Re: [keycloak-user] Themes
by Benjamin Hansmann [alphaApps]
Hi Stian,
thanks for your reply.
Em Ter, 2015-09-15 às 13:16 +0200, Stian Thorgersen escreveu:
> By email verification page are you talking about the page that's
> displayed after the user has clicked on the link in the email or?
Yes, that's what I was talking about.
> If so the back to application page should only be displayed if the
> client has a base url set on it, so this may be a bug.
The base url was set, so this is not a bug.
> To change the style of the page and remove elements you can create a
> theme and copy the template from the base theme and change it so it
> only displays the message and logo you want.
I have spent some time experimenting with the templates and got it to
work.
Best Regards
Benjamin
>
> On 13 September 2015 at 02:29, Benjamin Hansmann [alphaApps]
> <b.hansmann(a)alphaapps.de> wrote:
> Can someone tell me how I could style the Email verification
> page to
> look like HTML from 1995 (just a logo with a message below)
> and remove
> the "Back to application" link (because in my case the
> referred page
> does not exist).
>
> Best regards,
> Benjamin
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
10 years, 10 months
Updating database through maven and liquibase
by Walker, Charles
I was trying to create the SQL output for the 1.5 update but ran into
errors. at it's simplest, creating a new h2 database fails (for me) as
such:
mvn -f connections/jpa-liquibase/pom.xml -Durl=jdbc:h2:.keycloak
.....
[INFO]
------------------------------------------------------------------------
[INFO] BUILD FAILURE
[INFO]
------------------------------------------------------------------------
[INFO] Total time: 12.026 s
[INFO] Finished at: 2015-09-14T11:48:31-04:00
[INFO] Final Memory: 15M/245M
[INFO]
------------------------------------------------------------------------
[ERROR] Failed to execute goal
org.liquibase:liquibase-maven-plugin:3.3.5:update (default-cli) on project
keycloak-connections-jpa-liquibase: Error setting up or running Liquibase:
Validation Failed:
[ERROR] 3 changes have validation errors
[ERROR] java.util.ServiceConfigurationError:
org.keycloak.authentication.AuthenticatorFactory: Provider
org.keycloak.authentication.authenticators.resetcred.ResetCredentialEmail
could not be instantiated
[ERROR] java.util.ServiceConfigurationError:
org.keycloak.authentication.AuthenticatorFactory: Provider
org.keycloak.authentication.authenticators.resetcred.ResetCredentialEmail
could not be instantiated
[ERROR] java.util.ServiceConfigurationError:
org.keycloak.authentication.AuthenticatorFactory: Provider
org.keycloak.authentication.authenticators.resetcred.ResetCredentialEmail
could not be instantiated
Has anyone else seen this?
Thanks,
Charlie
10 years, 10 months
Occasional NPE while retrieving token
by Orestis Tsakiridis
Hello,
I'm experiencing a strange error while trying to retrieve a token. Although
initially the application may function properly and tokens issued normally,
something happens when i use the Admin REST api that triggers the error.
After that no tokens can be issued and an NPE appears in the log. Usually
this happens after trying to drop some clients.
Btw, i'm using keycloak-1.4.0.Final.
Here is the command i use to get the token:
curl -k -X POST
https://identity.restcomm.com/auth/realms/restcomm/protocol/openid-connec...
-d "grant_type=password" -d "client_id=restcomm-identity-rest" -d
"username=otsakir" -d "password=...."
