User Tools
сервис_keycloak
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_keycloak [2026/03/20 20:10] val [Аутентификация пользователей WEB приложения] |
сервис_keycloak [2026/06/21 08:00] (current) val [Проверка получения токена] |
||
|---|---|---|---|
| Line 278: | Line 278: | ||
| Configure a new mapper: Groups Membership | Configure a new mapper: Groups Membership | ||
| Name: groups | Name: groups | ||
| - | Configure a new mapper: Audience !!! Для "подсовывания" токена в .kube/config | + | Mapper details |
| - | Name (и везде): any-client | + | Token Claim Name: groups !!! Не забыть |
| + | Full group path: No | ||
| + | Configure a new mapper: Audience !!! Требуется kube-apiserver, проверяется "подстановкой" токена в .kube/config | ||
| + | Name: any-client | ||
| + | Included Client Audience: any-client | ||
| + | Included Custom Audience: any-client | ||
| Clients -> any-client | Clients -> any-client | ||
| Line 285: | Line 290: | ||
| Add client scopes to any-client: groups | Add client scopes to any-client: groups | ||
| Add: Default | Add: Default | ||
| - | | ||
| - | Include in token scope ? | ||
| - | | ||
| - | Add to lightweight access token ? | ||
| - | |||
| - | Token Claim Name: groups | ||
| - | Full group path: No | ||
| для ограничения доступа через client-secret можно настроить: | для ограничения доступа через client-secret можно настроить: | ||
| Line 313: | Line 311: | ||
| -d "username=user1" \ | -d "username=user1" \ | ||
| -d 'password=kcpassword1' \ | -d 'password=kcpassword1' \ | ||
| - | https://keycloak.corpX.un/realms/corpX/protocol/openid-connect/token | + | https://keycloak.corpX.un/realms/corpX/protocol/openid-connect/token # -Ss | jq -r '.access_token' |
| - | + | ||
| - | {"access_token":"..." ... | + | |
| </code> | </code> | ||
| Line 422: | Line 418: | ||
| Mapper type: group-ldap-mapper | Mapper type: group-ldap-mapper | ||
| LDAP Groups DN: cn=groups,cn=accounts,dc=corpX,dc=un | LDAP Groups DN: cn=groups,cn=accounts,dc=corpX,dc=un | ||
| - | Relative creation DN: cn | + | Relative creation DN: cn ? |
| Group Name LDAP Attribute: cn | Group Name LDAP Attribute: cn | ||
сервис_keycloak.1774026631.txt.gz · Last modified: 2026/03/20 20:10 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
