March 2019 - Apiman-user - Jboss List Archives

by Juan Rubén Marrero Vizcaíno

Hi all! I'm having trouble getting an Apiman docker instance up and running. The setup is a docker-compose coordinated set of containers in a single VM, running on the cloud. $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 59a1047d84bd apiman/on-wildfly11 "/opt/jboss/wildfly/…" 25 minutes ago Up 25 minutes 8080/tcp apiman ca8bd1e3bb99 traefik "/traefik" About an hour ago Up 25 minutes 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp, 0.0.0.0:8080->8080/tcp traefik 2a11b776409c nginx:alpine "nginx -g 'daemon of…" About an hour ago Up 25 minutes 80/tcp nginx 21f8c3d3e14e portainer/portainer "/portainer" 2 hours ago Up 25 minutes 9000/tcp portainer Traefik proxies all connections and provides SSL termination. I'm using a LetsEncrypt wildcard certificate; each service has a DNS subdomain. - API-project.domain.tld -> apiman - WEB-project.domain.tld -> nginx (static pages) - PORTAINER-project.domain.tld -> portainer - TRAEFIK-project.domain.tld -> traefik All of this works. I can see on my browser each service including apimanui The problem starts with the apiman login form. The form itself has a HTTP and not HTTPS action endpoint. if I login with the admin/admin123! credentials and hit enter, I'll POST to the auth backend, receive a 302 REDIRECT, follow the redirect and then just prints Forbidden to the screen. Refresh or back now fails with Bad request to the screen. The only way to retry is clearing cookies and local storage. I tried running the single line docker apiman incantation and it works on my laptop, but not when mixed with other containers. Here is my docker-compose file ------------------- version: '2.4' services: portainer: image: portainer/portainer container_name: portainer mem_limit: 1G restart: always volumes: - /var/run/docker.sock:/var/run/docker.sock - /mnt/disks/SSD1/portainer:/data networks: - network1 labels: - "traefik.enable=true" - "traefik.backend=portainer" - "traefik.frontend.rule=Host:portainer-project.domain.tld" - "traefik.port=9000" - "traefik.protocol=http" apiman: image: apiman/on-wildfly11 container_name: apiman mem_limit: 3G restart: always #volumes: # - /mnt/disks/SSD1/apiman:/opt/jboss/wildfly/standalone:rw networks: - network1 labels: - "traefik.enable=true" - "traefik.backend=apiman" - "traefik.frontend.rule=Host:api-project.domain.tld" - "traefik.port=8080" - "traefik.protocol=http" web: image: nginx:alpine container_name: nginx mem_limit: 512M restart: always networks: - network1 labels: - "traefik.enable=true" - "traefik.backend=web" - "traefik.frontend.rule=Host:web-project.domain.tld" - "traefik.port=80" - "traefik.protocol=http" reverse-proxy: image: traefik # The official Traefik docker image container_name: traefik ports: - "80:80" # The HTTP port - "8080:8080" # The Web UI (enabled by --api) - "443:443" # The Web UI (enabled by --api) networks: - network1 volumes: - /var/run/docker.sock:/var/run/docker.sock # So that Traefik can listen to the Docker events - /mnt/disks/SSD1/traefik/traefik.toml:/etc/traefik/traefik.toml - /mnt/disks/SSD1/certs:/certs labels: - "traefik.enable=true" - "traefik.backend=traefik" - "traefik.frontend.rule=Host:traefik-project.domain.tld" - "traefik.port=8080" - "traefik.protocol=http" networks: network1: name: web -------------------------------- My final questions are: How can I configure apiman to be aware that it will be called from an https schema? In general, What are the caveats of placing Apiman behind a reverse proxy? Thanks! -- *J. Rubén Marrero V.* GPG: 0x1D7087F7

5 years

1
0
0 / 0

Keycloak setup and start the application with windows service

by AntonyJoyson, MariyaGeorge

HI Team, Im new to keycloak, Please help me to configure and start the keycloak application along with windows service Thanks and Regards Joyson Anto ~ Aj Antony Joyson M Software Engineer TSG SPi Global M +91 9551347970 M.AntonyJoyson(a)spi-global.com<mailto:M.AntonyJoyson@spi-global.com> www.spi-global.com<http://www.spi-global.com/> SPi Global - Philippines Best Employer 2018, 13th Employer Branding Awards, Employer Branding Institute - India and 2018's Top 25 AI Companies in APAC by CIO Advisor CONFIDENTIALITY NOTICE: This email, including its attachments, is intended for the use of the person/s it is addressed to. It may contain personal data, or information that is protected or privileged, which are protected from unauthorized use or disclosure by law. If you are not the intended recipient, any dissemination, retention or use of any information contained in this email is prohibited. If you have received this email in error, please promptly notify the sender by reply email and delete the original email and any backup copies without reading them. If you have questions or clarifications regarding any matter relating to data protection, you may write to the SPi Global Data Protection Office at dpo(a)spi-global.com<mailto:dpo@spi-global.com>. You may also file a complaint or report a security incident involving personal data by writing to: dpo(a)spi-global.com<mailto:dpo@spi-global.com>.

