<br><br>On Tuesday, February 25, 2014, Stian Thorgersen <<a href="mailto:stian@redhat.com">stian@redhat.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
See comments in-line<br>
<br>
Mobile adapters would be really good to have. If we can get help from the AeroGear team to do these, maybe we could include this as well? For simplicity we could just aim for a working Cordova example, but Android and iOS adapters would be great.</blockquote>
<div><br></div><div><br></div><div>We have OAuth2 (JS/iOS - Android coming).</div><div>Could give that a shot;</div><div><br></div><div>-Matthias </div><div><span></span> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
It would also be nice to make Keycloak more "embeddable". I'd like to be able to improve how Keycloak is embedded into LiveOak, but there's also the issue around WildFly console needing to embed it. Let's have a separate thread on this, but my current (updated) thinking is to utilize RestEasy, but to remove use of servlets<br>
<br>
There's a whole bunch of JIRA issues with fix for beta1. In the effort to prune this list a bit, here's some I think we can postpone to later:<br>
<br>
KEYCLOAK-313 Manage devices<br>
KEYCLOAK-311 Custom user profiles<br>
KEYCLOAK-310 SPI for multi-factor authentication<br>
KEYCLOAK-308 Cordova adapter<br>
KEYCLOAK-307 iPhone adapter<br>
KEYCLOAK-306 Android adapter<br>
KEYCLOAK-301 Internationalization support<br>
KEYCLOAK-300 Auto configuration of MySQL or PostgreSQL in OpenShift cartridge<br>
KEYCLOAK-266 Integrated help in admin console<br>
KEYCLOAK-265 Optional instructions to social providers<br>
KEYCLOAK-242 Add remember machine option for two factor authentication<br>
KEYCLOAK-182 List applications on account management<br>
KEYCLOAK-161 Allow users to create oauth clients through account pages<br>
KEYCLOAK-57 Mobile example application<br>
<br>
----- Original Message -----<br>
> From: "Bill Burke" <<a href="javascript:;" onclick="_e(event, 'cvml', 'bburke@redhat.com')">bburke@redhat.com</a>><br>
> To: <a href="javascript:;" onclick="_e(event, 'cvml', 'keycloak-dev@lists.jboss.org')">keycloak-dev@lists.jboss.org</a><br>
> Sent: Tuesday, 25 February, 2014 4:51:44 PM<br>
> Subject: [keycloak-dev] 1.0 Final roadmap<br>
><br>
> What's left for must-have features before we can start pushing for a<br>
> 1.0.Final release? We need to release 1.0 sometime in June.<br>
<br>
Any particular reason for June?<br>
<br>
><br>
> * Minimal OpenID Connect support<br>
> * Import/Export of various items of a realm (for data migration).<br>
> * Aerogear bootstrap requirements<br>
> * Theme support for admin console so we can brand it.<br>
> * Revocation policies. I'm thinking Not-Before is good enough for a 1.0<br>
> release. We need to be able to push this to deployed apps. And also<br>
> maybe piggyback this information in AcessTokenResponse. This also of<br>
> course needs to be stored within subsystem config too, or maybe we could<br>
> just have adapters pull that information from server at bootup.<br>
<br>
We probably need a separate thread to discuss this, but it's important that users can view what applications can currently access their account and revoke access to individual apps. This means we need to know what refresh tokens are valid, and which have been revoked by a user.<br>
<br>
> * Remember Me for social logins<br>
> * Federation of users/credentials with LDAP/AD. Hopefully through<br>
> Picketlink.<br>
<br>
Is this really required for the first release?<br>
<br>
> * User session management. Admin can logout a user.<br>
> * Audit log.<br>
<br>
Related things we'll need are brute force protection (including max failed login attempt before locking a users account) and email notifications on certain events.<br>
<br>
><br>
><br>
> Scaling/Optimization:<br>
><br>
> * Storage cache for the token service so it doesn't hit the database.<br>
> * Make token service stateless for clustering environments (maybe don't<br>
> need for 1.0?)<br>
><br>
><br>
> We'll stick with only AS7/EAP/Wildfly adapters for 1st release. We also<br>
> have to pencil in time for weeks of test writing, benchmarking, and<br>
> documentation.<br>
><br>
><br>
><br>
><br>
> --<br>
> Bill Burke<br>
> JBoss, a division of Red Hat<br>
> <a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a><br>
> _______________________________________________<br>
> keycloak-dev mailing list<br>
> <a href="javascript:;" onclick="_e(event, 'cvml', 'keycloak-dev@lists.jboss.org')">keycloak-dev@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br>
><br>
_______________________________________________<br>
keycloak-dev mailing list<br>
<a href="javascript:;" onclick="_e(event, 'cvml', 'keycloak-dev@lists.jboss.org')">keycloak-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br>
</blockquote><br><br>-- <br>Sent from Gmail Mobile<br>