Generalize Keycloak authentication pkg to use arbitrary claim

spiffe / tornjak

Tornjak is a UI and management layer used for brokering human access to one or more SPIRE deployments

Apache License 2.0

74 stars 32 forks source link

Generalize Keycloak authentication pkg to use arbitrary claim #434

Open maia-iyer opened 3 months ago

maia-iyer commented 3 months ago

Currently the Authenticator "Keycloak" pkg has a keycloak-specific implementation detail that requires roles be read from realm_access.roles. If instead it might be useful to add an argument that specifies a JSON path in a Bearer token to read roles from.