<div dir="ltr">Hi Stian,<div><br></div><div>I'm sorry for the lack of information. Yes you are right I was talking about a packaged/installed app and yes it is Cordova.</div><div><br></div><div><br></div><div><span style="font-family:arial,sans-serif;font-size:13px">* Use a child window to open the login form (our not yet released Cordova/PhoneGap adapter will use this approach)</span><br>
</div><div><span style="font-family:arial,sans-serif;font-size:13px"><br></span></div><div>If I open a child window for the login form I will need a callback page/script hosted on the server to process the response back from keycloak, right? could you give me some ideas on how to handle this?</div>
<div><br></div><div>Thanks again,</div><div><br></div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Mar 17, 2014 at 5:24 AM, Stian Thorgersen <span dir="ltr"><<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
Are you referring to a packaged html5 based app for smarthpones (and not one that is access through the smartphones browser)?<br>
<br>
There are several ways available to use Keycloak from a packaged/installed app:<br>
<br>
* Register a custom URI schema for the application (something like myapp://oauth-callback) - recommended for a native app (our not yet released iOS and Android adapters will use this approach)<br>
* Start a temporary web server on <a href="http://localhost" target="_blank">http://localhost</a> on any available port - installed app on a desktop (our cli example uses this approach)<br>
* Use a child window to open the login form (our not yet released Cordova/PhoneGap adapter will use this approach)<br>
<br>
If you are using PhoneGap/Cordova the adapter should be ready soon. It won't be "released" until early May, but will also work with alpha3. If you're using another technology for your packaged html5 apps, let me know what you're using and I can give you some hints (it should just require a few minor changes to the PhoneGap/Cordova adapter).<br>
<div class="im HOEnZb"><br>
----- Original Message -----<br>
> From: "Rodrigo Del Canto" <<a href="mailto:delkant@gmail.com">delkant@gmail.com</a>><br>
</div><div class="HOEnZb"><div class="h5">> To: "Stian Thorgersen" <<a href="mailto:stian@redhat.com">stian@redhat.com</a>><br>
> Cc: <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> Sent: Sunday, 16 March, 2014 8:09:38 AM<br>
> Subject: Re: [keycloak-user] External JS AJAX client for jax-rs backend API<br>
><br>
> Hello Stian,<br>
><br>
> I was testing this today. My problem is that the keycloak.js script assumes<br>
> that the client application is hosted in a app/web server. I'm trying to<br>
> build a html 5 based app for smartphones. So there is no way to use the<br>
> redirect functionality, I need a way to provide to keycloak a username and<br>
> password and receive as response the token id.<br>
><br>
> Do you think that is possible? Is there any example available.<br>
><br>
> Thanks.<br>
><br>
><br>
> On Mon, Mar 10, 2014 at 10:34 AM, Stian Thorgersen <<a href="mailto:stian@redhat.com">stian@redhat.com</a>> wrote:<br>
><br>
> > Hi,<br>
> ><br>
> > We have a JS library, it's available at<br>
> > <a href="http://localhost:8080/js/keycloak.js" target="_blank">http://localhost:8080/js/keycloak.js</a>. There's no documentation for it<br>
> > yet, and the example needs a bit of TLC, but the example is customer-app-js<br>
> > and will be included in the alpha3 downloads that is due this week.<br>
> ><br>
> > A quick overview to get you started:<br>
> ><br>
> > Keycloak constructor takes a single object with the following properties:<br>
> ><br>
> > * client_id (required) - the name of the application/client in the admin<br>
> > console<br>
> > * client_secret (optional) - not recommended, instead select public client<br>
> > option for your application/client in the admin console<br>
> > * realm (required)<br>
> > * url (optional) - the base url of the server, if not specified it will<br>
> > infer it from the url of the keycloak.js script<br>
> > * onload (optional) - valid options: login-required, check-sso. Login<br>
> > required will redirect to login form when init is called. Check-sso will<br>
> > also redirect to login form, but won't display login form (used to check if<br>
> > user is logged into to sso realm)<br>
> ><br>
> > For example:<br>
> ><br>
> > var keycloak = Keycloak({ client_id: 'myapp', realm: 'myrealm' })<br>
> > keycloak.init(function() { alert('authenticated') }, function() {<br>
> > alert('auth failed') } );<br>
> ><br>
> > Addition methods:<br>
> ><br>
> > * login - redirect to login form<br>
> > * logout - log out<br>
> > * hasRealmRole(role) - returns true if user has the realm role<br>
> > * hasResourceRole(role, resource) - return true if user has the role for<br>
> > the specified resource (application)<br>
> > * loadUserProfile(success, failure) - loads the profile (in the future<br>
> > profile will be retrieved with IDToken from OpenID Connect spec, so this<br>
> > will probably not be required)<br>
> > * onValidAccessToken(success, failure) - invoke methods with a valid<br>
> > token. If the token is expired the refresh token is used to retrieve a new<br>
> > token before invoking the success callback<br>
> ><br>
> > Once authenticated the following properties are available as well:<br>
> ><br>
> > * token - base64 encoded token (use this as the value for the<br>
> > 'Authorization' header, for example<br>
> > "xMLHttpRequest.setRequestHeader('Authorization', 'Bearer ' +<br>
> > keycloak.token)")<br>
> > * tokenParsed - parsed token<br>
> > * authenticated - true if authenticated, false otherwise<br>
> > * subject - userId<br>
> ><br>
> > Please let me know how you get on with it, any feedback would be<br>
> > appreciated.<br>
> ><br>
> > Cheers,<br>
> > Stian<br>
> ><br>
> ><br>
> > ----- Original Message -----<br>
> > > From: "Rodrigo Del Canto" <<a href="mailto:delkant@gmail.com">delkant@gmail.com</a>><br>
> > > To: <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> > > Sent: Saturday, 8 March, 2014 5:54:44 AM<br>
> > > Subject: [keycloak-user] External JS AJAX client for jax-rs backend API<br>
> > ><br>
> > > Hello guys,<br>
> > ><br>
> > > Congrats on the release of project! I think this is the most useful<br>
> > project<br>
> > > for developers in the whole history of internet :D<br>
> > ><br>
> > > I would like to know if you have any example on how to perform a login<br>
> > from<br>
> > > an external JavaScript client?<br>
> > ><br>
> > > How would you recommend to do this. I heard you have a JS/jQuery lib to<br>
> > do<br>
> > > this, where can it be found?<br>
> > ><br>
> > > Thanks,<br>
> > ><br>
> > > delkant<br>
> > ><br>
> > > _______________________________________________<br>
> > > keycloak-user mailing list<br>
> > > <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> > > <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
> ><br>
><br>
</div></div></blockquote></div><br></div>