我正在嘗試實施SPI一個客戶端策略來替換我在js.我實現(xiàn)PolicyProvider了類似于this和PolicyProviderFactorylike this ，然后按照實現(xiàn) SPI中的說明將我的復制jar到standalone/deployments我可以在日志中看到 jar 已部署：08:17:02,647 INFO [stdout] (MSC service thread 1-3) about to start org.keycloak.services.util.JsonConfigProvider$JsonScope@266abf6d 08:17:02,682 WARN [org.keycloak.services] (MSC service thread 1-3) KC-SERVICES0047: myEvListener (example.myProvider.EvListenerProviderFactory) is implementing the internal SPI eventsListener. This SPI is internal and may change without notice 08:17:02,692 WARN [org.keycloak.services] (MSC service thread 1-3) KC-SERVICES0047: myRolePolicy (example.myProvider.MyPolicyProviderFactory) is implementing the internal SPI policy. This SPI is internal and may change without notice 08:17:02,814 INFO [org.jboss.as.server] (DeploymentScanner-threads - 2) WFLYSRV0010: Deployed "myPolicyProvider.jar" (runtime-name : "myPolicyProvider.jar") 現(xiàn)在我找不到使用我的實際創(chuàng)建客戶端策略的方法SPI在服務器信息中，我可以看到策略提供程序中列出的策略（my-role-policy和）：my-js-policy如果有人能指出我正確的方向，我將不勝感激。
1 回答
紫衣仙女
TA貢獻1839條經(jīng)驗 獲得超15個贊
為了創(chuàng)建策略，需要向以下位置發(fā)出 POST 請求：
http://${host}:${port}/auth/realms/${realm}/clients/${clientId}/authz/resource-server/policy/${policyId}
在哪里policyId指定PolicyProviderFactory
public String getId() {
return "myId";
}
您的帖子正文應該是 json
{
"decisionStrategy": "AFFIRMATIVE",
"logic": "POSITIVE",
"name": "policyName",
.... // other fields required in your policy implementation
}
卷曲請求示例：
curl --request POST \
--url http://${host}:${port}/auth/admin/realms/${realm}/clients/${clientId}/authz/resource-server/policy/${policyId} \
--header 'authorization: Bearer ${token}' \
--header 'content-type: application/json' \
--data '{"decisionStrategy": "AFFIRMATIVE","logic": "POSITIVE","name": "is-admin","role": "admin"}'
添加回答
舉報
0/150
提交
取消