Use confidential client for authorization

Aam-Digital / account-backend

GNU General Public License v3.0

0 stars 0 forks source link

Use confidential client for authorization #3

Closed TheSlimvReal closed 3 months ago

TheSlimvReal commented 2 years ago

A confidential client allows authentication via a constant secret that can be used with the Keycloak NodeJS library. On the client a set of permissions can be defined for the different resources, in this case the account operations. This setup would have to be part of the provided docker image in ndb-setup.

TheSlimvReal commented 2 years ago

Can be accomplished through nest-keycloak-connect

sleidig commented 3 months ago

won't fix (long-term will migrate to aam-services, see #26 )