<%@page import="org.keycloak.AuthorizationContext" %>
<%@ page import="org.keycloak.KeycloakSecurityContext" %>
<%
KeycloakSecurityContext keycloakSecurityContext = (KeycloakSecurityContext) request.getAttribute(KeycloakSecurityContext.class.getName());
AuthorizationContext authzContext = keycloakSecurityContext.getAuthorizationContext();
%>
Any authenticated user can access this page.
<%@include file="../logout-include.jsp"%>
Here is a dynamic menu built from the permissions returned by the server:
<%
if (authzContext.hasResourcePermission("Protected Resource")) {
%>
-
Do user thing
<%
}
%>
<%
if (authzContext.hasResourcePermission("Premium Resource")) {
%>
-
Do user premium thing
<%
}
%>
<%
if (authzContext.hasPermission("Admin Resource", "urn:servlet-authz:protected:admin:access")) {
%>
-
Do administration thing
<%
}
%>