-
Notifications
You must be signed in to change notification settings - Fork 660
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SOLR-16230: JWT nested roles support #890
Conversation
solr/modules/jwt-auth/src/java/org/apache/solr/security/jwt/JWTAuthPlugin.java
Show resolved
Hide resolved
solr/modules/jwt-auth/src/java/org/apache/solr/security/jwt/JWTAuthPlugin.java
Outdated
Show resolved
Hide resolved
solr/modules/jwt-auth/src/java/org/apache/solr/security/jwt/JWTAuthPlugin.java
Outdated
Show resolved
Hide resolved
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I tested, and it looks good. Just a minor comment in the code.
I'll push a commit to add RefGuide docs and CHANGES entry.
solr/modules/jwt-auth/src/java/org/apache/solr/security/jwt/JWTAuthPlugin.java
Outdated
Show resolved
Hide resolved
solr/modules/jwt-auth/src/java/org/apache/solr/security/jwt/JWTAuthPlugin.java
Outdated
Show resolved
Hide resolved
solr/modules/jwt-auth/src/java/org/apache/solr/security/jwt/JWTAuthPlugin.java
Show resolved
Hide resolved
…TAuthPlugin.java Co-authored-by: Jan Høydahl <janhoy@users.noreply.github.com>
…TAuthPlugin.java Co-authored-by: Jan Høydahl <janhoy@users.noreply.github.com>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This looks great. My one comment isn't really a request for change... I really like the addition to the Ref Guide, but I find that no matter what "words" we use, it's all very hard to understand how keycloak works! Someday, maybe some nice examples, versus trying to explain how it works?
solr/modules/jwt-auth/src/java/org/apache/solr/security/jwt/JWTAuthPlugin.java
Outdated
Show resolved
Hide resolved
Thanks for looking at this |
Co-authored-by: Jan Høydahl <janhoy@users.noreply.github.com>
16230
Description
JWT-Auth: Support for Keycloak-Style nested roles
Solution
Introduce the support for
dot-notation
inrolesClaim
which assumes that the underlying element is a map with nested resolve capability.Tests
Please see the contained test
Checklist
Please review the following and check all that apply:
main
branch../gradlew check
.