[keycloak-user] Endpoint URL's

yonim at odoro.co.il yonim at odoro.co.il
Thu Feb 26 08:55:43 EST 2015


Yeah, I know that.. the thing is that we couldn't get our java client (and
we tried several) to work against the openid-connect, we got stuck in the
discovery part.. so we thought about just use the oauth part




-----Original Message-----
From: keycloak-user-bounces at lists.jboss.org
[mailto:keycloak-user-bounces at lists.jboss.org] On Behalf Of Bill Burke
Sent: Thursday, February 26, 2015 2:56 PM
To: keycloak-user at lists.jboss.org
Subject: Re: [keycloak-user] Endpoint URL's

Openid Connect is an OAuth extension.  OAuth is just a framework and not a
complete protocol.  It is also just an authorization framework. 
OpenID Connect adds authentication as well as all the other details a real
protocol needs.

On 2/26/2015 5:43 AM, yonim at odoro.co.il wrote:
> Sorry for the late response..
>
> Yeah. The endpoints actually worked;)
>
> But the fact that we haven't found a client that supports the 
> openid-connect makes us think to switch to oauth..
>
> *From:*Christopher Wallace [mailto:cjwallac at gmail.com]
> *Sent:* Tuesday, February 24, 2015 7:20 PM
> *To:* Stian Thorgersen
> *Cc:* yonim at odoro.co.il; keycloak-user at lists.jboss.org
> *Subject:* Re: [keycloak-user] Endpoint URL's
>
> Yoni,
>
> Where you able to get this to work? I am attempting to get user 
> information also using 
> http://localhost:8082/auth/realms/<realm>/protocol/openid-connect/user
> info and it doesn't bring back any data. Any trics?
>
> Chris W.
>
> On Mon, Feb 23, 2015 at 8:16 AM, Stian Thorgersen <stian at redhat.com 
> <mailto:stian at redhat.com>> wrote:
>
>
>
>     ----- Original Message -----
>      > From: yonim at odoro.co.il <mailto:yonim at odoro.co.il>
>      > To: "Stian Thorgersen" <stian at redhat.com <mailto:stian at redhat.com>>
>      > Cc: keycloak-user at lists.jboss.org
>     <mailto:keycloak-user at lists.jboss.org>
>      > Sent: Monday, February 23, 2015 10:39:14 AM
>      > Subject: RE: [keycloak-user] Endpoint URL's
>      >
>      > Ok.. a bit frustrating.
>      >
>      > Any change the 1.2.0 Beta solves some of the issues? I can build
>     it if
>      > needed...
>
>     Afraid not. We are planning to add the discovery endpoint, but it
>     may be a month or so before we get time.
>
>      >
>      > I've tried openid4java (on top of spring security ) and another
>     client
>      > (mitred one, their client not the server) and both looked for the
>     discovery
>      > endpoint.
>      >
>      > Assuming I switch from opened-connect to OAuth - how can I get
>     the userinfo
>      > after that? any special endpoint to oauth userinfo after I got
>     the token?
>
>     You can invoke /auth/realms/{name}/protocol/openid-connect/userinfo
>     with the token.
>
>
>      >
>      > Cheers,
>      > Yoni
>      >
>      >
>      >
>      >
>      >
>      >
>      > -----Original Message-----
>      > From: Stian Thorgersen [mailto:stian at redhat.com
>     <mailto:stian at redhat.com>]
>      > Sent: Monday, February 23, 2015 10:52 AM
>      > To: Yoni Moses
>      > Cc: keycloak-user at lists.jboss.org
>     <mailto:keycloak-user at lists.jboss.org>
>      > Subject: Re: [keycloak-user] Endpoint URL's
>      >
>      > Hi,
>      >
>      > We haven't added the discovery part of OpenID Connect yet and
>     there are some
>      > issues with the docs as the protocol related endpoints are
>     missing. The
>      > endpoints of interest to you are:
>      >
>      > * /auth/realms/{name}/protocol/openid-connect/login
>      > * /auth/realms/{name}/protocol/openid-connect/access/codes
>      > * /auth/realms/{name}/protocol/openid-connect/refresh
>      > * /auth/realms/{name}/protocol/openid-connect/userinfo
>      >
>      > We are actively working on better integration with other openid
>     connect
>      > client libraries, so let us know what works and what doesn't.
>      >
>      > ----- Original Message -----
>      > > From: "Yoni Moses" <yonim at odoro.co.il <mailto:yonim at odoro.co.il>>
>      > > To: keycloak-user at lists.jboss.org
>     <mailto:keycloak-user at lists.jboss.org>
>      > > Sent: Sunday, February 22, 2015 1:07:36 PM
>      > > Subject: [keycloak-user] Endpoint URL's
>      > >
>      > > Hi,
>      > >
>      > > I've been trying keycloak , very impressive!
>      > > I don't intended to use it as the sample in jee but rather
>     through openid
>      > > provider in my case its openid4java with spring security.
>      > > I've been struggling with configuration of the endpoint
>     especially with
>      > > discovery end point..
>      > > is there somewhere in the doc the list of endpoints keycloak has?
>      > > so far I've been trying with /auth/realms/{name}
>      > >
>      > >
>      > > Thanks,
>      > > Yoni
>      > >
>      > >
>      > > _______________________________________________
>      > > keycloak-user mailing list
>      > > keycloak-user at lists.jboss.org
>     <mailto:keycloak-user at lists.jboss.org>
>      > > https://lists.jboss.org/mailman/listinfo/keycloak-user
>      >
>      >
>     _______________________________________________
>     keycloak-user mailing list
>     keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
>     https://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
>
>
> --
>
> Chris Wallace
> cjwallac at gmail.com <mailto:cjwallac at gmail.com>
> c: 570.582.9955
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>

--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user



More information about the keycloak-user mailing list