January 2015 - keycloak-dev - Jboss List Archives

by Pedro Igor Silva

Bill, Is the work you are doing for claims considering the respective sections in OpenID Connect specification ? To be more specific, http://openid.net/specs/openid-connect-core-1_0.html#Claims. Depending on what you are doing, I think I would need to wait you finish in order to full support what is expected from the UserInfo endpoint. Meanwhile, I'm already doing everything that is necessary to get the endpoint up and running with a basic interoperability based on the default scope values used to request claims (profile, email, address, phone). Btw, are you planning to configure any type of configuration in order to setup the privacy of certain claims ? Regards. Pedro Igor

6 years, 9 months

3
8
0 / 0

Re: [keycloak-dev] [keycloak-user] Location of User Federation Provider jar in Keycloak 1.1 Beta-2

by Stan Silvert

On 1/16/2015 9:07 AM, Stian Thorgersen wrote: > Currently, I'm not overly happy with releasing 1.1.0.Final and it's down to this issue. I should have raised it before, but it completely slipped my mind :( We did talk about this at great length before. I tried and tried to preserve the "drop it in the file system" approach. It just plain won't work for domains. > > IMO we need: > > 1. A usable way to deploy a provider without using the CLI GUI > 2. Ideally be able to deploy a provider with an offline server We have 5 ways to add a provider: 1. CLI 2. CLI GUI 3. CLI script 4. Explode the WAR in the subsystem and drop it in WEB-INF/lib 5. Use the war dist and do it the old way. Why are these not sufficient? > > ----- Original Message ----- >> From: "Stan Silvert" <ssilvert(a)redhat.com> >> To: "Stian Thorgersen" <stian(a)redhat.com> >> Cc: keycloak-user(a)lists.jboss.org >> Sent: Friday, 16 January, 2015 2:13:24 PM >> Subject: Re: [keycloak-user] Location of User Federation Provider jar in Keycloak 1.1 Beta-2 >> >> On 1/16/2015 2:19 AM, Stian Thorgersen wrote: >>> ----- Original Message ----- >>>> From: "Stan Silvert" <ssilvert(a)redhat.com> >>>> To: "Stian Thorgersen" <stian(a)redhat.com> >>>> Cc: keycloak-user(a)lists.jboss.org >>>> Sent: Thursday, 15 January, 2015 9:23:48 PM >>>> Subject: Re: [keycloak-user] Location of User Federation Provider jar in >>>> Keycloak 1.1 Beta-2 >>>> >>>> On 1/15/2015 9:29 AM, Stian Thorgersen wrote: >>>>> How is a provider added using the CLI? I can't find any examples on that. >>>> In the doc there is a step-by-step example of how to do it. See section >>>> 3.4.2.2. >>>> http://docs.jboss.org/keycloak/docs/1.1.0.Beta2/userguide/html/server-ins... >>> That example uses the CLI GUI, we need one that uses plain CLI >> Plain CLI is harder in this case. CLI GUI lets you browse for the file >> you need. Overall, plain CLI is a lot more error prone. >> >> If you do this once in CLI GUI then you will generate the CLI command >> that you can cut and paste into plain CLI or a script. But if you want, >> I can include an example of that command. >>> There's also another issue with this approach, which I didn't stress enough >>> last time around, it requires the server to be running to add providers. >>> That makes it much harder to for example create a Docker cartridge that >>> includes some custom providers. >> Perhaps we just need to document the fact that you can still explode the >> WAR and do it the old way? >>>>> Also, there are still several references in the docs and examples that >>>>> uses >>>>> the old approach of copying to WEB-INF/lib. >>>>> >>>>> ----- Original Message ----- >>>>>> From: "Stan Silvert" <ssilvert(a)redhat.com> >>>>>> To: keycloak-user(a)lists.jboss.org >>>>>> Sent: Thursday, 15 January, 2015 2:09:56 PM >>>>>> Subject: Re: [keycloak-user] Location of User Federation Provider jar in >>>>>> Keycloak 1.1 Beta-2 >>>>>> >>>>>> Providers are now uploaded using WildFly CLI or CLI GUI. >>>>>> >>>>>> See >>>>>> http://docs.jboss.org/keycloak/docs/1.1.0.Beta2/userguide/html/server-ins... >>>>>> >>>>>> On 1/15/2015 6:46 AM, prab rrrr wrote: >>>>>> >>>>>> >>>>>> >>>>>> Hi, >>>>>> >>>>>> I created a custom User Federation Provider and deployed it as per the >>>>>> documentation. It worked in earlier versions (1.1 Beta-1) but it appears >>>>>> that the location of Keycloak war in Wildfly has changed in 1.1 Beta-2 >>>>>> version and it is no longer inflated. Can someone suggest where exactly >>>>>> I >>>>>> have to place the Federation provider jar in 1.1 Beta-2 version? >>>>>> >>>>>> Thanks, >>>>>> Raghu >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> keycloak-user mailing list keycloak-user(a)lists.jboss.org >>>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>>>>> >>>>>> >>>>>> _______________________________________________ >>>>>> keycloak-user mailing list >>>>>> keycloak-user(a)lists.jboss.org >>>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>

