OIDC mapping roles problem

[Mateusz Jasiński]

Hello.

I started using OIDC with Nessie and I got some credentials working.

Now I trying to use AUTH to ref branch etc but I see that in OIDC UserInfo I got all roles I need but mapping is not working - all the time I got only username instead of role.

I see some logs like 

2025-04-15 20:28:11,573 WARN  [io.qua.config] (main) Unrecognized configuration key "quarkus.oidc.ui-app.token.claims.role.claim-source" was provided; it will be ignored; verify that the dependency extension for this configuration is set or that you did not make a typo
2025-04-15 20:28:11,573 WARN  [io.qua.config] (main) Unrecognized configuration key "quarkus.oidc.roles.user-info.key" was provided; it will be ignored; verify that the dependency extension for this configuration is set or that you did not make a typo
2025-04-15 20:28:11,573 WARN  [io.qua.config] (main) Unrecognized configuration key "quarkus.oidc.roles.claim" was provided; it will be ignored; verify that the dependency extension for this configuration is set or that you did not make a typo
2025-04-15 20:28:11,573 WARN  [io.qua.config] (main) Unrecognized configuration key "quarkus.oidc.ui-app.token.user-info-claims.roles.claim" was provided; it will be ignored; verify that the dependency extension for

What I should set to Nessi start working with this roles ?? 

[Alex Dutra]

Hi Mateusz,

Can you share your full OIDC configuration? It seems indeed that some of the config you are using is not valid, as the warnings in the logs seem to indicate. 

You can check which properties are valid by looking at this page: https://quarkus.io/guides/security-oidc-configuration-properties-reference

Thanks,

Alex

--
You received this message because you are subscribed to the Google Groups "projectnessie" group.
To unsubscribe from this group and stop receiving emails from it, send an email to projectnessi...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/projectnessie/1be36db4-89f2-4e09-998b-6c586fbe8cafn%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.