Merge pull request #2457 from constantine2nd/develop

Add release notes regarding Keycloak integration
OpenBankProject · Dec 3, 2024 · a6be720 · a6be720
2 parents 092f906 + 51a92c3
commit a6be720
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/release_notes.md b/release_notes.md
@@ -3,6 +3,18 @@
 ### Most recent changes at top of file
 ```
 Date          Commit        Action
+03/02/2024    7bcb6bc5      Added props oauth2.keycloak.source-of-truth, default is false.
+                            oauth2.keycloak.source-of-truth = true turns sync ON.
+                            It is used to sync IAM of OBP-API and IAM of Keycloak.
+                            In case that access token issued by Keycloak contains roles assiggned to a consumer, for instance:
+                            "open-bank-project": {
+                              "roles": [
+                                "CanGetConsentsAtAnyBank",
+                                "uma_protection"
+                              ]
+                            }
+                            OBP-API add the role CanGetConsentsAtAnyBank to the consumer "open-bank-project" via Scopes feature.
+                            The role "uma_protection" is ignored because there is no such a role at OBP-API side.
 12/11/2024    d2e711b4      Added props rabbitmq_connector.virtual_host, default is /.
                             If you need to set it, please make sure you already add the virtual_host to the rabbitmq and grant the access to the user:
                             eg: run `rabbitmqctl add_vhost /obp/` => create the `/obp/`