July 2014 - keycloak-dev - Jboss List Archives

by Bill Burke

Can I remove picketlink model too? We're not mainting it and the code is available under beta-3 or earlier tag. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com

12 years

2
1
0 / 0

Keycloak Beta4 release

by Matthias Wessendorf

Hi, do you have concrete dates for the beta4? At the moment we, in AeroGear, plan to wait for your beta4. We plan to release our own 1.0.0.beta2 around August 7th, which will include the KC beta4. If the date stays on 6th, or earlier, I think we should be fine w/ our planing! Thanks! -- Matthias Wessendorf blog: http://matthiaswessendorf.wordpress.com/ sessions: http://www.slideshare.net/mwessendorf twitter: http://twitter.com/mwessendorf

12 years

3
3
0 / 0

Postpone TOTP SPI to after 1.0.final

by Stian Thorgersen

Due to there being quite a lot of work to do the required updates to properly do a TOTP SPI I propose we post-pone this to 1.1.0. The work would include: * A TOTP SPI * Account management needs to support multiple TOTPs * Select TOTP provider to configure if required to setup TOTP on login * Select TOTP provider to use at login if user has multiple * Configure what TOTP are permitted for a realm * Remember TOTP option (don't ask for TOTP in 30 days on this machine) * Email implementation (send a OTP through email) * SMS implementation (use an example SMS cloud service to send OTP) - this would also require additional fields to registration * At least one other TOTP implementation (FreeOTP and Yubikey) * ...

12 years

2
3
0 / 0

resolving theme files

by Bill Burke

Are all theme files required to be in the same JAR as the original theme? I'd like to have my provider admin console html/javascript files in a separate jAR and I can't seem to resolve them at the moment. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com

12 years

2
5
0 / 0

Re: [keycloak-dev] Oauth Register and Token Validation Example

by Harit Himanshu

Hey Team, I am been looking for answer to http://stackoverflow.com/questions/24769691/what-are-some-ways-to-secure-... and found that keycloak is suitable for securing REST APIs using OAuth 2.0. I am looking for example where the following is demonstrated a.) Third-party app registers and gets Access Token b.) Third-Party app accesses Resource Server to access protected resource by sending Access Token to REST API c.) and How Token is validated. It is mentioned in features of keycloak as - OAuth Bearer token auth for REST Services - OAuth 2.0 Grant requests - CORS Support Can you please guide me through examples? Thank you On Fri, Jul 25, 2014 at 2:00 PM, Harit Himanshu < harit.subscriptions(a)gmail.com> wrote: > Hey Team, > > I am been looking for answer to > http://stackoverflow.com/questions/24769691/what-are-some-ways-to-secure-... > and found that keycloak is suitable for securing REST APIs using OAuth 2.0. > > I am looking for example where the following is demonstrated > a.) Third-party app registers and gets Access Token > b.) Third-Party app accesses Resource Server to access protected resource > by sending Access Token to REST API > c.) and How Token is validated. > > > It is mentioned in features of keycloak as > > - OAuth Bearer token auth for REST Services > - OAuth 2.0 Grant requests > - CORS Support > > Can you please guide me through examples? > > Thank you > + Harit Himanshu >

12 years

2
3
0 / 0

keycloak.org down?

by Stan Silvert

I can get to www.jboss.org OK. keycloak.org redirects to keycloak.jboss.org which hangs. Anyone else having trouble?

12 years

2
1
0 / 0

Disable application scope by default?

by Bill Burke

Should applications (non oauth clients) scope be disabled by default? This would mean that any roles assigned to the user would be added to the token. I just think there will be tons of user questions on why doesn't keycloak work for their application. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com

12 years

3
11
0 / 0

Access code length

by Stian Thorgersen

I've made the changes to access code, but I'm still not happy with the length. The old access code containing all the details (including access token and id token) was at least 1000 characters long (with more roles and id token details that would have been even bigger!). The new access code length is 259 characters. I think this is still to big and would like to reduce it. The way I'm currently creating it is taking the ID (UUID.randomUUID() + System.currentTimeMillis()) and using JWSBuilder to add a signature. Example: eyJhbGciOiJSUzI1NiJ9.MTVhMjFiNWMtNjcxYy00YzYyLWEyOGMtNmFmMzE4YzE0NjkzMTQwNjU2MzMwNzQyMw.djN2v1Egz1Fime-2bVvYyv529KNMChYh3e0rY5UU4TImv53ppwNhrmWaZRNzO0xLULRC8IeixrH6K3nR1cMyHZb9Ef8Vr46YvNmE8Q_qac821GAWMNzEKjYcXt87AhSSz8BY54CcbKIPLfxFC8smI-KDA1Mr5SrJ_Ch-zdLDbdM I checked Google it's just: 4/YJcHpG7-DcoVcwNH_8D-NDQKcP_Y.MijWXLPgpOwToiIBeO6P2m9c72_7jgI Suggestions welcome ;)

