May 2015 - keycloak-user - Jboss List Archives

by Petr Titov

Hi, I'm trying to integrate Keycloak 1.2.0-Final with Wordpress using SAML 2.0 Single Sign-On plugin (https://wordpress.org/plugins/saml-20-single-sign-on/ ). After setting up both applications I get Keycloak login page without any inputs, just background and text LOG IN TO MIG. The redirect url from Wordpress to Keycloak is http://localhost:8080/auth/realms/mig/protocol/saml?SAMLRequest=<some data> There are no errors in the log. What does that mean? -- Petr Titov

11 years

1
0
0 / 0

SQL exception on password recovery

by Kyle Renfro

Keycloak 1.2.0-Final I am evaluating Keycloak, and so far I am very impressed. I have made good progress implementing a custom federation provider. I have full and periodic syncing implemented and all is working except password recovery using an e-mail address. Password recovery with a username works. I'm not sure if my custom provider is getting in the way. >From the logs: ... Caused by: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '1' for key 'PRIMARY' Here is the the record from the keycloak SQL database I am attempting pw recovery on: *mysql> select * from USER_ENTITY where id = 1;* +----+-----------------------+-----------------------+----------------+---------+--------------------------------------+------------+-------------+--------------------------------------+------+----------+ | ID | EMAIL | EMAIL_CONSTRAINT | EMAIL_VERIFIED | ENABLED | FEDERATION_LINK | FIRST_NAME | LAST_NAME | REALM_ID | TOTP | USERNAME | +----+-----------------------+-----------------------+----------------+---------+--------------------------------------+------------+-------------+--------------------------------------+------+----------+ | 1 | krenfro(a)real-comp.com | krenfro(a)real-comp.com | | | 7675cab9-ad38-420c-aa1f-df7a869c50bb | NULL | Kyle Renfro | 893a55ff-7aac-448f-b7b6-704a26997dfe | | krenfro | +----+-----------------------+-----------------------+----------------+---------+--------------------------------------+------------+-------------+--------------------------------------+------+----------+ 1 row in set, 1 warning (0.00 sec) There is a SQL warning, not sure if it is related: *mysql> show warnings;* +---------+------+--------------------------------------------------------------------------+ | Level | Code | Message | +---------+------+--------------------------------------------------------------------------+ | Warning | 1292 | Truncated incorrect DOUBLE value: '7cd31fee-2398-46cc-92d9-58eae6b32fb2' | +---------+------+--------------------------------------------------------------------------+ 1 row in set (0.00 sec) If deleting the db and starting from scratch is recommended, that is fine. Thanks in advance! Kyle *Here is full stack trace and keycloak logs:* 09:14:13,886 WARN [org.hibernate.engine.jdbc.spi.SqlExceptionHelper] (default task-109) SQL Error: 1062, SQLState: 23000 09:14:13,887 ERROR [org.hibernate.engine.jdbc.spi.SqlExceptionHelper] (default task-109) Duplicate entry '1' for key 'PRIMARY' 09:14:13,887 INFO [org.hibernate.engine.jdbc.batch.internal.AbstractBatchImpl] (default task-109) HHH000010: On release of batch it still contained JDBC statements 09:14:13,888 ERROR [io.undertow.request] (default task-109) UT005023: Exception handling request to /auth/realms/test/login-actions/password-reset: java.lang.RuntimeException: request path: /auth/realms/test/login-actions/password-reset at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:54) [keycloak-services-1.2.0.Final.jar:1.2.0.Final] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:85) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:61) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:56) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:45) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:63) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:261) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:247) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:76) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:166) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.Connectors.executeRootHandler(Connectors.java:197) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:759) [undertow-core-1.1.0.Final.jar:1.1.0.Final] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) [rt.jar:1.7.0_80] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) [rt.jar:1.7.0_80] at