[aerogear-dev] [keycloak-user] Mobile Authentication API

[Bruno Oliveira]

Hi Rodrigo, currently we're under development of the adapters for
Keycloak. But most of the hard work was already done by our team for
mobile.

Check our cookbooks, is a great point of start
https://github.com/aerogear?query=cookbook.

For example for iOS you have:
https://github.com/aerogear/aerogear-ios-cookbook/tree/master/Shoot

I hope it helps.

On 2014-11-27, Rodrigo Sasaki wrote:
> That's exactly the case, we're using the direct grant API to exchange
> username/password for a token.
>
> If there was an endpoint to do the same with tokens from social links that
> would be fantastic. That would already be flexible enough for us to develop
> the activities the way we want.
>
> On Thu, Nov 27, 2014 at 5:39 AM, Stian Thorgersen <stian at redhat.com> wrote:
>
> > Hi,
> >
> > It's something we've discussed in the past. It would work, but it's not
> > very elegant as a lot of the logic would be pushed onto the native app. Our
> > core aim with Keycloak is to make security easy for folks.
> >
> > That being said are you using the direct grant api to exchange a
> > username/password for a token? We could probably allow using the direct
> > grant api and pass a token instead of a username/password.
> >
> > Added AeroGear mailing list as they're working on mobile adapters for
> > Keycloak.
> >
> > ----- Original Message -----
> > > From: "Rodrigo Sasaki" <rodrigopsasaki at gmail.com>
> > > To: keycloak-user at lists.jboss.org
> > > Sent: Wednesday, 26 November, 2014 7:32:38 PM
> > > Subject: Re: [keycloak-user] Mobile Authentication API
> > >
> > > Sorry, I wasn't clear enough. The problem we're having is with social
> > logins
> > >
> > > When we have to login a user via social links (Google or Facebook) we
> > need to
> > > send him to a webview, because Keycloak communicates with the social
> > > networks via the default flows we already have implemented.
> > >
> > > But from a mobile standpoint this could be improved, because the user can
> > > alerady have a Google account and/or a Facebook account on his mobile
> > > device. So that could be used instead of making the user login again on a
> > > webview.
> > >
> > > The idea is to send the social information we already have on the mobile
> > > device to Keycloak and get a token in return (we can do this with
> > > username/password today).
> > >
> > > The ideal thing would be a SDK for this that would (for example) be
> > > instantiated with URI and client_id, and would provide a method for
> > login. I
> > > know this might not be in your roadmap for any time soon, but I'd like to
> > > know if you have thought about any of this.
> > >
> > > This provides a very different user experience for the user, and I think
> > this
> > > feature would be appreciated by many.
> > >
> > > Thank you all again!
> > >
> > > Rodrigo Sasaki
> > >
> > > On Wed, Nov 26, 2014 at 4:13 PM, Rodrigo Sasaki <
> > rodrigopsasaki at gmail.com >
> > > wrote:
> > >
> > >
> > >
> > > Hello,
> > >
> > > I was wondering if there is a plan (or maybe something already built) for
> > > native mobile authentication with Keycloak.
> > >
> > > Right now we need to redirect the user to a web view so he can interface
> > with
> > > Keycloak to login, and from there on he can use the app normally, but is
> > > there something native for this? We're trying to find ways to use the
> > > smartphone's native authentication systems to login the users, and so
> > far we
> > > haven't been able to make it work.
> > >
> > > Have you thought of something along those lines?
> > >
> > > Thank you.
> > >
> > > --
> > > Rodrigo Sasaki
> > >
> > >
> > >
> > > --
> > > Rodrigo Sasaki
> > >
> > > _______________________________________________
> > > keycloak-user mailing list
> > > keycloak-user at lists.jboss.org
> > > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
>
>
>
> --
> Rodrigo Sasaki

> _______________________________________________
> aerogear-dev mailing list
> aerogear-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/aerogear-dev


--

abstractj
PGP: 0x84DC9914