Restrict user request based on scope avilable in token ?

nokia / kong-oidc

OIDC plugin for Kong

Apache License 2.0

454 stars 320 forks source link

Restrict user request based on scope avilable in token ? #168

Closed harsh4870 closed 4 years ago

harsh4870 commented 4 years ago

i have tried scope in the plugin but not working as expected is there any option to restrict user request if certain scope are not present in the token ?

in kong official enterprise plugin there is an option for scopes_required anything similar here ?

alihossein commented 3 years ago

Hi. how to fix this problem? please share it. @harsh4870

harsh4870 commented 3 years ago

@alihossein i am not sure what you are using exactly however i faced this issue while using this plugin.

Please use this extended version of the plugin : https://github.com/gbbirkisson/kong-plugin-jwt-keycloak

specific answer : https://github.com/nokia/kong-oidc/issues/135#issuecomment-691249159