Skip to content

[pull] main from quarkusio:main #229

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pull merged 4 commits into from
Aug 14, 2025
Merged

[pull] main from quarkusio:main #229

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
a78e543
Revisions for style and typos
rolfedh Aug 12, 2025
72749e7
Merge pull request #49493 from rolfedh/apply-qe-feedback-to-keycloak-…
sberyozkin Aug 14, 2025
537d4a5
Mention that leaving the value empty blocks all cross-origin requests.
rolfedh Aug 14, 2025
a75c1f6
Merge pull request #49489 from rolfedh/update-cors-origin-default-info
sberyozkin Aug 14, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion docs/src/main/asciidoc/security-cors.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,7 @@ quarkus.http.cors.access-control-allow-credentials=true <7>
----

<1> Enables the CORS filter.
<2> Specifies allowed origins, including a regular expression.
<2> Specifies allowed origins, including a regular expression. When not specified, CORS is not permitted, and only same-origin requests are allowed.
<3> Lists allowed HTTP methods for cross-origin requests.
<4> Declares custom headers that clients can include in requests.
<5> Identifies response headers that clients can access.
Expand Down
6 changes: 2 additions & 4 deletions docs/src/main/asciidoc/security-keycloak-authorization.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -525,8 +525,6 @@ public class ProtectedResource {
}
----

NOTE: If you want to use the `AuthzClient` directly, set `quarkus.keycloak.policy-enforcer.enable=true`; otherwise, no bean is available for injection.

[NOTE]
====
To use the `AuthzClient` directly, set `quarkus.keycloak.policy-enforcer.enable=true`.
Expand All @@ -535,9 +533,9 @@ Otherwise, no bean is available for injection.

== Mapping protected resources

By default, the extension fetches resources from Keycloak on demand, using their URI to identify and map the application resources that require protection.
By default, the extension uses lazy loading to fetch resources from Keycloak on demand. It uses the request URI to identify and map application resources that require protection.

To disable on-demand fetching and instead pre-load resources at startup, configure the following property:
To disable lazy loading and instead pre-load all resources at startup, configure the following property:

[source,properties]
----
Expand Down
Loading