<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
The user docs
(<a class="moz-txt-link-freetext" href="http://keycloak.github.io/docs/userguide/keycloak-server/html/Overview.html#d4e54">http://keycloak.github.io/docs/userguide/keycloak-server/html/Overview.html#d4e54</a>)
describe exactly what I'm looking for: <br>
<blockquote type="cite">
<meta charset="utf-8">
<span style="color: rgb(51, 51, 51); font-family: 'Lucida Grande',
Geneva, Verdana, Arial, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 18px; orphans: auto;
text-align: justify; text-indent: 0px; text-transform: none;
white-space: normal; widows: 1; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important;
float: none;">Signed access tokens can also be propagated by
REST client requests within an<span
class="Apple-converted-space"> </span></span><code
class="literal" style="font-size: 0.9em; font-family: courrier,
monospace; white-space: nowrap; color: rgb(51, 51, 51);
font-style: normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 18px; orphans: auto;
text-align: justify; text-indent: 0px; text-transform: none;
widows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px;">Authorization</code><span
style="color: rgb(51, 51, 51); font-family: 'Lucida Grande',
Geneva, Verdana, Arial, sans-serif; font-size: 12px; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: 18px; orphans: auto;
text-align: justify; text-indent: 0px; text-transform: none;
white-space: normal; widows: 1; word-spacing: 0px;
-webkit-text-stroke-width: 0px; display: inline !important;
float: none;"><span class="Apple-converted-space"> </span>header.
This is great for distributed integration as applications can
request a login from a client to obtain an access token, then
invoke any aggregated REST invocations to other services using
that access token.</span></blockquote>
I have a web app (in Tomcat) that uses the Keycloak adapter for user
authentication.<br>
This web app needs to access a REST service, running in a different
Tomcat container and I want the REST service to use the same user
authentication, but I'm not totally sure about how to go about this.<br>
Do I just grab the keycloak token in the header in the web app and
add that as a header when calling the REST service, and set the REST
service up to use the same Keycloak adapter configuration as the web
app?<br>
<br>
What if I want to have other ways to authenticate the REST service
(e.g. access from multiple clients)?<br>
<br>
Tim<br>
<meta charset="utf-8">
<br>
<br>
<br>
<br>
</body>
</html>