jenskeiner opened a new pull request #3308:
URL: https://github.com/apache/apisix/pull/3308


   ### What this PR does / why we need it:
   Add code to `authz-keycloak` plugin to optionally resolve requests URI to 
resource(s) and map HTTP method to scope; see #3274.
   
   ### Pre-submission checklist:
   
   * [x] Did you explain what problem does this PR solve? Or what new features 
have been added?
   * [ ] Have you added corresponding test cases?
   * [x] Have you modified the corresponding document?
   * [ ] Is this PR backward compatible? **If it is not backward compatible, 
please discuss on the [mailing 
list](https://github.com/apache/apisix/tree/master#community) first**
   
   Open this PR to get some feedback on the changes. Still need to add tests to 
cover the new functionality. May still need to polish the JSON schema slightly 
as well. However, already tested changes in a real deployment to confirm this 
is actually working.
   
   Also, strictly speaking, this plugin is not backwards compatible. E.g. we 
now require static permissions to be set when not using the new dynamic 
resource resolution. We also require `client_id` to be set because it will be 
used in any sensible configuration scenario. This mostly affects corner cases, 
so I don't think it represents a real problem.
   
   In any case, will likely polish everything a bit more, but would appreciate 
any feedback already.
   
   @sshniro You should definitely have a look.


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to