4:33 p.m.
How can I periodically check if the token is still active? if I manually
logout users on the admin, what can I call from the browser to know that
token is still acive
5:37 p.m.
New subject: Wildfly 9?
I've been reading that the Wildfly management console can be secured using Keycloak as
of Wildfly 9. Would it be hazardous to do that with the console for the Keycloak server
itself? Is there a straightforward way to deploy Keycloak onto Wildfly 9?
7:26 p.m.
New subject: Wildfly 9?
On 24 November 2015 at 17:37, Paul Blair <pblair(a)clearme.com> wrote:
I've been reading that the Wildfly management console can be
secured using
Keycloak as of Wildfly 9. Would it be hazardous to do that with the console
for the Keycloak server itself? Is there a straightforward way to deploy
Keycloak onto Wildfly 9?
Where did you read it? AFAIK it's not ready yet, certainly not in WildFly 9.
Not sure what you mean about console for Keycloak server. The Keycloak
servers admin console has always been secured with Keycloak.
You can add Keycloak server overlay to an existing WildFly 9. Read the docs
for instructions. We will move to WildFly 10 once Final is released and we
won't support adding the overlay to WildFly 9 anymore.
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
7:52 p.m.
New subject: Wildfly 9?
I'm referring to the Wildfly management console. This was in preview in July of 2014:
https://developer.jboss.org/wiki/PreviewKeycloak-securedManagementInWildFly9
From: Stian Thorgersen <sthorger@redhat.com<mailto:sthorger@redhat.com>>
Reply-To: <stian@redhat.com<mailto:stian@redhat.com>>
Date: Tue, 24 Nov 2015 19:26:18 +0100
To: "pblair@clearme.com<mailto:pblair@clearme.com>"
<pblair@clearme.com<mailto:pblair@clearme.com>>
Cc: "keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>"
<keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>>
Subject: Re: [keycloak-user] Wildfly 9?
On 24 November 2015 at 17:37, Paul Blair
<pblair@clearme.com<mailto:pblair@clearme.com>> wrote:
I've been reading that the Wildfly management console can be secured using Keycloak as
of Wildfly 9. Would it be hazardous to do that with the console for the Keycloak server
itself? Is there a straightforward way to deploy Keycloak onto Wildfly 9?
Where did you read it? AFAIK it's not ready yet, certainly not in WildFly 9.
Not sure what you mean about console for Keycloak server. The Keycloak servers admin
console has always been secured with Keycloak.
You can add Keycloak server overlay to an existing WildFly 9. Read the docs for
instructions. We will move to WildFly 10 once Final is released and we won't support
adding the overlay to WildFly 9 anymore.
_______________________________________________
keycloak-user mailing list
keycloak-user@lists.jboss.org<mailto:keycloak-user@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user
8:14 p.m.
New subject: Wildfly 9?
I'm pretty sure the changes have not been merged into WildFly yet.
Stan can comment when he gets back what the status is.
On 24 November 2015 at 19:52, Paul Blair <pblair(a)clearme.com> wrote:
I'm referring to the Wildfly management console. This was in
preview in
July of 2014:
https://developer.jboss.org/wiki/PreviewKeycloak-securedManagementInWildFly9
From: Stian Thorgersen <sthorger(a)redhat.com>
Reply-To: <stian(a)redhat.com>
Date: Tue, 24 Nov 2015 19:26:18 +0100
To: "pblair(a)clearme.com" <pblair(a)clearme.com>
Cc: "keycloak-user(a)lists.jboss.org" <keycloak-user(a)lists.jboss.org>
Subject: Re: [keycloak-user] Wildfly 9?
On 24 November 2015 at 17:37, Paul Blair <pblair(a)clearme.com> wrote:
> I've been reading that the Wildfly management console can be secured
> using Keycloak as of Wildfly 9. Would it be hazardous to do that with the
> console for the Keycloak server itself? Is there a straightforward way to
> deploy Keycloak onto Wildfly 9?
>
Where did you read it? AFAIK it's not ready yet, certainly not in WildFly
9.
Not sure what you mean about console for Keycloak server. The Keycloak
servers admin console has always been secured with Keycloak.
You can add Keycloak server overlay to an existing WildFly 9. Read the
docs for instructions. We will move to WildFly 10 once Final is released
and we won't support adding the overlay to WildFly 9 anymore.
