diff --git a/images/getting-started/hello-world/access-denied-page.png b/keycloak-images/getting-started/hello-world/access-denied-page.png similarity index 100% rename from images/getting-started/hello-world/access-denied-page.png rename to keycloak-images/getting-started/hello-world/access-denied-page.png diff --git a/images/getting-started/hello-world/adapter-config.png b/keycloak-images/getting-started/hello-world/adapter-config.png similarity index 100% rename from images/getting-started/hello-world/adapter-config.png rename to keycloak-images/getting-started/hello-world/adapter-config.png diff --git a/images/getting-started/hello-world/authz-settings.png b/keycloak-images/getting-started/hello-world/authz-settings.png similarity index 100% rename from images/getting-started/hello-world/authz-settings.png rename to keycloak-images/getting-started/hello-world/authz-settings.png diff --git a/images/getting-started/hello-world/create-client.png b/keycloak-images/getting-started/hello-world/create-client.png similarity index 100% rename from images/getting-started/hello-world/create-client.png rename to keycloak-images/getting-started/hello-world/create-client.png diff --git a/images/getting-started/hello-world/create-realm.png b/keycloak-images/getting-started/hello-world/create-realm.png similarity index 100% rename from images/getting-started/hello-world/create-realm.png rename to keycloak-images/getting-started/hello-world/create-realm.png diff --git a/images/getting-started/hello-world/create-scope.png b/keycloak-images/getting-started/hello-world/create-scope.png similarity index 100% rename from images/getting-started/hello-world/create-scope.png rename to keycloak-images/getting-started/hello-world/create-scope.png diff --git a/images/getting-started/hello-world/create-user.png b/keycloak-images/getting-started/hello-world/create-user.png similarity index 100% rename from images/getting-started/hello-world/create-user.png rename to keycloak-images/getting-started/hello-world/create-user.png diff --git a/images/getting-started/hello-world/enable-authz.png b/keycloak-images/getting-started/hello-world/enable-authz.png similarity index 100% rename from images/getting-started/hello-world/enable-authz.png rename to keycloak-images/getting-started/hello-world/enable-authz.png diff --git a/images/getting-started/hello-world/login-page.png b/keycloak-images/getting-started/hello-world/login-page.png similarity index 100% rename from images/getting-started/hello-world/login-page.png rename to keycloak-images/getting-started/hello-world/login-page.png diff --git a/images/getting-started/hello-world/main-page.png b/keycloak-images/getting-started/hello-world/main-page.png similarity index 100% rename from images/getting-started/hello-world/main-page.png rename to keycloak-images/getting-started/hello-world/main-page.png diff --git a/images/getting-started/hello-world/reset-user-pwd.png b/keycloak-images/getting-started/hello-world/reset-user-pwd.png similarity index 100% rename from images/getting-started/hello-world/reset-user-pwd.png rename to keycloak-images/getting-started/hello-world/reset-user-pwd.png diff --git a/images/getting-started/kc-start-page.png b/keycloak-images/getting-started/kc-start-page.png similarity index 100% rename from images/getting-started/kc-start-page.png rename to keycloak-images/getting-started/kc-start-page.png diff --git a/images/permission/create-resource.png b/keycloak-images/permission/create-resource.png similarity index 100% rename from images/permission/create-resource.png rename to keycloak-images/permission/create-resource.png diff --git a/images/permission/create-scope.png b/keycloak-images/permission/create-scope.png similarity index 100% rename from images/permission/create-scope.png rename to keycloak-images/permission/create-scope.png diff --git a/images/typed-resource-perm-example.png b/keycloak-images/permission/typed-resource-perm-example.png similarity index 100% rename from images/typed-resource-perm-example.png rename to keycloak-images/permission/typed-resource-perm-example.png diff --git a/images/permission/view.png b/keycloak-images/permission/view.png similarity index 100% rename from images/permission/view.png rename to keycloak-images/permission/view.png diff --git a/images/policy-evaluation-tool.png b/keycloak-images/policy-evaluation-tool/policy-evaluation-tool.png