6 years, 9 months

4
11
0 / 0

Access original session

by Christian Beikov

Hello there!" I have an application that has protected resources on the pattern "/protected/*" and I receive a session cookie for the path "/protected", which makes sense. Now my problem is, that I want the path of the cookie to be "/" so I can access the user information even outside of the protected resources. Since I think this might introduce some problems, the only other way to realize that I could think of is, to get access to the underlying servlet session. Not only would that session have to be created properly, which I am not sure is happening when browsing in the protected resources, I would also need to access it on the server, so that I can save the currently logged in user into it. Is there a possibility to access the servlet session within the Keycloak context? If so, could you please share some code or point me to an API? -- Mit freundlichen Grüßen, ------------------------------------------------------------------------ *Christian Beikov*

6 years, 9 months

2
7
0 / 0

Fwd:Resteasy and Vert.x

by Bill Burke

Somebody created a vertx adapter for resteasy. -------- Forwarded Message -------- Subject: [Resteasy-users] Resteasy and Vert.x Date: Fri, 16 Jan 2015 17:49:16 +0100 From: Kristoffer Sjögren <stoffe(a)gmail.com> To: resteasy-users(a)lists.sourceforge.net Hi I have created a project called vertxrs which support JAX-RS over Vert.x.Â This is the embedded version of Vert.x which use Resteasy as the implementation of JAX-RS. https://github.com/deephacks/vertxrs The jars should be in Maven Central at any moment. Enjoy, -Kristoffer -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com

6 years, 9 months

1
0
0 / 0

WebSocket integration

by Juraci Paixão Kröhling

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All, I'm investigating the possibility of protecting a WebSocket endpoint with Keycloak and I found out that it works out of the box with cookie-based authentication, meaning, the web page that opens the web socket client should itself be protected, so that the cookie is sent on the WebSocket request and authentication is made (confidential). In my target scenario, however, the web page is a single-page app (public) talking with a backend (bearer-only) in another host. So, I'd like to know if there's anything planned on the WebSockets front for such scenario. For instance, a JavaScript utility that handles the setup of the socket (either with a custom protocol, or an initial message with the bearer token, or another alternative) and a server counterpart for this. If there isn't yet, I'll probably have some time to explore this. - - Juca. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJUuTzdAAoJEDnJtskdmzLMgSIH/2eGoZSzUcsXL2zs7tyLEAIL LTHBOY0vlr3KDRIWMcab8ijIAKt5u+JQnb4fJlEEXW1C8+QKNSDJYsfj/HcGnDcg TM2kzhy4HS9O8CnlRqKEm6FlRKfgV3R/64huFXCRXmIdkxiKGgMQvmhWmlrDFHVy ZRtaNk3e433LkD4/fYdWIobjdtxZTv4xAglWAgXCAVdXJCy8Sp+yiopU7LNMqb75 mgWk89h8U5nl/J9HuAd8+oZH9qg35lwI1LZOPRRwpyl4td4x1tDR2lQc1SJmS47g N2ES3jTtGHWMDEfsxDyLIQ6TmC1+r1Yoid51jILqaxlYGWgH/eRtnwny0Qczj+w= =x0ZO -----END PGP SIGNATURE-----

6 years, 9 months

4
4
0 / 0

Where's 1.1.0.Final?

by Stian Thorgersen

Due to a far amount of bugs and issues with Jenkins there's no release this week. We're getting close though and we will release next week!

6 years, 9 months

1
0
0 / 0

What is ServerVersionResource used for?

by Stian Thorgersen

I'm curious about why we have ServerVersionResource? What is it used for? Having a public endpoint that shows the version of the server makes it easier for script kiddies to scan for servers of a specific version, which can then be targeted for known exploits.

