Hello -
To enforce a higher level of security, we're wanting to require the user to supply
their password whenever they update their profile in the account application of keycloak
(e.g. email, first name, last name). Ideally, we'd want the password submitted along
with the profile changes. If the password validates, then the profile is allowed to be
updated (similar to how the update password screen works currently).
How would I accomplish this? The AccountFormService seems to be the class handling
this but there appears to be no SPI for extending it. I did find the following JIRA but am
unsure if the proposed profile SPI would accomplish what we need:
https://issues.jboss.org/browse/KEYCLOAK-2966
Any tips or pointers would be most appreciated.
Thanks!
______________________________________
Josh Harness
Principal Software Architect | JTV
9600 Parkside Drive | Knoxville, TN 37922
Email: Josh.Harness(a)jtv.com |
www.jtv.com<https://www.jtv.com/>
Knoxville-Bangkok-Jaipur-Mumbai-Hong Kong