similarity index 100% rename from images/policy-evaluation-tool.png rename to keycloak-images/policy-evaluation-tool/policy-evaluation-tool.png diff --git a/images/policy/create-aggregated.png b/keycloak-images/policy/create-aggregated.png similarity index 100% rename from images/policy/create-aggregated.png rename to keycloak-images/policy/create-aggregated.png diff --git a/images/policy/create-drools.png b/keycloak-images/policy/create-drools.png similarity index 100% rename from images/policy/create-drools.png rename to keycloak-images/policy/create-drools.png diff --git a/images/policy/create-js.png b/keycloak-images/policy/create-js.png similarity index 100% rename from images/policy/create-js.png rename to keycloak-images/policy/create-js.png diff --git a/images/policy/create-role.png b/keycloak-images/policy/create-role.png similarity index 100% rename from images/policy/create-role.png rename to keycloak-images/policy/create-role.png diff --git a/images/policy/create-time.png b/keycloak-images/policy/create-time.png similarity index 100% rename from images/policy/create-time.png rename to keycloak-images/policy/create-time.png diff --git a/images/policy/create-user.png b/keycloak-images/policy/create-user.png similarity index 100% rename from images/policy/create-user.png rename to keycloak-images/policy/create-user.png diff --git a/images/policy/view.png b/keycloak-images/policy/view.png similarity index 100% rename from images/policy/view.png rename to keycloak-images/policy/view.png diff --git a/images/resource-server/authz-export.png b/keycloak-images/resource-server/authz-export.png similarity index 100% rename from images/resource-server/authz-export.png rename to keycloak-images/resource-server/authz-export.png diff --git a/images/resource-server/authz-settings.png b/keycloak-images/resource-server/authz-settings.png similarity index 100% rename from images/resource-server/authz-settings.png rename to keycloak-images/resource-server/authz-settings.png diff --git a/images/resource-server/client-create.png b/keycloak-images/resource-server/client-create.png similarity index 100% rename from images/resource-server/client-create.png rename to keycloak-images/resource-server/client-create.png diff --git a/images/resource-server/client-enable-authz.png b/keycloak-images/resource-server/client-enable-authz.png similarity index 100% rename from images/resource-server/client-enable-authz.png rename to keycloak-images/resource-server/client-enable-authz.png diff --git a/images/resource-server/client-list.png b/keycloak-images/resource-server/client-list.png similarity index 100% rename from images/resource-server/client-list.png rename to keycloak-images/resource-server/client-list.png diff --git a/images/resource-server/create.png b/keycloak-images/resource-server/create.png similarity index 100% rename from images/resource-server/create.png rename to keycloak-images/resource-server/create.png diff --git a/images/resource-server/default-permission.png b/keycloak-images/resource-server/default-permission.png similarity index 100% rename from images/resource-server/default-permission.png rename to keycloak-images/resource-server/default-permission.png diff --git a/images/resource-server/default-policy.png b/keycloak-images/resource-server/default-policy.png similarity index 100% rename from images/resource-server/default-policy.png rename to keycloak-images/resource-server/default-policy.png diff --git a/images/resource-server/default-resource.png b/keycloak-images/resource-server/default-resource.png similarity index 100% rename from images/resource-server/default-resource.png rename to keycloak-images/resource-server/default-resource.png diff --git a/images/resource-server/manage.png b/keycloak-images/resource-server/manage.png similarity index 100% rename from images/resource-server/manage.png rename to keycloak-images/resource-server/manage.png diff --git a/images/resource-server/view.png b/keycloak-images/resource-server/view.png similarity index 100% rename from images/resource-server/view.png rename to keycloak-images/resource-server/view.png diff --git a/images/resource/create.png b/keycloak-images/resource/create.png similarity index 100% rename from images/resource/create.png rename to keycloak-images/resource/create.png diff --git a/images/resource/view.png b/keycloak-images/resource/view.png