6 years, 9 months

2
1
0 / 0

Location of User Federation Provider jar in Keycloak 1.1 Beta-2

by Stan Silvert

Moved to dev list. On 1/16/2015 7:28 AM, Marek Posolda wrote: > Figured out that our "war-dist" still contains auth-server.war in > "standalone/deployments" . Appliance dist doesn't have it. This is not > expected right? The chapter 3.1 and 3.2 both mentions auth-server.war > in deployments folder btv (which is not true at least for appliance > dist now). The WAR dist doesn't contain the subsystem. So it has to work the old way. I think we need to come to a final decision about supporting the auth server on other platforms, which is the only reason for the WAR dist to still exist. > > Found out that with the "war-dist" and auth-server.war deployed in > standalone/deployments I can normally copy the provider jar to > standalone/deployments/auth-server.war/WEB-INF/lib and it works:-) > > Marek > > On 16.1.2015 08:19, Stian Thorgersen wrote: >> >> ----- Original Message ----- >>> From: "Stan Silvert" <ssilvert(a)redhat.com> >>> To: "Stian Thorgersen" <stian(a)redhat.com> >>> Cc: keycloak-user(a)lists.jboss.org >>> Sent: Thursday, 15 January, 2015 9:23:48 PM >>> Subject: Re: [keycloak-user] Location of User Federation Provider >>> jar in Keycloak 1.1 Beta-2 >>> >>> On 1/15/2015 9:29 AM, Stian Thorgersen wrote: >>>> How is a provider added using the CLI? I can't find any examples on >>>> that. >>> In the doc there is a step-by-step example of how to do it. See section >>> 3.4.2.2. >>> http://docs.jboss.org/keycloak/docs/1.1.0.Beta2/userguide/html/server-ins... >>> >> That example uses the CLI GUI, we need one that uses plain CLI >> >> There's also another issue with this approach, which I didn't stress >> enough last time around, it requires the server to be running to add >> providers. That makes it much harder to for example create a Docker >> cartridge that includes some custom providers. >> >>>> Also, there are still several references in the docs and examples >>>> that uses >>>> the old approach of copying to WEB-INF/lib. >>>> >>>> ----- Original Message ----- >>>>> From: "Stan Silvert" <ssilvert(a)redhat.com> >>>>> To: keycloak-user(a)lists.jboss.org >>>>> Sent: Thursday, 15 January, 2015 2:09:56 PM >>>>> Subject: Re: [keycloak-user] Location of User Federation Provider >>>>> jar in >>>>> Keycloak 1.1 Beta-2 >>>>> >>>>> Providers are now uploaded using WildFly CLI or CLI GUI. >>>>> >>>>> See >>>>> http://docs.jboss.org/keycloak/docs/1.1.0.Beta2/userguide/html/server-ins... >>>>> >>>>> >>>>> On 1/15/2015 6:46 AM, prab rrrr wrote: >>>>> >>>>> >>>>> >>>>> Hi, >>>>> >>>>> I created a custom User Federation Provider and deployed it as per >>>>> the >>>>> documentation. It worked in earlier versions (1.1 Beta-1) but it >>>>> appears >>>>> that the location of Keycloak war in Wildfly has changed in 1.1 >>>>> Beta-2 >>>>> version and it is no longer inflated. Can someone suggest where >>>>> exactly I >>>>> have to place the Federation provider jar in 1.1 Beta-2 version? >>>>> >>>>> Thanks, >>>>> Raghu >>>>> >>>>> >>>>> _______________________________________________ >>>>> keycloak-user mailing list keycloak-user(a)lists.jboss.org >>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>>>> >>>>> >>>>> _______________________________________________ >>>>> keycloak-user mailing list >>>>> keycloak-user(a)lists.jboss.org >>>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>> >> _______________________________________________ >> keycloak-user mailing list >> keycloak-user(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-user >

