Keycloak intro part 2 - Resources, Permissions, Scope and Policies

[@68babi]

Thank you, Arthur, you saved my day! God bless you 🧡

[@sonibrothersmusic655]

Very thankful to you for this easy explaining....😍

[@raygarcia4576]

Excellent tutorial! Thank you for taking the time to explain this in such a simple way.

[@mugume]

thank you @Ray for your kind words

[@amitk6701]

Awesome, simply awesome! thanks for tutorial, Arthur. God bless!

[@ronithomas1000]

Thank You so much . Easy to understand hands on tutorial

[@mugume]

Thanks @Roni 🙂

[@navinvideo]

Thank you!! Excellent work!! This saved lot of time in understanding the constructs!!

[@mugume]

I am so glad I could help. Thanks

[@PKAnane]

Great tutorial! Stay blessed brother

[@SacrificialGoat94]

Thanks for doing this. Really clear explanation.

[@mugume]

thank you for your appreciation Daniel

[@timalive1]

Thanks, very useful. God bless

[@denisgerasimov7855]

Very useful video. Thank you!

[@mugume]

I am glad I helped, Denis

[@tungminhpham]

thank you for your video, it helps me a lot in understanding much more about authorization in keycloak

[@mugume]

My pleasure

[@farhannazmul4902]

Excellent video!! Now how I could achieve this with the resources with same uri for http method scope? and Is it possible to achieve in spring boot 3?

[@sonujha766]

Which version of keycloak you have used @Arthur D. Mugume

[@maple.everything]

Great tutorial! Thank you

[@rounakjain5774]

Thank you!

[@mugume]

You are welcome

[@amitngm]

I need one use case on authorization. There are 2 groups. Users of both group have an aceess of role incident-user. I want to design a policy for an incident resource. User of each group can view and update a ticket for their groups only. How to achieve it

[@gokhankaradas3539]

Thanks. Go on

[@mugume]

you are welcome

[@ABUELO379]

Hi, i follow all the steps, but i added a new route(controller) in my API which not have resorce yet but anyway allow the access. you know why?

[@mugume]

sorry, late response. Didn't quite get your question though.

[@AadhithyanA]

How can i restrict when user login based on time??

[@avimehenwal]

Excellent video on such a complicated topic. Kudos and thankyou for sharing. I have a question, is there any resource/video on how can a backend API to consume and enforce role, permission, policy and resources as defined in keycloak ? I would highly applreate any help/links/resources on this topic, preferrably with javascript backend apis if possible. Have a great day

[@devopssimon]

Thanks for the great video. It's a really clear explanation. Although I can now evaluate if a user has certain permission from within Keyclaok, how would I do the same from an external source, such as an API? The concept is that the user has logged into keycloak from a VueJS application. The GUI then makes a request to the API and sends the JWT token to the API as a Bearer token, how does the API use that token to know if the user has a specific permission? The only thing I see in the token is the client roles that are assigned to the user.

[@mugume]

I am glad you found it helpful. Sorry saw your message late. Hope you got an answer

[@irfanonk592]

hi. thanks for great tutorial. I have enabled remember-me and login with remember-me checkbox selected. It has successfully logged in and worked normally. but when i close browser and open again it returns 502 from keycloak auth url, although it is supposed to relogin and sustain session. It seems when browser restart it deletes AUTH_SESSION_ID and AUTH_SESSION_ID_LEGACY from cookies. it works when i manually add these parameters to auth url.

[@munyagwaenock6379]

Thanks Bro

[@mugume]

Ahhh, you finally watched. Welcome man!!!

[@wikiwiki1363]

What version keycloak do you use?

[@mugume]

@wikiwiki thanks for watching. It is Keycloak version 17 But you can get the latest version (v18) here: www.keycloak.org/downloads Should be fine as well.

[@gmmkeshav]

The Authorization tab is not appearing in my clients. How to make it appear ?

[@raoufcode]

You have to activate it in Client Settings > Capability config . Activate Client authentication and authorization to be able to access the authorization tab

[@tshepo2japhta28]

thanks man

[@minglyu9391]

Why scopes here are verbs instead of nouns, most scope parameters I came across are like email, profile, ....etc

[@mugume]

to my understanding, you are talking about Client Scopes. In this video we did look at Authorization scopes. AFAIK these are different but I am investigating further on this. thanks @Ming Lyu

[@sathishgunasekar2643]

Saviour :)

[@mugume]

glad it helps

[@p3wx4]

FUCKING THANK YOU.

[@Michael17000]

Yes beautiful many thanks but.. Unauthorized :D

[@badmadmat20]

Already totally outdated unfortunately

[@vishnuasok]

Thanks for doing this. Really clear explanation.

[@samiraghayarov6898]

Great tutorial, Thank you!

[@mugume]

Glad I could help @Samir