similarity index 100% rename from images/resource/view.png rename to keycloak-images/resource/view.png diff --git a/images/service/rs-uma-authorization-role.png b/keycloak-images/service/rs-uma-authorization-role.png similarity index 100% rename from images/service/rs-uma-authorization-role.png rename to keycloak-images/service/rs-uma-authorization-role.png diff --git a/images/service/rs-uma-protection-role.png b/keycloak-images/service/rs-uma-protection-role.png similarity index 100% rename from images/service/rs-uma-protection-role.png rename to keycloak-images/service/rs-uma-protection-role.png diff --git a/rhsso-images/getting-started/hello-world/access-denied-page.png b/rhsso-images/getting-started/hello-world/access-denied-page.png new file mode 100644 index 0000000000..365bd215da Binary files /dev/null and b/rhsso-images/getting-started/hello-world/access-denied-page.png differ diff --git a/rhsso-images/getting-started/hello-world/adapter-config.png b/rhsso-images/getting-started/hello-world/adapter-config.png new file mode 100644 index 0000000000..9879d00d64 Binary files /dev/null and b/rhsso-images/getting-started/hello-world/adapter-config.png differ diff --git a/rhsso-images/getting-started/hello-world/authz-settings.png b/rhsso-images/getting-started/hello-world/authz-settings.png new file mode 100644 index 0000000000..9ad5b08274 Binary files /dev/null and b/rhsso-images/getting-started/hello-world/authz-settings.png differ diff --git a/rhsso-images/getting-started/hello-world/create-client.png b/rhsso-images/getting-started/hello-world/create-client.png new file mode 100644 index 0000000000..f19ce62a87 Binary files /dev/null and b/rhsso-images/getting-started/hello-world/create-client.png differ diff --git a/rhsso-images/getting-started/hello-world/create-realm.png b/rhsso-images/getting-started/hello-world/create-realm.png new file mode 100644 index 0000000000..61a2047fe4 Binary files /dev/null and b/rhsso-images/getting-started/hello-world/create-realm.png differ diff --git a/rhsso-images/getting-started/hello-world/create-scope.png b/rhsso-images/getting-started/hello-world/create-scope.png new file mode 100644 index 0000000000..55147e663f Binary files /dev/null and b/rhsso-images/getting-started/hello-world/create-scope.png differ diff --git a/rhsso-images/getting-started/hello-world/create-user.png b/rhsso-images/getting-started/hello-world/create-user.png new file mode 100644 index 0000000000..7ed5f6025f Binary files /dev/null and b/rhsso-images/getting-started/hello-world/create-user.png differ diff --git a/rhsso-images/getting-started/hello-world/enable-authz.png b/rhsso-images/getting-started/hello-world/enable-authz.png new file mode 100644 index 0000000000..e4790726c2 Binary files /dev/null and b/rhsso-images/getting-started/hello-world/enable-authz.png differ diff --git a/rhsso-images/getting-started/hello-world/login-page.png b/rhsso-images/getting-started/hello-world/login-page.png new file mode 100644 index 0000000000..c6bfb24663 Binary files /dev/null and b/rhsso-images/getting-started/hello-world/login-page.png differ diff --git a/rhsso-images/getting-started/hello-world/main-page.png b/rhsso-images/getting-started/hello-world/main-page.png new file mode 100644 index 0000000000..89da720778 Binary files /dev/null and b/rhsso-images/getting-started/hello-world/main-page.png differ diff --git a/rhsso-images/getting-started/hello-world/reset-user-pwd.png b/rhsso-images/getting-started/hello-world/reset-user-pwd.png new file mode 100644 index 0000000000..fd34d115a6 Binary files /dev/null and b/rhsso-images/getting-started/hello-world/reset-user-pwd.png differ diff --git a/rhsso-images/getting-started/kc-start-page.png b/rhsso-images/getting-started/kc-start-page.png new file mode 100644 index 0000000000..9975721460 Binary files /dev/null and b/rhsso-images/getting-started/kc-start-page.png differ diff --git a/rhsso-images/permission/create-resource.png b/rhsso-images/permission/create-resource.png new file mode 100644 index 0000000000..6d8ea0fd07 Binary files /dev/null and b/rhsso-images/permission/create-resource.png differ diff --git a/rhsso-images/permission/create-scope.png b/rhsso-images/permission/create-scope.png new file mode 100644 index 0000000000..cc7340df3a Binary files /dev/null and b/rhsso-images/permission/create-scope.png differ diff --git