search

louketo / louketo-proxy

A OpenID / Proxy service
Apache License 2.0
950 stars 343 forks source link

add-claim option with "X-Auth-" prefix #536

Open Yu-Qi opened 4 years ago

Yu-Qi commented 4 years ago

Hi, there is a suggestion.

When I inject additional claims from the access token into the authorization headers with the --add-claims option, the additional headers would be with a "X-Auth-" prefix (source code). I want to use keycloak-gatekeeper as an adapter between elasticsearch and keycloak, but the feature "es-security-runas-user" of elasticsearch only accepts that header is like "header=es-security-runas-user=someone-user".

Is it possible to set the prefix of add-claim as optional? It may be better to adapt more services.

jangaraj commented 4 years ago

This PR https://github.com/keycloak/keycloak-gatekeeper/pull/532 will fix your problem