bcgov / bcgov/keycloak-admin

Short-lived realm admin

Open
#11 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
6
Forks
2
PR merge metrics
No merged PRs in 30d

Description

The issue:

There is a known issue with running admin tasks using the ansible scripts (https://issues.redhat.com/browse/KEYCLOAK-1268). The access token requires payload information about the realms it is try to operate against. This has caused an overflow of the token that is hard to debug.

Possible Work Around:

A possible solution could be to create a short-lived user with the correct access to run these actions. This user would be created, the action completed, and then the user would be deleted.

Contributor guide

No contributing guide indexed for this repository

Research direction

No file, test, or entry point is named. Start by locating the Ansible scripts that run realm admin tasks and the access-token handling, then determine how a short-lived user could be created, used for the action, and deleted; done means the task avoids oversized tokens and cleanup is reliable.

Written by the indexing model from the issue text.

Assessment

Tech stack
ansible, javascript
Domain
authentication, authorization, devops
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.