May 2016 - keycloak-user - Jboss List Archives

Node.js Module for Client Registration REST API

by Lance Ball

Hi all I have just published an initial 0.1.0 version of a Node.js client for the Keycloak client registration API. You can check it out here: https://www.npmjs.com/package/keycloak-client-registration It currently supports CRUD operations for Keycloak 'default' and 'openid-connect' provider endpoints. The documentation, such as it is, can be found here: http://bucharest-gold.github.io/keycloak-client-registration/. Please feel free to give it a spin. And if you do and have something to say about it, feedback is welcome. The client requires Node.js 5.0 or higher, and is known to work with Keycloak versions 1.9.2 and 1.9.3. If you find a bug, please provide as much detail as you can in a github issue: https://github.com/bucharest-gold/keycloak-client-registration/issues. Pull requests encouraged. :) Cheers Lance

10 years, 1 month

2
1
0 / 0

Control which user profile attributes can be changed by the user

by Jason Axley

I did not see any way to set a policy for which user profile attributes the user can change. The account management UI displays all of the information in edit input boxes and presumably lets users change anything including name, email, etc. What if I want to restrict which data users can change based on possibly their group or role? Is that at all possible? -Jason Jason Axley Sr. Security Engineer, Expedia Worldwide Engineering Team 425-679-4157 (o) | 206-484-2778 (m) | 206-55-AXLEY (gv) 333 108th Ave NE, 9S-282, Bellevue, WA 98004 EWE Security Wiki<https://confluence/display/POS/EWE+Security>

10 years, 1 month

2
2
0 / 0

Auto login after registration

by Anunay Sinha

Hi We are using Keycloak 1.5.0 and are looking for a feature where user gets logged in automatically once they do registration. Is it possible to do that? We can try to capture the password at time of registration and do the login for the user Some how this idea of capturing information which is not meant for us in the first place just doesn't seem right. Is there a way we can do this?

10 years, 1 month

2
1
0 / 0

Session time out - Redirection

by JAYAPRIYA ATHEESAN

Hi Team, I have set session time out value to 1minute. Now after 1 we get errors. To be clear. If a person clicks on login button the url gets redirected to keycloak.. After sometime if the person tries to perform some action, the url would have got expired. That is why we face "An error occurred please try to login through your application". Instead of this we need to refresh the page and show to the user to login or redirect to our application index.html page. How to do this?. cid:image007.png@01D1A469.D3367D60 Thanks, Jayapriya Atheesan

10 years, 1 month

2
1
0 / 0

Production deployment - without exposing admin gui

by Thomas Connolly

Hi Please advise on the approach to deploying KC where the Admin GUI and APIs are not exposed. We want to control what is exposed onto the internet and what is available within the organisation.The flows are exposed but the admin gui / api are only accessible within the organisation. Currently we're considering filtering at the load balancer essentially whitelisting traffic.The admin GUI is accessed internally within the organisation. Alternatively is there a way to config off admin ui & api and only deploy this into production? With the admin deployed internally? Regards Tom Connolly.

10 years, 1 month

2
1
0 / 0

Import of v1.3.1 export to v1.9.3 does not work

by Dean Peterson

I get no errors; but 0 users are imported.

10 years, 1 month

1
1
0 / 0

Getting Started

by James_Saxton＠ao.uscourts.gov

Hey, I installed keycloak 1.9.3. Final, and the app seems to start ok, I can render the banner UI in a browser and click the admin link, once the admin rage tried to render, it only shows {{notification.header}} {{notification.message}} I did use add-user-keycloak.sh. I can see the creds get added to the correct *.json file This is an install on linux RHEL 6.using keycloak-1.9.3.Final ( step 3.1.1 ) from the docs. Any hints as to the missing Admin UI? The only message I see in the logs is this .... 20:51:44,692 WARN [org.hibernate.dialect.H2Dialect] (ServerService Thread Pool -- 53) HHH000431: Unable to determine H2 database version, certain features may not work and I cannot seem to locate any direction using google. Thanks in advance for your help! James Saxton Software Infrastructure Division Administrative Office of the U.S. Courts One Columbus Circle, N.E. Washington, DC 20544 (C) 908-910-5566 Teamwork makes the dream work!

