[fixes quarkusio#2422] - policy-enforcer should be disabled by default

pedroigor · May 13, 2019 · 6662484 · 6662484
1 parent 64e4e91
commit 6662484
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/docs/src/main/asciidoc/keycloak-guide.adoc b/docs/src/main/asciidoc/keycloak-guide.adoc
@@ -188,6 +188,7 @@ quarkus.keycloak.auth-server-url=http://localhost:8180/auth
 quarkus.keycloak.resource=backend-service
 quarkus.keycloak.bearer-only=true
 quarkus.keycloak.credentials.secret=secret
+quarkus.keycloak.policy-enforcer.enable=true
 quarkus.keycloak.policy-enforcer.enforcement-mode=PERMISSIVE
 ----
 

diff --git a/extensions/keycloak/deployment/src/main/java/io/quarkus/keycloak/KeycloakConfig.java b/extensions/keycloak/deployment/src/main/java/io/quarkus/keycloak/KeycloakConfig.java
@@ -334,7 +334,7 @@ public static class KeycloakConfigPolicyEnforcer {
         /**
          * Specifies how policies are enforced.
          */
-        @ConfigItem(name = "enable", defaultValue = "true")
+        @ConfigItem(name = "enable", defaultValue = "false")
         boolean enable;
 
         /**

diff --git a/integration-tests/keycloak/src/main/resources/application.properties b/integration-tests/keycloak/src/main/resources/application.properties
@@ -4,6 +4,7 @@ quarkus.keycloak.realm=quarkus
 quarkus.keycloak.resource=quarkus-app
 quarkus.keycloak.bearer-only=true
 quarkus.keycloak.credentials.secret=secret
+quarkus.keycloak.policy-enforcer.enable=true
 quarkus.keycloak.policy-enforcer.enforcement-mode=PERMISSIVE
 quarkus.keycloak.policy-enforcer.lazy-load-paths=true
 quarkus.keycloak.policy-enforcer.claim-information-point.claims.global-claim=global-claim
@@ -22,4 +23,4 @@ quarkus.keycloak.policy-enforcer.paths.3.claim-information-point.http.claims.use
 quarkus.keycloak.policy-enforcer.paths.3.claim-information-point.http.url=http://localhost:8081/api/users/me
 quarkus.keycloak.policy-enforcer.paths.3.claim-information-point.http.method=GET
 quarkus.keycloak.policy-enforcer.paths.3.claim-information-point.http.headers.Content-Type=application/x-www-form-urlencoded
-quarkus.keycloak.policy-enforcer.paths.3.claim-information-point.http.headers.Authorization=Bearer {keycloak.access_token}
+quarkus.keycloak.policy-enforcer.paths.3.claim-information-point.http.headers.Authorization=Bearer {keycloak.access_token}