[aerogear-dev] AGPUSH-1047: Decouple UPS from Keycloak

Pratik Parikh pratik.p.parikh at gmail.com
Mon Nov 17 21:00:48 EST 2014


Hi Bruno,

   Below is my aerogear realm config.

{
  "id" : "0328827d-fae8-4f11-a559-daecf31c3133",
  "realm" : "aerogear",
  "notBefore" : 0,
  "accessTokenLifespan" : 60,
  "ssoSessionIdleTimeout" : 600,
  "ssoSessionMaxLifespan" : 36000,
  "accessCodeLifespan" : 60,
  "accessCodeLifespanUserAction" : 300,
  "enabled" : true,
  "sslRequired" : "external",
  "passwordCredentialGrantAllowed" : false,
  "registrationAllowed" : false,
  "rememberMe" : false,
  "verifyEmail" : false,
  "resetPasswordAllowed" : false,
  "social" : false,
  "updateProfileOnInitialSocialLogin" : false,
  "bruteForceProtected" : false,
  "maxFailureWaitSeconds" : 900,
  "minimumQuickLoginWaitSeconds" : 60,
  "waitIncrementSeconds" : 60,
  "quickLoginCheckMilliSeconds" : 1000,
  "maxDeltaTimeSeconds" : 43200,
  "failureFactor" : 30,
  "privateKey" :
"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",
  "publicKey" :
"MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCaZGiFwx6bKQiYZIqhmgjFqa2I8fcDzZLnDhxgLinJR1zb6LeEECCNuvHzK//GlN4kLlFqCfqr+dkzh/G76snv8H9GdRiNLotmLxMl+RCi3E/Oiqmk0TxjcxHnArIbDFSIX/H+KmsXUx12pihYi9hr2/ZDGSLSg2yMfr3xxw8yNwIDAQAB",
  "certificate" :
"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",
  "codeSecret" : "6812ba34-b73a-45fa-a25f-f6424800d7c4",
  "roles" : {
    "realm" : [ {
      "id" : "06a3957a-68b7-4ee1-8af1-bc3d349570d7",
      "name" : "developer",
      "description" : "Developer privileges",
      "composite" : false
    }, {
      "id" : "6b1a5dd0-8695-4697-ae11-7414b29d6b1a",
      "name" : "admin",
      "description" : "Administrator privileges",
      "composite" : false
    } ],
    "application" : {
      "unified-push-server-js" : [ ],
      "unified-push-server" : [ ],
      "security-admin-console" : [ ],
      "account" : [ {
        "id" : "d3623655-9dcd-4cb6-bbe2-381465e045f7",
        "name" : "manage-account",
        "composite" : false
      }, {
        "id" : "38afc2a6-2b69-424b-a6e4-3cbbfc669935",
        "name" : "view-profile",
        "composite" : false
      } ],
      "realm-management" : [ {
        "id" : "ca11d26a-05e4-4468-ae65-033c6d35a9b4",
        "name" : "manage-applications",
        "composite" : false
      }, {
        "id" : "30b8a2ce-175f-4ea6-9435-55e865ab7b45",
        "name" : "manage-events",
        "composite" : false
      }, {
        "id" : "a61fe218-23d4-466b-8f83-ac5df1239e90",
        "name" : "view-applications",
        "composite" : false
      }, {
        "id" : "cf303310-46f3-435f-98ee-0c328e59b8a3",
        "name" : "view-realm",
        "composite" : false
      }, {
        "id" : "7ee21680-b39d-4d9d-9d44-ff9701c9cbc0",
        "name" : "manage-users",
        "composite" : false
      }, {
        "id" : "e81feae5-7d51-48dd-a91b-af6d37c41541",
        "name" : "manage-realm",
        "composite" : false
      }, {
        "id" : "1204dcb0-0fd1-4452-8dff-a251f2bbfbd5",
        "name" : "realm-admin",
        "composite" : true,
        "composites" : {
          "application" : {
            "realm-management" : [ "manage-applications", "manage-events",
"view-realm", "view-applications", "manage-users", "manage-realm",
"view-users", "view-events", "manage-clients", "view-clients" ]
