WIPACrepo / keycloak-rest-services

Services surrounding KeyCloak, that use the REST API to read/update state
MIT License
1 stars 1 forks source link

add scope "basic" to user_mgmt_app() #165

Closed vbrik closed 1 day ago

vbrik commented 1 day ago

Keycloak 25.0.0 introduced the change described below that caused user_mgmt unit tests to fail authentication because keycloak would send tokens without the 'sub' claim. This patch to user_mgmt_app() should fix that.

NEW DEFAULT CLIENT SCOPE BASIC The new client scope named basic is added as a realm "default" client scope and hence will be added to all newly created OIDC clients. The client scope is also automatically added to all existing OIDC clients during migration.

This scope contains preconfigured protocol mappers for the following claims: