[keycloak-dev] Realm key pair

[Bruno Oliveira]

Good morning guys,

I was chatting with Lucas from our team about the key pair inside the JSON file (https://github.com/keycloak/keycloak/blob/master/examples/js-console/example-realm.json#L6). I was just wondering: how bad would be if we dynamically generate the key pair on JavaScript and send the signed data to the server? I’m considering never store it.

Does it make sense? If you guys agreed on that, we can help on it.

--  
abstractj