March 2015 - keycloak-dev - Jboss List Archives

Any way to limit Google social logins to a domain?

by Matthew Casperson

It would be quite beneficial to be able to restrict Google social logins to a corporate domain. This appears to be supported by Google with the "hd" query param (see https://developers.google.com/accounts/docs/OAuth_ref#GetAuth and http://stackoverflow.com/questions/14336564/google-client-api-limit-oauth...). Is this something has been, or could be, exposed by KeyCloak? -- *Matthew Casperson* *Senior Front End Developer* Technology, Space & Distribution Auto & General Holdings Pty Ltd P: 07) 3377 8751 (Direct: 3377 8751) F: 07) 3377 8833 -- This email is sent by Auto & General Insurance Company Ltd, Auto & General Services Pty Ltd, Auto & General Holdings Pty Ltd or a related body corporate (Auto & General) and is for the intended addressee. The views expressed in this email and attachments (email) reflect the views of the stated author but may not reflect views of Auto & General. This email is confidential and subject to copyright. It may be privileged. If you are not the intended addressee, confidentiality and privilege have not been waived and any use, interference with, or disclosure of this email is unauthorised. If you are not the intended addressee please immediately notify the sender and then delete the email. Auto & General does not warrant that this email is error or virus free.

10 years, 9 months

1
0
0 / 0

DB migration tasks being worked on?

by Bill Burke

Are DB migration tasks being worked on? I'd be willing to do the JPA ones, but not the Mongo ones. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com

10 years, 9 months

1
0
0 / 0

Incorrect table mapping

by Leonardo Loch Zanivan

Hi, I've configured KeyCloak datasource to a PostgreSQL database. I found that "REALM_APPLICATION" table has a strange mapping. REALM_ID is the APPLICATION (CLIENT) APPLICATION_ID is the REALM I think it was a mistake by incorrect JPA mapping. Regards, Leonardo Zanivan

10 years, 9 months

3
6
0 / 0

Re: [keycloak-dev] Keycloak-Initial configuration

by Prakhash siva

I thought of doing this in order to get a proper understanding about how keycloak works. I'm interested in working on the project Keycloak - Audit Reporting and Intrusion Detection. So is that a correct approach starting with a bug ? or can you please guide me where I can start my work. & I will go through the keycloak-services source as you suggested On Mon, Mar 16, 2015 at 11:29 PM, Giriraj Sharma <giriraj.sharma27(a)gmail.com > wrote: > Hi, > You must have a look at keycloak-services source. It's the module bundled > up with all endpoints and REST API. > Also, you must have a prior discussion with the community if that bug even > needs a fix or is a priority at the moment. > > > On Mon, Mar 16, 2015 at 11:19 PM, Prakhash siva <prakhashsiva21(a)gmail.com> > wrote: > >> Hi, When using the keycloak how can we identify how the URL pattern >> works. i.e if I'm going to work on the bug KEYCLOAK-953 Allow a user to >> delete his own account I should identify how the user creation and deletion >> works.is there is any specific URL mappings or way to identify classes >> related that >> >> Can you explain how URL execution performed according to the request >> >> Thanks >> >> On Mon, Mar 16, 2015 at 9:59 AM, Prakhash siva <prakhashsiva21(a)gmail.com> >> wrote: >> >>> Thanks Giriraj, I will configure it and let you know. I think it will be >>> really helpfull >>> >>> On Mon, Mar 16, 2015 at 8:56 AM, Giriraj Sharma < >>> giriraj.sharma27(a)gmail.com> wrote: >>> >>>> Hi, >>>> Keycloak source has KeycloakServer.java [1] in testsuite-integration >>>> module. It will let you run keycloak locally with JPA or Mongo model. >>>> This[2] might help you in running keycloak locally at >>>> localhost:8081/auth >>>> >>>> >>>> [1] >>>> https://github.com/keycloak/keycloak/blob/master/testsuite/integration/sr... >>>> [2] >>>> https://github.com/keycloak/keycloak/tree/master/testsuite/integration >>>> >>>> Thanks, >>>> >>>> On Sun, Mar 15, 2015 at 10:36 PM, Prakhash siva < >>>> prakhashsiva21(a)gmail.com> wrote: >>>> >>>>> Hi all, I'm Prakhash From Sri Lanka. I'm willing to contribute >>>>> keycloak. I have cloned the keycloak repository but I could not figure out >>>>> the initial configurations I need to do. I was able to find many tutorials >>>>> saying how to configure keycloak with specific application but I believe it >>>>> is not for keycloak development as a contributor. So can you please help me >>>>> to do the initial configurations. I'm using ubuntu >>>>> >>>>> Thanks >>>>> >>>>> -- >>>>> *Sivakumar Prakhash* >>>>> *Undergraduate* >>>>> *Computer Science & Engineering* >>>>> *University of Moratuwa.* >>>>> >>>>> >>>>> >>>>> _______________________________________________ >>>>> keycloak-dev mailing list >>>>> keycloak-dev(a)lists.jboss.org >>>>> https://lists.jboss.org/mailman/listinfo/keycloak-dev >>>>> >>>> >>>> >>>> >>>> -- >>>> >>>> Giriraj Sharma >>>> about.me/girirajsharma >>>> <http://about.me/girirajsharma?promo=email_sig> >>>> Giriraj Sharma, >>>> Department of Computer Science >>>> National Institute of Technology Hamirpur >>>> Himachal Pradesh, India 177005 >>>> >>> >>> >>> >>> -- >>> *Sivakumar Prakhash* >>> *Undergraduate* >>> *Computer Science & Engineering* >>> *University of Moratuwa.* >>> >>> >>> >> >> >> -- >> *Sivakumar Prakhash* >> *Undergraduate* >> *Computer Science & Engineering* >> *University of Moratuwa.* >> >> >> > > > -- > > Giriraj Sharma > about.me/girirajsharma > <http://about.me/girirajsharma?promo=email_sig> > Giriraj Sharma, > Department of Computer Science > National Institute of Technology Hamirpur > Himachal Pradesh, India 177005 > -- *Sivakumar Prakhash* *Undergraduate* *Computer Science & Engineering* *University of Moratuwa.*

