Test Results for Keycloak Fine-grained Authorization Feature
Implemented OIDC Features
- Using angular-auth-oidc-client lib 14.1.5 for Keylcloak Login
- Using Autologin Feature from angular-auth-oidc-client
- Using AuthInterceptor from angular-auth-oidc-client
- Using Silent renew Access Tokens from angular-auth-oidc-client
- Using AutoLoginPartialRoutesGuard as our default Component ( Login ) is protected by a Guard
OIDC Docu
App Runtime Parameter
App-Info::isAuthenticated : {{ isAuthenticated }}
App-Info::appVersion : {{ appVersion }}
App-Info::apiUrl : {{ apiUrl }}
App-Info::keycloakURL : {{ keycloakURL }}
Application Tests
Login with superadmin/xxx
Click on Add Account -> Should work
Click on Delete Account -> Should work
CLick on Enable Account -> Should work
CLick on Disable Account -> Should work
CLick on Show Account -> Should work
CLick on Show All Accounts -> Should work
Login with testadmin/xxx
Click on Add Account -> Should work
Click on Delete Account -> Should fail with HTTP 403
CLick on Enable Account -> Should work
CLick on Disable Account -> Should work
CLick on Show Account -> Should work
CLick on Show All Accounts -> Should work
Login with testagent/xxx
Click on Add Account -> Should fail with HTTP 403
Click on Delete Account -> Should fail with HTTP 403
CLick on Enable Account -> Should fail with HTTP 403
CLick on Disable Account -> Should fail with HTTP 403
CLick on Show Account -> Should work
CLick on Show All Accounts -> Should work
Login with testuser/xxx
CLick on Show All Accounts -> Should fail with HTTP 403
All other Operations should also fail with HTTP 403