a/rhsso-images/permission/typed-resource-perm-example.png b/rhsso-images/permission/typed-resource-perm-example.png new file mode 100644 index 0000000000..6692333d3f Binary files /dev/null and b/rhsso-images/permission/typed-resource-perm-example.png differ diff --git a/rhsso-images/permission/view.png b/rhsso-images/permission/view.png new file mode 100644 index 0000000000..15e789c01d Binary files /dev/null and b/rhsso-images/permission/view.png differ diff --git a/rhsso-images/policy-evaluation-tool/policy-evaluation-tool.png b/rhsso-images/policy-evaluation-tool/policy-evaluation-tool.png new file mode 100644 index 0000000000..ba97e796f2 Binary files /dev/null and b/rhsso-images/policy-evaluation-tool/policy-evaluation-tool.png differ diff --git a/rhsso-images/policy/create-aggregated.png b/rhsso-images/policy/create-aggregated.png new file mode 100644 index 0000000000..e081657404 Binary files /dev/null and b/rhsso-images/policy/create-aggregated.png differ diff --git a/rhsso-images/policy/create-drools.png b/rhsso-images/policy/create-drools.png new file mode 100644 index 0000000000..754c2cf3f3 Binary files /dev/null and b/rhsso-images/policy/create-drools.png differ diff --git a/rhsso-images/policy/create-js.png b/rhsso-images/policy/create-js.png new file mode 100644 index 0000000000..ea9075a4a6 Binary files /dev/null and b/rhsso-images/policy/create-js.png differ diff --git a/rhsso-images/policy/create-role.png b/rhsso-images/policy/create-role.png new file mode 100644 index 0000000000..e4dcf23bc4 Binary files /dev/null and b/rhsso-images/policy/create-role.png differ diff --git a/rhsso-images/policy/create-time.png b/rhsso-images/policy/create-time.png new file mode 100644 index 0000000000..9bbdb8ff14 Binary files /dev/null and b/rhsso-images/policy/create-time.png differ diff --git a/rhsso-images/policy/create-user.png b/rhsso-images/policy/create-user.png new file mode 100644 index 0000000000..a450daf2b0 Binary files /dev/null and b/rhsso-images/policy/create-user.png differ diff --git a/rhsso-images/policy/view.png b/rhsso-images/policy/view.png new file mode 100644 index 0000000000..d8cf612d1e Binary files /dev/null and b/rhsso-images/policy/view.png differ diff --git a/rhsso-images/resource-server/authz-export.png b/rhsso-images/resource-server/authz-export.png new file mode 100644 index 0000000000..6ee6deab23 Binary files /dev/null and b/rhsso-images/resource-server/authz-export.png differ diff --git a/rhsso-images/resource-server/authz-settings.png b/rhsso-images/resource-server/authz-settings.png new file mode 100644 index 0000000000..353c445caf Binary files /dev/null and b/rhsso-images/resource-server/authz-settings.png differ diff --git a/rhsso-images/resource-server/client-create.png b/rhsso-images/resource-server/client-create.png new file mode 100644 index 0000000000..f0efee605a Binary files /dev/null and b/rhsso-images/resource-server/client-create.png differ diff --git a/rhsso-images/resource-server/client-enable-authz.png b/rhsso-images/resource-server/client-enable-authz.png new file mode 100644 index 0000000000..455078b923 Binary files /dev/null and b/rhsso-images/resource-server/client-enable-authz.png differ diff --git a/rhsso-images/resource-server/client-list.png b/rhsso-images/resource-server/client-list.png new file mode 100644 index 0000000000..01b792efd7 Binary files /dev/null and b/rhsso-images/resource-server/client-list.png differ diff --git a/rhsso-images/resource-server/create.png b/rhsso-images/resource-server/create.png new file mode 100644 index 0000000000..3940e1f5b1 Binary files /dev/null and b/rhsso-images/resource-server/create.png differ diff --git a/rhsso-images/resource-server/default-permission.png b/rhsso-images/resource-server/default-permission.png new file mode 100644 index 0000000000..5f14e36b2c Binary files /dev/null and b/rhsso-images/resource-server/default-permission.png differ diff --git a/rhsso-images/resource-server/default-policy.png b/rhsso-images/resource-server/default-policy.png new file mode 100644 index 0000000000..0493759fd3 Binary files /dev/null and b/rhsso-images/resource-server/default-policy.png differ diff --git a/rhsso-images/resource-server/default-resource.png b/rhsso-images/resource-server/default-resource.png new file mode 100644 index 0000000000..983a0ac9a7 Binary files /dev/null and b/rhsso-images/resource-server/default-resource.png differ diff --git