6 years, 9 months

1
1
0 / 0

Location of User Federation Provider jar in Keycloak 1.1 Beta-2

by Stan Silvert

Moved to dev list. Comments inline. On 1/16/2015 2:19 AM, Stian Thorgersen wrote: > > ----- Original Message ----- >> From: "Stan Silvert" <ssilvert(a)redhat.com> >> To: "Stian Thorgersen" <stian(a)redhat.com> >> Cc: keycloak-user(a)lists.jboss.org >> Sent: Thursday, 15 January, 2015 9:23:48 PM >> Subject: Re: [keycloak-user] Location of User Federation Provider jar in Keycloak 1.1 Beta-2 >> >> On 1/15/2015 9:29 AM, Stian Thorgersen wrote: >>> How is a provider added using the CLI? I can't find any examples on that. >> In the doc there is a step-by-step example of how to do it. See section >> 3.4.2.2. >> http://docs.jboss.org/keycloak/docs/1.1.0.Beta2/userguide/html/server-ins... > That example uses the CLI GUI, we need one that uses plain CLI Plain CLI is harder in this case. CLI GUI lets you browse for the file you need. Overall, plain CLI is a lot more error prone. If you do this once in CLI GUI then you will generate the CLI command that you can cut and paste into plain CLI or a script. But if you want, I can include an example of that command. > > There's also another issue with this approach, which I didn't stress enough last time around, it requires the server to be running to add providers. That makes it much harder to for example create a Docker cartridge that includes some custom providers. Perhaps we just need to document the fact that you can still explode the WAR and do it the old way? > >>> Also, there are still several references in the docs and examples that uses >>> the old approach of copying to WEB-INF/lib. >>> >>> ----- Original Message ----- >>>> From: "Stan Silvert" <ssilvert(a)redhat.com> >>>> To: keycloak-user(a)lists.jboss.org >>>> Sent: Thursday, 15 January, 2015 2:09:56 PM >>>> Subject: Re: [keycloak-user] Location of User Federation Provider jar in >>>> Keycloak 1.1 Beta-2 >>>> >>>> Providers are now uploaded using WildFly CLI or CLI GUI. >>>> >>>> See >>>> http://docs.jboss.org/keycloak/docs/1.1.0.Beta2/userguide/html/server-ins... >>>> >>>> On 1/15/2015 6:46 AM, prab rrrr wrote: >>>> >>>> >>>> >>>> Hi, >>>> >>>> I created a custom User Federation Provider and deployed it as per the >>>> documentation. It worked in earlier versions (1.1 Beta-1) but it appears >>>> that the location of Keycloak war in Wildfly has changed in 1.1 Beta-2 >>>> version and it is no longer inflated. Can someone suggest where exactly I >>>> have to place the Federation provider jar in 1.1 Beta-2 version? >>>> >>>> Thanks, >>>> Raghu >>>> >>>> >>>> _______________________________________________ >>>> keycloak-user mailing list keycloak-user(a)lists.jboss.org >>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>>> >>>> >>>> _______________________________________________ >>>> keycloak-user mailing list >>>> keycloak-user(a)lists.jboss.org >>>> https://lists.jboss.org/mailman/listinfo/keycloak-user >>

6 years, 9 months

1
0
0 / 0

Fuse adapter added

by Marek Posolda

I've finally pushed fuse adapter to both master and 1.1 branch including documentation and demo example with instructions on how to have it running on karaf/fuse. Finally I managed to secure the web based applications on Fuse with our Jetty8 adapter. The main pitfall was about properly inject KeycloakJettyAuthenticator to the Jetty engine for various kind of apps (classic WAR, OSGI deployed servlet, Apache CXF, Apache Camel). There is many changed files in repo now, however it's mainly about packaging, examples and distribution. No changes in the core code despite some minor change in jetty adapter. Few things: * Added OSGI headers to some of our maven modules, which are supposed to be running as OSGI bundles in fuse/karaf. It's keycloak-core, keycloak-adapter-core, keycloak-jetty adapters etc. * Renamed java package in jetty-core module to "org.keycloak.adapters.jetty.core" . OSGI doesn't like when there are 2 jars having same package when one of them depend on the other. I've finally change the package just in jetty-core as there are just internal classes. Docs doesn't need to be changed and adapter is backwards compatible as name of authenticator class is still "org.keycloak.adapters.jetty.KeycloakJettyAuthenticator" * Changes in "distribution/osgi" related to OSGI bundling to allow have adapter and easily install it in fuse/karaf * Added "fuse" example with couple of sub-modules . This is slightly modified version of our demo, which is supposed to be deployed on karaf/fuse. This brings some Apache dependencies like cxf, camel etc. but all of them are supposed to be in maven central. Hope I did not break anything and you all are still able to build keycloak:-) Let me know if you have more points, suggestions. Marek

6 years, 9 months

1
0
0 / 0

2021

2020

2019

2018

2017

2016

2015

2014

2013

keycloak-dev January 2015