Skip to content

Policy enforcer do not handle suppressed server resources - #136

Open
ebondu wants to merge 1 commit into
keycloak:mainfrom
ebondu:main
Open

Policy enforcer do not handle suppressed server resources#136
ebondu wants to merge 1 commit into
keycloak:mainfrom
ebondu:main

Conversation

@ebondu

@ebondu ebondu commented Jan 16, 2025

Copy link
Copy Markdown

closes #137

In some scenarios, a resource may have been removed of the KC server but still exists in the path cache of the policy enforcer. Consequently, the policy enforcer cannot obtain a permission token from the KC server for these deleted resources and throw a runtime error. The policy enforcer should evict/update resources from the cache.

@mposolda

Copy link
Copy Markdown
Contributor

@ebondu Thanks for the PR! The changes look ok to me, but for the changes in the authz-client, you will need to change them on the Keycloak side as those files are synced into this repository from keycloak/keycloak . See here for more details https://github.com/keycloak/keycloak-client/blob/main/CONTRIBUTING.md

@ebondu

ebondu commented Jan 17, 2025

Copy link
Copy Markdown
Author

Hi and thanks for your feedback. Sorry, I missed the changes had to be done in the main keycloak repository. I will open the issue in main keycloak repository and create another PR.

@ebondu

ebondu commented Jan 17, 2025

Copy link
Copy Markdown
Author

@mposolda, I created the PR for the part related to the main KC repository. Let me know if I missed something.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Policy enforcer do not handle suppressed server resources

2 participants