a/rhsso-images/resource-server/manage.png b/rhsso-images/resource-server/manage.png new file mode 100644 index 0000000000..d0d040f8b8 Binary files /dev/null and b/rhsso-images/resource-server/manage.png differ diff --git a/rhsso-images/resource-server/view.png b/rhsso-images/resource-server/view.png new file mode 100644 index 0000000000..fd7835ee5f Binary files /dev/null and b/rhsso-images/resource-server/view.png differ diff --git a/rhsso-images/resource/create.png b/rhsso-images/resource/create.png new file mode 100644 index 0000000000..aa25daa948 Binary files /dev/null and b/rhsso-images/resource/create.png differ diff --git a/rhsso-images/resource/view.png b/rhsso-images/resource/view.png new file mode 100644 index 0000000000..14e73e589d Binary files /dev/null and b/rhsso-images/resource/view.png differ diff --git a/rhsso-images/service/rs-uma-authorization-role.png b/rhsso-images/service/rs-uma-authorization-role.png new file mode 100644 index 0000000000..60476ee41d Binary files /dev/null and b/rhsso-images/service/rs-uma-authorization-role.png differ diff --git a/rhsso-images/service/rs-uma-protection-role.png b/rhsso-images/service/rs-uma-protection-role.png new file mode 100644 index 0000000000..d66d20ed0e Binary files /dev/null and b/rhsso-images/service/rs-uma-protection-role.png differ diff --git a/topics/getting-started/hello-world/before-start.adoc b/topics/getting-started/hello-world/before-start.adoc index 58053f5774..43525f50da 100644 --- a/topics/getting-started/hello-world/before-start.adoc +++ b/topics/getting-started/hello-world/before-start.adoc @@ -9,7 +9,7 @@ Ensure you have a {{book.project.name}} instance running; the default configurat Administration Console, a page similar to this one is displayed: .{{book.project.name}} Administration Console -image:../../images/getting-started/kc-start-page.png[alt="{{book.project.name}} Administration Console"] +image:../../{{book.images}}/getting-started/kc-start-page.png[alt="{{book.project.name}} Administration Console"] The source code for the getting started tutorials can be obtained from the demo distributions. The authorization-related examples are located at *${KEYCLOAK_DEMO_SERVER_DIR}/examples/authz*. \ No newline at end of file diff --git a/topics/getting-started/hello-world/create-realm.adoc b/topics/getting-started/hello-world/create-realm.adoc index dab1bc0b2f..9b3f29e58e 100644 --- a/topics/getting-started/hello-world/create-realm.adoc +++ b/topics/getting-started/hello-world/create-realm.adoc @@ -12,7 +12,7 @@ To create a realm and a user complete the following steps: . Create a realm with a name *hello-world-authz*. Once created, a page similar to the following is displayed: + .Realm hello-world-authz -image:../../../images/getting-started/hello-world/create-realm.png[alt="Realm hello-world-authz"] +image:../../../{{book.images}}/getting-started/hello-world/create-realm.png[alt="Realm hello-world-authz"] . Create a user for your newly created realm. Click *Users*. The user list page opens. @@ -21,12 +21,12 @@ image:../../../images/getting-started/hello-world/create-realm.png[alt="Realm he . Complete the fields as shown in the screenshot below to create a new user with the username of *alice* and then click *Save*. + .Add User -image:../../../images/getting-started/hello-world/create-user.png[alt="Add User"] +image:../../../{{book.images}}/getting-started/hello-world/create-user.png[alt="Add User"] . Set a password for the *alice* user by clicking the *Credentials* tab. + .Set User Password -image:../../../images/getting-started/hello-world/reset-user-pwd.png[alt="Set User Password"] +image:../../../{{book.images}}/getting-started/hello-world/reset-user-pwd.png[alt="Set User Password"] . Complete the *New Password* and *Password Confirmation* fields with a password and click the *Temporary* switch to *OFF*. diff --git a/topics/getting-started/hello-world/create-resource-server.adoc b/topics/getting-started/hello-world/create-resource-server.adoc index 422772ff94..00fc6dbc41 100644 --- a/topics/getting-started/hello-world/create-resource-server.adoc +++ b/topics/getting-started/hello-world/create-resource-server.adoc @@ -8,12 +8,12 @@ To create a new client, complete the following steps: . Click *Clients* to start creating a new client application and fill in the fields as shown in the screenshot below: + .Create Client Application -image:../../../images/getting-started/hello-world/create-client.png[alt="Create Client Application"] +image:../../../{{book.images}}/getting-started/hello-world/create-client.png[alt="Create Client Application"] . Click *Save*. The Client Details page is displayed. + .Client Details -image:../../../images/getting-started/hello-world/enable-authz.png[alt="Client Details"] +image:../../../{{book.images}}/getting-started/hello-world/enable-authz.png[alt="Client Details"] . On the Client Details page, click the *Authorization Enabled* switch to *ON*, and then click *Save*. A new *Authorization* tab is displayed for the client. @@ -21,7 +21,7 @@ A new *Authorization* tab is displayed for the client. . Click the *Authorization* tab and an Authorization Settings page similar to the following is displayed: + .Authorization Settings -image:../../../images/getting-started/hello-world/authz-settings.png[alt="Authorization Settings"] +image:../../../{{book.images}}/getting-started/hello-world/authz-settings.png[alt="Authorization Settings"] When you enable authorization services for a client application, {{book.project.name}} automatically creates several <> for your client authorization configuration. diff --git a/topics/getting-started/hello-world/deploy.adoc b/topics/getting-started/hello-world/deploy.adoc index 315972639c..195ad51a78 100644 --- a/topics/getting-started/hello-world/deploy.adoc +++ b/topics/getting-started/hello-world/deploy.adoc @@ -12,12 +12,12 @@ To obtain the adapter configuration from the {{book.project.name}} Administratio . Click *Clients*. In the client listing, click the *hello-world-authz-service* client application. The Client Details page opens. + .Client Details -image:../../../images/getting-started/hello-world/enable-authz.png[alt="Client Details"] +image:../../../{{book.images}}/getting-started/hello-world/enable-authz.png[alt="Client Details"] . Click the *Installation* tab. From the Format Option dropdown list, select *Keycloak OIDC JSON*. The adapter configuration is displayed in JSON format. Click *Download*. + .Adapter Configuration -image:../../../images/getting-started/hello-world/adapter-config.png[alt="Adapter Configuration"] +image:../../../{{book.images}}/getting-started/hello-world/adapter-config.png[alt="Adapter Configuration"] . Navigate to the *${KEYCLOAK_DEMO_SERVER_DIR}/examples/authz/hello-world-authz-service/src/main/webapp/WEB-INF* directory and locate the *keycloak.json* file. Replace its contents with the adapter configuration you obtained from step 2 and save the file. @@ -44,12 +44,12 @@ mvn clean package wildfly:deploy If your application was successfully deployed you can access it at http://localhost:8080/hello-world-authz-service[http://localhost:8080/hello-world-authz-service]. The {{book.project.name}} Login page opens. .Login Page -image:../../../images/getting-started/hello-world/login-page.png[alt="Login Page"] +image:../../../{{book.images}}/getting-started/hello-world/login-page.png[alt="Login Page"] Log in as *alice* using the password you specified for that user. After authenticating, the following page is displayed: .Hello World Authz Main Page -image:../../../images/getting-started/hello-world/main-page.png[alt="Hello World Authz Main Page"] +image:../../../{{book.images}}/getting-started/hello-world/main-page.png[alt="Hello World Authz Main Page"] The <> defined by {{book.project.name}} when you enable authorization services for a client application provide a simple policy that always grants access to the resources protected by this policy. @@ -68,7 +68,7 @@ $evaluation.deny(); Now, log out of the demo application and log in again. You can no longer access the application. -image:../../../images/getting-started/hello-world/access-denied-page.png[alt="Access Denied Page"] +image:../../../{{book.images}}/getting-started/hello-world/access-denied-page.png[alt="Access Denied Page"] Let's fix that now, but instead of changing the `Default Policy` code we are going to change the `Logic` to `Negative` using the dropdown list below the policy code text area. That re-enables access to the application as we are negating the result of that policy, which is by default denying all requests for access. Again, before testing this change, be sure to log out and log in again. diff --git a/topics/getting-started/overview.adoc b/topics/getting-started/overview.adoc index 83e6a56f25..0d60c06b32 100644 --- a/topics/getting-started/overview.adoc +++ b/topics/getting-started/overview.adoc @@ -15,7 +15,7 @@ Ensure you have a {{book.project.name}} instance running; the default configurat Administration Console, a page similar to this one is displayed: .