[keycloak-dev] key cloak findings

Satyajit Das satyajit.das at spire2grow.com
Thu Aug 13 23:32:31 EDT 2015


Hi kindly see the below mentioned scenario and result. please advise
whether the findings is as per expectations.

1) I created a new service copied the keycloak.json from an existing
(registered at keycloak server) webservice project.
I didn't register the new service at key cloak , deployed it on tomcat and
executed the program. The new service gets called even if it is not
registered at keycloak server.

2) I changed the public shared key.here the new service failed saying token
mismatch.


Kindly let me know your thoughts.

Regards,
Satya.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20150814/0026c5de/attachment.html 


More information about the keycloak-dev mailing list