10 years, 9 months

1
0
0 / 0

[GSOC]Keycloak - Audit Reporting and Intrusion Detection

by Prakhash siva

Hi All, I'm Prakhash Sivakumar, a 3rd year Computer Science and Engineering Student from University of Moratuwa. I'm interested in participating in GSOC 2015. I'm specially interested in the project Audit Reporting and Intrusion Detection because I have already worked on an Intrusion detection system based Project. Short overview of my previous project I have mainly used Fluentd and MongoDB for my project. I have got the requests from the Apache log in real time using fluentd and stored those request parameter objects(7 objects) in to MongoDb as a collection. I have used Jess a java rule engine and defined some rules to identify the Intrusions. So whenever a request comes my application compares the request with the rules and authorizes the request only if it is valid. It will go through the stored history before it authorizes the request(Currently that application only able to handle get requests). I have used Java for the application development I'm very much interested in Security side and I would like to explore lot of security related technologies. So I believe this is a great opportunity to me to learn and apply lot of security related technologies. As a Student who loves to learn security related technologies I would like to apply for this project & I also believe I'm not late to apply for this project. please give me some guidelines where I really need to start. It will be really helpful to me Thanks -- *Sivakumar Prakhash* *Undergraduate* *Computer Science & Engineering* *University of Moratuwa.*

10 years, 9 months

1
0
0 / 0

Shared mapper configs

by Stian Thorgersen

Bill, As I mentioned when you demoed protocol mappers I think we should introduce a protocol mapper type that is configured on a realm level, then one or more applications can use the same configuration. It would be good to do that before releasing 1.2.0.Beta1. I think that having it like is will be an overhead to most folks as they'll want the same token sent to all applications and will have to re-create the same mapping multiple times (and make changes multiple times as well).

10 years, 10 months

3
2
0 / 0

1.2.beta1 planning, need you to defer things

by Bill Burke

I'd like to do 1.2.beta1 by end of month or earlier. Please go through the jira list and defer things you are not going to get to in the next 1-2 weeks. Thanks. I'm going to try and close existing bugs and implement features needed for jboss.org guys over the next 2 weeks as well as test out master to make sure things still work. Bill -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com

10 years, 10 months

4
13
0 / 0

Password policy for "password != username"

by Juraci Paixão Kröhling

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All, I've asked on the IRC channel, but it seems it's better to have a first discussion here before opening a JIRA and/or sending a PR. I have a requirement in my application, where the user's passwords should meet some complexity. The initial rules will be based on Wildfly's own rules. Two of them I can fulfill via Keycloak, but the third is: "The password must be different from the username". I couldn't find a way to do it with the current policy configuration. So, should this be possible? If so, what would be the syntax? My first suggestion would be "notUsername()". Is this acceptable? Should I open a JIRA and send a PR? - - Juca. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJVAcG1AAoJECKM1e+fkPrXMyMH/Ah2zaprgeJMd/S8Pl3kR3A9 Ft7ssejCalbUVWBSHZtQhzUIQKpdeVMs2HWbxOFwSydt+4SezM6SUQ/KpalDksXv modIFf3/sZbTi1fyY/qTJCB4FVXxoO2s0ajfxF6WH0cidzF3IBqnpe4Zi2P+N/xW PLOTuZK+uY170fcL1thkHjAyjNFxO1kYwUSvwHZTrg/9H4F08Cb2d26xt6yHwC09 ZPsqa1j2jHYO7m55sGhvkPPhb3DclwZKn0r+sDB2pnTX+VNLl+DioUM1eWAsaFFq MsxB3J03MD2yDds8sWrxvnk/KVHU5UwlUex9dZPLuH6CBi/OpPw8FRO8cZW931c= =I7Xg -----END PGP SIGNATURE-----

10 years, 10 months

2
1
0 / 0

JWK

by Bill Burke

Not sure why we have JWK support and I hope it is not on by default. JWK is really only useful in the case where the client needs to identify the key needed to use to decrypt or validate an ID token/access token. In our implementation we do not have the ability to have different signers. This knowledge is expected to be provided in configuration. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com

10 years, 10 months

2
4
0 / 0

Refactoring to OIDCLoginProtocolService due to single endpoints for authorization and token

by Stian Thorgersen

OIDCLoginProtocolService was becoming very bloated, especially once I added single for authorization and token endpoints. So I've extracted the logic into a few sub-resources: * AuthorizationEndpoint - login + registration * LoginStatusIframeEndpoint * LogoutEndpoint * TokenEndpoint * UserInfoEndpoint * ValidateTokenEndpoint I've not committed it yet as I need to do a bit more testing first, but wanted to give everyone a heads up. If anyone wants to review it before I commit have a look at https://github.com/stianst/keycloak/tree/oidc

10 years, 10 months

1
0
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

keycloak-dev March 2015