<div dir="ltr">+1 This is absolutely needed</div><div class="gmail_extra"><br><div class="gmail_quote">On 29 October 2015 at 01:13, Marek Posolda <span dir="ltr"><<a href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div text="#000000" bgcolor="#FFFFFF"><span class="">
<div>On 29/10/15 09:11, Marek Posolda wrote:<br>
</div>
<blockquote type="cite">
<div>+1 for this. I might have already
created JIRA some months ago, but not sure. If you don't found,
create your own JIRA.<br>
<br>
Our javascript adapter keycloak.js already has support for this
(method "update" in keycloak.js), but java adapters don't have
it. <br>
<br>
Looks we may need to add the new option on adapter config (
keycloak.js ) for this. Not sure what should be it's default
value, 5 seconds?<br>
</div>
</blockquote></span>
Sorry, i meant keycloak.json in the last sentence about adapter
config.<span class="HOEnZb"><font color="#888888"><br>
<br>
Marek</font></span><span class=""><br>
<blockquote type="cite">
<div> <br>
Marek<br>
<br>
<br>
On 28/10/15 19:51, Benjamin Loy wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hello all,
<div><br>
</div>
<div>We are using Keycloak in production and wanted to make a
change to it to handle tokens that are about to expire. We
have a number of services that rely on the bearer token sent
from our web servers for authentication. Users will land on
the web server, we verify their token is alive, and send
the bearer token to a service. Our issue is sometimes the
user has an extremely small amount of time left, the bearer
token expires by the time we do the security checks on the
services, and the request fails.</div>
<div><br>
</div>
<div>We are considering adding a minimum TTL
in RefreshableKeycloakSecurityContext that will refresh an
active token if it has less than a configurable amount of
time left before it expires. This will let us build a time
window that will prevent the token from expiring when
interacting with services under normal circumstances.</div>
<div><br>
</div>
<div>Would you be interested in our work on this or have any
interest to do this yourselves? I can create a Jira and a
pull request if you want us to implement this feature.</div>
<div><br>
</div>
<div>Thanks,</div>
<div><br>
</div>
<div>Ben</div>
<div><br>
</div>
<div><br>
</div>
</div>
<div dir="ltr">-- <br>
</div>
<div dir="ltr">
<blockquote>
<div>
<p><span>Benjamin Loy</span></p>
</div>
<div>
<p><span>Senior Software Engineer</span></p>
</div>
<div>
<p><a href="mailto:bloy@smartling.com" target="_blank">bloy@smartling.com</a><span> </span><span>|
o: <a href="tel:%28866%29%20707%206278" value="+18667076278" target="_blank">(866) 707 6278</a></span></p>
</div>
<div><a href="http://www.smartling.com/" target="_blank"><span>smartling.com</span></a><span>
| </span><span>linkedIn</span><span> | </span><span><a href="https://twitter.com/smartling" target="_blank"><span>@s</span>martling</a></span></div>
<div><br>
</div>
</blockquote>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
keycloak-dev mailing list
<a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a></pre>
</blockquote>
<br>
<br>
<fieldset></fieldset>
<br>
<pre>_______________________________________________
keycloak-dev mailing list
<a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a></pre>
</blockquote>
<br>
</span></div>
<br>_______________________________________________<br>
keycloak-dev mailing list<br>
<a href="mailto:keycloak-dev@lists.jboss.org">keycloak-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-dev</a><br></blockquote></div><br></div>