[keycloak-dev] key cloak findings

Bill Burke bburke at redhat.com
Fri Aug 14 09:07:41 EDT 2015


I have no idea what you are saying...

On 8/13/2015 11:32 PM, Satyajit Das wrote:
> Hi kindly see the below mentioned scenario and result. please advise
> whether the findings is as per expectations.
>
> 1) I created a new service copied the keycloak.json from an existing
> (registered at keycloak server) webservice project.
> I didn't register the new service at key cloak , deployed it on tomcat
> and executed the program. The new service gets called even if it is not
> registered at keycloak server.
>
> 2) I changed the public shared key.here the new service failed saying
> token mismatch.
>
>
> Kindly let me know your thoughts.
>
> Regards,
> Satya.
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com


More information about the keycloak-dev mailing list