KeyCloak jwt support about vertx-auth HOT 3 CLOSED

The current JWT impl can handle the KeyCloak tokens if you use it like:

JsonObject config = new JsonObject().put("public-key", "BASE64-ENCODED-PUBLIC_KEY");
AuthProvider provider = JWTAuth.create(vertx, config);

The main problem now is to tell the JWT where to look for the roles. In the default implementation if looks for a json object hash, while on KeyCloak the token has a top level set of hashes:

• realm_access

• resource_access

  and inside these then there are the roles.

Once way to "fix" could be where this is used:

https://github.com/vert-x3/vertx-auth/blob/master/vertx-auth-jwt/src/main/java/io/vertx/ext/auth/jwt/JWTOptions.java#L190

Then instead of assuming a direct key parse it as a path, say:

access_token/realm_access/roles

However this would give you the basic roles it does not do the extra KeyCloak specific validations such as realm name.

from vertx-auth.

Took a while to get back to this issue (holidays), but I just created a PR.

from vertx-auth.

I guess this issue can be closed now after the merge?

from vertx-auth.