March 2016 - keycloak-user - Jboss List Archives

page not rendered in AngularJS app after "Terms and conditions" are declined...

by Adrian Matei

Hi everyone, Has any of you experienced the following behavior: we have an AngularJS app with some of its resources protected by Keycloak - setup: var auth = {}; angular.element(document).ready(function () { var env = 'keycloak'; var keycloakAuth = new Keycloak(env + '.json'); keycloakAuth.init({onLoad: 'check-sso'}) .success(function () { auth.authz = keycloakAuth; module.factory('Auth', function() { return auth; }); angular.… [View More]

9 years, 1 month

3
4
0 / 0

Grabbing Keycloak user roles from Android app

by Aritz Maeztu

Hi all, I'm managing the keycloak authentication-authorization for my Android app. I do it manually since there's no adapter still available as far as I know. Currently I am able to log in from a webview, retrieve the access token using the code and refresh the token when it's necessary and retrieve the user info using the openid-connect compliant endpoints. However, I would like to grab the roles available for the token too, in order to show/hide specific operations in the screen. How … [View More]

9 years, 1 month

2
2
0 / 0

Url for updating security Q&As tab in user account

by Riddhi Rathod

Hi all, I edited the security Q&A plugin to include 3 questions. So now when the user registers for the first time, they have to answer 3 security questions which are saved in the database. Then, when the users clicks “Forgot Password”: 1. A reset email url is sent to them. 2. On entering reset url, the user has to answer 3 security Q&As. 3. And then the user is able to reset password. So now, the only place where the user can save security Q&As in when they register for … [View More]

9 years, 1 month

2
1
0 / 0

Regenerating a realm public key through the API

by Aikeaguinea

After doing a scripted import of a realm file I'm looking to call the Keycloak API to change the realm's public and private keys. The API docs aren't entirely clear on how to do this, but after looking at the "Generate New Keys" button in the Keycloak admin console I'm guessing it should be done as follows: Update the top-level realm information by sending a PUT request to /admin/realms/<REALM_NAME> with a body of { realm: <REALM_NAME>, publicKey : 'GENERATE' } Is that correct? -… [View More]

9 years, 1 month

2
1
0 / 0

Best practices for securing sign-in on mobile

by Stian Thorgersen

Our Cordova apapter uses a webview (via cordova-plugin-inappbrowser) to open the login page. This results in no SSO between applications and it also has some security implications. A better approach is to use in app browser tabs when supported or fallback to the system browser. See https://www.youtube.com/watch?v=ppeU8yeI_ks for more details.

9 years, 1 month

2
2
0 / 0

Dynamic multi-realm authentication with Keycloak

by Michel Fleur

Hello, We are building a system with multiple services that service a set of user communities. Each user belongs only to one community. Each service potentially services all communities. Both the set of services and set of communities is dynamic. Each community can configure its own authentication scheme and UI theme. Login names - if used by the authentication scheme - are not necessarily unique across communities. The number of communities will be in the order of thousands. As far as … [View More]

9 years, 1 month

2
1
0 / 0

Keycloak as Identity provider wih OpenID

by Johannes.Langer＠telekom.de

Hi, we are currently evaluating Keycloak. One of the questions I couldn't figure out yet is, As we are thinking about providing our own internal OpenId identity provider, is it possible to use Keycloak as a standalone OpenId Identity provider (without brokering)? As Keycloak has the OpenId endpoints for the brokering use case anyways... If yes is there an example how to configure this? In the documentation I could only see info on how to configure a broker... Thanks Johannes

9 years, 1 month

2
1
0 / 0

Supporting sticky sessions

by Stian Thorgersen

Eventually it would be nice to support the ability for load balancers to send all requests for a particular user session to the same node (browser as well as client requests). More details here: https://issues.jboss.org/browse/KEYCLOAK-2352 Is this a high priority for 1.9 or should it be 2.x? We may be able to put it into 1.9.2 if required. I'd like feedback on how useful folks think it would be as well as feedback on the proposed implementation.

9 years, 1 month

4
5
0 / 0

keycloak javascript resources- how are they added

by Charles Moulliard

Hi, The console-js demo part of the keycloak examples contains a reference to the keycloak.js script "<script src="/auth/js/keycloak.js"></script>" but this rersource isn't packaged within the code source of the project - https://www.dropbox.com/s/hg6tfi3samdskn9/Screenshot%202016-03-04%2017.20... So, how this js script (https://github.com/keycloak/keycloak-js-bower/blob/master/dist/keycloak.js) is packaged and deployed on keycloak demo server ? The doc is not really … [View More]

9 years, 1 month

3
2
0 / 0

how keycloak.json file is loaded by the js ?

by Charles Moulliard

Hi, How is the keycloak.json file loaded by the keycloak.js script as I don't see any value like this "cors-allowed-methods" within the keycloak.js file ? Regards, Charles

9 years, 1 month

3
5
0 / 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

keycloak-user March 2016