Fine - Grained Authorization with Keycloak SSO
summary
Keycloak provides SSO and adds fine‑grained authorization to a Spring Boot photo/car app using OAuth2/UMA2; the demo shows adapters, admin console exports, and a resource‑per‑car model so each car becomes a Keycloak resource. Policies include role, JavaScript and time‑based checks; a policy enforcer on the service consults Keycloak or uses an RPT token (cached permissions) to avoid round‑trips. The app demonstrates owner sharing, request/approve flow, immediate policy updates, and a 5‑minute RPT/access token lifespan—everything works as configured in the demo.
AI-written summary · about
chapters (7)
- 0:00Introduction
- 16:08Fine
- 21:48Fine authorization
- 25:45Policy enforcement
- 31:58User managed access
- 36:43Demo
- 43:23Questions
related talks
25mFine-Grained Authorization & Beyond: Mastering Keycloak Patterns in AI-infused Apps
54mHow to secure your Spring apps with Keycloak
54mHow to secure your Spring Apps with Keycloak
01h 05mSecuring Spring applications with Keycloak
33mAuthenticate and authorize users “your way” when they access your appl & platf
31mSecure-by-Default Spring Apps: Zero Trust, OAuth2, and Runtime Policies
54mIdentity Management to your Spring Boot applications
53mHow to Secure Your Spring Apps with Keycloak