Map authorization resource URIs to RPT-Token

Configuring the server
1

Is it possible to map the Client => Authorization => Resources => {Resource} => URIs to the RTP-token? This way, access to a resource could be checked based on token and without any additional request to Keycloak.

Zd9i1
Zd9i11048×444 13.9 KB

Excpected (partial) token

{
  "aud": "shop",
  "preferred_username": "bob",
  ...
  "authorization": {
	"permissions": [
	  ...
	  {
		"scopes": [
		  "Read",
		  "Manage"
		],
		"rsid": "a7ff18e5-fc31-4a3f-8c0e-4e2ea2943f41",
		"rsname": "Articles"
		// I'd like to see the URIs here
		// "uris": [ "/api/v1/Article/*" ]
	  }
	]
  }
}