March 2016 - keycloak-user - Jboss List Archives

page not rendered in AngularJS app after "Terms and conditions" are declined...

by Adrian Matei

Hi everyone, Has any of you experienced the following behavior: we have an AngularJS app with some of its resources protected by Keycloak - setup: var auth = {}; angular.element(document).ready(function () { var env = 'keycloak'; var keycloakAuth = new Keycloak(env + '.json'); keycloakAuth.init({onLoad: 'check-sso'}) .success(function () { auth.authz = keycloakAuth; module.factory('Auth', function() { return auth; }); angular.bootstrap(document, ["client_id"]); }).error(function () { }); }); Everything works as expected, except that in the registration process if the user does NOT accept the "Terms and Conditions" the page where it came from, present in the redirect_fragment is not rendered - but it is being rendered when I refresh the page as expected... Thanks, Adrian

10 years

3
4
0 / 0

Grabbing Keycloak user roles from Android app

by Aritz Maeztu

Hi all, I'm managing the keycloak authentication-authorization for my Android app. I do it manually since there's no adapter still available as far as I know. Currently I am able to log in from a webview, retrieve the access token using the code and refresh the token when it's necessary and retrieve the user info using the openid-connect compliant endpoints. However, I would like to grab the roles available for the token too, in order to show/hide specific operations in the screen. How to achieve it? Thanks in advance. -- Aritz Maeztu Otaño Departamento Desarrollo de Software <https://www.linkedin.com/profile/preview?vpa=pub&locale=es_ES> <http://www.tesicnor.com> Pol. Ind. Mocholi. C/Rio Elorz, Nave 13E 31110 Noain (Navarra) Telf.: 948 21 40 40 Fax.: 948 21 40 41 Antes de imprimir este e-mail piense bien si es necesario hacerlo: El medioambiente es cosa de todos.

10 years

2
2
0 / 0

Url for updating security Q&As tab in user account

by Riddhi Rathod

Hi all, I edited the security Q&A plugin to include 3 questions. So now when the user registers for the first time, they have to answer 3 security questions which are saved in the database. Then, when the users clicks “Forgot Password”: 1. A reset email url is sent to them. 2. On entering reset url, the user has to answer 3 security Q&As. 3. And then the user is able to reset password. So now, the only place where the user can save security Q&As in when they register for the first time. I want to be able to add an “Update security questions” tab in the left sidebar menu in user’s account page. I know the UI changes that needs to be made. 1. However, I am not sure about the URL that should be called for making this tab available? 2. Currently, I think there is no url in keycloak that supports this. So can I go ahead and create a new custom one? If yes, would it be possible to integrate it with the existing keycloak code so that it can be discovered during url route resolution. Thanks, Riddhi Rathod

10 years

2
1
0 / 0

Regenerating a realm public key through the API

by Aikeaguinea

After doing a scripted import of a realm file I'm looking to call the Keycloak API to change the realm's public and private keys. The API docs aren't entirely clear on how to do this, but after looking at the "Generate New Keys" button in the Keycloak admin console I'm guessing it should be done as follows: Update the top-level realm information by sending a PUT request to /admin/realms/<REALM_NAME> with a body of { realm: <REALM_NAME>, publicKey : 'GENERATE' } Is that correct? -- http://www.fastmail.com - Email service worth paying for. Try it for free

10 years

2
1
0 / 0

Best practices for securing sign-in on mobile

by Stian Thorgersen

Our Cordova apapter uses a webview (via cordova-plugin-inappbrowser) to open the login page. This results in no SSO between applications and it also has some security implications. A better approach is to use in app browser tabs when supported or fallback to the system browser. See https://www.youtube.com/watch?v=ppeU8yeI_ks for more details.

10 years

2
2
0 / 0

Dynamic multi-realm authentication with Keycloak

by Michel Fleur

Hello, We are building a system with multiple services that service a set of user communities. Each user belongs only to one community. Each service potentially services all communities. Both the set of services and set of communities is dynamic. Each community can configure its own authentication scheme and UI theme. Login names - if used by the authentication scheme - are not necessarily unique across communities. The number of communities will be in the order of thousands. As far as I can see, separation of authentication and UI themes requires the mapping of communities on their own dedicated Keycloak realms. That's okay. Our services will know against what realm to authenticate a user. Naturally, I looked into you multi-tenant example (1). It does not seem trivial to let a service authenticate to just any realm. It doesn't feel right to script-or-service a lot of JSON around for each time a service (instance) starts or a community gets added or removed. Is there a way to make this more dynamic? (2) It can very well be that I bluntly overlook something! GreetZ (and thanks in advance), Michel. (1) Example multi-tenant service using Keycloak: https://github.com/keycloak/keycloak/tree/master/examples/multi-tenant) In our case, tenant means community. (2) The best I can come up with is to have each service use the REST API to get the realm information before the user is actually authenticated against it. However, can a service that is not yet registered with a realm also access that realm?

10 years

2
1
0 / 0

Keycloak as Identity provider wih OpenID

by Johannes.Langer＠telekom.de

Hi, we are currently evaluating Keycloak. One of the questions I couldn't figure out yet is, As we are thinking about providing our own internal OpenId identity provider, is it possible to use Keycloak as a standalone OpenId Identity provider (without brokering)? As Keycloak has the OpenId endpoints for the brokering use case anyways... If yes is there an example how to configure this? In the documentation I could only see info on how to configure a broker... Thanks Johannes

10 years

2
1
0 / 0

Supporting sticky sessions

by Stian Thorgersen

Eventually it would be nice to support the ability for load balancers to send all requests for a particular user session to the same node (browser as well as client requests). More details here: https://issues.jboss.org/browse/KEYCLOAK-2352 Is this a high priority for 1.9 or should it be 2.x? We may be able to put it into 1.9.2 if required. I'd like feedback on how useful folks think it would be as well as feedback on the proposed implementation.

10 years

4
5
0 / 0

keycloak javascript resources- how are they added

by Charles Moulliard

Hi, The console-js demo part of the keycloak examples contains a reference to the keycloak.js script "<script src="/auth/js/keycloak.js"></script>" but this rersource isn't packaged within the code source of the project - https://www.dropbox.com/s/hg6tfi3samdskn9/Screenshot%202016-03-04%2017.20... So, how this js script (https://github.com/keycloak/keycloak-js-bower/blob/master/dist/keycloak.js) is packaged and deployed on keycloak demo server ? The doc is not really explicit about that : http://keycloak.github.io/docs/userguide/keycloak-server/html/ch08.html#j... Regards, Charles

10 years

3
2
0 / 0

how keycloak.json file is loaded by the js ?

by Charles Moulliard

Hi, How is the keycloak.json file loaded by the keycloak.js script as I don't see any value like this "cors-allowed-methods" within the keycloak.js file ? Regards, Charles

10 years

3
5
0 / 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

keycloak-user March 2016