java.lang.Thread.run(Thread.java:745) [rt.jar:1.7.0_80] Caused by: org.jboss.resteasy.spi.UnhandledException: org.keycloak.models.ModelDuplicateException: javax.persistence.PersistenceException: org.hibernate.exception.ConstraintViolationException: could not execute statement at org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(ExceptionHandler.java:76) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandler.java:212) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.writeException(SynchronousDispatcher.java:149) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:372) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:179) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:220) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) [resteasy-jaxrs-3.0.10.Final.jar:] at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) [jboss-servlet-api_3.1_spec-1.0.0.Final.jar:1.0.0.Final] at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at org.keycloak.services.filters.ClientConnectionFilter.doFilter(ClientConnectionFilter.java:41) [keycloak-services-1.2.0.Final.jar:1.2.0.Final] at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) [undertow-servlet-1.1.0.Final.jar:1.1.0.Final] at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:40) [keycloak-services-1.2.0.Final.jar:1.2.0.Final] ... 28 more Caused by: org.keycloak.models.ModelDuplicateException: javax.persistence.PersistenceException: org.hibernate.exception.ConstraintViolationException: could not execute statement at org.keycloak.connections.jpa.PersistenceExceptionConverter.convert(PersistenceExceptionConverter.java:40) [keycloak-connections-jpa-1.2.0.Final.jar:1.2.0.Final] at org.keycloak.connections.jpa.PersistenceExceptionConverter.invoke(PersistenceExceptionConverter.java:34) [keycloak-connections-jpa-1.2.0.Final.jar:1.2.0.Final] at com.sun.proxy.$Proxy52.flush(Unknown Source) at org.keycloak.models.jpa.JpaUserProvider.addUser(JpaUserProvider.java:57) [keycloak-model-jpa-1.2.0.Final.jar:1.2.0.Final] at org.keycloak.models.cache.DefaultCacheUserProvider.addUser(DefaultCacheUserProvider.java:254) [keycloak-invalidation-cache-model-1.2.0.Final.jar:1.2.0.Final] at com.realcomp.keycloak.UserServiceFederationProvider.importUser(UserServiceFederationProvider.java:249) at com.realcomp.keycloak.UserServiceFederationProvider.getUserByUsername(UserServiceFederationProvider.java:276) at org.keycloak.models.UserFederationManager.getUserByUsername(UserFederationManager.java:155) [keycloak-model-api-1.2.0.Final.jar:1.2.0.Final] at org.keycloak.services.resources.LoginActionsService.sendPasswordReset(LoginActionsService.java:908) [keycloak-services-1.2.0.Final.jar:1.2.0.Final] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_80] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_80] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_80] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_80] at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:137) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:296) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:250) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:140) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:103) [resteasy-jaxrs-3.0.10.Final.jar:] at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:356) [resteasy-jaxrs-3.0.10.Final.jar:] ... 