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
6:03 p.m.
New subject: Wildfly 9?
On 11/24/2015 2:14 PM, Stian Thorgersen wrote:
I'm pretty sure the changes have not been merged into WildFly
yet.
Stan can comment when he gets back what the status is.
The changes were never
merged because of the impending Elytron work.
Now, the changes are so out of date that it's basically impossible to
put Humpty Dumpty back together again.
As of now, we are still waiting on Elytron to be mature enough to handle
a Keycloak adapter. Hopefully, that will be soon but I don't know the
status.
On 24 November 2015 at 19:52, Paul Blair <pblair(a)clearme.com
<mailto:pblair@clearme.com>> wrote:
I'm referring to the Wildfly management console. This was in
preview in July of 2014:
https://developer.jboss.org/wiki/PreviewKeycloak-securedManagementInWildFly9
From: Stian Thorgersen <sthorger(a)redhat.com
<mailto:sthorger@redhat.com>>
Reply-To: <stian(a)redhat.com <mailto:stian@redhat.com>>
Date: Tue, 24 Nov 2015 19:26:18 +0100
To: "pblair(a)clearme.com <mailto:pblair@clearme.com>"
<pblair(a)clearme.com <mailto:pblair@clearme.com>>
Cc: "keycloak-user(a)lists.jboss.org
<mailto:keycloak-user@lists.jboss.org>"
<keycloak-user(a)lists.jboss.org <mailto:keycloak-user@lists.jboss.org>>
Subject: Re: [keycloak-user] Wildfly 9?
On 24 November 2015 at 17:37, Paul Blair <pblair(a)clearme.com
<mailto:pblair@clearme.com>> wrote:
I've been reading that the Wildfly management console can be
secured using Keycloak as of Wildfly 9. Would it be hazardous
to do that with the console for the Keycloak server itself? Is
there a straightforward way to deploy Keycloak onto Wildfly 9?
Where did you read it? AFAIK it's not ready yet, certainly not in
WildFly 9.
Not sure what you mean about console for Keycloak server. The
Keycloak servers admin console has always been secured with Keycloak.
You can add Keycloak server overlay to an existing WildFly 9. Read
the docs for instructions. We will move to WildFly 10 once Final
is released and we won't support adding the overlay to WildFly 9
anymore.
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
<mailto:keycloak-user@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-user
7:05 p.m.
New subject: Wildfly 9?
Elytron is delayed for WF11 isn't it?
On 25 November 2015 at 18:03, Stan Silvert <ssilvert(a)redhat.com> wrote:
On 11/24/2015 2:14 PM, Stian Thorgersen wrote:
I'm pretty sure the changes have not been merged into WildFly yet.
Stan can comment when he gets back what the status is.
The changes were never merged because of the impending Elytron work. Now,
the changes are so out of date that it's basically impossible to put Humpty
Dumpty back together again.
As of now, we are still waiting on Elytron to be mature enough to handle a
Keycloak adapter. Hopefully, that will be soon but I don't know the status.
On 24 November 2015 at 19:52, Paul Blair <pblair(a)clearme.com> wrote:
> I'm referring to the Wildfly management console. This was in preview in
> July of 2014:
>
>
> https://developer.jboss.org/wiki/PreviewKeycloak-securedManagementInWildFly9
>
>
>
> From: Stian Thorgersen <sthorger(a)redhat.com>
> Reply-To: <stian(a)redhat.com>
> Date: Tue, 24 Nov 2015 19:26:18 +0100
> To: "pblair(a)clearme.com" <pblair(a)clearme.com>
> Cc: "keycloak-user(a)lists.jboss.org" <keycloak-user(a)lists.jboss.org>
> Subject: Re: [keycloak-user] Wildfly 9?
>
>
>
> On 24 November 2015 at 17:37, Paul Blair <pblair(a)clearme.com> wrote:
>
>> I've been reading that the Wildfly management console can be secured
>> using Keycloak as of Wildfly 9. Would it be hazardous to do that with the
>> console for the Keycloak server itself? Is there a straightforward way to
>> deploy Keycloak onto Wildfly 9?
>>
>
> Where did you read it? AFAIK it's not ready yet, certainly not in WildFly
> 9.
>
> Not sure what you mean about console for Keycloak server. The Keycloak
> servers admin console has always been secured with Keycloak.
