Springboot Keycloak集成
如果集成外部的spring security则不需要在配置里配置 节点了 security-constraints
这部分拦截规则配置在spring security中
keycloak:
# enabled: false
auth-server-url: http://10.31.203.72:8080/auth
credentials:
secret: 185018d8-8339-4b0e-b6cc-31d148ababa4
# principal-attribute: preferred_username
realm: testrealm
resource: testrealmclientid72
# ssl-required: external
#默认false,如果为true则检验用户级别权限角色,false则检验realm级别权限
# use-resource-role-mappings: true
# cors: true
# autodetect-bearer-only: true
security-constraints:
- authRoles:
- MYSELF_ROLE_CUSTOMER
securityCollections:
- name: all
patterns:
- /*
# - name: customer
# patterns:
# - /test/*
org.springframework.boot
spring-boot-starter
org.springframework.boot
spring-boot-starter-web
org.keycloak
keycloak-spring-boot-starter
org.keycloak.bom
keycloak-adapter-bom
15.0.2
pom
import
org.springframework.boot
spring-boot-maven-plugin
repackage