39 more Caused by: javax.persistence.PersistenceException: org.hibernate.exception.ConstraintViolationException: could not execute statement at org.hibernate.jpa.spi.AbstractEntityManagerImpl.convert(AbstractEntityManagerImpl.java:1763) [hibernate-entitymanager-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.jpa.spi.AbstractEntityManagerImpl.convert(AbstractEntityManagerImpl.java:1677) [hibernate-entitymanager-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.jpa.spi.AbstractEntityManagerImpl.convert(AbstractEntityManagerImpl.java:1683) [hibernate-entitymanager-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.jpa.spi.AbstractEntityManagerImpl.flush(AbstractEntityManagerImpl.java:1338) [hibernate-entitymanager-4.3.7.Final.jar:4.3.7.Final] at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) [rt.jar:1.7.0_80] at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57) [rt.jar:1.7.0_80] at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) [rt.jar:1.7.0_80] at java.lang.reflect.Method.invoke(Method.java:606) [rt.jar:1.7.0_80] at org.keycloak.connections.jpa.PersistenceExceptionConverter.invoke(PersistenceExceptionConverter.java:32) [keycloak-connections-jpa-1.2.0.Final.jar:1.2.0.Final] ... 56 more Caused by: org.hibernate.exception.ConstraintViolationException: could not execute statement at org.hibernate.exception.internal.SQLExceptionTypeDelegate.convert(SQLExceptionTypeDelegate.java:72) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.exception.internal.StandardSQLExceptionConverter.convert(StandardSQLExceptionConverter.java:49) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:126) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.engine.jdbc.spi.SqlExceptionHelper.convert(SqlExceptionHelper.java:112) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.engine.jdbc.internal.ResultSetReturnImpl.executeUpdate(ResultSetReturnImpl.java:211) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.engine.jdbc.batch.internal.NonBatchingBatch.addToBatch(NonBatchingBatch.java:62) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.persister.entity.AbstractEntityPersister.insert(AbstractEntityPersister.java:3124) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.persister.entity.AbstractEntityPersister.insert(AbstractEntityPersister.java:3581) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.action.internal.EntityInsertAction.execute(EntityInsertAction.java:104) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:463) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.engine.spi.ActionQueue.executeActions(ActionQueue.java:349) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.event.internal.AbstractFlushingEventListener.performExecutions(AbstractFlushingEventListener.java:350) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.event.internal.DefaultFlushEventListener.onFlush(DefaultFlushEventListener.java:56) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.internal.SessionImpl.flush(SessionImpl.java:1222) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] at org.hibernate.jpa.spi.AbstractEntityManagerImpl.flush(AbstractEntityManagerImpl.java:1335) [hibernate-entitymanager-4.3.7.Final.jar:4.3.7.Final] ... 61 more Caused by: com.mysql.jdbc.exceptions.jdbc4.MySQLIntegrityConstraintViolationException: Duplicate entry '1' for key 'PRIMARY' at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method) [rt.jar:1.7.0_80] at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57) [rt.jar:1.7.0_80] at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) [rt.jar:1.7.0_80] at java.lang.reflect.Constructor.newInstance(Constructor.java:526) [rt.jar:1.7.0_80] at com.mysql.jdbc.Util.handleNewInstance(Util.java:411) at com.mysql.jdbc.Util.getInstance(Util.java:386) at com.mysql.jdbc.SQLError.createSQLException(SQLError.java:1039) at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3609) at com.mysql.jdbc.MysqlIO.checkErrorPacket(MysqlIO.java:3541) at com.mysql.jdbc.MysqlIO.sendCommand(MysqlIO.java:2002) at com.mysql.jdbc.MysqlIO.sqlQueryDirect(MysqlIO.java:2163) at com.mysql.jdbc.ConnectionImpl.execSQL(ConnectionImpl.java:2624) at com.mysql.jdbc.PreparedStatement.executeInternal(PreparedStatement.java:2127) at com.mysql.jdbc.PreparedStatement.executeUpdate(PreparedStatement.java:2427) at com.mysql.jdbc.PreparedStatement.executeUpdate(PreparedStatement.java:2345) at com.mysql.jdbc.PreparedStatement.executeUpdate(PreparedStatement.java:2330) at org.jboss.jca.adapters.jdbc.WrappedPreparedStatement.executeUpdate(WrappedPreparedStatement.java:493) at org.hibernate.engine.jdbc.internal.ResultSetReturnImpl.executeUpdate(ResultSetReturnImpl.java:208) [hibernate-core-4.3.7.Final.jar:4.3.7.Final] ... 71 more

