Hi,
I am facing an issue after I have updated keycloak to v10 as previously I was able to user policy-enforcer in application.properties without configuring security constraints, as now if I didn't add security constraint config the AbstractPolicyEnforcer will retrieve null securityContext
KeycloakSecurityContext securityContext = httpFacade.getSecurityContext();
& hence it will delegate the authZ to userManagmentAccess which by the way is null so at the end I got 403 if I didn't add
keycloak.securityConstraints[0].authRoles[0]=*
#keycloak.securityConstraints[0].securityCollections[0].patterns[0]=/*
Hi,
I am facing an issue after I have updated keycloak to v10 as previously I was able to user policy-enforcer in application.properties without configuring security constraints, as now if I didn't add security constraint config the AbstractPolicyEnforcer will retrieve null securityContext
KeycloakSecurityContext securityContext = httpFacade.getSecurityContext();& hence it will delegate the authZ to userManagmentAccess which by the way is null so at the end I got 403 if I didn't add
keycloak.securityConstraints[0].authRoles[0]=*
#keycloak.securityConstraints[0].securityCollections[0].patterns[0]=/*