[keycloak-dev] Preview and optional features

[Michal Hajas]

Maybe we can store current features state it in profile.properties file
like we do in testsuite [1].

Do you have some plan how to implement it? Do you plan to load all
factories (even disabled one) on startup. Or you plan to somehow update
KeyclokSession with newly enabled/disabled providers after some feature is
switched? Possibility to reload KeycloakSession would simplify and speed up
our tests as now when some feature is enabled/disabled we need to restart
container which is quite slow.

Michal

[1]
https://github.com/keycloak/keycloak/blob/master/testsuite/integration-arquillian/servers/auth-server/services/testsuite-providers/src/main/java/org/keycloak/testsuite/rest/TestingResourceProvider.java#L839

On Tue, Nov 12, 2019 at 9:54 AM Stian Thorgersen <sthorger at redhat.com>
wrote:

> For backwards compatibility we should probably allow setting it globally as
> well like we do today, but allow overriding it per-realm at runtime.
>
> On Tue, 12 Nov 2019 at 09:48, Vlasta Ramik <vramik at redhat.com> wrote:
>
> > +1
> >
> >   I like the idea.
> >
> > On 11/8/19 7:03 AM, Stian Thorgersen wrote:
> > > We currently have a mechanism in place to allow features to be marked
> as
> > > preview, experimental and disabled-by-default.
> > >
> > > Enabling/disabling these features requires restarting the server and
> also
> > > it is a global option.
> > >
> > > It may be better to instead have these as options on a realm. This
> would
> > > allow enabling/disabling such features at runtime, and it would be
> > possible
> > > to enable through the admin console directly.
> > >
> > > It also has the benefit of allowing certain features only for certain
> > > realms. For example you may want to enable impersonation only for a
> > > specific realm, not for all realms. Same with a preview feature you may
> > > want to enable it in a test realm, not for all realms.
> > >
> > > Thoughts?
> > > _______________________________________________
> > > keycloak-dev mailing list
> > > keycloak-dev at lists.jboss.org
> > > https://lists.jboss.org/mailman/listinfo/keycloak-dev
> > _______________________________________________
> > keycloak-dev mailing list
> > keycloak-dev at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
>