{{book.project.name}} Administration Console -image:../../images/getting-started/kc-start-page.png[alt="{{book.project.name}} Administration Console"] +image:../../{{book.images}}/getting-started/kc-start-page.png[alt="{{book.project.name}} Administration Console"] All source code for the getting started tutorials can be obtained from the demo distributions. The authorization-related examples are located at *${KEYCLOAK_DEMO_SERVER_DIR}/examples/authz*. diff --git a/topics/permission/create-resource.adoc b/topics/permission/create-resource.adoc index dbae915e06..1ee69550a8 100755 --- a/topics/permission/create-resource.adoc +++ b/topics/permission/create-resource.adoc @@ -6,7 +6,7 @@ A resource-based permission defines a set of one or more resources to protect us To create a new resource-based permission, select *Resource-based* in the dropdown list in the upper right corner of the permission listing. .Add Resource-Based Permission -image:../../images/permission/create-resource.png[alt="Add Resource-Based Permission"] +image:../../{{book.images}}/permission/create-resource.png[alt="Add Resource-Based Permission"] ==== Configuration diff --git a/topics/permission/create-scope.adoc b/topics/permission/create-scope.adoc index bf31989bea..b1e8729c0d 100755 --- a/topics/permission/create-scope.adoc +++ b/topics/permission/create-scope.adoc @@ -6,7 +6,7 @@ A scope-based permission defines a set of one or more scopes to protect using a To create a new scope-based permission, select *Scope-based* in the dropdown list in the upper right corner of the permission listing. .Add Scope-Based Permission -image:../../images/permission/create-scope.png[alt="Add Scope-Based Permission"] +image:../../{{book.images}}/permission/create-scope.png[alt="Add Scope-Based Permission"] ==== Configuration diff --git a/topics/permission/overview.adoc b/topics/permission/overview.adoc index 5cbd98df61..b9f7d227ca 100755 --- a/topics/permission/overview.adoc +++ b/topics/permission/overview.adoc @@ -7,7 +7,7 @@ After creating the resources you want to protect and the policies you want to us you can start managing permissions. To manage permissions, click the *Permissions* tab when editing a resource server. .Permissions -image:../../images/permission/view.png[alt="Permissions"] +image:../../{{book.images}}/permission/view.png[alt="Permissions"] Permissions can be created to protect two main types of objects: diff --git a/topics/permission/typed-resource-permission.adoc b/topics/permission/typed-resource-permission.adoc index 39c51f4494..e73be604b2 100755 --- a/topics/permission/typed-resource-permission.adoc +++ b/topics/permission/typed-resource-permission.adoc @@ -13,4 +13,4 @@ To create a typed resource permission, click <> defining a condition that always grants access to the resources protected by this policy. If you click this policy you can see that it defines a rule as follows: @@ -37,7 +37,7 @@ $evaluation.grant(); Lastly, the default permission is referred to as the *default permission* and you can view it if you navigate to the *Permissions* tab. .Default Permission -image:../../images/resource-server/default-permission.png[alt="Default Permission"] +image:../../{{book.images}}/resource-server/default-permission.png[alt="Default Permission"] This permission is a <>, defining a set of one or more policies that are applied to all resources with a given type. diff --git a/topics/resource-server/enable-authorization.adoc b/topics/resource-server/enable-authorization.adoc index f1f08d4341..4f5dde7db3 100755 --- a/topics/resource-server/enable-authorization.adoc +++ b/topics/resource-server/enable-authorization.adoc @@ -4,12 +4,12 @@ To turn your OIDC Client Application into a resource server and enable fine-grained authorization, click the *Authorization Enabled* switch to *ON* and click *Save*. .Enabling Authorization Services -image:../../images/resource-server/client-enable-authz.png[alt="Enabling Authorization Services"] +image:../../{{book.images}}/resource-server/client-enable-authz.png[alt="Enabling Authorization Services"] A new Authorization tab is displayed