[keycloak-user] One-time access token

[Stian Thorgersen]

We are planning to add the ability for an application to require a user to
re-authenticate. There's basically two parts to that. First the token needs
to contain the time the user authenticated, secondly the application needs
to be able to require user login screen to be displayed even if the user is
already authenticated.

Not sure if this is sufficient for your requirements though. I'd probably
rewrite my requirements a bit if I was you and rather than having a
one-time access token require a user to have re-authenticated within a
short time (a few minutes maybe) for sensitive operations.

On 8 September 2016 at 12:01, Wieloch, Marcin <Marcin.Wieloch at sicpa.com>
wrote:

> Hi,
>
> I am working on a system where we would like to enforce that for some
> particular resources
> the resource owner has to authorise each access to such a resource. In
> other words, we want
> the user to re-type in his username and password each time he executes a
> particular operation.
>
> In this context, does Keycloak provide something like 'one-time' access
> tokens?
> Or does it maybe support such a use case in yet another way?
>
> Best regards,
> Marcin
>
> ------------------------------
> The information in this email and any attachments is confidential and
> intended solely for the use of the individual(s) to whom it is addressed or
> otherwise directed. Please note that any views or opinions presented in
> this email are solely those of the author and do not necessarily represent
> those of the Company. Finally, the recipient should check this email and
> any attachments for the presence of viruses. The Company accepts no
> liability for any damage caused by any virus transmitted by this email.
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-user/attachments/20160909/63c645d8/attachment.html