<div dir="ltr">Sounds like a good idea and the demo worked like a charm. Nice!</div><div class="gmail_extra"><br><br><div class="gmail_quote">On 20 December 2013 13:11, Bruno Oliveira <span dir="ltr"><<a href="mailto:bruno@abstractj.org" target="_blank">bruno@abstractj.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Good morning peeps, yesterday I started to replace AeroGear Security on Unified Push server by Keycloak and you might be asking: “Why?”. Keycloak is a SSO with some handy features like TOTP, OAuth2, user management support and I think we have too much to contribute, is the only way to have some success with security, “divide to conquer" (at least for authorization and authentication).<br>
<br>
So will ag-security be discontinued? No! Keycloak is still on Alpha and we have to test it against our projects before fully replace ag-security, but the only way to upstream our needs, is to using it.<br>
<br>
This replacement only applies to authentication/authorization features, we still have a ton of projects which Keycloak is not able to replace like: TOTP, crypto and OAuth2 on mobile, our focus.<br>
<br>
- PoC<br>
<br>
So let’s talk about this replacement, any dependency on ag-security was removed from the push server and replaced by Keycloak: <a href="https://github.com/abstractj/aerogear-unifiedpush-server/tree/openshift" target="_blank">https://github.com/abstractj/aerogear-unifiedpush-server/tree/openshift</a><br>
<br>
Based on Keycloak examples, I just did copy & paste from one of the demos (<a href="https://github.com/abstractj/auth-server/tree/openshift" target="_blank">https://github.com/abstractj/auth-server/tree/openshift</a>) to create a server. Keycloak requires Resteasy 3.0.4, for this reason I had to manually replace some modules on JBoss.<br>
<br>
To test it go to: <a href="http://push-abstractj.rhcloud.com/ag-push/" target="_blank">http://push-abstractj.rhcloud.com/ag-push/</a> you must be redirected to Keycloak, enter: <br>
<br>
username: <a href="mailto:john@doe.com">john@doe.com</a><br>
password: password<br>
<br>
You must be redirected to agpush console, keep in mind that I took some shortcuts to get this demo working, so for example the create will fail because I removed everything related into the ember interface.<br>
<br>
Is also possible to enable TOTP, user’s registration and whatever you want.<br>
<br>
So what do you think?<br>
<br>
--<br>
abstractj<br>
<br>
_______________________________________________<br>
aerogear-dev mailing list<br>
<a href="mailto:aerogear-dev@lists.jboss.org">aerogear-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/aerogear-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/aerogear-dev</a></blockquote></div><br></div>