          }
        }
      }, {
        "id" : "e1552859-8081-4e95-8494-e1e959186653",
        "name" : "view-users",
        "composite" : false
      }, {
        "id" : "f2500304-d680-4b65-a3ca-2068d9ecd38c",
        "name" : "view-events",
        "composite" : false
      }, {
        "id" : "1f5efad1-33f1-4fef-ba86-d4e1e5a216e7",
        "name" : "manage-clients",
        "composite" : false
      }, {
        "id" : "e38705d0-1fc4-4fed-9b66-d5a3ee856bf0",
        "name" : "view-clients",
        "composite" : false
      } ]
    }
  },
  "requiredCredentials" : [ "password" ],
  "users" : [ {
    "id" : "62e2bd08-fac5-439a-adf7-35ef2a9053d9",
    "username" : "admin",
    "enabled" : true,
    "totp" : false,
    "emailVerified" : false,
    "credentials" : [ {
      "type" : "password",
      "hashedSaltedValue" :
"abiRMrF4ZArWArGgINeUlyHkKuAht/ugbd8I3JPZS07Ym3K8Bb+JFQuw5yycozPzof6AwqjGnKNuGaWG13Gf2A==",
      "salt" : "xUi77eNlKTGBBdNciffqNQ==",
      "hashIterations" : 1,
      "temporary" : false
    } ],
    "requiredActions" : [ ],
    "realmRoles" : [ "admin" ],
    "applicationRoles" : {
      "account" : [ "manage-account" ],
      "realm-management" : [ "realm-admin" ]
    }
  }, {
    "id" : "2cb0270b-1eb5-475f-a165-5300cc6d120b",
    "username" : "developer",
    "enabled" : false,
    "totp" : false,
    "emailVerified" : false,
    "credentials" : [ {
      "type" : "password",
      "hashedSaltedValue" :
"JPJQze/77OdsPF9TnnrrN9icC70EKb4HjtE7P143Z9XssQiQ2pWW7SO1K5AulR+WjDyzej0ljcCqkD6rSRjf+A==",
      "salt" : "dKNLgKzyn+z6RaEiR+yvmA==",
      "hashIterations" : 1,
      "temporary" : false
    } ],
    "requiredActions" : [ "UPDATE_PASSWORD" ],
    "realmRoles" : [ "developer" ],
    "applicationRoles" : {
      "account" : [ "manage-account" ]
    }
  } ],
  "scopeMappings" : [ {
    "client" : "unified-push-server-js",
    "roles" : [ "developer", "admin" ]
  } ],
  "applicationScopeMappings" : {
    "realm-management" : [ {
      "client" : "security-admin-console",
      "roles" : [ "realm-admin" ]
    } ]
  },
  "applications" : [ {
    "id" : "b0f2dab8-4112-4ed6-89b0-2d45431818b3",
    "name" : "unified-push-server-js",
    "baseUrl" : "/ag-push",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "secret" : "389a9d28-293c-4200-b16d-88acace7d125",
    "redirectUris" : [ "https://XXX.XXX.XXX.XXX:8443/ag-push/*" ],
    "webOrigins" : [ "https://XXX.XXX.XXX.XXX:8443/ag-push/*" ],
    "claims" : {
      "name" : true,
      "username" : true,
      "profile" : true,
      "picture" : true,
      "website" : true,
      "email" : true,
      "gender" : true,
      "locale" : true,
      "address" : true,
      "phone" : true
    },
    "notBefore" : 0,
    "bearerOnly" : false,
    "publicClient" : true,
    "protocol" : "openid-connect",
    "attributes" : {
      "saml.multivalued.roles" : "false",
      "saml.encrypt" : "false",
      "saml.server.signature" : "false",
      "saml.assertion.signature" : "false",
      "saml.force.post.binding" : "false",
      "saml.client.signature" : "false",
      "saml.authnstatement" : "false"
    },
    "fullScopeAllowed" : true,
    "nodeReRegistrationTimeout" : -1
  }, {
    "id" : "ed1cb5b3-c16b-4382-ac92-5a560ccbc6c3",
    "name" : "unified-push-server",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "secret" : "e2f34c47-3c54-4141-9f0d-8a1e644ed222",
