-
Notifications
You must be signed in to change notification settings - Fork 138
Open
Description
Issue description
I have requirement as below.
- Getting call from client with Bearer token.
- Need to validate the token using auth service (Introspect) and get response
- Response will have roles
- Inject those roles into Authentication object
- So, that I can use @secured or @RolesAllowed annotation to authorize the services
Approach1 : I have configuration as below.
micronaut:
security:
enabled: true
oauth2:
enabled: true
introspection:
url: <>
auth:
client-id: <>
client-secret: <>
roles-name: "roles"
token:
jwt:
enabled: true
But this is not making call to Introspect URL.
Approach 2 : I have tried to implement own validator using io.micronaut.security.token.validator.TokenValidator. But this is not triggered when i make call to the application service.
Please help to resolve this issue.