search

Nerzal / gocloak

golang keycloak client
Apache License 2.0
1.03k stars 283 forks source link

Protection API methods not using UMA compliant endpoint #353

Closed p53 closed 2 years ago

p53 commented 2 years ago

Describe the bug Library seems not using UMA compliant Protection API endpoints as provided here https://github.com/keycloak/keycloak-documentation/blob/main/authorization_services/topics/service-protection-resources-api-papi.adoc

To Reproduce Steps to reproduce the behavior:

  1. use GetResources method in code, it makes request to auth/admin/realms/test/clients/test-client/authz/resource-server/resource and seems this can be only used with admin credentials not client credentials

Expected behavior Use UMA compliant URI to be able to get resources of client with client credentials grant