6:41 a.m.
Hi,
Is it possible to invalidate token in "offline validator" in Spring Security
Adapater?
Thanks,
Ondrej
7:43 a.m.
Hi,
If you are using bearer tokens, the adapter only performs local validation
based on a specific set of claims and signature. If you need to revoke
tokens and propagate the revocation to your resource servers, you should
consider introspecting the token using the token introspection endpoint.
However, our adapters don't provide the support for choosing between
local/remote introspection. Local introspection and validation are enough
for most people but depending on your requirements/constraints you may want
to use the introspection endpoint.
Regards.
Pedro Igor
On Thu, Jun 27, 2019 at 8:51 AM Ondrej Scerba <Ondrej.Scerba(a)zoomint.com>
wrote:
Hi,
Is it possible to invalidate token in "offline validator" in Spring
Security Adapater?
Thanks,
Ondrej
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
9:13 a.m.
Hi,
Is there any example available, how can be remote introspection implemented with Keycloak
Spring Security Adapter?
Thanks,
Ondrej
From: Pedro Igor Silva <psilva(a)redhat.com>
Sent: Thursday, June 27, 2019 14:43
To: Ondrej Scerba <Ondrej.Scerba(a)zoomint.com>
Cc: keycloak-user(a)lists.jboss.org
Subject: Re: [keycloak-user] Is it possible to invalidate token in Spring Security
Adapter
Hi,
If you are using bearer tokens, the adapter only performs local validation based on a
specific set of claims and signature. If you need to revoke tokens and propagate the
revocation to your resource servers, you should consider introspecting the token using the
token introspection endpoint.
However, our adapters don't provide the support for choosing between local/remote
introspection. Local introspection and validation are enough for most people but depending
on your requirements/constraints you may want to use the introspection endpoint.
Regards.
Pedro Igor
On Thu, Jun 27, 2019 at 8:51 AM Ondrej Scerba
<Ondrej.Scerba@zoomint.com<mailto:Ondrej.Scerba@zoomint.com>> wrote:
Hi,
Is it possible to invalidate token in "offline validator" in Spring Security
Adapater?
Thanks,
Ondrej
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user
9:27 a.m.
Hi,
More details here
https://www.keycloak.org/docs/latest/securing_apps/index.html#_token_intr...
and
here https://tools.ietf.org/html/rfc7662#section-2.1. It is basically an
HTTP request to the introspection endpoint where you pass the token you
want to introspect and some credentials/bearer token so that the client
(your app) making the request can be authenticated.
On Tue, Jul 2, 2019 at 11:22 AM Ondrej Scerba <Ondrej.Scerba(a)zoomint.com>
wrote:
Hi,
Is there any example available, how can be remote introspection
implemented with Keycloak Spring Security Adapter?
Thanks,
Ondrej
*From:* Pedro Igor Silva <psilva(a)redhat.com>
*Sent:* Thursday, June 27, 2019 14:43
*To:* Ondrej Scerba <Ondrej.Scerba(a)zoomint.com>
*Cc:* keycloak-user(a)lists.jboss.org
*Subject:* Re: [keycloak-user] Is it possible to invalidate token in
Spring Security Adapter
Hi,
If you are using bearer tokens, the adapter only performs local validation
based on a specific set of claims and signature. If you need to revoke
tokens and propagate the revocation to your resource servers, you should
consider introspecting the token using the token introspection endpoint.
However, our adapters don't provide the support for choosing between
local/remote introspection. Local introspection and validation are enough
for most people but depending on your requirements/constraints you may want
to use the introspection endpoint.
Regards.
Pedro Igor
On Thu, Jun 27, 2019 at 8:51 AM Ondrej Scerba <Ondrej.Scerba(a)zoomint.com>
wrote:
Hi,
Is it possible to invalidate token in "offline validator" in Spring
Security Adapater?
Thanks,
Ondrej
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
2023
days inactive
2028
days old
3 comments
2 participants
participants (2)
-
Ondrej Scerba -
Pedro Igor Silva