question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

User is not removed using keycloak client

See original GitHub issue

scenario:

  1. Create user “pepa” and add them to group recv_*
  2. Verify that user has permissions to receive messages
  3. Remove user “pepa”
  4. Create user “pepa” and add them to group send_*
  5. verify that user “pepa” does not have permissions to receive messages --> now fails

test reproducer is currently in branch “client-authz-tests”

make MULTITENANT=true SYSTEMTEST_ARGS='standard.authz.AuthorizationTest#testUserPermissionAfterRemoveAuthz' systemtests

Issue Analytics

  • State:closed
  • Created 6 years ago
  • Comments:7 (7 by maintainers)

github_iconTop GitHub Comments

1reaction
kornyscommented, Jun 19, 2018

@lulf I think I know where is an issue: looks like that user is not removed using keycloak client in systemtests,:

09:22:20,091 [main] INFO io.enmasse.systemtest.KeycloakClient - User 'pepa' will be removed
09:22:20,400 [main] INFO io.enmasse.systemtest.bases.TestBase - User pepa:pepaPa55 will be created
09:22:20,406 [main] INFO io.enmasse.systemtest.KeycloakClient - Waiting for realm brokered-shared-0 to exist
09:22:20,681 [main] INFO io.enmasse.systemtest.KeycloakClient - User 'pepa:pepaPa55' already created, skipping
09:22:20,689 [main] INFO io.enmasse.systemtest.KeycloakClient - Waiting for realm brokered-shared-0 to exist
09:22:20,974 [main] INFO io.enmasse.systemtest.KeycloakClient - Waiting for realm brokered-shared-0 to exist
09:22:21,276 [main] INFO io.enmasse.systemtest.KeycloakClient - User 'pepa' successfully joined group 'pepa_group'
0reactions
kornyscommented, Jun 20, 2018

fixed

Read more comments on GitHub >

github_iconTop Results From Across the Web

Built-in clients can no longer be deleted · Issue #9496
In Keycloak 15.0.2 it was possible to delete built-in clients of a realm ( account , account-console , broker , …). Trying the...
Read more >
[keycloak-user] can not delete user using REST API
I was able > to create the user with this id.And i am able to delete the user using > Advanced REST Chrome...
Read more >
Keycloak delete user give me an 401 Unauthorized error
Hi, I am user keycloak 3.1. I've tried to use kc.realm(realmName).users().delete(id), but it is still giving me a 401 unauthorized ...
Read more >
[KEYCLOAK-953] Allow user to delete account
Require both user and client to have the role delete-account; Exposed through Account REST API; Account console should display warning prior to ...
Read more >
Server Administration Guide
Not -before revocation policies per realm, application and user. CORS support - Client adapters have built-in support for CORS.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found