5 years, 1 month

1
0
0 / 0

Keycloak client access limitations

by AntonyJoyson, MariyaGeorge

HI Team, Im new to keycloak, Please help me to limit the users priviliges I want to validate and restrict the users to login into multiple applications/client with keycloak login page authentication. I have switched off the (Full Scope Allowed) and removed all the roles and assigned a single role for the client even though keycloak login page allows the user to login for that client even the user doesn't have any roles assigned. Is there any way to restrict the users to login with restricted application access? Thanks and Regards Joyson Anto ~ Aj Antony Joyson M Software Engineer TSG SPi Global M +91 9551347970 M.AntonyJoyson(a)spi-global.com www.spi-global.com<http://www.spi-global.com/> SPi Global - Philippines Best Employer 2018, 13th Employer Branding Awards, Employer Branding Institute - India and 2018's Top 25 AI Companies in APAC by CIO Advisor CONFIDENTIALITY NOTICE: This email, including its attachments, is intended for the use of the person/s it is addressed to. It may contain personal data, or information that is protected or privileged, which are protected from unauthorized use or disclosure by law. If you are not the intended recipient, any dissemination, retention or use of any information contained in this email is prohibited. If you have received this email in error, please promptly notify the sender by reply email and delete the original email and any backup copies without reading them. If you have questions or clarifications regarding any matter relating to data protection, you may write to the SPi Global Data Protection Office at dpo(a)spi-global.com. You may also file a complaint or report a security incident involving personal data by writing to: dpo(a)spi-global.com.

5 years, 1 month

1
0
0 / 0

Please reply : API Curl call user registration

by AntonyJoyson, MariyaGeorge

Hi team, I am new to keycloak sso. I need to integerate user registration with keycloak in a curl method can you please send me / guide me to register the users in curl api method, Please reply. url http://{keycloak}/auth/admin/realms/{realm}/users Params {"enabled":true,"attributes":{},"username":"test123aj","emailVerified":"","email":"test(a)test.in1","firstName":"test1","lastName":"test1","requiredActions":["UPDATE_PROFILE"]} Headers 'Content-type: application/x-www-form-urlencoded' 'Authorization: Basic ' . base64_encode($this->client_id . ':' . $this->secret) Thanks and Regards Joyson Anto ~ Aj Antony Joyson M Software Engineer TSG SPi Global M +91 9551347970 M.AntonyJoyson(a)spi-global.com<mailto:M.AntonyJoyson@spi-global.com> www.spi-global.com<http://www.spi-global.com/> SPi Global - Philippines Best Employer 2018, 13th Employer Branding Awards, Employer Branding Institute - India and 2018's Top 25 AI Companies in APAC by CIO Advisor CONFIDENTIALITY NOTICE: This email, including its attachments, is intended for the use of the person/s it is addressed to. It may contain personal data, or information that is protected or privileged, which are protected from unauthorized use or disclosure by law. If you are not the intended recipient, any dissemination, retention or use of any information contained in this email is prohibited. If you have received this email in error, please promptly notify the sender by reply email and delete the original email and any backup copies without reading them. If you have questions or clarifications regarding any matter relating to data protection, you may write to the SPi Global Data Protection Office at dpo(a)spi-global.com<mailto:dpo@spi-global.com>. You may also file a complaint or report a security incident involving personal data by writing to: dpo(a)spi-global.com<mailto:dpo@spi-global.com>.

5 years, 1 month

2
4
0 / 0

Apiman 1.2.9 Wildfly - How to capture bodies

by Jérémy HAURAY

Hello, I encounter some errors that don’t throw stack in response. It concern Transformation policy (json ó xml). I have no access to exposed api. To find the root cause, I need to compare inbound and outbound request bodies. Responses bodies could be interesting too. Do you know a method to capture bodies ? Thanks by advance. Best regards. Jérémy HAURAY

5 years, 1 month

2
1
0 / 0

[APIMAN] Failed to retire apis after docker restart

by Shubham Navale

So, I am using apiman 1.5.1 which is using MYSQL 8 as a database, along with external keycloak with client status public. The whole thing is running in docker. So, I have configured the gateway in apiman. And registered some apis. Now when I restart my docker of apiman, the gateway resets itself to its old setting. So, I reconfigured the gateway with my settings. But now when I am trying to retire my registered apis, it's throwing me some error. Error:- https://gist.github.com/ElavanResu/985ff4349ae81888581d320eb17e1f88

5 years, 1 month

2
1
0 / 0

Please reply : API Curl call login authentication for multiple applications in a single login

by AntonyJoyson, MariyaGeorge

Hi team, I am new to keycloak sso login while authentication the application with keycloak server application directly it will authenticating both the applications. While authenticating with curl api each time its authenticating as a new login I have to provide username and password for login from both the application. Am I missing any parameters to keep the session state in a synced way Please reply. url /protocol/openid-connect/token Params 'grant_type' => 'password', 'response_type' => 'code', 'username' => $username, 'password' => $password, Headers 'Content-type: application/x-www-form-urlencoded' 'Authorization: Basic ' . base64_encode($this->client_id . ':' . $this->secret) Authentication is working for single application I need to access another application also with this single login Thanks and Regards Joyson Anto ~ Aj Antony Joyson M Software Engineer TSG SPi Global M +91 9551347970 M.AntonyJoyson(a)spi-global.com www.spi-global.com<http://www.spi-global.com/> SPi Global - Philippines Best Employer 2018, 13th Employer Branding Awards, Employer Branding Institute - India and 2018's Top 25 AI Companies in APAC by CIO Advisor CONFIDENTIALITY NOTICE: This email, including its attachments, is intended for the use of the person/s it is addressed to. It may contain personal data, or information that is protected or privileged, which are protected from unauthorized use or disclosure by law. If you are not the intended recipient, any dissemination, retention or use of any information contained in this email is prohibited. If you have received this email in error, please promptly notify the sender by reply email and delete the original email and any backup copies without reading them. If you have questions or clarifications regarding any matter relating to data protection, you may write to the SPi Global Data Protection Office at dpo(a)spi-global.com. You may also file a complaint or report a security incident involving personal data by writing to: dpo(a)spi-global.com.

5 years, 1 month

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

Apiman-user March 2019