Spring Security : Keycloak Authorization in Spring Boot Part - 1

In this video, we will be setting up Keycloak authorization on a Spring Boot application. This is in continuation to my previous video on basic Keycloak authentication in Spring Boot.
Github Link: github.com/him...

[@gurudattahh3345]

Hey thanks for this awesome tutorial... can you show how to return a custom response when 403 response is returned? Like I want to return "access not permitted" string response if it is 403

[@h7sharma]

Yes sure, I recently created this one - kzbin.info/www/bejne/hKrCoYRjp95ngas

[@memsofgamers9479]

I have a CustomRegistroryClientRepository like CustomUserDetailsService, in users way we use AuthenticationManagerBuilder to set the userDetailsService is their any way like that to make my authorization server know about my customRegistredClientRepository please help me, Thank you in advance

[@bhavnabhanu2513]

I have implemented the same way, I m getting 200 response but response body is coming empty please help me.

[@todddavid9133]

Hi thanks for this great video. What version of keycloak are you using?

[@h7sharma]

Keycloak - Version 21.1.2

[@todddavid9133]

@@h7sharma I'm getting PERMISSION_TOKEN_ERROR when trying to access /hello URI via Postman. This error is generated by keycloak server. I don't now what I'm missing here. Appreciate if you could help...

[@h7sharma]

Hi @@todddavid9133, It will be difficult to asses but let me give it a try. Could you check the token you are getting - does the issuer(iss) in that is resolved as localhost or some ip ? Hope you are using the same version and similar code as in my video (git repo). If not could you please share the git repo.

[@farhannazmul4902]

Did you try with http method based policy enforcement? Where say there would be 2 resources with same uri while onr resource have policy for GET http method and other have policy with POST method?

[@h7sharma]

Hi Farhan, Nice question. I tried to figure it out but did not get anything yet, need to investigate more.

[@codingispassion6376]

How to whitelist endpoints here ?

[@mehmetkrml1381]

adamsın be , teşekkürler

[@truongnguyenhoang5769]

hi i want to allow access 1 URL without token in my app server, please help me how to do that because when i add filter policy, it always reponse 403 if i dont have token

[@dharmendrakumar-dr7ik]

It is awesome.. could you please share git hub link

[@h7sharma]

Thank you. Here is the link: github.com/himanshuntwk/spring-projects/tree/main/spring-keycloak-auth