for this client. Click the *Authorization* tab and a page similar to the following is displayed: .Resource Server Settings -image:../../images/resource-server/authz-settings.png[alt="Resource Server Settings"] +image:../../{{book.images}}/resource-server/authz-settings.png[alt="Resource Server Settings"] The Authorization tab contains additional sub-tabs covering the different steps that you must follow to actually protect your application's resources. Each tab is covered separately by a specific topic in this documentation. But here is a quick description about each one: diff --git a/topics/resource-server/import-config.adoc b/topics/resource-server/import-config.adoc index 4bfb32b038..78fbed1ada 100755 --- a/topics/resource-server/import-config.adoc +++ b/topics/resource-server/import-config.adoc @@ -14,12 +14,12 @@ To export a configuration file, complete the following steps: . Navigate to the *Resource Server Settings* page. + .Resource Server Settings -image:../../images/resource-server/authz-settings.png[alt="Resource Server Settings"] +image:../../{{book.images}}/resource-server/authz-settings.png[alt="Resource Server Settings"] . On this page, in the Export Settings section, click *Export*. + .Export Settings -image:../../images/resource-server/authz-export.png[alt="Export Settings"] +image:../../{{book.images}}/resource-server/authz-export.png[alt="Export Settings"] The configuration file is exported in JSON format and displayed in a text area, from which you can copy and paste. You can also click *Download* to download the configuration file and save it. diff --git a/topics/resource/create.adoc b/topics/resource/create.adoc index 66a4956f90..c7178571fa 100755 --- a/topics/resource/create.adoc +++ b/topics/resource/create.adoc @@ -7,7 +7,7 @@ be created to represent a set of one or more resources and the way you define th To create a new resource, click *Create* in the right upper corner of the resource listing. .Add Resource -image:../../images/resource/create.png[alt="Add Resource"] +image:../../{{book.images}}/resource/create.png[alt="Add Resource"] In {{book.project.name}}, a resource defines a small set of information that is common to different types of resources, such as: diff --git a/topics/resource/view.adoc b/topics/resource/view.adoc index f6900472c2..5306518a21 100755 --- a/topics/resource/view.adoc +++ b/topics/resource/view.adoc @@ -4,7 +4,7 @@ On the *Resource* page, you see a list of the resources associated with a resource server. .Resources -image:../../images/resource/view.png[alt="Resources"] +image:../../{{book.images}}/resource/view.png[alt="Resources"] The resource list provides information about the protected resources, such as: diff --git a/topics/service/authorization/whatis-obtain-aat.adoc b/topics/service/authorization/whatis-obtain-aat.adoc index b4f5fa9eaa..2ac2fa018a 100755 --- a/topics/service/authorization/whatis-obtain-aat.adoc +++ b/topics/service/authorization/whatis-obtain-aat.adoc @@ -5,7 +5,7 @@ An authorization API token (AAT) is a special OAuth2 access token with the scope assigns the role _uma_authorization_ to the user. The _uma_authorization_ role is a default realm role. .Default Role uma_authorization -image:../../../images/service/rs-uma-authorization-role.png[alt="Default Role uma_authorization "] +image:../../../{{book.images}}/service/rs-uma-authorization-role.png[alt="Default Role uma_authorization "] An AAT enables a client application to query the server for user permissions. diff --git a/topics/service/protection/whatis-obtain-pat.adoc b/topics/service/protection/whatis-obtain-pat.adoc index a156d163b5..8d1cd67ab1 100755 --- a/topics/service/protection/whatis-obtain-pat.adoc +++ b/topics/service/protection/whatis-obtain-pat.adoc @@ -5,7 +5,7 @@ A *protection API token* (PAT) is a special OAuth2 access token with a scope def creates a role, _uma_protection_, for the corresponding client application and associates it with the client's service account. .Service Account granted with *uma_protection* role -image:../../../images/service/rs-uma-protection-role.png[alt="Service Account granted with uma_protection role"] +image:../../../{{book.images}}/service/rs-uma-protection-role.png[alt="Service Account granted with uma_protection role"] Resource servers can obtain a PAT from {{book.project.name}} like any other OAuth2 access token. For example, using curl: