Re: Rule-Based Authorization Plugins with JWT Authentication Plugin

Hi, I reply to myself. I had to go in debug mode in order to see that Set userRoles = getUserRoles(principal); was returning null due to the fact the username attribute in the principal was the keycloak user uuid (the default sub attribute value) and not the preferred_username. I fixed this in se

Rule-Based Authorization Plugins with JWT Authentication Plugin

Hi, I am testing JWT Authentication Plugin with a keycloak IPD. Rule-Based Authorization Plugins deny access to some Solr end points. According to logs, I don't understand why. For example, in this log line we see that requested role are either "solr", "solr:admin", "consoleread" user roles are