raditpan commented on PR #8532:
URL: https://github.com/apache/nifi/pull/8532#issuecomment-2076430665

   Hi @exceptionfactory , I have tested your branch with my test Keycloak 
server and my group authorization configs. And it works as expected. I can make 
calls to Nifi REST API with token from client credentials flow.
   
   > Add the Client ID of the Application Client to the list of users 
authorized to invoke NiFi REST API methods.
   
   I'd like to added that, to make the Nifi REST API access works properly, the 
username added to NiFi's list of users authorized need to have the same name as 
the `sub` value of Token subject claim. This part is not clear to me when I 
first tried it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to