[keycloak-dev] Config File for token validator endpoints url in keycloak?

Eric Son 3016 desk3016 at live.com
Thu Jun 16 12:01:29 EDT 2016



Hi Stian,
Based on your response, I
changed the configuration to this. But in authenticator, I am not able to
access this config. 
Am I missing something? 



               
"authenticator": {

                               
"xyz-username-password-authenticator": {

                                               
"tvUrl": "https://192.168.0.11/TokenValidator/TokenValidator.asmx",

                                               


                               
}

               
}

 

Here is my authenticator
provider ID and provider configurations, Btw I can see this configuration in
the console with empty value. 



    public static final String PROVIDER_ID = "xyz-username-password-authenticator";

    public String getId() {

        return PROVIDER_ID;

    }

 

    private static final
List<ProviderConfigProperty> configProperties = new
ArrayList<ProviderConfigProperty>();

 

    static {

       
ProviderConfigProperty property;

        property = new
ProviderConfigProperty();

        property.setName("tvUrl");

        property.setLabel("Token
Validator URL");

        property.setType(ProviderConfigProperty.STRING_TYPE);

        property.setHelpText("Token
Validator URL.");

        configProperties.add(property);

    }
In my authenticator, I am
accessing config like this, but it doesn’t have value for this config.


       if(context.getAuthenticatorConfig().getConfig()
!= null) {

             
for (String key : context.getAuthenticatorConfig().getConfig().keySet())
{

      
              log.info("Config Key:
" +
key + ", Value:
" +
context.getAuthenticatorConfig().getConfig().get(key));

             
}

       }


Did you see what I have missed, any? Thanks!

Best Regards,WJ



Date: Thu, 16 Jun 2016 04:57:59 +0200
Subject: Re: [keycloak-dev] Config File for token validator endpoints url in keycloak?
From: sthorger at redhat.com
To: desk3016 at live.com
CC: keycloak-dev at lists.jboss.org

The SPI is called "authenticator", not "authentication", so it should be:
"authenticator": {                                "xyz-username-password-authenticator": {                                                "tvUrl": "https://192.168.0.11/TokenValidator/TokenValidator.asmx"                                }                }
Assuming "xyz-username-password-authenticator" is what's returned by your factories getId method.
On 16 June 2016 at 04:26, Eric Son 3016 <desk3016 at live.com> wrote:








Hi Stian,
For elaborating previous question, I am creating a authentication provider, which needs to
call an external API. The payloads needs be encrypted with a key before calling
the API. 
I want API URL and Path of the Key to be configurable, so that Ops
team can tweak that based on each environment. 
I’ll be using KeyCloak in
multi-tenant environment, so rather than configuring it at authenticator level
for each relam, we want to configure these settings at system level.

 

I came across this link http://keycloak.github.io/docs/userguide/keycloak-server/html/providers.html#d4e559
which shows how you can pass configuration to providers. 
I tried to do the same
thing for my authentication provider but that didn’t work. Not Sure if it
matters but I am using KeyCloak version 1.9.3.

 

This is what I put in keycloak-server.json. Here
“xyz-username-password-authenticator” is my provider ID. 

 

"authentication": {

                               
"xyz-username-password-authenticator": {

                                               
"tvUrl": "https://192.168.0.11/TokenValidator/TokenValidator.asmx"

                               
}

               
}

I also tried it by putting following configuration i.e. by
removing the “authentication” element from above config.

 

"xyz-username-password-authenticator":
{

"tvUrl":
"https://192.168.0.11/TokenValidator/TokenValidator.asmx"

               
}

 

Can you please guide me how can I pass these configurations
to my authentication providers?
Thanks!
Best Regards,
WJ



Date: Mon, 6 Jun 2016 08:00:07 +0200
Subject: Re: [keycloak-dev] Config File for token validator endpoints url in keycloak?
From: sthorger at redhat.com
To: desk3016 at live.com
CC: keycloak-dev at lists.jboss.org

Please elaborate on what your use-case is.
On 3 June 2016 at 19:09, Eric Son 3016 <desk3016 at live.com> wrote:



Hi, 

I would like to use external token validator with the keycloak.
 Is there any existing configuration file for storing token validator API endpoints url and its public key info?
I want to set them up in "System level" rather than the "Execution level" in the code.

Thanks for the help!

Best Regards,

WJ

 		 	   		  

_______________________________________________

keycloak-dev mailing list

keycloak-dev at lists.jboss.org

https://lists.jboss.org/mailman/listinfo/keycloak-dev


 		 	   		  

 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20160616/79cc0f25/attachment-0001.html 


More information about the keycloak-dev mailing list