Waziup / WaziCloud

WAZIUP Cloud and local platform
31 stars 28 forks source link

Wrong permissions returned by Keycloak #198

Closed cdupont closed 4 years ago

cdupont commented 5 years ago

When asking for permission to Keycloak on one resource:

2018-10-22T10:17:38.832Z - info: Keycloak request GET on: https://keycloak.staging.waziup.io/auth/realms/waziup/authz/protection/resource_set?deep=true&name=Sensor23

Keycloak returns all the resource with approximate names instead of exact names:

2018-10-22T10:17:38.844Z - debug: result: [
{
    "name": "Kumasi_Hive_One_Sensor232",
    "type": "domain:waziup-Kumasi_Hive_One",
    "owner": {
        "id": "39575669-0fd7-4c01-8461-97252c15e540",
        "name": "1234you"
    },
    "ownerManagedAccess": false,
    "attributes": {},
    "_id": "ca8c9766-7b1f-4715-b4cb-dac3e9a54cc8",
    "uris": [
        "/sensors/Kumasi_Hive_One_Sensor232"
    ],
    "scopes": [
        {
            "id": "b0b9e99c-d1b0-44bb-b16c-35ad4e758eec",
            "name": "sensors:create"
        },
        {
            "id": "f092eff5-45a0-4f0e-b0cd-b6b11e645ea2",
            "name": "sensors:delete"
        },
        {
            "id": "73d6383b-e1e7-4436-ada4-717437b933ac",
            "name": "sensors:view"
        },
        {
            "id": "4d08d2f6-be77-495b-8d6a-a4f28493b526",
            "name": "sensors:update"
        }
    ]
}
,
{
    "name": "Sensor23",
    "type": "sensor",
    "owner": {
        "id": "2d0faecf-efed-4151-861c-8e24d511a5d9",
        "name": "cpham2"
    },
    "ownerManagedAccess": true,
    "attributes": {},
    "_id": "b64377dd-4b1d-49e5-98a4-7580a0374f46",
    "uris": [
        "/sensors/Sensor23"
    ],
    "scopes": [
        {
            "id": "b858798a-fd41-4c84-aa02-178d102a8819",
            "name": "sensors-data:create"
        },
        {
            "id": "8b6587d8-ed04-47fa-aec6-d6b51ce9c564",
            "name": "sensors-data:view"
        },
        {
            "id": "f092eff5-45a0-4f0e-b0cd-b6b11e645ea2",
            "name": "sensors:delete"
        },
        {
            "id": "73d6383b-e1e7-4436-ada4-717437b933ac",
            "name": "sensors:view"
        },
        {
            "id": "4d08d2f6-be77-495b-8d6a-a4f28493b526",
            "name": "sensors:update"
        }
    ]
}
]

This results in the wrong resource id to be selected.