3:33 p.m.
I have the need to define mappers programmatically instead of using fixed entries from
user attributes. For example, I might want the following entries in my JWT:
xxx: {d1:{[V1:123, V2:345, V3:567]},d2:{[V1:321, V2:xyz, V3:876]}}
So I might have the following values in my attributes for the user:
Xxx.d1.v1 123
Xxx.d1.v2 345
Xxx.d1.v3 567
Xxx.d2.v1 321
Xxx.d2.v2 xyz
Xxx.d2.v3 876
But I might also have xxx.d3, xxx.d4, ….
Is there a way to have Keycloak generate a JWT with all of the entries? Can I write a
plug in that does this?
Thank you,
Reed Lewis
4:31 p.m.
Hello Reed,
yes you should be able to do that via the:
org.keycloak.protocol.ProtocolMapperSpi
You can provide your own org.keycloak.protocol.ProtocolMapper
(org.keycloak.protocol.oidc.mappers.OIDCAccessTokenMapper) to introduce
computed attributes to the access tokens.
You can find the predefined mappers in the package:
org/keycloak/protocol/oidc/mappers within the keycloak-services project.
Cheers,
Thomas
12:49 p.m.
Can someone provide (if there is one out there) of an example of adding an additional OIDC
mapper to Keycloak? I have tried to compile and load a module to add an additional
mapper, and cannot seem to get it working. My new mapper does not appear as a choice for
modifying the clJWT claim.
Or do I need to add it to the main source tree and recompile the whole Keycloak project?
Thanks,
Reed
From: Thomas Darimont
<thomas.darimont@googlemail.com<mailto:thomas.darimont@googlemail.com>>
Date: Wednesday, February 24, 2016 at 4:31 PM
To: Reed Lewis <RLewis@carbonite.com<mailto:RLewis@carbonite.com>>
Cc: "keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>"
<keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>>
Subject: Re: [keycloak-user] Client Mappers. Can I define mappers programmatically?
Hello Reed,
yes you should be able to do that via the:
org.keycloak.protocol.ProtocolMapperSpi
You can provide your own org.keycloak.protocol.ProtocolMapper
(org.keycloak.protocol.oidc.mappers.OIDCAccessTokenMapper) to introduce
computed attributes to the access tokens.
You can find the predefined mappers in the package:
org/keycloak/protocol/oidc/mappers within the keycloak-services project.
Cheers,
Thomas
10:34 a.m.
Hi Reed,
You also need to expose your mapper in a org.keycloak.protocol.ProtocolMapper file in
META-INF/resources. See the one in the services project of the Keycloak Github source
code.
cheers
On 26 Feb 2016, at 18:49, Reed Lewis
<RLewis@carbonite.com<mailto:RLewis@carbonite.com>> wrote:
Can someone provide (if there is one out there) of an example of adding an additional OIDC
mapper to Keycloak? I have tried to compile and load a module to add an additional
mapper, and cannot seem to get it working. My new mapper does not appear as a choice for
modifying the clJWT claim.
Or do I need to add it to the main source tree and recompile the whole Keycloak project?
Thanks,
Reed
From: Thomas Darimont
<thomas.darimont@googlemail.com<mailto:thomas.darimont@googlemail.com>>
Date: Wednesday, February 24, 2016 at 4:31 PM
To: Reed Lewis <RLewis@carbonite.com<mailto:RLewis@carbonite.com>>
Cc: "keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>"
<keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>>
Subject: Re: [keycloak-user] Client Mappers. Can I define mappers programmatically?
Hello Reed,
yes you should be able to do that via the:
org.keycloak.protocol.ProtocolMapperSpi
You can provide your own org.keycloak.protocol.ProtocolMapper
(org.keycloak.protocol.oidc.mappers.OIDCAccessTokenMapper) to introduce
computed attributes to the access tokens.
You can find the predefined mappers in the package:
org/keycloak/protocol/oidc/mappers within the keycloak-services project.
Cheers,
Thomas
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user
7:11 a.m.
Take a look at
http://keycloak.github.io/docs/userguide/keycloak-server/html/providers.html
and also take a look at example providers in the examples download (there's
no protocol mapper, but all providers are deployed in the same way).
On 26 February 2016 at 18:49, Reed Lewis <RLewis(a)carbonite.com> wrote:
Can someone provide (if there is one out there) of an example of
adding an
additional OIDC mapper to Keycloak? I have tried to compile and load a
module to add an additional mapper, and cannot seem to get it working. My
new mapper does not appear as a choice for modifying the clJWT claim.
Or do I need to add it to the main source tree and recompile the whole
Keycloak project?
Thanks,
Reed
From: Thomas Darimont <thomas.darimont(a)googlemail.com>
Date: Wednesday, February 24, 2016 at 4:31 PM
To: Reed Lewis <RLewis(a)carbonite.com>
Cc: "keycloak-user(a)lists.jboss.org" <keycloak-user(a)lists.jboss.org>
Subject: Re: [keycloak-user] Client Mappers. Can I define mappers
programmatically?
Hello Reed,
yes you should be able to do that via the:
org.keycloak.protocol.ProtocolMapperSpi
You can provide your own org.keycloak.protocol.ProtocolMapper
(org.keycloak.protocol.oidc.mappers.OIDCAccessTokenMapper) to introduce
computed attributes to the access tokens.
You can find the predefined mappers in the package:
org/keycloak/protocol/oidc/mappers within the keycloak-services project.
Cheers,
Thomas
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
3069
days inactive
3076
days old
4 comments
4 participants
participants (4)
-
Edgar Vonk - Info.nl -
Reed Lewis -
Stian Thorgersen -
Thomas Darimont