12 years

3
4
0 / 0

Beta 4 release?

by Stan Silvert

I'm waiting on the next Keycloak release. Any idea when it will happen? Stan

12 years

3
2
0 / 0

Re: [keycloak-dev] Error while logging in through the demo application

by Vivek Srivastav (vivsriva)

After changing the access_type to “public" from "confidential", the error went away. From: Vivek Srivastav <vivsriva(a)cisco.com<mailto:vivsriva@cisco.com>> Date: Monday, July 28, 2014 at 10:45 AM To: "keycloak-dev(a)lists.jboss.org<mailto:keycloak-dev@lists.jboss.org>" <keycloak-dev(a)lists.jboss.org<mailto:keycloak-dev@lists.jboss.org>> Subject: [keycloak-dev] Error while logging in through the demo application Hi, I am getting error while logging into to access customer-list in the demo application. Is there a problem in my configuration, or is there a fix/workaround available. Environment: keycloak appliance 1.0-beta-3. Settings: Using the default datastore. Configured the customer-app and product-app as per the instructions and deployed in the keyclock server. Steps/Actions: Apps: unconfigured-demo apps built and deployed using maven. When logging into keycloak I am getting “Forbidden” JBWEB000065: HTTP Status 403 - ________________________________ JBWEB000309: type JBWEB000067: Status report JBWEB000068: message JBWEB000069: description JBWEB000123: Access to the specified resource has been forbidden. ________________________________ JBoss Web/7.2.2.Final-redhat-1 Following is the error I get on the keycloak console: 10:29:45,968 ERROR [io.undertow.request] (default task-45) UT005023: Exception handling request to /auth/realms/demo/tokens/access/codes: java.lang.RuntimeException: request path: /auth/realms/demo/tokens/access/codes at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:56) [keycloak-services-1.0-beta-3.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:85) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:61) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:113) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:56) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:45) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:61) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:25) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:240) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:227) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:73) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:146) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.server.Connectors.executeRootHandler(Connectors.java:177) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:727) [undertow-core-1.0.15.Final.jar:1.0.15.Final] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [rt.jar:1.7.0_45] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [rt.jar:1.7.0_45] at java.lang.Thread.run(Thread.java:744) [rt.jar:1.7.0_45] Caused by: org.jboss.resteasy.spi.UnhandledException: java.lang.NullPointerException at org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(ExceptionHandler.java:76) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandler.java:212) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.writeException(SynchronousDispatcher.java:149) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:372) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:179) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:220) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.0.8.Final.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at org.keycloak.services.filters.ClientConnectionFilter.doFilter(ClientConnectionFilter.java:41) [keycloak-services-1.0-beta-3.jar:] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.0.15.Final.jar:1.0.15.Final] at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:42) [keycloak-services-1.0-beta-3.jar:] ... 28 more Caused by: java.lang.NullPointerException at org.keycloak.models.jpa.ClientAdapter.validateSecret(ClientAdapter.java:142) [keycloak-model-jpa-1.0-beta-3.jar:] at org.keycloak.services.resources.TokenService.authorizeClient(TokenService.java:779) [keycloak-services-1.0-beta-3.jar:] at org.keycloak.services.resources.TokenService.accessCodeToToken(TokenService.java:665) [keycloak-services-1.0-beta-3.jar:] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_45] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_45] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_45] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_45] at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:137) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:296) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:250) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:140) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:103) [resteasy-jaxrs-3.0.8.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:356) [resteasy-jaxrs-3.0.8.Final.jar:] ... 39 more 10:29:45,978 ERROR [org.keycloak.adapters.OAuthRequestAuthenticator] (default task-46) failed to turn code into token 10:29:45,979 ERROR [org.keycloak.adapters.OAuthRequestAuthenticator] (default task-46) status from server: 500

12 years

2
2
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

keycloak-dev July 2014