[keycloak-dev] rethinking credentials

[Bill Burke]

On 8/16/16 10:12 AM, Bruno Oliveira wrote:
> On 2016-08-11, Marek Posolda wrote:
>> I wonder if we can have UserCredentialValueModel to be more generic
>> store? Currently it has properties applicable just to password or OTP
>> credentials, but it will be better to have something more generic based
>> on key-value pairs though.
> +1 that would be fantastic, if possible.
A data model that can store any arbitrary key-value pair would require a 
join with RDBMs storage.  Should we keep something like 
UsercredValModel, but just add the ability for attributes?  Then model 
the API so that it can avoid joins?  There's also the issue of data 
migration from the old tables to the new.  Since this is users we could 
be talking about tens of thousands of rows.

Bill