Hey Wei, our QE is investigating programmatic change of grants On Wed, Dec 3, 2014 at 4:46 PM, Sebastien Blanc <scm.blanc(a)gmail.com&gt; wrote: -- Matthias Wessendorf blog: http://matthiaswessendorf.wordpress.com/ sessions: http://www.slideshare.net/mwessendorf twitter: http://twitter.com/mwessendorf

we used to have them on the side, but removed them. However, here their 'old' Push Apps: https://github.com/matzew/aerogear.org/blob/production/docs/specs/aerogea... Variants (all mostly similar, except iOS): https://github.com/matzew/aerogear.org/tree/production/docs/specs/aerogea... -M On Wed, Dec 3, 2014 at 5:18 PM, Wei Li <weil(a)redhat.com&gt; wrote: -- Matthias Wessendorf blog: http://matthiaswessendorf.wordpress.com/ sessions: http://www.slideshare.net/mwessendorf twitter: http://twitter.com/mwessendorf

Hi Karel, That is great information and thank you very much for your help. I will give them a try and let you know how it goes. Thanks. Regards, Wei ----- Original Message ----- From: "Karel Piwko" <kpiwko(a)redhat.com&gt; To: aerogear-users(a)lists.jboss.org Sent: Thursday, December 4, 2014 8:59:16 AM Subject: Re: [Aerogear-users] Enabled Admin RESTful API access in unified-push server Hi Wei, in QE we are using following approaches to allow KeyCloak direct grant programatically and run integration tests. 1/ For local deployments, we open the WAR and replace Keycloak related configuration on-the-fly prior deployment https://github.com/aerogear/aerogear-unifiedpush-server-integration-tests... 2/ For OpenShift deployments, we add additional WAR to the cartridge, that has an EJB singleton that alters KeyCloak database to allow direct grant and then we redeploy to flush cache. https://github.com/aerogear/aerogear-unifiedpush-server-integration-tests... We plan to use approach 2/ even for local deployments in short future. Our test WAR contains additional features, such as endpoints for generating data, proxying GCM content (in development). Might be handy for you. That said, I recall that direct grants have not been enabled as it opens additional point of vulnerability. I'd personally prefer to have it enabled by default and let user switch it off if he does not need it. I believe that it would be great if Keycloak configuration can be at least externalized. This is tracked by this JIRA: https://issues.jboss.org/browse/AGPUSH-1047 Another library you might find helpful (especially if you don't mind getting your hands dirty with Java Code) is our Java binding for REST calls in UPS: https://github.com/aerogear/aerogear-testing-tools/tree/master/aerogear-u... This library provides a fluent API over UPS endpoints. Please let me know if you have further questions, Karel On Wed, 2014-12-03 at 12:18 -0500, Wei Li wrote: _______________________________________________ Aerogear-users mailing list Aerogear-users(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/aerogear-users