[aerogear-dev] AGPUSH-1047: Decouple UPS from Keycloak

Bruno Oliveira bruno at abstractj.org
Fri Nov 14 08:39:08 EST 2014


I'm working on it. You can track the progress on that ticket, also the scenario you mentioned will be deployed on OpenShift.



—

abstractj
PGP: 0x84DC9914

On Fri, Nov 14, 2014 at 9:37 AM, Ken Finnigan <ken at kenfinnigan.me> wrote:

> Hi Bruno,
> I'm not super familiar with all the various bits of keycloak, but I think
> that section covers securing the UPS WAR with keycloak.
> I was wondering how UPS would need to be configured if the UPS WAR is on
> one WildFly and keycloak is on another, with each on completely separate
> machines? In particular, so that the Admin console knows where keycloak
> resides to secure itself.
> On Fri, Nov 14, 2014 at 6:27 AM, Bruno Oliveira <bruno at abstractj.org> wrote:
>> Hi Ken, the goal is to make use of what already exists on KC. See
>> section 7.2.3
>> (
>> http://docs.jboss.org/keycloak/docs/1.1.0.Beta1/userguide/html/ch07.html#d4e718
>> )
>>
>> On 2014-11-14, Ken Finnigan wrote:
>> > For a "decoupled version", how do you specify the keycloak host/port to
>> UPS?
>> >
>> > Does it involve "cracking open" the WAR to modify config, or is there a
>> > system property?
>> >
>> > On Fri, Nov 14, 2014 at 5:53 AM, Bruno Oliveira <bruno at abstractj.org>
>> wrote:
>> >
>> > > Good morning, I was evaluating this issue and was not that hard to
>> > > decouple UPS from Keycloak to permit people deploy their own KC
>> > > instance.
>> > >
>> > > Changes required:
>> > >
>> > > - Remove wildfly-adapter, once it already comes with KC. It doesn't
>> make
>> > >   sense on having it.
>> > >
>> > > <dependency>
>> > >     <groupId>org.keycloak</groupId>
>> > >     <artifactId>keycloak-wildfly-adapter</artifactId>
>> > > </dependency>
>> > >
>> > > - Decouple the AeroGear theme for Keycloak from auth-module
>> > >
>> > > Now, I'm getting the following error: Failed to find LOGIN theme
>> > > aerogear, using built-in themes =E2=80=94 for a good reason.a
>> > >
>> > > - Provide a separated profile for the "decoupled version": into this
>> > >   way, it's up to our developers use the builtin version or decoupled.
>> > >
>> > > As soon as I get a feedback on it. I will move forward with the
>> changes,
>> > > just let me know what do you think.
>> > >
>> > > --
>> > >
>> > > abstractj
>> > > PGP: 0x84DC9914
>> > > _______________________________________________
>> > > aerogear-dev mailing list
>> > > aerogear-dev at lists.jboss.org
>> > > https://lists.jboss.org/mailman/listinfo/aerogear-dev
>> > >
>>
>> > _______________________________________________
>> > aerogear-dev mailing list
>> > aerogear-dev at lists.jboss.org
>> > https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
>>
>> --
>>
>> abstractj
>> PGP: 0x84DC9914
>> _______________________________________________
>> aerogear-dev mailing list
>> aerogear-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/aerogear-dev
>>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/aerogear-dev/attachments/20141114/24111ce8/attachment.html 


More information about the aerogear-dev mailing list