11 years

2
2
0 / 0

Using JSON Web Token Debugger with Keycloak generated tokens

by pubudu gunawardena

Hi All, I am trying to consume the Direct Access Grant API using a PHP client. I tried to inspect the tokens using the tool at http://jwt.io/, but the tool always says "Invalid Signature". What I would like to know is does Keycloak use a different algorithm to sign the response? Otherwise why does the on-line tool complain that the signature is invalid? Following is a sample response I got from Keycloak. {"access_token":"eyJhbGciOiJSUzI1NiJ9.eyJqdGkiOiI5Y2Y5YzUwYy1hNGFmLTRmMWQtOWE1NC0wZTEzYjYzYTVjOTAiLCJleHAiOjE0MzI3MDkyNjYsIm5iZiI6MCwiaWF0IjoxNDMyNzA4OTY2LCJpc3MiOiJodHRwOi8vbG9jYWxob3N0OjgwODAvYXV0aC9yZWFsbXMvcXYyIiwiYXVkIjoicXYyLXJlc3QiLCJzdWIiOiI1MjYxMGUyNS1kMDhmLTQ3MmEtYWU1ZC1jOThhNmU2MmI4ZDMiLCJhenAiOiJxdjItcmVzdCIsInNlc3Npb25fc3RhdGUiOiIyMzQ1ZmY0Mi1lYTQ1LTRhNjEtYWIxYi0yNWQxY2VjZmY3MjIiLCJjbGllbnRfc2Vzc2lvbiI6ImYxYzU1MzZmLWYwZmUtNDUwNy1iZjQyLWU0MzU0MDVhNGIyYiIsImFsbG93ZWQtb3JpZ2lucyI6W10sInJlc291cmNlX2FjY2VzcyI6eyJhY2NvdW50Ijp7InJvbGVzIjpbInZpZXctcHJvZmlsZSIsIm1hbmFnZS1hY2NvdW50Il19fSwiZW1haWwiOiJwdWJ1ZHVAc29tZXdoZXJlLmNvbSIsIm5hbWUiOiJQdWJ1ZHUgR3VuYXdhcmRlbmEiLCJmYW1pbHlfbmFtZSI6Ikd1bmF3YXJkZW5hIiwicHJlZmVycmVkX3VzZXJuYW1lIjoicHVidWR1IiwiZ2l2ZW5fbmFtZSI6IlB1YnVkdSJ9.a5MRV5lfzjDd0VftEigxr-VXJ7vxohUZj5bpMDvZ7opHaM-FccNVtIUrNDgW2rXCZJAI1B0tUAlJlngrIFghJxoQANnpCJxzqjlkbV-gh1j7CaQSWX0-KA9OZPSvhyhRhs4MzsCxirBwEhmWcyuaDECp0UjfEP22LhnXf3mSpmMJ7HfyikClcWfW_ykEb7fwOnFe5jk9thSqaQKWroFksBWT0_fAZuGdkfyG6rBCFHRCnQm31vn6I5SwZOpAx1YatAbK85Sc3tAcitpFnd8twFr0aC95Fbcghb_TbrivJrL0J5qN77f-9DQKJ_fy1FHljTxYwfbIyx1HQwvyq1HOFQ","expires_in":300,"refresh_expires_in":1800,"refresh_token":"eyJhbGciOiJSUzI1NiJ9.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.X_aBtZzKHPCsRqo9ShOxtsQgTZOYaVNEZDmfvfWSxCafE6kpC5yIcz9xFW2CfYo2ttm5i3GMb-aho-nyU3IEmhZkZ-DjHjxCLHO_Vlt5MBKtVF9L7-v5qWRP4va5rLUa8O1JshjRP1yW1r7SvLafqE8jLYvn3vknPhYp1ts3EhcmckIHiXS5dW_tO4XxBx7tE0kSWlUoCe_10IqqW6uRKXFuwfRWLd2KDUIIth4g2YoUrwFyQBxt2qcdjm4MQPVF0-JpNxWZN3VwbOcpKLG0gSsGppvmhuJI0eRujJzbAlxL3fY9682UZLE9JTzzX4gRTaxL5VZGau6Q0iIfzh_U1A","token_type":"bearer","id_token":"eyJhbGciOiJSUzI1NiJ9.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.C5REGCEQyaWmkhbc0DrWW74m0bbeM2cKWcKJvlkvz17VZPh9sZ1eaiXdRD9pGZ1iACGPLpoCYrMkcrF5FbIX7ng7NggVbf2VEdNCeDUgZ8oDRSJlKyqeGdYWnKsi6dpwrmcPZW9BffWcqkzJv1BUbSII2tejjnB4BWz7bCvesF3ge_KKwkfy-COk8RGx_G4oxp21Ik1pQbVoiqifRQALuK252NKuuV-sXI4dd4ltj0TOca9DKNHlHMyCoRVwDVRsqMMWGfWXpqwacEh35wp8r3VDgQ00vcOnEfiraadwoPYnIsjPK5ZnfSFZlBxyDTNP76tXX1Jd5AHMUPyvOC1YhA","not-before-policy":0,"session-state":"2345ff42-ea45-4a61-ab1b-25d1cecff722"} -- Thanks, Pubudu

