----- Original Message -----
From: "Bill Burke" <bburke(a)redhat.com>
To: keycloak-user(a)lists.jboss.org
Sent: Friday, 16 January, 2015 3:07:50 PM
Subject: Re: [keycloak-user] Location of User Federation Provider jar in Keycloak 1.1
Beta-2
On 1/16/2015 8:33 AM, Stian Thorgersen wrote:
>
>
> ----- Original Message -----
>> From: "Stan Silvert" <ssilvert(a)redhat.com>
>> To: "Marek Posolda" <mposolda(a)redhat.com>
>> Cc: "Stian Thorgersen" <stian(a)redhat.com>,
keycloak-user(a)lists.jboss.org
>> Sent: Friday, 16 January, 2015 2:30:40 PM
>> Subject: Re: [keycloak-user] Location of User Federation Provider jar in
>> Keycloak 1.1 Beta-2
>>
>> On 1/16/2015 7:28 AM, Marek Posolda wrote:
>>> Figured out that our "war-dist" still contains auth-server.war in
>>> "standalone/deployments" . Appliance dist doesn't have it.
This is not
>>> expected right? The chapter 3.1 and 3.2 both mentions auth-server.war
>>> in deployments folder btv (which is not true at least for appliance
>>> dist now).
>> The WAR dist doesn't contain the subsystem. So it has to work the old
>> way.
>>
>> I think we need to come to a final decision about supporting the auth
>> server on other platforms, which is the only reason for the WAR dist to
>> still exist.
>
> If we want to be the OOTB solution for other JBoss projects it has to be
> possible to embed Keycloak into their solutions. I think that means we'll
> have to support Tomcat, Jetty, etc runtimes.
>
This will be an issue for any type of client-cert auth we do. With
Wildfly going forward we'll be able to plug in more dynamic security
trust managers, can't do that currently with JBossWeb, Tomcat, Jetty, etc...
We should provide a slimmed profile of Keycloak for embedding. I don't think
that'll have to support client cert authentication.
We should also consider adding signed-JWT as an auth mechanism. Looks like that's what
Google does (
https://developers.google.com/accounts/docs/OAuth2ServiceAccount).
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user