[keycloak-dev] Email notifications on events and theme support for emails

[Stian Thorgersen]

We already have an SPI ;). It's rather poorly named AuditListenerProvider. It lets you create a listener for any account related events, such as logins, failed logins, password updates, etc.. The plan is to add a email implementation for this that will send both users and admin(s) an email on certain (configurable) events.

What's lacking atm is events for suspected malicious activities, the only event available now is failed login.

----- Original Message -----
> From: "Bruno Oliveira" <bruno at abstractj.org>
> To: "Bill Burke" <bburke at redhat.com>
> Cc: keycloak-dev at lists.jboss.org
> Sent: Monday, 19 May, 2014 6:34:54 PM
> Subject: Re: [keycloak-dev] Email notifications on events and theme support for emails
> 
> Not sure if you guys have something in mind. But what if we had an SPI
> for notifications about malicious activities? For example: We could write
> an adapter to notify users via push server about a malicious attempt.
> 
> Into this way even if their e-mail account get hacked, they still get
> the notification on device.
> 
> On 2014-05-19, Bill Burke wrote:
> > Not sure how code injection could happen with Keycloak?  But, he's
> > talking about Brute force.
> >
> > On 5/19/2014 11:59 AM, Bruno Oliveira wrote:
> > > Hi Stian, I think is a good idea. But what would you consider a
> > > malicious login? Are you talking about something like brute forcing or
> > > attempts of code injection?
> > >
> > > On 2014-05-19, Stian Thorgersen wrote:
> > >> I'm working on adding email notifications for events. The events I think
> > >> we need to support are:
> > >>
> > >> * Suspected malicious login
> > >> * Password changed
> > >>
> > >> Also at the same time I'm adding theme support for emails. Folks are
> > >> just not going to want their emails to be signed 'Thanks, The Keycloak
> > >> Team' ;)
> > >> _______________________________________________
> > >> keycloak-dev mailing list
> > >> keycloak-dev at lists.jboss.org
> > >> https://lists.jboss.org/mailman/listinfo/keycloak-dev
> > >
> > > --
> > >
> > > abstractj
> > >
> > > JBoss, a division of Red Hat
> > > _______________________________________________
> > > keycloak-dev mailing list
> > > keycloak-dev at lists.jboss.org
> > > https://lists.jboss.org/mailman/listinfo/keycloak-dev
> > >
> >
> > --
> > Bill Burke
> > JBoss, a division of Red Hat
> > http://bill.burkecentral.com
> > _______________________________________________
> > keycloak-dev mailing list
> > keycloak-dev at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
> 
> --
> 
> abstractj
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>