11 years

2
2
0 / 0

Use Existing Database without Importing Users

by pubudu gunawardena

Hi All, I am trying to use Keycloak to implement SSO for two websites, one Wordpress and another custom implemented. I want to make Keycloak use the existing database but would prefer to not import the data to Keycloak, which would make another copy of the data. Is something like this possible with keycloak? -- Thanks, Pubudu

11 years

2
5
0 / 0

Keycloak-1.2.0.Final /$keycloak_home/standalone/deployments folder

by Carlos Feria

Hello i'm using keycloak-1.2.0.Final and i can't see the /$keycloak_home/standalone*/deployments* folder, so i can't deploy other .war of my projects...wich is the folder where i can put my .war deployments? -- Carlos E. Feria Vila

11 years

2
1
0 / 0

Sending Emails with HTML Templates

by Lohitha Chiranjeewa

Hi, The default email FTLs are in plain text. I have tried to enhance them by adding HTML styling. However, when I do that the email bodies don't get styled accordingly. Instead the exact HTML code gets returned in the email body. I have verified that my email server supports HTML styling (through external email requests). So what could be the issue here? Thanks, Lohitha.

11 years

3
3
0 / 0

Web authentication using CAS server

by Christophe Fillot

Hello all, We currently have a Jasig CAS server (3.5.x) for Web SSO, with LDAP as authentication backend. I would like to use Keycloak for some new applications, but without users having to log in twice. Is it possible to delegate the authentication in Keycloak to the CAS server ? Has someone managed to integrate Keycloak with an existing CAS setup ? Another option would be to have Keycloak implement the CAS 2.0 protocol, maybe this is something planned ? Thanks, Christophe

11 years

2
1
0 / 0

Trigger verification emails

by Benjamin Hansmann [alphaApps]

For me there is generally only one feature missing now: When using the admin rest api exclusively I would need a way to trigger verification emails. Either as per Jira KEYCLOAK-944 or through Admin-Rest API. Is this planned to be implemented in the near future? If it shouldn't require to dive deep into keycloak internals I would be willing to contribute an admin rest api endpoint to trigger these. Any hints where to start looking in the code on github regarding verification emails and admin rest api? Two other remarks: - If Jira KEYCLOAK-943 (account service rest api) should be implemented one day, a nice to have would be to also provide an registration endpoint. - When creating an EventListener it does not get notified when creating a user through Admin Console or Admin REST API, only self-registration triggers onEvent(). Best Regards Benjamin

11 years

2
2
0 / 0

Error upgrading MS SQL database from 1.1 Final to 1.2 Final

by Schneider, John DODGE CONSULTING SERVICES, LLC

Hi all, I was excited to find out 1.2 was released and tried to upgrade my sandbox environment from 1.1 today. I already had 1.1 deployed as a Wildlfly module, and extracted the 1.2 overlay edition along with the 1.2 Wildfly adapter. The database update was chugging along fine for a bit, but did hit an error. It seems to be an SQL dialect problem. Because of company policies, I'm forced to use MS SQL, and am using the JDBC 41 driver deployed as a Wildfly module. I've attached the relevant log output, starting from the beginning of the database update. I did take a DB backup before starting, so I can restore and replicate the update process from the beginning again. Could you please take a look and let me know what I can do? Thanks, John

11 years

3
3
0 / 0

Securing one .war with two .json

by Carlos Feria

Good morning. How can i configure one .war with two .json? I have two realms, these access the same .war (restfull bearer only), but my problem is that a .war can just one realm dependencie. I see that *keycloak* have a application with *realm-management* name and this application is registered in more than one realms but all realms can access to *realm-management* without problems. How can i do the same with my .war like *realm-management.* I need registrer my .war in two realms. Please help me. -- Carlos E. Feria Vila

11 years

2
1
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

keycloak-user May 2015