March 2015 - keycloak-user - Jboss List Archives

PicketLink and Keycloak projects are merging!

by Boleslaw Dawidowicz

We would like to announce that PicketLink and Keycloak projects will be merging their efforts. Code base of both will get unified and new features will be developed in a single place. DZone link: http://www.dzone.com/links/picketlink_and_keycloak_projects_are_merging.html Blog post: http://blog.keycloak.org/2015/03/picketlink-and-keycloak-projects-are.html FAQ covering most important questions: http://picketlink.org/keycloak-merge-faq/ -- Bolesław Dawidowicz

9 years, 1 month

1
0
0 / 0

Generate user setting page

by ha.hamed＠gmail.com

Hi, I know the user setting page is: https://DOMAIN:PORT/auth/realms/REALM/account/?referrer=APPLICATION Is there anyway to generate this URL on a servlet without hard-coding server DOMAIN and the other parameters (Getting these parameters from keycloak.json or from application server by any provided API)? Regards, Hamed

9 years, 1 month

2
1
0 / 0

Discourse SSO with Keycloak

by Dean Peterson

Is there a best practice when it comes to adding hooks to Keycloak for integrating with software that let's you replace their security with Keycloak security? For example, Discourse provides this guide: https://meta.discourse.org/t/official-single-sign-on-for-discourse/13045. It assumes the user is using their own home grown security where they can easily intercept redirects. Is there a mechanism in Keycloak that allows end users to more easily implement the solution they describe in that guide? I realize you don't have time to give me a solution. Can you just nudge me in the right direction?

9 years, 1 month

2
4
0 / 0

When 1.2.0.Beta1 will be released?

by Gary Brown

Hi Do you have an estimate for when 1.2.0.Beta1 will be released? Thanks in advance. Regards Gary

9 years, 1 month

3
2
0 / 0

does keycloak work with sharepoint 2010/2013

by Kevin Chen

Hi: Does Keycloak support integration with Sharepoint? We want to configure the Sharepoint to use Keycloak as Identity Manager. Thanks Kevin ---------------------------------------------------------------------- This e-mail, including any attached files, may contain confidential and privileged information for the sole use of the intended recipient. Any review, use, distribution, or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive information for the intended recipient), please contact the sender by reply e-mail and delete all copies of this message.

9 years, 1 month

3
5
0 / 0

Client options for authenticating against Keycloak-secured services

by Guy Davis

Good day, I'm hoping to summarize the methods for a client Java program to authenticate against a Keycloak-secured service endpoint. Please correct any misunderstandings I have in the summary below: 1. Client program can issue a KC REST API call to get a token and then use it as "Authorization" header of type "Bearer" as per example 2. Client program (such as Apache HttpClient lib) can use Basic Authorization if KC secured-deployment has been configured to allow. 3. Client program can negotiate a SAML v2.0 SP-initiated SSO session directly against KC if the service is so configured. 4. Client program can negotiate a OpenID Connect SSO session directly against KC if the service is so configured. I have working Java examples now for #1 and #2, but was wondering if there were any Java examples of #3 and #4. Is my understanding of the authentication options for clients correct? By the way, I am greatly impressed by the progress being made on the master branch around Kerberos/SPNEGO and Identity Brokering. Kudos to the team. Thanks in advance, Guy

9 years, 1 month

2
1
0 / 0

Extra Registration Information

by Graeme Collis

I want to add 1 required field of user information to the Keycloak registration. >From what I've read this is not currently possible. Does this mean I basically have to 1. duplicate the Keycloak Registration application in another application 2. use the admin api's to update Keycloak 3. Using the Keycloak user id store it with the extra data information. 4. Have this available to all the different apps that need it. Regards, Graeme

