From: "Bill Burke" <bburke(a)redhat.com&gt; To: keycloak-dev(a)lists.jboss.org Sent: Friday, 6 December, 2013 11:00:09 PM Subject: [keycloak-dev] realm import/upload implemented Stian made a great point earlier. "How are you planning to run the demo?" Booting up the keycloak server with a System property is, well, kinda hacky/lame and not useful beyond demo purposes. So... I implemented realm import, file upload on the "CREATE REALM" page. So, on the create realm page, there are 2 fieldsets. One allows you to upload a json file, the other allows you to create a realm with a specific name. Importing/upload currently brings you to the realm list page. I'll fix that to redirect if possible. This new page may need some design. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev

Definitely! I'll work on a design for it :) On Dec 7, 2013, at 8:26 AM, Stian Thorgersen wrote: > Nice :) > > It does indeed need some design touches, Gabriel? > > ----- Original Message ----- >> From: "Bill Burke" <bburke(a)redhat.com&gt; >> To: keycloak-dev(a)lists.jboss.org >> Sent: Friday, 6 December, 2013 11:00:09 PM >> Subject: [keycloak-dev] realm import/upload implemented >> >> Stian made a great point earlier. "How are you planning to run the >> demo?" Booting up the keycloak server with a System property is, well, >> kinda hacky/lame and not useful beyond demo purposes. >> >> So... >> >> I implemented realm import, file upload on the "CREATE REALM" page. So, >> on the create realm page, there are 2 fieldsets. One allows you to >> upload a json file, the other allows you to create a realm with a >> specific name. Importing/upload currently brings you to the realm list >> page. I'll fix that to redirect if possible. >> >> This new page may need some design. >> -- >> Bill Burke >> JBoss, a division of Red Hat >> http://bill.burkecentral.com >> _______________________________________________ >> keycloak-dev mailing list >> keycloak-dev(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-dev >> > _______________________________________________ > keycloak-dev mailing list > keycloak-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev -- Gabriel Cardoso GateIn Portal | User Experience Designer _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev

I like your "Import Realm" fieldset. I don't like the other fieldsets though. It is *WAY* too much information on the page. I want either to import or enter a name of a new realm. On 12/16/2013 3:34 PM, Gabriel Cardoso wrote: > Hi guys, > > I proposed a new design for this component and implemented it in my > client-side version: > http://ejsclient-cardosogabriel.rhcloud.com/application-settings.html > > The user will initially see the button (above). After he chooses the > file, the name of the file is displayed, with an option to change the > file chosen (below). If he clicks on change, he sees the button again > (above). > > Since we are not presenting the native input file (it is invisible above > the button), the name of the file is not displayed after choosing a > file. So we would have to get this name and "print" it on the screen. > > What do you guys think? Let's go for this solution? > > Gabriel > > On Dec 10, 2013, at 1:42 AM, Gabriel Cardoso wrote: > >> Definitely! I'll work on a design for it :) >> >> On Dec 7, 2013, at 8:26 AM, Stian Thorgersen wrote: >> >>> Nice :) >>> >>> It does indeed need some design touches, Gabriel? >>> >>> ----- Original Message ----- >>>> From: "Bill Burke" <bburke(a)redhat.com <mailto:bburke@redhat.com>> >>>> To: keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org> >>>> Sent: Friday, 6 December, 2013 11:00:09 PM >>>> Subject: [keycloak-dev] realm import/upload implemented >>>> >>>> Stian made a great point earlier. "How are you planning to run the >>>> demo?" Booting up the keycloak server with a System property is, well, >>>> kinda hacky/lame and not useful beyond demo purposes. >>>> >>>> So... >>>> >>>> I implemented realm import, file upload on the "CREATE REALM" page. So, >>>> on the create realm page, there are 2 fieldsets. One allows you to >>>> upload a json file, the other allows you to create a realm with a >>>> specific name. Importing/upload currently brings you to the realm list >>>> page. I'll fix that to redirect if possible. >>>> >>>> This new page may need some design. >>>> -- >>>> Bill Burke >>>> JBoss, a division of Red Hat >>>> http://bill.burkecentral.com <http://bill.burkecentral.com/> >>>> _______________________________________________ >>>> keycloak-dev mailing list >>>> keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org> >>>> https://lists.jboss.org/mailman/listinfo/keycloak-dev >>>> >>> _______________________________________________ >>> keycloak-dev mailing list >>> keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org> >>> https://lists.jboss.org/mailman/listinfo/keycloak-dev >> >> >> -- >> Gabriel Cardoso >> GateIn Portal | User Experience Designer >> >> >> _______________________________________________ >> keycloak-dev mailing list >> keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org> >> https://lists.jboss.org/mailman/listinfo/keycloak-dev > > > -- > Gabriel Cardoso > GateIn Portal | User Experience Designer > > > > > _______________________________________________ > keycloak-dev mailing list > keycloak-dev(a)lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev > -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev

From: "Marek Posolda" <mposolda(a)redhat.com&gt; To: "Gabriel Cardoso" <gcardoso(a)redhat.com&gt; Cc: keycloak-dev(a)lists.jboss.org Sent: Thursday, 19 December, 2013 5:50:57 AM Subject: Re: [keycloak-dev] realm import/upload implemented I wonder if we also want to support export existing realms to JSON file in admin console? Might be useful especially for migration between environments (from stage to production etc)

