<div dir="ltr">Our adapters check the validity of the token by checking the signature (using the realm public key) and also checks the expiration times of the token as well.</div><div class="gmail_extra"><br><div class="gmail_quote">On 1 December 2015 at 14:49, Pavel Maslov <span dir="ltr"><<a href="mailto:pavel.masloff@gmail.com" target="_blank">pavel.masloff@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Hi everyone, </div><div><br></div><div><br></div><div>How does a Java service (secured with Keycloak) checks the validity of token? Does it have all the necessary info in keycloak.json or does it make an extra call to the keycloak auth server?</div><div><br></div><div>Thank you.</div><br clear="all"><div><div><div dir="ltr"><div style="font-family:arial;font-size:small"><div dir="ltr"><font color="#888888">Regards,<br>Pavel Maslov, MS</font></div></div></div></div></div>
</div>
<br>_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br></blockquote></div><br></div>