ricardozanini opened a new issue, #1432: URL: https://github.com/apache/incubator-kie-issues/issues/1432
The Token Exchange RFC might help users who need our workflows to act on behalf of resource owners. For example, Alice wants to call a workflow to access the Pet Store. The data retrieved by the Pet Store must be related and owned by Alice. Alice can send a request to the workflow containing her access ID to the Pet Store but not the authentication secrets (e.g., username and password). The workflow will use its service token to exchange for a valid one representing Alice in the Pet Store before calling any REST functions to the resource service. Resources: - https://www.keycloak.org/docs/latest/securing_apps/index.html#_token-exchange - https://datatracker.ietf.org/doc/html/rfc8693 - https://github.com/keycloak/keycloak/discussions/26502 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