>
> You can add Keycloak server overlay to an existing WildFly 9. Read the
> docs for instructions. We will move to WildFly 10 once Final is released
> and we won't support adding the overlay to WildFly 9 anymore.
>
>
>>
>>
>> _______________________________________________
>> keycloak-user mailing list
>> keycloak-user(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-user
>>
>
>
7:13 p.m.
New subject: Wildfly 9?
On 11/25/2015 1:05 PM, Stian Thorgersen wrote:
Elytron is delayed for WF11 isn't it?
I don't know.
On 25 November 2015 at 18:03, Stan Silvert <ssilvert(a)redhat.com
<mailto:ssilvert@redhat.com>> wrote:
On 11/24/2015 2:14 PM, Stian Thorgersen wrote:
> I'm pretty sure the changes have not been merged into WildFly yet.
>
> Stan can comment when he gets back what the status is.
The changes were never merged because of the impending Elytron
work. Now, the changes are so out of date that it's basically
impossible to put Humpty Dumpty back together again.
As of now, we are still waiting on Elytron to be mature enough to
handle a Keycloak adapter. Hopefully, that will be soon but I
don't know the status.
>
> On 24 November 2015 at 19:52, Paul Blair <pblair(a)clearme.com
> <mailto:pblair@clearme.com>> wrote:
>
> I'm referring to the Wildfly management console. This was in
> preview in July of 2014:
>
> https://developer.jboss.org/wiki/PreviewKeycloak-securedManagementInWildFly9
>
>
>
> From: Stian Thorgersen <sthorger(a)redhat.com
> <mailto:sthorger@redhat.com>>
> Reply-To: <stian(a)redhat.com <mailto:stian@redhat.com>>
> Date: Tue, 24 Nov 2015 19:26:18 +0100
> To: "pblair(a)clearme.com <mailto:pblair@clearme.com>"
> <pblair(a)clearme.com <mailto:pblair@clearme.com>>
> Cc: "keycloak-user(a)lists.jboss.org
> <mailto:keycloak-user@lists.jboss.org>"
> <keycloak-user(a)lists.jboss.org
> <mailto:keycloak-user@lists.jboss.org>>
> Subject: Re: [keycloak-user] Wildfly 9?
>
>
>
> On 24 November 2015 at 17:37, Paul Blair <pblair(a)clearme.com
> <mailto:pblair@clearme.com>> wrote:
>
> I've been reading that the Wildfly management console can
> be secured using Keycloak as of Wildfly 9. Would it be
> hazardous to do that with the console for the Keycloak
> server itself? Is there a straightforward way to deploy
> Keycloak onto Wildfly 9?
>
>
> Where did you read it? AFAIK it's not ready yet, certainly
> not in WildFly 9.
>
> Not sure what you mean about console for Keycloak server. The
> Keycloak servers admin console has always been secured with
> Keycloak.
>
> You can add Keycloak server overlay to an existing WildFly 9.
> Read the docs for instructions. We will move to WildFly 10
> once Final is released and we won't support adding the
> overlay to WildFly 9 anymore.
>
>
>
> _______________________________________________
> keycloak-user mailing list
> keycloak-user(a)lists.jboss.org
> <mailto:keycloak-user@lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
>
9:38 p.m.
The access token should have a short lifespan (min) and keycloak.js will
quickly refresh the token once a request is made. This is only an issue wif
amdin logs out, as if the user itself logs out it is detected by
keycloak.js even if the user logs out from a different app.
There's also a verify token endpoint that can be invoked to check if token
is valid without refreshing it. This will incur extra requests to the
server though, so be careful with this one if you have a lot of users.
There isn't support in keycloak.js for it, but would be relatively easy to
add and I'd happily accept a PR for it. The endpoint is
'/auth/realms/<realm>/protocols/openid-connect/validate?access_token=<access
token>' it will return the json of the token or 400 with a error
description if not valid.
On 24 November 2015 at 16:33, Jose Suero <josephsuero(a)gmail.com> wrote:
How can I periodically check if the token is still active? if I
manually
logout users on the admin, what can I call from the browser to know that
token is still acive
_______________________________________________
keycloak-user mailing list
keycloak-user(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user
3068
days inactive
3069
days old
8 comments
4 participants
participants (4)
-
Jose Suero -
Paul Blair -
Stan Silvert -
Stian Thorgersen