9 years, 1 month

2
1
0 / 0

applications-by-id

by Hernan Dario Metaute Sarmiento

Hi, I've been using keycloak for some time now and I'm having this weird error all of a sudden I have a fresh wildfly install with keycloak from the appliance distribution. I also configured a fresh database (mongodb), configured the connection on keycloak-server.json and fired up the server. I log in the first time to the admin console, change the password, etc. Then I create a realm called, let's say, myApp. Everything goes well and then I use that realm (change it on the drop down) and click on applications. I get an error on screen saying "Not Found" and when going to the console I get 17:30:23,885 INFO [stdout] (default task-33) 2015-03-03 17:30:23 WARN ExceptionHandler:135 - failed to execute 17:30:23,886 INFO [stdout] (default task-33) javax.ws.rs.NotFoundException: *Could not find resource for full path: http://localhost:8080/auth/admin/realms/myApp/applications-by-id <http://localhost:8080/auth/admin/realms/myApp/applications-by-id>* 17:30:23,886 INFO [stdout] (default task-33) at org.jboss.resteasy.core.registry.SegmentNode.match(SegmentNode.java:112) 17:30:23,887 INFO [stdout] (default task-33) at org.jboss.resteasy.core.registry.RootNode.match(RootNode.java:43) 17:30:23,887 INFO [stdout] (default task-33) at org.jboss.resteasy.core.LocatorRegistry.getResourceInvoker(LocatorRegistry.java:79) 17:30:23,888 INFO [stdout] (default task-33) at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:131) 17:30:23,888 INFO [stdout] (default task-33) at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:109) 17:30:23,888 INFO [stdout] (default task-33) at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:135) 17:30:23,888 INFO [stdout] (default task-33) at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:103) 17:30:23,889 INFO [stdout] (default task-33) at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:356) 17:30:23,889 INFO [stdout] (default task-33) at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:179) 17:30:23,889 INFO [stdout] (default task-33) at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:220) 17:30:23,890 INFO [stdout] (default task-33) at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56) 17:30:23,890 INFO [stdout] (default task-33) at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51) 17:30:23,891 INFO [stdout] (default task-33) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) 17:30:23,891 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:85) 17:30:23,891 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130) 17:30:23,892 INFO [stdout] (default task-33) at org.keycloak.services.filters.ClientConnectionFilter.doFilter(ClientConnectionFilter.java:41) 17:30:23,892 INFO [stdout] (default task-33) at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) 17:30:23,892 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) 17:30:23,893 INFO [stdout] (default task-33) at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:40) 17:30:23,893 INFO [stdout] (default task-33) at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) 17:30:23,893 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132) 17:30:23,894 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:85) 17:30:23,894 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:61) 17:30:23,894 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36) 17:30:23,895 INFO [stdout] (default task-33) at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78) 17:30:23,895 INFO [stdout] (default task-33) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 17:30:23,895 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131) 17:30:23,896 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:56) 17:30:23,896 INFO [stdout] (default task-33) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 17:30:23,896 INFO [stdout] (default task-33) at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:45) 17:30:23,897 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:63) 17:30:23,899 INFO [stdout] (default task-33) at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58) 17:30:23,899 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:70) 17:30:23,900 INFO [stdout] (default task-33) at io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76) 17:30:23,900 INFO [stdout] (default task-33) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 17:30:23,902 INFO [stdout] (default task-33) at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61) 17:30:23,902 INFO [stdout] (default task-33) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 17:30:23,902 INFO [stdout] (default task-33) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43) 17:30:23,903 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:261) 17:30:23,903 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:247) 17:30:23,903 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:76) 17:30:23,904 INFO [stdout] (default task-33) at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:166) 17:30:23,910 INFO [stdout] (default task-33) at io.undertow.server.Connectors.executeRootHandler(Connectors.java:197) 17:30:23,912 INFO [stdout] (default task-33) at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:759) 17:30:23,912 INFO [stdout] (default task-33) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145) 17:30:23,913 INFO [stdout] (default task-33) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615) 17:30:23,913 INFO [stdout] (default task-33) at java.lang.Thread.run(Thread.java:745) Can anyone give me a hint as to where to look or what to look for? I previously had a realm configured and started getting this error so I started fresh and am still getting it. Thanks in advance -- *Hernán Metaute* Arquitecto *Ceiba Software *(57 4) 444 5 111 Ext 110 Cl 8 B 65 - 191 Of 409, Centro Empresarial Puertoseco – Medellín, Colombia Visite nuestro sitio www.ceiba.co <http://www.ceiba.com.co/> ________________________________________ BEste mensaje, incluido su adjunto, es confidencial y puede ser privilegiado. Si usted no es su destinatario, por favor notifique al emisor, luego destruya la comunicacion y todas las copias. Usted no debe copiar, distribuir y/o revelar esta comunicacion parcial o totalmente sin autorización del emisor.

9 years, 1 month

2
6
0 / 0

Token validation in keycloak in oauth with direct access.

by Emil Posmyk

Hello all I'm trying to validate downloaded earlier token (downloaded via oauth application with direct access) and I found RSATokenVerifier. It's working but this is only json validation and it is not checking same token from user session which exist in memmory. It is possible to use same token and check it with existing in user session (without clustering) ? I want to use the same token several times (for example same token for 5 minutes). Token is sent from client webservice to other webservice and last ws have to check token wchich is sent from first webservice (must make sure that token is correct - the same). I have doubt becouse I saw that always when I try to authenticate with direct access token is new but not over 5 minutes. *regards* *--* *Emil Posmyk*

9 years, 1 month

4
3
0 / 0

cluster configuration

by Kevin Chen

I am using keycloak 1.1, and tried to configure the cluster with 2 nodes. I am using apache httpd-2.2 as front end for both nodes. The log shows both node. I deployed KeyCloakWebTest.war on both node and without problem to access it. But when I try to access /auth/admin, it did not work: 1. if both nodes are running, after input correct username/password, the same login page will show up again. 2. I stopped one node, login with the same user, it is successful and able to manage my Realms. 3. Then I started the other node, and click on any actions in my already logged in session, the browser will show the login page again and in the newly started node, the following exception show up: 14:22:42,033 WARN [org.jboss.resteasy.core.SynchronousDispatcher] (ajp-/127.0.0.1:8009-2) Failed executing GET /admin/serverinfo: org.jboss.resteasy. spi.UnauthorizedException: Bearer at org.keycloak.services.resources.admin.AdminRoot.authenticateRealmAdminRequest(AdminRoot.java:152) [keycloak-services-1.2.0.Beta1-SNAPSHOT.j ar:1.2.0.Beta1-SNAPSHOT] How can I fix this? Thanks Kevin ---------------------------------------------------------------------- This e-mail, including any attached files, may contain confidential and privileged information for the sole use of the intended recipient. Any review, use, distribution, or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive information for the intended recipient), please contact the sender by reply e-mail and delete all copies of this message.

9 years, 1 month

3
4
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

keycloak-user March 2015