Replace-User-Metadata-#5 #16

Merged
abed.alrahman merged 2 commits from Replace-User-Metadata-#5 into develop 2025-05-22 10:07:52 +00:00
Member

Here is the PR for user-metadata, to see the group in the response header(not empty), A group should be created and assigned to user in Keycloak console, also, this group should be in a client-scope that client mapped to, I can provide a small document for this if needed, I may added it to ticket letter.

Here is the PR for user-metadata, to see the group in the response header(not empty), A group should be created and assigned to user in Keycloak console, also, this group should be in a client-scope that client mapped to, I can provide a small document for this if needed, I may added it to ticket letter.
requested reviews from stanislav.hejny, hurui200320 2025-05-11 00:52:37 +00:00
hurui200320 requested changes 2025-05-13 07:03:50 +00:00
Dismissed
@ -89,0 +121,4 @@
* @return ResponseEntity with status 200 and custom headers on success, or 401/500 on failure.
*/
// CHANGED: Use POST instead of GET for diagnostic purposes
@PostMapping("/auth")
Member

By default, traefik's forward auth uses GET. But here you used post, based on the comment above, I assume you forget to change it back?

Also in the doc there is a config that allows traefik to use the original HTTP method. If we want finer control (check different HTTP method), then we can enable this setting and change the code accordingly.

By default, traefik's forward auth uses GET. But here you used post, based on the comment above, I assume you forget to change it back? Also in [the doc](https://doc.traefik.io/traefik/middlewares/http/forwardauth/#preserverequestmethod) there is a config that allows traefik to use the original HTTP method. If we want finer control (check different HTTP method), then we can enable this setting and change the code accordingly.
Author
Member

This ticket is an intermediate ticket for the Access control ticket. I already changed it in the access control implementation ticket.
So, in the next PR for ticket #3, it will use ALL methods, since it will be forwarded from Trarfik

This ticket is an intermediate ticket for the Access control ticket. I already changed it in the access control implementation ticket. So, in the next PR for ticket #3, it will use ALL methods, since it will be forwarded from Trarfik
hurui200320 marked this conversation as resolved
requested review from hurui200320 2025-05-14 23:38:55 +00:00
abed.alrahman deleted branch Replace-User-Metadata-#5 2025-05-22 10:07:53 +00:00
Sign in to join this conversation.
No milestone
No project
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference: clevermicro/user-management#16
No description provided.