EccUser
EccUser is the logged-in user as seen by the business service, built from the Keycloak access token of the request.
The authenticated user, built from the Keycloak access token of the request.
import type { EccUser } from "@/ecc/types/taskTypes";
Fields
| date-time | Time the user object was built for this request. Example: |
| string | Keycloak realm, used as tenant id. Example: |
| string | User's preferred username (e.g. email or UPN) Example: |
| string | Display name. Example: |
| string | E-mail address (claims email, unique_name or upn). Example: |
| string | First name. Example: |
| string | Last name. Example: |
| list of string | Keycloak realm roles from realm_access.roles |
| list of string | Keycloak client roles from resource_access.{clientId}.roles |
| list of string | Groups from the Keycloak groups claim. Used for task visibility and UI group checks. |
| object | Custom claims configured in Keycloak protocol mappers |
| date-time | Issue time of the token. |
| date-time | Expiry time of the token. |
| string | Token id (jti claim). |
| string | Object type. Example: |
TypeScript type
The frontend type EccUser follows this structure. Only in the TypeScript type (set by the frontend or kept for older data): roles. Delivered by the API but not declared in the TypeScript type: realmRoles, clientRoles, customClaims, eccType.
Where it is used
API Reference | |
Developer Guide | |
System Handbook | |
contains EccUser in |
On this page
- EccUser