Unable to load depency for "keycloak-events-api" module
by abhishek raghav
Hi
I am trying to write my own event listener on keycloak. I refered the
sysout examle. When i am registering this module on jboss, i am getting
this exception.
Caused by: org.jboss.modules.ModuleNotFoundException:
org.keycloak.keycloak-events-api:main
When i checked i could not locate keycloak-events-api module under modules
directory.
I am working on keycloak-2.2.1 Final version.
Please suggest what wrong I am doing here. Thanks in advance.
Cheers
Abhishek Raghav
7 years, 6 months
Newbie API question
by Michael Furman
Hi all,
I have started to learn Keycloak and I need your help.
1. Is it possible to resister a new client using REST API?
http://www.keycloak.org/docs/rest-api/
I want to use the static client registration.
2. Is it possible to configure whitelist using REST API?
I want to be able to access from a client to Keycloak withaout an additional manual confirmation
Thank you in advance for your help.
Best regards,
Michael
7 years, 6 months
Not able to set credentials for a user while creating a user through my own Rest API
by abhishek raghav
Hey
I am writing to create user by calling keycloak rest APIs through my own
REST api's. I am able to set all other properties of a user and create a
user, but when i try assigning the credentials , I get stuck.
First of all Is it possible to do it externally create such scenario..?
If yes, how can i do that.
Cheers
Abhishek
7 years, 6 months
Restrict Administration Console to local interface only?
by keith.hudson＠hudzinga.com
I'm currently running 2.2.1.Final of Keycloak server and I was curious if it is possible to restrict access to the Administration Console to the local network only? Basically, I want to set it up similarly to how I have the Wildfly Admin Console secured (local access only).
Thanks,
Keith
7 years, 6 months
Keycloak 2.3.0.CR1 is out
by Stian Thorgersen
We've just released Keycloak 2.3.0.CR1. This release brings a number of new
existing features!
Highlights of the release includes:
- *OpenID Connect certification* - We've now completed the work on
making our OpenID Connect implementation pass the OpenID Connect
certification and we're currently passing all 5 profiles!
- *User SPI* - We now have a new simpler User SPI. This will make it
easier to implement a custom user provider to pull in users from any
external user store. In the next release we'll port our LDAP provider to
this SPI, which will make it possible to pull in users from LDAP without
syncing data to the Keycloak database. Once this work is completed we'll
remove the old User Federation SPI.
- *Realm Key Rotation* - We now support multiple keys in a realm. This
makes it possible to seamlessly rotate keys without any impact to
applications and users.
- *Client Registration CLI* - A while back we added dynamic client
registration capabilities, we've now created a CLI that makes it easy to
register and update clients from the command-line.
- *Dynamic Client Registration Policies* - We've introduced a mechanism
to control what clients can be dynamically created. This includes the
ability to define policies to allow clients to register without the need to
authenticate.
- *Node.js Adapter* - We've had a Node.js adapter a while, but we've now
polished it a lot and made it a first class citizen.
For the full list of issues resolved check out JIRA
<https://issues.jboss.org/issues/?jql=project%20%3D%20keycloak%20and%20fix...>
and
to download the release go to the Keycloak homepage
<http://blog.keycloak.org/www.keycloak.org/downloads>.
7 years, 6 months
Need help with keycloak realm template
by Raj Kiran K
I want to create Multiple realms which has only change in urls of clients.
How can i use a template (realm) for achieving this requirement. Also let
me know any automated feature (realm template getting inputs from
properties file) is available in keycloak.
*Regards,Raj Kiran*
7 years, 6 months
Keycloak import realm/clients for integration testing
by Hendrik
Hi everybody,
we are evaluating Keycloak as central security solution right now and
would like to write some integration tests against it.
We would therefore need a *reproducible* preconfigured instance of KC.
We tried using the Import/Export function of standalone.sh but the
server is not responding after a (seemingly) successful import.
We used:
-Dkeycloak.migration.action=export
-Dkeycloak.migration.provider=singleFile
-Dkeycloak.migration.file=master-realm.json
and
-Dkeycloak.migration.action=import
-Dkeycloak.migration.provider=singleFile
-Dkeycloak.migration.file=master-realm.json
Is it expected behaviour that the server is not responding after an import ?
What could cause this behaviour ?
Any hints would be appreciated.
Regads,
Hendrik
7 years, 6 months
Resource match bug?
by Joey
Hi Guys,
I found something is weird, not sure is it a bug?
If I create a Resource like "/resources/images/bg.png", and visit this
URL from tomcat.
but I got 403 error. I turn on debug message for keyclock, and I saw
this debug message.
-------------------
DEBUG: AuthenticatedActionsValve.invoke
http://operation.iishang-intr.com:9111/resources/images/bg.png
Oct 20, 2016 6:40:01 PM
org.keycloak.adapters.authorization.PolicyEnforcer enforce
DEBUG: Policy enforcement is enable. Enforcing policy decisions for
path [http://operation.iishang-intr.com:9111/resources/images/bg.png].
Oct 20, 2016 6:40:01 PM
org.keycloak.adapters.authorization.AbstractPolicyEnforcer authorize
DEBUG: Checking permissions for path
[http://operation.iishang-intr.com:9111/resources/images/bg.png] with
config [null].
Oct 20, 2016 6:40:01 PM
org.keycloak.adapters.authorization.AbstractPolicyEnforcer authorize
DEBUG: Could not find a configuration for path [/images/bg.png]
-------------------
then if I change "Resource" of client URL to "/images/bg.png", it
works. and I tried "/resources/*", it doesn't work either.
My Keycloak version is 2.2.0.
Joey
7 years, 6 months