Marek On 17.12.2013 17:52, Gabriel Cardoso wrote: Please ignore all the other field sets, I just put the "Import Realm" fieldset in a page I already had ;) Ok, so I will implement the component and put it commented in the code, so the feature will keep available until you don't implement the logics for my component. I'll open a JIRA for that. Gabriel On Dec 17, 2013, at 2:07 PM, Bill Burke wrote: I like your "Import Realm" fieldset. I don't like the other fieldsets though. It is *WAY* too much information on the page. I want either to import or enter a name of a new realm. On 12/16/2013 3:34 PM, Gabriel Cardoso wrote: Hi guys, I proposed a new design for this component and implemented it in my client-side version: http://ejsclient-cardosogabriel.rhcloud.com/application-settings.html The user will initially see the button (above). After he chooses the file, the name of the file is displayed, with an option to change the file chosen (below). If he clicks on change, he sees the button again (above). Since we are not presenting the native input file (it is invisible above the button), the name of the file is not displayed after choosing a file. So we would have to get this name and "print" it on the screen. What do you guys think? Let's go for this solution? Gabriel On Dec 10, 2013, at 1:42 AM, Gabriel Cardoso wrote: Definitely! I'll work on a design for it :) On Dec 7, 2013, at 8:26 AM, Stian Thorgersen wrote: Nice :) It does indeed need some design touches, Gabriel? ----- Original Message ----- From: "Bill Burke" < bburke(a)redhat.com < mailto:bburke@redhat.com >> To: keycloak-dev(a)lists.jboss.org < mailto:keycloak-dev@lists.jboss.org > Sent: Friday, 6 December, 2013 11:00:09 PM Subject: [keycloak-dev] realm import/upload implemented Stian made a great point earlier. "How are you planning to run the demo?" Booting up the keycloak server with a System property is, well, kinda hacky/lame and not useful beyond demo purposes. So... I implemented realm import, file upload on the "CREATE REALM" page. So, on the create realm page, there are 2 fieldsets. One allows you to upload a json file, the other allows you to create a realm with a specific name. Importing/upload currently brings you to the realm list page. I'll fix that to redirect if possible. This new page may need some design. -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com < http://bill.burkecentral.com/ > _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org < mailto:keycloak-dev@lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org < mailto:keycloak-dev@lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev -- Gabriel Cardoso GateIn Portal | User Experience Designer _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org < mailto:keycloak-dev@lists.jboss.org > https://lists.jboss.org/mailman/listinfo/keycloak-dev -- Gabriel Cardoso GateIn Portal | User Experience Designer _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev -- Gabriel Cardoso GateIn Portal | User Experience Designer _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev

From: "Bill Burke" <bburke(a)redhat.com&gt; To: keycloak-dev(a)lists.jboss.org Sent: Thursday, 19 December, 2013 2:14:15 PM Subject: Re: [keycloak-dev] realm import/upload implemented On 12/19/2013 3:42 AM, Stian Thorgersen wrote: > > > ----- Original Message ----- >> From: "Marek Posolda" <mposolda(a)redhat.com&gt; >> To: "Gabriel Cardoso" <gcardoso(a)redhat.com&gt; >> Cc: keycloak-dev(a)lists.jboss.org >> Sent: Thursday, 19 December, 2013 5:50:57 AM >> Subject: Re: [keycloak-dev] realm import/upload implemented >> >> I wonder if we also want to support export existing realms to JSON file in >> admin console? Might be useful especially for migration between >> environments >> (from stage to production etc) > > +1 > I thought about this long ago, that any export facility should only be available locally and not remotely. Maybe I'm just overparanoid? Bill -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com _______________________________________________ keycloak-dev mailing list keycloak-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-dev

From: "Bill Burke" <bburke(a)redhat.com&gt; To: "Stian Thorgersen" <stian(a)redhat.com&gt; Cc: keycloak-dev(a)lists.jboss.org Sent: Thursday, 19 December, 2013 3:49:00 PM Subject: Re: [keycloak-dev] realm import/upload implemented Ya, i was talking solely about private keys and credentials. I think a "full" export might also be needed for migration. For example if the persistence model changes between Keycloak 1.0 and Keycloak 2.0 or users want to completely change their backend database type, i.e. RDBMS - Mongo.

On 12/19/2013 10:41 AM, Stian Thorgersen wrote: > If someone can access the REST endpoints they can quite easily do an > "export" themselves. > > What should not be exposed through the REST endpoints is the private key or > any credentials. So an export will not work fully. Export/import would > require re-generating keys + resetting all user/app/client passwords. Even > hashed passwords can be cracked so we shouldn't have a REST endpoint > exposing them.. > > ----- Original Message ----- >> From: "Bill Burke" <bburke(a)redhat.com&gt; >> To: keycloak-dev(a)lists.jboss.org >> Sent: Thursday, 19 December, 2013 2:14:15 PM >> Subject: Re: [keycloak-dev] realm import/upload implemented >> >> >> >> On 12/19/2013 3:42 AM, Stian Thorgersen wrote: >>> >>> >>> ----- Original Message ----- >>>> From: "Marek Posolda" <mposolda(a)redhat.com&gt; >>>> To: "Gabriel Cardoso" <gcardoso(a)redhat.com&gt; >>>> Cc: keycloak-dev(a)lists.jboss.org >>>> Sent: Thursday, 19 December, 2013 5:50:57 AM >>>> Subject: Re: [keycloak-dev] realm import/upload implemented >>>> >>>> I wonder if we also want to support export existing realms to JSON file >>>> in >>>> admin console? Might be useful especially for migration between >>>> environments >>>> (from stage to production etc) >>> >>> +1 >>> >> >> I thought about this long ago, that any export facility should only be >> available locally and not remotely. Maybe I'm just overparanoid? >> >> Bill >> >> >> -- >> Bill Burke >> JBoss, a division of Red Hat >> http://bill.burkecentral.com >> _______________________________________________ >> keycloak-dev mailing list >> keycloak-dev(a)lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/keycloak-dev >> -- Bill Burke JBoss, a division of Red Hat http://bill.burkecentral.com