User Tools
сервис_keycloak
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
сервис_keycloak [2026/03/21 06:19] val [Аутентификация пользователей WEB приложения] |
сервис_keycloak [2026/06/21 08:00] (current) val [Проверка получения токена] |
||
|---|---|---|---|
| Line 278: | Line 278: | ||
| Configure a new mapper: Groups Membership | Configure a new mapper: Groups Membership | ||
| Name: groups | Name: groups | ||
| + | Mapper details | ||
| + | Token Claim Name: groups !!! Не забыть | ||
| + | Full group path: No | ||
| Configure a new mapper: Audience !!! Требуется kube-apiserver, проверяется "подстановкой" токена в .kube/config | Configure a new mapper: Audience !!! Требуется kube-apiserver, проверяется "подстановкой" токена в .kube/config | ||
| Name: any-client | Name: any-client | ||
| Line 287: | Line 290: | ||
| Add client scopes to any-client: groups | Add client scopes to any-client: groups | ||
| Add: Default | Add: Default | ||
| - | | ||
| - | Include in token scope ? | ||
| - | | ||
| - | Add to lightweight access token ? | ||
| - | |||
| - | Token Claim Name: groups | ||
| - | Full group path: No | ||
| для ограничения доступа через client-secret можно настроить: | для ограничения доступа через client-secret можно настроить: | ||
| Line 315: | Line 311: | ||
| -d "username=user1" \ | -d "username=user1" \ | ||
| -d 'password=kcpassword1' \ | -d 'password=kcpassword1' \ | ||
| - | https://keycloak.corpX.un/realms/corpX/protocol/openid-connect/token | + | https://keycloak.corpX.un/realms/corpX/protocol/openid-connect/token # -Ss | jq -r '.access_token' |
| - | + | ||
| - | {"access_token":"..." ... | + | |
| </code> | </code> | ||
сервис_keycloak.1774063160.txt.gz · Last modified: 2026/03/21 06:19 by val
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
