2efd79f982
Closes #20584
347 lines
No EOL
13 KiB
JSON
347 lines
No EOL
13 KiB
JSON
{
|
|
"realm": "servlet-policy-enforcer-authz",
|
|
"enabled": true,
|
|
"requiredCredentials": [
|
|
"password"
|
|
],
|
|
"users": [
|
|
{
|
|
"username": "alice",
|
|
"enabled": true,
|
|
"credentials": [
|
|
{
|
|
"type": "password",
|
|
"value": "alice"
|
|
}
|
|
],
|
|
"realmRoles": [
|
|
"uma_authorization"
|
|
]
|
|
},
|
|
{
|
|
"username": "jdoe",
|
|
"enabled": true,
|
|
"credentials": [
|
|
{
|
|
"type": "password",
|
|
"value": "jdoe"
|
|
}
|
|
],
|
|
"realmRoles": [
|
|
"uma_authorization"
|
|
]
|
|
},
|
|
{
|
|
"username": "service-account-servlet-policy-enforcer",
|
|
"enabled": true,
|
|
"serviceAccountClientId": "servlet-policy-enforcer",
|
|
"clientRoles": {
|
|
"servlet-policy-enforcer": [
|
|
"uma_protection"
|
|
]
|
|
}
|
|
}
|
|
],
|
|
"clients": [
|
|
{
|
|
"clientId": "servlet-policy-enforcer",
|
|
"secret": "secret",
|
|
"authorizationServicesEnabled": true,
|
|
"enabled": true,
|
|
"redirectUris": [
|
|
"/servlet-policy-enforcer/*"
|
|
],
|
|
"baseUrl": "/servlet-policy-enforcer",
|
|
"adminUrl": "/servlet-policy-enforcer",
|
|
"directAccessGrantsEnabled": true,
|
|
"authorizationSettings": {
|
|
"allowRemoteResourceManagement": false,
|
|
"policyEnforcementMode": "ENFORCING",
|
|
"resources": [
|
|
{
|
|
"name": "Welcome Resource",
|
|
"uri": ""
|
|
},
|
|
{
|
|
"name": "Pattern 1",
|
|
"uri": ""
|
|
},
|
|
{
|
|
"name": "Pattern 2",
|
|
"uri": "/resource/resource-a"
|
|
},
|
|
{
|
|
"name": "Pattern 3",
|
|
"uri": "/resource/resource-b/test"
|
|
},
|
|
{
|
|
"name": "Pattern 4",
|
|
"uri": "/resource-c"
|
|
},
|
|
{
|
|
"name": "Pattern 5",
|
|
"uri": "/resource/d/resource-d"
|
|
},
|
|
{
|
|
"name": "Pattern 6",
|
|
"uri": ""
|
|
},
|
|
{
|
|
"name": "Pattern 7",
|
|
"uri": ""
|
|
},
|
|
{
|
|
"name": "Pattern 8"
|
|
},
|
|
{
|
|
"name": "Pattern 9"
|
|
},
|
|
{
|
|
"name": "Pattern 10"
|
|
},
|
|
{
|
|
"name": "Pattern 11"
|
|
},
|
|
{
|
|
"name": "Pattern 12",
|
|
"uri": "/realm_uri"
|
|
},
|
|
{
|
|
"name": "Pattern 13",
|
|
"uri": "/keycloak-6623/*"
|
|
},
|
|
{
|
|
"name": "Pattern 14",
|
|
"uri": "/keycloak-6623/sub-resource/*"
|
|
},
|
|
{
|
|
"name": "Pattern 15",
|
|
"type": "pattern-15",
|
|
"uri": "/keycloak-7148/{id}"
|
|
},
|
|
{
|
|
"name": "Pattern 16",
|
|
"uris": ["/keycloak-7269/sub-resource1", "/keycloak-7269/sub-resource2/*", "/keycloak-7269/sub-resource1/{test-pattern}/specialSuffix"]
|
|
},
|
|
{
|
|
"name": "Pattern 17",
|
|
"uris": ["/keycloak-8823/resource/{version}/subresource/{id}/{other}"]
|
|
},
|
|
{
|
|
"name": "Pattern 17 Entities",
|
|
"uris": ["/keycloak-8823/resource/{version}/subresource/{id}/entities"]
|
|
}
|
|
],
|
|
"policies": [
|
|
{
|
|
"name": "Default Policy",
|
|
"type": "script-scripts/default-policy.js",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "AFFIRMATIVE"
|
|
},
|
|
{
|
|
"name": "Deny Policy",
|
|
"type": "script-scripts/default-policy.js",
|
|
"logic": "NEGATIVE",
|
|
"decisionStrategy": "UNANIMOUS"
|
|
},
|
|
{
|
|
"name": "Pattern 3 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
"config": {
|
|
"resources": "[\"Pattern 3\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 2 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
"config": {
|
|
"resources": "[\"Pattern 2\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 4 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 4\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 5 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 5\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 7 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
"config": {
|
|
"resources": "[\"Pattern 7\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 8 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 8\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 9 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 9\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 6 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "AFFIRMATIVE",
|
|
"config": {
|
|
"resources": "[\"Pattern 6\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Welcome Resource Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Welcome Resource\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 1 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 1\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 10 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 10\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 11 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 11\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 12 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 12\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 13 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 13\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 14 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 14\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 15 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"defaultResourceType": "pattern-15",
|
|
"default": "true",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 16 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 16\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 17 Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 17\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
},
|
|
{
|
|
"name": "Pattern 17 Entities Permission",
|
|
"type": "resource",
|
|
"logic": "POSITIVE",
|
|
"decisionStrategy": "UNANIMOUS",
|
|
"config": {
|
|
"resources": "[\"Pattern 17 Entities\"]",
|
|
"applyPolicies": "[\"Default Policy\"]"
|
|
}
|
|
}
|
|
],
|
|
"scopes": []
|
|
},
|
|
"attributes" : {
|
|
"exclude.issuer.from.auth.response": "true"
|
|
}
|
|
}
|
|
]
|
|
} |