[keycloak-user] OpenID Connect support

Iván Perdomo ivan at akvo.org
Mon Oct 20 14:24:16 EDT 2014


On Mon, 20 Oct 2014 13:57:44 -0400
Bill Burke <bburke at redhat.com> wrote:

> I thought the issuer was the realm.  I guess its not....Also looks
> like we'll need to have one URL to process all realm oidc requests as
> the ISS is validated.
> 
> Does this library offer any encryption/signature options for the ID
> Token?

The library validating the token is Google's OAuth Client Library
[1][2], the piece of code calling that library [3]

[1] https://code.google.com/p/google-oauth-java-client/
[2]
http://javadoc.google-oauth-java-client.googlecode.com/hg/1.19.0/com/google/api/client/auth/openidconnect/IdTokenVerifier.html
[3]
https://github.com/iperdomo/android-openid-connect-sample/blob/master/app/src/main/java/com/lnikkila/oidcsample/oidc/OIDCUtils.java#L156-L164

-- 
Iván



More information about the keycloak-user mailing list