Short-lived realm admin
- Dominant language
- JavaScript
- Stars
- 6
- Forks
- 2
- PR merge metrics
- No merged PRs in 30d
Description
The issue:
There is a known issue with running admin tasks using the ansible scripts (https://issues.redhat.com/browse/KEYCLOAK-1268). The access token requires payload information about the realms it is try to operate against. This has caused an overflow of the token that is hard to debug.
Possible Work Around:
A possible solution could be to create a short-lived user with the correct access to run these actions. This user would be created, the action completed, and then the user would be deleted.
Contributor guide
No contributing guide indexed for this repository
Research direction
No file, test, or entry point is named. Start by locating the Ansible scripts that run realm admin tasks and the access-token handling, then determine how a short-lived user could be created, used for the action, and deleted; done means the task avoids oversized tokens and cleanup is reliable.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- ansible, javascript
- Domain
- authentication, authorization, devops
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100