10 years, 1 month

1
0
0 / 0

Authorization code flow without a browser

by Aikeaguinea

As I understand it, using the authorization code flow rather than the implicit flow is recommended where possible. We have a server-side client application, but the user agents making requests are not browsers, but instead our own code. I'm not entirely sure how to make the authorization code flow work without a browser. For instance, if on the command line I request curl 'http://host:port/auth/realms/foo/protocol/openid-connect/auth?response_ty...' Then (assuming the parameters are correct) I get back an HTML login page with a form. In order to submit the credentials, I would need to dig the URL out of the action of the form and then submit a request like curl -X POST -d 'username=test-user' -d 'password=test1234' 'http://host:port/auth/realms/foo/login-actions/authenticate?code=Ctr79aRs...' Three questions: 1. Is there some reason I shouldn't be trying to implement the authorization code flow like this? 2. Is there a way to get the proper login action back without having to dig it out of an HTML form? I've tried adding --header "Accept: application/json" to the command but this has no effect. 3. Is there a way of submitting credentials other than by using form parameters? I've tried HTTP basic auth but it doesn't work for me. -- Aikeaguinea aikeaguinea(a)xsmail.com -- http://www.fastmail.com - Same, same, but different...

10 years, 1 month

4
9
0 / 0

Issue in logging in with identity provider after session time out.

by JAYAPRIYA ATHEESAN

Hi Team, We are testing session timed out feature, and I have set my "login timeout" to 10seconds. If I click on login after 10sec, I get an error saying "YOUR LOGIN TOOK TOO MUCH TIME TO PROCESS". After which if I give my user credentials, the login happens. But I I use social media to login, I get the below error. And even if I try to close it and click on login again, I get the same issue. Unless and until I type my application url , this issue is not going through. The flow stops here https:// <https://%3chostname%3e:8444/auth/realms/giggzo/broker/facebook/login?code=Y 5DU748Sx0YL193xRYcv7bQHpvKAV8VlYAVfl2Pbd-4.63d5ab87-a882-4d54-8bed-126ac2cbf a89> <hostname>:8444/auth/realms/giggzo/broker/facebook/login?code=Y5DU748Sx0YL19 3xRYcv7bQHpvKAV8VlYAVfl2Pbd-4.63d5ab87-a882-4d54-8bed-126ac2cbfa89 Each time, we don't want our users to give the entire url to get the login page again. How to resolve this issue? Thanks, Jayapriya Atheesan

10 years, 1 month

1
0
0 / 0

Password reset redirection

by JAYAPRIYA ATHEESAN

Hi Team, We have UI written in angular JS. We have integrated the same with keycloak for authentication and authorization. When we follow the reset password link, a mail is sent to the associated user's email id. When I click on the link sent for password reset, a page opens up for providing new password. After I submit the password change request, the application just changes the password. But the problem is that, it does not login to our application dashboard. If we click on login button, the user gets logged in. How to make the application seamlessly go to the dashboard? By going through the files shared by your team in example, we see that we cannot capture the onsuccess. Onlogin method goes through, but it is not being redirected. Is it possible to specify the url to be redirected after successful password reset? The flow reaches the below part var kInit = function () { keycloakAuth.init().success(function () { $rootScope.keycloak = keycloakAuth; console.log('token = ' + keycloakAuth.token); }).error(function () { //console.log("failed to intialize"); }); }; kInit(); We expect that the flow should go through the below method also, but it doesn't happen. keycloakAuth.onAuthSuccess = function () { $rootScope.authLogin = true; console.log('coming in auth success'); loginService.login(keycloakAuth); $rootScope.dataloading = true; }; Thanks, Jayapriya Atheesan

10 years, 1 month

2
1
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

keycloak-user May 2016