You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Keycloak User
Hi, everybody!
We implemented a custom protocol mapper to extend the IdToken of an authenticated user by specific claims. The information stored within these claims is fetched from an external service. For that we use the setClaim method within the mapper. If something goes wrong here we throw a RuntimeException.
Our goal is if something goes wrong within the mapper to break the login process and to invalidate the login session and cookies at this point. Is this possible within the mapper itself? How could we achive this?
btw: The mapper is used within a custom defined client scope. This client scope is assigned to several clients.