[GitHub] [apisix] hndoss commented on issue #8514: help request: Graphql subscription fails with plugin authz-keycloak

[GitBox <gi...@apache.org>]

hndoss commented on issue #8514:
URL: https://github.com/apache/apisix/issues/8514#issuecomment-1350281497

   > The authz-keycloak plugin only read token from the `Authorization` header. Do you mean, you want to send the `Authorization` header using WebSocket?
   
   So far, we have tried everything on our client side to be able to add the Authorization header without success.
   The last thing we're trying to do is to not use the authz-keycloak plugin when using graphql subscriptions, but we haven't been able to do that.
   
   I tried creating two identical routes, but one of them doesn't have the authz-keycloak plugin enabled. Something like this:
   
   ## For graphql subscriptions
   ```
   {
     "uris": [
       "/explorer/exchange/v1/graphql"
     ],
     "name": "exchange-service-dev-subs",
     "host": "xxxx.com",
     "vars": [
       ["graphql_operation", "==", "subscription"]
     ],
     "upstream_id": "880ced1a"
     "enable_websocket": true
   }
   ```
   
   ## For everything else
   ```
   {
     "uris": [
       "/explorer/exchange/v1/graphql"
     ],
     "name": "exchange-service-dev",
     "host": "xxxx.com",
     "vars": [
       ["graphql_operation", "!=", "subscription"]
     ],
     "upstream_id": "880ced1a"
     "enable_websocket": true,
     "plugin_config_id": "402fd7b0"
   }
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@apisix.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org