Thomas Darimont
a2d1c8313d
KEYCLOAK-3081: Add client mapper to map user roles to token
...
Introduced two new client protocol mappers to propagate assigned user client / realm roles to a JWT ID/Access Token.
Each protocol mapper supports to use a prefix string that is prepended to each role name.
The client role protocol mapper can specify from which client the roles should be considered.
Composite Roles are resolved recursively.
Background:
Some OpenID Connect integrations like mod_auth_openidc don't support analyzing deeply nested or encoded structures.
In those scenarios it is helpful to be able to define custom client protocol mappers that allow to propagate a users's roles as a flat structure
(e.g. comma separated list) as a top-level (ID/Access) Token attribute that can easily be matched with a regex.
In order to differentiate between client specific roles and realm roles it is possible to configure
both separately to be able to use the same role names with different contexts rendered as separate token attributes.
2016-06-03 15:52:58 +02:00
--add
bda4e117f9
corrections as per review comments
2016-06-03 18:55:19 +05:30
Stan Silvert
c02c169146
Minor changes for Clients chapter.
2016-06-03 09:12:50 -04:00
Stan Silvert
be0c701875
Minor changes for SSO Protocols chapter.
2016-06-03 09:12:49 -04:00
--add
a25aed13ed
resolving compilation errors for the downstream build system
2016-06-03 18:16:22 +05:30
Stian Thorgersen
6cf4c85ffb
Complete JavaScript adapter chapter
2016-06-03 14:28:59 +02:00
Stian Thorgersen
6c76260d06
Merge pull request #8 from stianst/master
...
Misc
2016-06-03 12:36:04 +02:00
Stian Thorgersen
43ffe3c962
Complete Java chapters
2016-06-03 12:35:36 +02:00
Marek Posolda
193233899f
Merge pull request #2910 from mposolda/master
...
KEYCLOAK-3074 AdminEventStoreProviderTest fixes
2016-06-03 11:33:22 +02:00
mposolda
c42b8f81e3
KEYCLOAK-3074 Change the TestingResourceProvider to always both firstResults and maxResults in JPA criteria query
2016-06-03 10:31:32 +02:00
mposolda
13bf36ce49
KEYCLOAK-3074 Change the signature of TestingResourceProvider.getAdminEvents to use String instead of java.util.Date
2016-06-03 10:31:24 +02:00
Stian Thorgersen
d1f3dc049f
Updated JBoss adapter chapter
2016-06-03 10:02:59 +02:00
Stian Thorgersen
d53fe6a8f4
Replace Keycloak with project name
2016-06-03 09:10:04 +02:00
Stian Thorgersen
f823a1fc3d
Fix links
2016-06-03 09:10:04 +02:00
Stian Thorgersen
390f6e8d06
Fix links ( #4 )
...
* Updated gitlab-conversion.py
* Fix link
2016-06-03 08:31:32 +02:00
Stian Thorgersen
d7c94613d4
Merge pull request #14 from stianst/master
...
Fix account service link
2016-06-03 07:33:33 +02:00
Stian Thorgersen
ddeb227294
Fix account service link
2016-06-03 07:32:47 +02:00
Pedro Igor
bfbd4dc08c
Merge pull request #5 from pedroigor/master
...
Initial getting started tutorials
2016-06-03 01:05:51 -03:00
Pedro Igor
a6f6080af4
Initial getting started tutorials
2016-06-03 01:05:18 -03:00
Bill Burke
849414d158
fixes
2016-06-02 18:04:37 -04:00
Bill Burke
2439546f24
mod-auth-mellon
2016-06-02 17:59:25 -04:00
Bill Burke
31c474f37b
fixes
2016-06-02 17:33:28 -04:00
Bill Burke
32938bacca
fixes
2016-06-02 17:20:05 -04:00
Bill Burke
dc0ebc2695
saml general config
2016-06-02 17:18:42 -04:00
Bill Burke
16388c0218
Merge branch 'master' of github.com:keycloak/securing_apps_guide
2016-06-02 16:51:00 -04:00
Bill Burke
5c99a41b66
saml general config
2016-06-02 16:50:43 -04:00
Bill Burke
79fe2a0ed1
Merge pull request #12 from ssilvert/master
...
Minor changes from beginning through Chapter 7, Authentication
2016-06-02 16:07:37 -04:00
Stan Silvert
25f866b5b9
Minor changes from beginning through Chapter 7, Authentication
2016-06-02 15:05:47 -04:00
Stian Thorgersen
b12802f0d3
Merge pull request #6 from mposolda/master
...
Fuse adapter documentation
2016-06-02 19:06:50 +02:00
Stian Thorgersen
31eee347d4
Merge pull request #2895 from mhajas/fixMissingPOM
...
KEYCLOAK-3051 Fix missing version in POM
2016-06-02 18:55:03 +02:00
Stian Thorgersen
c37f1c24ee
Merge pull request #2900 from tkyjovsk/performance-tests
...
Updates to the performance tests.
2016-06-02 18:54:47 +02:00
Stian Thorgersen
fba78f3e2a
Merge pull request #2908 from mstruk/KEYCLOAK-2879-a
...
KEYCLOAK-2879 UserResource
2016-06-02 18:53:53 +02:00
Stian Thorgersen
684f9c1977
Merge pull request #7 from stianst/master
...
Fix headings in clustering chapter
2016-06-02 18:50:20 +02:00
Stian Thorgersen
0775ca0658
Fix headings in clustering chapter
2016-06-02 18:49:55 +02:00
Bill Burke
8cd0ce78d1
initial saml
2016-06-02 12:13:25 -04:00
Bill Burke
be1924c008
initial saml
2016-06-02 12:11:24 -04:00
Bill Burke
c4a177dc06
initial saml
2016-06-02 12:10:13 -04:00
Bill Burke
c9fc21ee22
initial saml
2016-06-02 12:07:45 -04:00
mposolda
fda62c21b7
Fuse adapter documentation
2016-06-02 16:29:37 +02:00
Marko Strukelj
ec258c6515
KEYCLOAK-2879 UserResource
2016-06-02 15:23:18 +02:00
Stian Thorgersen
186bf88b42
Merge pull request #5 from stianst/master
...
Change title
2016-06-02 15:17:12 +02:00
Stian Thorgersen
44a55fd136
Change title
2016-06-02 15:16:53 +02:00
Stian Thorgersen
087f84bfff
Merge pull request #2901 from mposolda/master
...
KEYCLOAK-3065 Remove 'provider' from realmCache in keycloak-server.js…
2016-06-02 14:58:16 +02:00
Stian Thorgersen
cb63b4ed1b
Merge pull request #11 from stianst/master
...
Moved client registration chapter to securing applications guide
2016-06-02 14:39:44 +02:00
Stian Thorgersen
e78470493e
Merge pull request #4 from stianst/master
...
Misc
2016-06-02 14:39:25 +02:00
Stian Thorgersen
1f117ac64a
Added client registration chapter
2016-06-02 14:38:58 +02:00
Stian Thorgersen
22112e8d06
Moved client registration chapter to securing applications guide
2016-06-02 14:18:40 +02:00
aasingh
ba314703f7
Merge pull request #1 from keycloak/master
...
sync with latest changes
2016-06-02 17:46:23 +05:30
Stian Thorgersen
b2831df24c
Added supported protocols section (copy from admin guide)
2016-06-02 13:03:57 +02:00
Stian Thorgersen
65351224df
Merge pull request #2 from aasingh/master
...
incorporated QE feddback comments
2016-06-02 12:58:46 +02:00
