Replace-User-Metadata-#5 #16
No reviewers
Labels
No labels
Blocked
Bounty
$100
Bounty
$1000
Bounty
$10000
Bounty
$20
Bounty
$2000
Bounty
$250
Bounty
$50
Bounty
$500
Bounty
$5000
Bounty
$750
MoSCoW
Could have
MoSCoW
Must have
MoSCoW
Should have
Needs feedback
Points
1
Points
13
Points
2
Points
21
Points
3
Points
34
Points
5
Points
55
Points
8
Points
88
Priority
Backlog
Priority
Critical
Priority
High
Priority
Low
Priority
Medium
Signed-off: Owner
Signed-off: Scrum Master
Signed-off: Tech Lead
Spike
State
Completed
State
Duplicate
State
In Progress
State
In Review
State
Paused
State
Unverified
State
Verified
State
Wont Do
Type
Bug
Type
Discussion
Type
Documentation
Type
Epic
Type
Feature
Type
Legendary
Type
Support
Type
Task
Type
Testing
No milestone
No project
No assignees
3 participants
Notifications
Due date
No due date set.
Blocks
#5 Modify Auth Service to Replace Token with User Metadata Headers
clevermicro/user-management
Reference: clevermicro/user-management#16
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "Replace-User-Metadata-#5"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Here is the PR for user-metadata, to see the group in the response header(not empty), A group should be created and assigned to user in Keycloak console, also, this group should be in a client-scope that client mapped to, I can provide a small document for this if needed, I may added it to ticket letter.
@ -89,0 +121,4 @@
* @return ResponseEntity with status 200 and custom headers on success, or 401/500 on failure.
*/
// CHANGED: Use POST instead of GET for diagnostic purposes
@PostMapping("/auth")
By default, traefik's forward auth uses GET. But here you used post, based on the comment above, I assume you forget to change it back?
Also in the doc there is a config that allows traefik to use the original HTTP method. If we want finer control (check different HTTP method), then we can enable this setting and change the code accordingly.
This ticket is an intermediate ticket for the Access control ticket. I already changed it in the access control implementation ticket.
So, in the next PR for ticket #3, it will use ALL methods, since it will be forwarded from Trarfik