[keycloak-dev] The provider configuration

Stian Thorgersen sthorger at redhat.com
Mon Jan 2 03:35:34 EST 2017


Not sure how the endpoints advertised in OIDC well known endpoint has
anything to do with NAT.

On 2 January 2017 at 09:31, Michael Furman <michael_furman at hotmail.com>
wrote:

> Hi Stian,
>
> Thank you for your reply!
>
>
> You answer just answer my second question. I will not repeat questions.
>
>
> Any case, now org.keycloak.protocol.oidc.OIDCWellKnownProvider#getConfig
> does not support deployments behind NAT.
>
> I have changed the class to support such deployments.
>
> Do you interesting in such contribution?
>
> Best regards,
>
>    Michael
>
>
> ------------------------------
> *From:* Stian Thorgersen <sthorger at redhat.com>
> *Sent:* Monday, January 2, 2017 9:43 AM
> *To:* Michael Furman
> *Cc:* bill at burkecentral.com; keycloak-dev at lists.jboss.org
> *Subject:* Re: [keycloak-dev] The provider configuration
>
> Already answered on duplicated email. Please don't repeat your questions.
>
> On 26 December 2016 at 06:42, Michael Furman <michael_furman at hotmail.com>
> wrote:
>
>> Dear Bill,
>> I will happy for your reply.
>> I have found that the provider configuration of Java adapters (Spring
>> Security Adapter) implemented in org.keycloak.adapters.Keycloak
>> Deployment#resolveUrls
>> Just interesting why Keycloak Java adapter do not request the provider
>> configuration via /.well-known/openid-configuration (
>> https://openid.net/specs/openid-connect-discovery-1_0-17.
>> html#ProviderConfig)?
>> One more question:
>> We need to support Keycloak behind the Network Address Tranlation (NAT)
>> and therefore we need to modify org.keycloak.adapters.KeycloakDeployment#resolveUrls
>> and org.keycloak.protocol.oidc.OIDCWellKnownProvider#getConfig.
>>
>> What is the best way to contribute it to Keycloak?
>>
>> Thanks in advance for your help,
>> Michael
>>
>>
>>
>> ________________________________
>> From: keycloak-dev-bounces at lists.jboss.org <keycloak-dev-bounces at lists.jb
>> oss.org> on behalf of Michael Furman <michael_furman at hotmail.com>
>> Sent: Friday, December 23, 2016 3:22 PM
>> To: keycloak-dev at lists.jboss.org
>> Subject: [keycloak-dev] What code in Keycloak IDP is responsible to
>> return the configuration to Java adapters?
>>
>> Dear Keycloak people,
>> I need our help.
>> What code in Keycloak IDP is responsible to return the configuration to
>> Java adapters (Spring Security Adapter) ?
>> I mean all URLs in the org.keycloak.adapters.KeycloakDeployment class
>> (authServerBaseUrl, tokenUrl etc.).
>> I have modified org.keycloak.protocol.oidc.OIDCWellKnownProvider but
>> this code is not executed during OIDC protocol with java adapters.
>> Thanks in advance for your help,
>> Michael
>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>> keycloak-dev
>> <https://lists.jboss.org/mailman/listinfo/keycloak-devkeycloak-dev> Info
>> Page - lists.jboss.org<https://lists.jboss.org/mailman/listinfo/key
>> cloak-dev>
>> lists.jboss.org
>> To see the collection of prior postings to the list, visit the
>> keycloak-dev Archives. Using keycloak-dev: To post a message to all the
>> list members ...
>>
>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev at lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
>
>


More information about the keycloak-dev mailing list