commit
6124fd64f3
2 changed files with 2 additions and 2 deletions
|
@ -802,7 +802,7 @@ public class SecretQuestionRequiredActionFactory implements RequiredActionFactor
|
||||||
<section>
|
<section>
|
||||||
<title>Packaging the Action</title>
|
<title>Packaging the Action</title>
|
||||||
<para>
|
<para>
|
||||||
You will package your classes within a single jar. This jar must contain a file named <literal>org.keycloak.authentication.ForActionFactory</literal>
|
You will package your classes within a single jar. This jar must contain a file named <literal>org.keycloak.authentication.FormActionFactory</literal>
|
||||||
and must be contained in the <literal>META-INF/services/</literal> directory of your jar. This file must list the fully qualified classname
|
and must be contained in the <literal>META-INF/services/</literal> directory of your jar. This file must list the fully qualified classname
|
||||||
of each FormActionFactory implementation you have in the jar. For example:
|
of each FormActionFactory implementation you have in the jar. For example:
|
||||||
<programlisting>
|
<programlisting>
|
||||||
|
|
|
@ -214,7 +214,7 @@ public class IdentityBrokerService implements IdentityProvider.AuthenticationCal
|
||||||
Map<String, AccessToken.Access> resourceAccess = token.getResourceAccess();
|
Map<String, AccessToken.Access> resourceAccess = token.getResourceAccess();
|
||||||
AccessToken.Access brokerRoles = resourceAccess == null ? null : resourceAccess.get(Constants.BROKER_SERVICE_CLIENT_ID);
|
AccessToken.Access brokerRoles = resourceAccess == null ? null : resourceAccess.get(Constants.BROKER_SERVICE_CLIENT_ID);
|
||||||
if (brokerRoles == null || !brokerRoles.isUserInRole(Constants.READ_TOKEN_ROLE)) {
|
if (brokerRoles == null || !brokerRoles.isUserInRole(Constants.READ_TOKEN_ROLE)) {
|
||||||
return corsResponse(forbidden("Client [" + audience + "] not authorized to retrieve tokens from identity provider [" + providerId + "]."), clientModel);
|
return corsResponse(forbidden("Client [" + clientModel.getClientId() + "] not authorized to retrieve tokens from identity provider [" + providerId + "]."), clientModel);
|
||||||
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue