flowable / flowable/flowable-engine
Flowable 6.8.0 User Privileges return error when keycloak is enabled返回的权限是错的
Open
- Dominant language
- Java
- Stars
- 9.5k
- Forks
- 2.9k
- Avg merge
- 7h 8m
- Merged PRs (30d)
- 2
Description
1、之前flowable-UI还可以适配keycloak,目前基于keycloak登录后发现,用户没有权限做任何操作,跟用户未绑定,仔细排查发现:
https://xxxx:30011/flowable-ui/app/rest/account不返回keycloak配置的[User Groups Mapper]信息,增加【User Realm Role Mapper】之后,返回权限信息带“GROUP_”
2、但未升级之前6.6.0 flowable仅需配置[User Groups Mapper]信息 即可返回正确信息。
privileges返回错误信息,之前老版本的事不带GROUP_,:
3、升级之后keycloak也有报错信息,如下:
10:44:39,162 WARN [org.keycloak.services] (default task-1) KC-SERVICES0091: Request is missing scope 'openid' so it's not treated as OIDC, but just pure OAuth2 request.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.