Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Policy enforcer do not handle suppressed server resources #137

Open
ebondu opened this issue Jan 16, 2025 · 2 comments · May be fixed by #136
Open

Policy enforcer do not handle suppressed server resources #137

ebondu opened this issue Jan 16, 2025 · 2 comments · May be fixed by #136
Labels
area/authz-client area/policy-enforcer kind/enhancement status/fix-in-keycloak-required Refers to the issue, which need fix in keycloak/keycloak and will be synced to keycloak-client later

Comments

@ebondu
Copy link

ebondu commented Jan 16, 2025

Describe the bug

In some scenarios, a resource may have been removed of the KC server but still exists in the path cache of the policy enforcer. Consequently, the policy enforcer cannot obtain a permission token from the KC server for these deleted resources and throw a runtime error.

Version

26.0.3

Expected behavior

The policy enforcer should evict/update resources from the cache.

Actual behavior

No response

How to Reproduce?

No response

Anything else?

No response
@ebondu
Copy link
Author

ebondu commented Jan 16, 2025

See the associated PR

@mposolda mposolda linked a pull request Jan 17, 2025 that will close this issue
Open
@mposolda mposolda added area/admin-client kind/enhancement area/policy-enforcer area/authz-client status/fix-in-keycloak-required Refers to the issue, which need fix in keycloak/keycloak and will be synced to keycloak-client later and removed area/admin-client labels Jan 17, 2025
@ebondu
Copy link
Author

ebondu commented Jan 17, 2025

Here is the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
area/authz-client area/policy-enforcer kind/enhancement status/fix-in-keycloak-required Refers to the issue, which need fix in keycloak/keycloak and will be synced to keycloak-client later
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Policy enforcer do not handle suppressed server resources ebondu/keycloak-client
2 participants
@mposolda @ebondu