We already have an SPI ;). It's rather poorly named AuditListenerProvider. It lets you
create a listener for any account related events, such as logins, failed logins, password
updates, etc.. The plan is to add a email implementation for this that will send both
users and admin(s) an email on certain (configurable) events.
What's lacking atm is events for suspected malicious activities, the only event
available now is failed login.
----- Original Message -----
From: "Bruno Oliveira" <bruno(a)abstractj.org>
To: "Bill Burke" <bburke(a)redhat.com>
Sent: Monday, 19 May, 2014 6:34:54 PM
Subject: Re: [keycloak-dev] Email notifications on events and theme support for emails
Not sure if you guys have something in mind. But what if we had an SPI
for notifications about malicious activities? For example: We could write
an adapter to notify users via push server about a malicious attempt.
Into this way even if their e-mail account get hacked, they still get
the notification on device.
On 2014-05-19, Bill Burke wrote:
> Not sure how code injection could happen with Keycloak? But, he's
> talking about Brute force.
> On 5/19/2014 11:59 AM, Bruno Oliveira wrote:
> > Hi Stian, I think is a good idea. But what would you consider a
> > malicious login? Are you talking about something like brute forcing or
> > attempts of code injection?
> > On 2014-05-19, Stian Thorgersen wrote:
> >> I'm working on adding email notifications for events. The events I
> >> we need to support are:
> >> * Suspected malicious login
> >> * Password changed
> >> Also at the same time I'm adding theme support for emails. Folks are
> >> just not going to want their emails to be signed 'Thanks, The Keycloak
> >> Team' ;)
> >> _______________________________________________
> >> keycloak-dev mailing list
> >> keycloak-dev(a)lists.jboss.org
> >> https://lists.jboss.org/mailman/listinfo/keycloak-dev
> > --
> > abstractj
> > JBoss, a division of Red Hat
> > _______________________________________________
> > keycloak-dev mailing list
> > keycloak-dev(a)lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
> Bill Burke
> JBoss, a division of Red Hat
> keycloak-dev mailing list
keycloak-dev mailing list