datakaveri / iudx-aaa-server Goto Github PK
View Code? Open in Web Editor NEWAuthentication, Authorization, and Accounting (AAA) server for IUDX
Home Page: https://authorization.iudx.org.in/apis
License: Apache License 2.0
Authentication, Authorization, and Accounting (AAA) server for IUDX
Home Page: https://authorization.iudx.org.in/apis
License: Apache License 2.0
The introspect API does not know about revoked tokens. If a revoked token is introspected, it would return the decoded token successfully. If this is to be changed:
aud
field + userIdHi Team,
Thanks for your continuous support.
Below i am sharing my understanding towards how an IUDX provider can set access policy for consumer
Below are my further query-
Thanks & Regard's
Deepak Kumar
ApdWebClient
for TokenRevokeService
Hi Team,
I have done with setup IUDX(3.5.0) AUTH, Catalogue, Resoource Server on my local.
Now i need to create Organization, Create/update provider by using Auth server's admin APIs.
To call These API's i need Iudx Admin's access token from keycloak.
SO what all the step i have to follow on keycloak or auth server to configure IUDX Admin user.
Can you please help me for same.
Thanks
Deepak Kumar
This request should not be allowed:
{
"request": [
{
"userId": "7803fa79-a934-4c58-b627-d9372f1df5a7",
"status": "rejected"
},
{
"userId": "7803fa79-a934-4c58-b627-d9372f1df5a7",
"status": "approved"
}
]
}
But is being allowed. Use the same methods that policy.createPolicy is using to handle this
Hi Team
I have setup keycloak(14.0.1) instance on my local running on http://{ip}:8080 by following https://github.com/datakaveri/iudx-deployment/tree/master/Docker-Swarm-deployment/single-node/keycloak.
Further after keycloak setup i have provided required info in config.json file for auth server as below by following https://github.com/datakaveri/iudx-aaa-server/blob/main/configs/config-example.json-
"keycloakOptions":{
"keycloakHost": "{ip}",
"keycloakPort": 8080,
"keycloakRealm": "{realm-created}",
"keycloakSite": "http://{ip}:8080/auth/realms/{realmname}",
"keycloakUrl": "http://{ip}:8080/auth",
"keycloakTokenUri": "/auth/realms/{realmname}/protocol/openid-connect/token",
"keycloakAdminClientId": "adminclient",
"keycloakAdminClientSecret": "{secret}",
"keycloakAdminPoolSize": "10",
"keycloakAaaClientId": "normalclient",
"keycloakAaaClientSecret": "{secret}",
"keycloakJwtLeeway": 90
}
but i am getting error as below while starting My Auth server -
Not Found: {"error":"RESTEASY003210: Could not find resource for full path: http://{ip}:8080/auth/realms/{realmname}/.well-known/openid-configuration"}"
can you please help me here for same.
Thanks
Deepak Kumar
Found by @aakashsr
409 Conflict
is generatedapproved
stateapproved_access_requests
tableIdeally,
pending
rejected
If the consumer fix is done, then most likely the 409 condition may never be met
Hi Team,
I am trying to setup IUDX Auth server on my local by following readme doc from tag v3.5.0.
After installing keycloak while following step1 from section Keycloak Setup to configure normal client, Then i am unable to understand what actually i need perform there.
Can i have more descriptive doc to setup keycloak.
Thanks
data
passed into the update notif methoddiff --git a/pom.xml b/pom.xml
index a862595..67fa5cf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -26,7 +26,7 @@
<maven-checkstyle-plugin-google.version>3.1.2</maven-checkstyle-plugin-google.version>
<maven-surefire-report-plugin.version>3.0.0-M5</maven-surefire-report-plugin.version>
<openjdk.version>11</openjdk.version>
- <keycloak.version>15.0.2</keycloak.version>
+ <keycloak.version>18.0.2</keycloak.version>
<resteasy.version>3.13.2.Final</resteasy.version>
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<exec.mainClass>iudx.aaa.server.deploy.Deployer</exec.mainClass>
only the users with roles of Admin, provider, or delegate are allowed to delete policies.
'Trustee' role is not allowed to delete policies they may set for providers.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.