Spring Security Adapter
by Scott Rossillo
Hi,
I sent 3 pull requests that get the Spring Security adapter into shape for production usage. I started writing the documentation today and will be sending a PR tomorrow.
I have one more code related PR tomorrow to set up the default Spring Security configuration fully so there’s less to document. :)
Best,
Scott
11 years
Back channel logout vs. browser redirect
by Scott Rossillo
Hi,
When developing adapters, is there any benefit to using a browser redirect for logout vs calling:
KeycloakDeployment deployment = // get deployment
RefreshableKeycloakSecurityContext session = // get session
session.logout(deployment);
The main reason I ask is that both accomplish the same goal but the back channel method is actually better for integration with Spring Security.
Am I losing anything by using the back channel logout method?
Best,
Scott
11 years
Themes per application
by Marcio Lima
Hello guys!
I'm trying to implement Keycloak in my solution, but it turns out that I
need to have a completely different login page per application in the
same Realm. Keycloak allows me to create themes, but only at Realm
level, not at Application level.
How would you guys suggest me approaching this? Any plans to develop
such a feature or ways to work around it?
Thanks in advance!
--
Atenciosamente,
Marcio Fernandes de Lima
http://linkedin.com/in/marcioferlan
SCJP, SCWCD, MySQL Core Certified
11 years
Keycloak with mongoDB replica set?
by Hermann Hill
Hi,
I'd like to use Keycloak with a mongoDB replica set as its backing store, but I didn't find any configuration option to make Keycloak connect to more than one mongo server.
Are there plans to support this in the future?
Thanks for your time and best regards,
Hermann Josef Hill
Software Architect
optile GmbH
Ganghoferstraße 39 | 80339 München
Mobil +49 (151) 5385 0784
hermann.hill(a)optile.net | www.optile.net
USt.Id.-Nr. DE268847980
Geschäftsführer: Daniel Smeds, Stefan Reinhardt
Handelsregister München HRB 183178
+++ creating an open payment world +++
11 years
Spring Boot Starter for Spring Security Adapter
by Scott Rossillo
Hey all,
I need to add one more module to automatically configure Spring Security for Spring Boot applications. This is a convenience but it’s also important to stop Spring Boot from registering the security filters twice.
This would be post 1.2.0 but I want to bring it up for two reasons.
First, documentation. For 1.2.0, I’ll add a note on the extra Spring Bean that has to be added to stop Spring from registering the Keycloak security filters twice.
Secondly, we need a decent module name. spring-boot-starter-keycloak would be inline with Spring’s boot starter naming conventions but I wanted to get your opinions first. There’s already a spring-boot adapter in Keycloak that uses the Tomcat adapter. I don’t want to confuse things. There’s also the option of maintaining this boot starter separately or trying to contribute it to Spring Boot if that’s a better place for it to live.
Best,
Scott
11 years
branching plan?
by Bill Burke
Is 1.2 being branched? What is the plan? I don't think any of us are
doing anything major prior to May 11th. Just do 1.2.Final in master?
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
11 years
OOTB session-jpa not viable?
by Bill Burke
In tracking down a bug I found that in certain cases the database (H2?)
that comes with Wildfly will perform table-level locks. It definitely
does a table lock in transactions that require inserts. Not sure if it
happens on regular row updates.
Makes me feel like we have been really lucky altogether that we haven't
run into problems so far.
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
11 years
