Name: Keycloak.AuthServices.Authorization
Author: Oleksii Nikiforov (@nikiforovall)

Keycloak.AuthServices.Authorization v2.1.0 — nugetz

Package	Version	Description
`Keycloak.AuthServices.Authentication`		Keycloak Authentication JWT + OICD
`Keycloak.AuthServices.Authorization`		Authorization Services. Use Keycloak as authorization server
`Keycloak.AuthServices.Sdk`		HTTP API integration with Keycloak
`Keycloak.AuthServices.Sdk.Kiota`		HTTP API integration with Keycloak based on OpenAPI

dotnet add package Keycloak.AuthServices.Authentication
dotnet add package Keycloak.AuthServices.Common

// Program.cs
using Keycloak.AuthServices.Authentication; 

var builder = WebApplication.CreateBuilder(args);

builder.Services.AddKeycloakWebApiAuthentication(builder.Configuration); 
builder.Services.AddAuthorization(); 

var app = builder.Build();

app.UseAuthentication(); 
app.UseAuthorization(); 

app.MapGet("/", () => "Hello World!").RequireAuthorization(); 

app.Run();

//appsettings.json
{
    "Keycloak": {
        "realm": "Test",
        "auth-server-url": "http://localhost:8080/",
        "ssl-required": "none",
        "resource": "test-client",
        "verify-token-audience": false,
        "credentials": {
        "secret": ""
        },
        "confidential-port": 0
    }
}

var builder = WebApplication.CreateBuilder(args);

var host = builder.Host;
var configuration = builder.Configuration;
var services = builder.Services;

services.AddKeycloakWebApiAuthentication(configuration);

services.AddAuthorization(options =>
    {
        options.AddPolicy("AdminAndUser", builder =>
        {
            builder
                .RequireRealmRoles("User") // Realm role is fetched from token
                .RequireResourceRoles("Admin"); // Resource/Client role is fetched from token
        });
    })
    .AddKeycloakAuthorization(configuration);

var app = builder.Build();

app.UseAuthentication();
app.UseAuthorization();

app.MapGet("/hello", () => "[]")
    .RequireAuthorization("AdminAndUser");

app.Run();

var services = new ServiceCollection();
services.AddKeycloakAdminHttpClient(new KeycloakAdminClientOptions
{
    AuthServerUrl = "http://localhost:8080/",
    Realm = "master",
    Resource = "admin-api",
});

var sp = services.BuildServiceProvider();
var client = sp.GetRequiredService<IKeycloakRealmClient>();

var realm = await client.GetRealmAsync("Test");

NikiforovAll/Keycloak.AuthServices.Authorizationv2.1.0

Get Started

Readme

Keycloak.AuthServices

Documentation

Getting Started

Example - Add Authorization

Example - Invoke Admin API

Build and Development

Blog Posts

Reference