MyFavMirrors/minio
1
0
Fork 0
mirror of https://github.com/minio/minio.git synced 2025-11-07 21:02:58 -05:00
Code Issues Packages Projects Releases Wiki Activity

fix: handle array policies in JWT claim (#10041)

Browse Source 
PR #10014 was not complete as only handled
policy claims partially.
This commit is contained in:
Harshavardhana
2020-07-14 10:26:47 -07:00
committed by GitHub
parent 778e9c864f
commit 369a876ebe
5 changed files with 90 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
docs/sts/keycloak.md
View File

@@ -8,31 +8,31 @@ Configure and install keycloak server by following [Keycloak Installation Guide]
### Configure Keycloak UI
- Go to Clients
-> Click on account
-> Settings
-> Enable `Implicit Flow`
-> Save
- Click on account
- Settings
- Enable `Implicit Flow`
- Save
- Go to Users
-> Click on the user
-> Attribute, add a new attribute `Key` is `policy`, `Value` is name of the `policy` on MinIO (ex: `readwrite`)
-> Add and Save
- Click on the user
- Attribute, add a new attribute `Key` is `policy`, `Value` is name of the `policy` on MinIO (ex: `readwrite`)
- Add and Save
- Go to Clients
-> Click on `account`
-> Settings, set `Valid Redirect URIs` to `*`, expand `Advanced Settings` and set `Access Token Lifespan` to `1 Hours`
-> Save
- Click on `account`
- Settings, set `Valid Redirect URIs` to `*`, expand `Advanced Settings` and set `Access Token Lifespan` to `1 Hours`
- Save
- Go to Clients
-> Client on `account`
-> Mappers
-> Create
- Client on `account`
- Mappers
- Create
- `Name` with any text
- `Mapper Type` is `User Attribute`
- `User Attribute` is `policy`
- `Token Claim Name` is `policy`
- `Claim JSON Type` is `string`
-> Save
- Save
- Open http://localhost:8080/auth/realms/demo/.well-known/openid-configuration to verify OpenID discovery document, verify it has `authorization_endpoint` and `jwks_uri`