...
| Code Block |
|---|
{
"exp": 1611135921,
"iat": 1611134121,
"auth_time": 1611134091,
"jti": "3c1efc3f-e21b-4739-a65a-c6653fa8dc54",
"iss": "http://10.20.11.160:8080/auth/realms/onap",
"aud": "account",
"sub": "446a24bc-d8a0-43dd-afa5-e56eed75deb8",
"typ": "Bearer",
"azp": "odlux.app",
"session_state": "129b4a63-70a1-421f-a33f-9acd92e233ff",
"acr": "1",
"realm_access": {
"roles": [
"provision",
"offline_access",
"uma_authorization"
]
},
"resource_access": {
"account": {
"roles": [
"manage-account",
"manage-account-links",
"view-profile"
]
}
},
"scope": "openid profile email",
"email_verified": false,
"name": "Luke Skywalker",
"preferred_username": "luke.skywalker",
"given_name": "Luke",
"family_name": "Skywalker",
"email": "luke.skywalker@sdnr.onap.org"
} |
where /real_access/roles are the important ones for us which were configured in the keycloak backend.
Hint: offline_access and uma_authorization are built-in keycloak roles. These ones are filtered by oauth-provider bundle. So delivered role in this case is only provision.