asmhatre/spring-auth-demo
1
0
Fork 0
Code Activity

Add keycloak project: realm import, resource server with realm and client role mapping, audience and issuer traps, method security, admin client

Browse Source 
Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01VRLbHYdXVEBzGVhYq3pz4q
This commit is contained in:
Claude
2026-10-17 15:50:36 +00:00
parent f6dd692177
commit 6b09fe7b82
21 changed files with 919 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
keycloak/cap/01-claims.txt
+16
View File
@@ -0,0 +1,16 @@
user=alice client=demo-cli
iss="http://localhost:8180/realms/demo" azp="demo-cli" aud=(absent)
realm_access={"roles":["user"]} resource_access=(absent)
scope="profile email"
user=alice client=demo-cli-aud
iss="http://localhost:8180/realms/demo" azp="demo-cli-aud" aud="spring-api"
realm_access={"roles":["user"]} resource_access=(absent)
scope="profile email"
user=bob client=demo-cli
iss="http://localhost:8180/realms/demo" azp="demo-cli" aud="spring-api"
realm_access={"roles":["admin","user"]} resource_access={"spring-api":{"roles":["reports-write"]}}
scope="profile email"
service account admin-svc (client credentials)
preferred_username="service-account-admin-svc" resource_access={"realm-management":{"roles":["view-realm","manage-users","view-users","query-groups","query-users"]}}
same login through http://127.0.0.1:8180 instead of localhost
iss="http://127.0.0.1:8180/realms/demo"