Hi Marek,
The offline token for particular clients fits our use case perfectly.
So is there a way that I can have access to the current developer's version of Keycloak like an alpha/beta version of the 1.6 release with the "Offline tokens" when it is implemented?
Also is there a roadmap for the 1.6 release as of yet?
Thanks,
RobinOn Wed, Sep 2, 2015 at 1:29 AM, Marek Posolda <mposolda@redhat.com> wrote:I am thinking about enable/disable offline tokens per client. So in admin console in "Client settings" tab there will be on/off switch "Enable offline tokens" and you will be able to request offline token for particular client just if switch is enabled. Offline token won't never timeout, so there won't be any new option in realm timeout settings though.
Marek
On 01/09/15 16:39, robinfernandes . wrote:
Thank you so much for that information.So would these offline tokens be at the realm level as well as currently all token settings are at the realm level?
Is there a roadmap for the 1.6 release?
Thanks,
Robin
On Mon, Aug 31, 2015 at 7:27 AM, Stian Thorgersen <stian@redhat.com> wrote:
Sounds like what you might want are offline tokens. They will allow clients to get a permanent token, which can be revoked by a user or admin, but doesn't expire. These should be added to 1.6 release.
----- Original Message -----
> From: "robinfernandes ." <robin1233@gmail.com>
> To: keycloak-user@lists.jboss.org
> Sent: Friday, 28 August, 2015 12:32:07 PM
> Subject: [keycloak-user] Different token timeouts for clients under the same realm
>
> Hi All,
>
> Is there a possibility where we can set different token timeouts for clients
> under the same realm?
>
> The use case why we are trying to achieve this is basically we have 2
> applications which require 2 different timeout settings.
> We want the web client timeouts to be short since there would be human
> intervention there always, however we want our Agent timeouts to be very
> large since there might not be anyone to log into it again.
>
> Using Keycloak we have seen that the timeout settings can be applied only at
> the realm level though, which forces us to have each application in a
> different realm.
>
> Can we have the timeout settings at the client(application) level rather than
> the realm level so that we can put both the applications in the same realm?
>
> Thanks & Regards,
> Robin
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user@lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
_______________________________________________ keycloak-user mailing list keycloak-user@lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user