And here is what i get in the logs:
09:12:36,414 ERROR [io.undertow.request] (default task-4) UT005023:
Exception handling request to
/auth/realms/restcomm/protocol/openid-connect/token:
java.lang.RuntimeException: request path:
/auth/realms/restcomm/protocol/openid-connect/token
at
org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:73)
at
io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60)
at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:132)
at
io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:85)
at
io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
at
io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
at
org.wildfly.extension.undertow.security.SecurityContextAssociationHandler.handleRequest(SecurityContextAssociationHandler.java:78)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:131)
at
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
at
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
at
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:58)
at
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:72)
at
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
at
io.undertow.security.handlers.SecurityInitialHandler.handleRequest(SecurityInitialHandler.java:76)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:282)
at
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:261)
at
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:80)
at
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:172)
at io.undertow.server.Connectors.executeRootHandler(Connectors.java:199)
at
io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:774)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:745)
Caused by: org.jboss.resteasy.spi.UnhandledException:
java.lang.NullPointerException
at
org.jboss.resteasy.core.ExceptionHandler.handleApplicationException(ExceptionHandler.java:76)
at
org.jboss.resteasy.core.ExceptionHandler.handleException(ExceptionHandler.java:212)
at
org.jboss.resteasy.core.SynchronousDispatcher.writeException(SynchronousDispatcher.java:149)
at
org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:372)
at
org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:179)
at
org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.service(ServletContainerDispatcher.java:220)
at
org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:56)
at
org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(HttpServletDispatcher.java:51)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
at
io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:86)
at
io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:130)
at
org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(KeycloakSessionServletFilter.java:59)
... 29 more
Caused by: java.lang.NullPointerException
at
org.keycloak.protocol.oidc.TokenManager.addComposites(TokenManager.java:353)
at
org.keycloak.protocol.oidc.TokenManager.createClientAccessToken(TokenManager.java:193)
at
org.keycloak.protocol.oidc.TokenManager$AccessTokenResponseBuilder.generateAccessToken(TokenManager.java:412)
at
org.keycloak.protocol.oidc.endpoints.TokenEndpoint.buildResourceOwnerPasswordCredentialsGrant(TokenEndpoint.java:358)
at
org.keycloak.protocol.oidc.endpoints.TokenEndpoint.build(TokenEndpoint.java:113)
at sun.reflect.GeneratedMethodAccessor204.invoke(Unknown Source)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at
org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java:137)
at
org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMethodInvoker.java:296)
at
org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker.java:250)
at
org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:140)
at
org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:109)
at
org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(ResourceLocatorInvoker.java:135)
at
org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvoker.java:103)
at
org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher.java:356)
... 37 more
Regards
Orestis
10 years, 10 months
Keycloak - Reverse Proxy
by Mastek Amhi
Hi,
I have keycloak and another wildfly instance(application to be secured)
behind a reverse proxy.
Application is secured and it asks for username and password when we try
to access the application.
But when we try to access the admin console via reverse proxy it fails to
load the page.
Same thing is with the account management screens.
Any help will be appreciated. Thanks in advance.
Peace.
Sanket Raut
10 years, 11 months
Themes
by Benjamin Hansmann [alphaApps]
Can someone tell me how I could style the Email verification page to
look like HTML from 1995 (just a logo with a message below) and remove
the "Back to application" link (because in my case the referred page
does not exist).
Best regards,
Benjamin
10 years, 11 months
keycloak with nginx or apache
by Tim Dudgeon
Hi All,
the docs describe adapters for Java app servers like Jetty and Tomcat,
but is it also possible to use keycloak for securing apps/pages running
in app servers like nginx for apache web server?
Tim
10 years, 11 months
Re: [keycloak-user] Password reset link
by Kenyatta Clark
Please forgive me if I totally off base, but this is what we were thinking
from the user¹s perspective. The user wanted to reset their password from
a mobile application we open a web view to the forgot password page and
use it to change their password.
10 years, 11 months
Password reset link
by Kenyatta Clark
In previous versions of Keycloak we were able to initiate a password reset by using the path /auth/realms/{realm}/login-actions/password-reset. It appears that that endpoint has been replaced with auth/realms/{realm}/login-actions/reset-credentials in 1.5.0.Final, but this requires a code parameter and a null pointer exception is thrown if it is not valid. How do you initiate a forgot password through Keycloak’s web interface without having to direct the user to the login page?
Kenyatta Clark
Principal Engineer, Systems Development
MBO Partners
t: 703.793.6314
w: www.mbopartners.com<http://www.mbopartners.com/>
[cid:304317DE-B0C7-4993-86D5-0DFB1ECD43C5]
Notice: This email and any files transmitted with it are confidential. They are intended solely for the use of the individual addressed. If you have received this email in error please notify postmaster(a)mbopartners.com<mailto:postmaster@mbopartners.com>and permanently delete the e-mail and files.
10 years, 11 months
