keycloak-uncached

Checking realm role directly

4/26/2017 3:39:37 PM

Pedro Igor

Commit: 4e43518

Tree: f927f20

Parents: b78cc63

Changes

services/src/main/java/org/keycloak/authorization/authorization/AuthorizationTokenService.java 2(+1 -1)

Details

services/src/main/java/org/keycloak/authorization/authorization/AuthorizationTokenService.java 2(+1 -1)

diff --git a/services/src/main/java/org/keycloak/authorization/authorization/AuthorizationTokenService.java b/services/src/main/java/org/keycloak/authorization/authorization/AuthorizationTokenService.java
index e60a0d6..fb28054 100644
--- a/services/src/main/java/org/keycloak/authorization/authorization/AuthorizationTokenService.java
+++ b/services/src/main/java/org/keycloak/authorization/authorization/AuthorizationTokenService.java
@@ -97,7 +97,7 @@ public class AuthorizationTokenService {
         KeycloakEvaluationContext evaluationContext = new KeycloakEvaluationContext(this.authorization.getKeycloakSession());
         KeycloakIdentity identity = (KeycloakIdentity) evaluationContext.getIdentity();
 
-        if (!identity.hasRole("uma_authorization")) {
+        if (!identity.hasRealmRole("uma_authorization")) {
             throw new ErrorResponseException(OAuthErrorException.INVALID_SCOPE, "Requires uma_authorization scope.", Status.FORBIDDEN);
         }