    "redirectUris" : [ ],
    "webOrigins" : [ ],
    "claims" : {
      "name" : true,
      "username" : true,
      "profile" : true,
      "picture" : true,
      "website" : true,
      "email" : true,
      "gender" : true,
      "locale" : true,
      "address" : true,
      "phone" : true
    },
    "notBefore" : 0,
    "bearerOnly" : true,
    "publicClient" : false,
    "attributes" : { },
    "fullScopeAllowed" : true,
    "nodeReRegistrationTimeout" : -1
  }, {
    "id" : "5b57a66f-5623-43e2-a958-be57623d78ab",
    "name" : "security-admin-console",
    "baseUrl" : "/auth/admin/aerogear/console/index.html",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "secret" : "28b368b3-7911-442e-9316-79888207d084",
    "redirectUris" : [ "/auth/admin/aerogear/console/*" ],
    "webOrigins" : [ ],
    "claims" : {
      "name" : true,
      "username" : true,
      "profile" : true,
      "picture" : true,
      "website" : true,
      "email" : true,
      "gender" : true,
      "locale" : true,
      "address" : true,
      "phone" : true
    },
    "notBefore" : 0,
    "bearerOnly" : false,
    "publicClient" : true,
    "attributes" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0
  }, {
    "id" : "8532a1cf-e7d3-4142-b3c1-3f5f4546d60c",
    "name" : "account",
    "baseUrl" : "/auth/realms/aerogear/account",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "secret" : "eb1f3012-6b42-4fa1-a5ca-bac235c93eca",
    "defaultRoles" : [ "view-profile", "manage-account" ],
    "redirectUris" : [ "/auth/realms/aerogear/account/*" ],
    "webOrigins" : [ ],
    "claims" : {
      "name" : true,
      "username" : true,
      "profile" : true,
      "picture" : true,
      "website" : true,
      "email" : true,
      "gender" : true,
      "locale" : true,
      "address" : true,
      "phone" : true
    },
    "notBefore" : 0,
    "bearerOnly" : false,
    "publicClient" : false,
    "attributes" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0
  }, {
    "id" : "39058ddb-4e8d-4b87-964a-bb94603f1250",
    "name" : "realm-management",
    "surrogateAuthRequired" : false,
    "enabled" : true,
    "secret" : "edb7fe15-6333-4311-b64b-d099d112f282",
    "redirectUris" : [ ],
    "webOrigins" : [ ],
    "claims" : {
      "name" : true,
      "username" : true,
      "profile" : true,
      "picture" : true,
      "website" : true,
      "email" : true,
      "gender" : true,
      "locale" : true,
      "address" : true,
      "phone" : true
    },
    "notBefore" : 0,
    "bearerOnly" : true,
    "publicClient" : false,
    "attributes" : { },
    "fullScopeAllowed" : false,
    "nodeReRegistrationTimeout" : 0
  } ],
  "oauthClients" : [ ],
  "browserSecurityHeaders" : {
    "contentSecurityPolicy" : "frame-src 'self'",
    "xFrameOptions" : "SAMEORIGIN"
  },
  "socialProviders" : { },
  "smtpServer" : { },
  "loginTheme" : "aerogear",
  "accountTheme" : "aerogear",
  "adminTheme" : "aerogear",
  "eventsEnabled" : false,
  "eventsListeners" : [ ]
}





Regards,
Pratik Parikh



--
View this message in context: http://aerogear-dev.1069024.n5.nabble.com/aerogear-dev-AGPUSH-1047-Decouple-UPS-from-Keycloak-tp9973p10012.html
Sent from the aerogear-dev mailing list archive at Nabble.com.


More information about the aerogear-dev mailing list