CCCHH/keycloak-attribute-endpoints-provider
Watch
0
0
Fork
You've already forked keycloak-attribute-endpoints-provider
 0
Code Issues 2 Pull requests 2 Projects Releases Packages Activity Actions

Fix matchRole lookup to include group-inherited and composite roles #25

Merged
stb merged 2 commits from fix-role-membership into main 2026-07-18 14:14:44 +02:00
Conversation 1 Commits 2 Files changed 1 +3 -1

2026-07-12

Stefan Bethke
Fix matchRole lookup to include group-inherited and composite roles
All checks were successful
/ Verify (push) Successful in 1m8s
Details
/ Verify (pull_request) Successful in 46s
Details 
getRoleMembersStream only returns users with the role assigned
directly, so exported attributes silently excluded users who have
matchRole via group membership. Filter all realm users with
hasRole() instead, matching the resolution already used for authRole.
2c3c0a3dab
2026-07-12 13:07:16 +02:00