<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Sorry to not be clear in my last
answer. Keycloak doesn't have any detection, that if you add new
property to mongo "user" it will break. You can manually add any
property you want to the objects in "user" collection. <br>
<br>
However note that:<br>
- Keycloak data is cached, so direct mongo modifications to user
won't be visible by Keycloak until you clear the cache or restart
Keycloak server (or disable cache).<br>
- I was more thinking about the case, that with your direct
modification to "user" object, there is a chance that you
accidentally delete some properties of the "user" object. For
example you update some attribute of "user" and accidentally
delete password etc.<br>
<br>
Keycloak itself doesn't have anything, which clears the password
of existing users. So you can try to just run Keycloak without
running the second app. If Keycloak will still work after a period
of time, then you will know that breaking user records is probably
related to some mongo modifications by your second app.<br>
<br>
Marek<br>
<br>
On 08/08/16 17:23, Francisco Montada wrote:<br>
</div>
<blockquote
cite="mid:CAO8U9BXzbCxKJruHsKgA7Wu+eP_AaKvu=Mb2kKD632nox7Rg4Q@mail.gmail.com"
type="cite">
<div dir="ltr">Hi Marek , thanks so much for you reply
<div><br>
</div>
<div>The first question is clear.</div>
<div>The second question, We are sure we do not have any extra
process in our application that can cause Master/Realm/Admin
clean up, </div>
<div>When you said "Yes" means that if we add new properties to
the "User" collection keycloak is detecting it like the DB was
hacked ? </div>
<div><br>
</div>
<div>Thanks </div>
<div>Francisco </div>
<div><br>
</div>
<div><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Aug 8, 2016 at 5:58 AM, Marek
Posolda <span dir="ltr"><<a moz-do-not-send="true"
href="mailto:mposolda@redhat.com" target="_blank">mposolda@redhat.com</a>></span>
wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><span class="">
<div>On 05/08/16 04:51, Francisco Montada wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hi team, we are using Keycloak and we
are facing two issues that we do not know why is
happening
<div><br>
</div>
<div>1. We are using the same Database to save
Keycloak and our App information, we have a Spring
boot and MongoDB environment, so we have access
directly from our Application level to the
Keycloak collections, we had noticed that if we
change any value on Keycloak collection form the
DB or from our app level it is no reflected on
Keycloak </div>
<div><br>
</div>
<div>Does Keycloak have some security validation for
data that are No saved from the Admin or API ? </div>
<div>Could be related with Caching ? <br>
</div>
</div>
</blockquote>
</span> Yes, Keycloak has cache for user data. It's
possible to disable it in keycloak admin console.<span
class=""><br>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div>2. For some reason our Keycloak collections is
getting mess up, after a period of time, what is
happening is the Master/Realm/Admin User password
is getting clean up and also the credentials for
some of our users </div>
<div><br>
</div>
<div>Do you have any idea what is happening ? </div>
<div>Could be related with that we are adding extra
values to the "user" collection ? <br>
</div>
</div>
</blockquote>
</span> Yes. Also the question is, if you're not doing
something, which accidentally breaks existing users
(delete their passwords etc)?<br>
<br>
Marek<br>
<br>
<blockquote type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Thanks </div>
<div>Francisco </div>
</div>
<br>
<fieldset></fieldset>
<br>
<pre>______________________________<wbr>_________________
keycloak-user mailing list
<a moz-do-not-send="true" href="mailto:keycloak-user@lists.jboss.org" target="_blank">keycloak-user@lists.jboss.org</a>
<a moz-do-not-send="true" href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/<wbr>mailman/listinfo/keycloak-user</a></pre>
</blockquote>
</div>
</blockquote></div>
</div>
</blockquote>
</body></html>