description": "A permission that applies to the default resource type", "type": "resource", "config": { "resources": "[\"resource\"]", "applyPolicies": "[\"Default Policy\"]" } } ]
Added scope to authorization
"scopes": [ { "name": "write" }, { "name": "view" } ]
from keycloak-nodejs-connect.
Same here and tried a few things without success:
- Downgrade node.js to version 9
- Include in claim aud the client
- Weborigins and redirect uri are * (I know that this is a bad idea but after success I can reconnfigure them)
I can obtain an access_token in an iOS app and then when I send the request to the resource with the basic keycloak.protect() method the result is access denied.
Keycloak is running in Docker but node is running in the host machine.
from keycloak-nodejs-connect.
Related Issues (20)
- Port number problem in post_logout_redirect_uri with ipv6 addresses
- Add client_id to logout url HOT 1
- Re-enable and fix `.skip()`ed tests
- Flexibility on token extraction HOT 1
- Support policy-enforcer in keycloak.json for nodejs keycloak-connect adapter HOT 1
- Property 'content' does not exist on type 'Token'
- Create inventory of features of Node.js Connect adapter
- Compare features of Node.js Connect adapter to reccomended alternative
- Write a migration guide for the Node.js Connect adapter HOT 24
- Set a deprecation date for the Node.js Connect adapter HOT 1
- Fully deprecate the Node.js Connect adapter on NPM
- Archive the Node.js Connect adapter on Github HOT 6
- keycloak.logoutUrl do not include the redirectUrl unless the idTokenHint is also passed
- Update the Keycloak Documentation HOT 6
- Allow multiple auth-server-urls HOT 1
- Proposal: use `jose` package as alternative to `keycloak-nodejs-connect` HOT 12
- getGrant hides the cause of grant validation failure
- Remove chromedriver prod dependency? HOT 1
- Docs on deprication of nodejs adapter HOT 1
- KeyCloakConfig does not allow to configure trust for key fetching HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from keycloak-nodejs-connect.