Files
spring-auth-demo/keycloak/cap/01-claims.txt
T

17 lines
915 B
Plaintext

user=alice client=demo-cli
iss="http://localhost:8180/realms/demo" azp="demo-cli" aud=(absent)
realm_access={"roles":["user"]} resource_access=(absent)
scope="profile email"
user=alice client=demo-cli-aud
iss="http://localhost:8180/realms/demo" azp="demo-cli-aud" aud="spring-api"
realm_access={"roles":["user"]} resource_access=(absent)
scope="profile email"
user=bob client=demo-cli
iss="http://localhost:8180/realms/demo" azp="demo-cli" aud="spring-api"
realm_access={"roles":["admin","user"]} resource_access={"spring-api":{"roles":["reports-write"]}}
scope="profile email"
service account admin-svc (client credentials)
preferred_username="service-account-admin-svc" resource_access={"realm-management":{"roles":["view-realm","manage-users","view-users","query-groups","query-users"]}}
same login through http://127.0.0.1:8180 instead of localhost
iss="http://127.0.0.1:8180/realms/demo"