[keycloak-user] Endpoint URL's

Stian Thorgersen stian at redhat.com
Fri Feb 27 01:10:47 EST 2015


We'll add OpenID Connect Discovery soon. It's pretty simple it's just an endpoint with some metadata about our implementation.

----- Original Message -----
> From: yonim at odoro.co.il
> To: "Bill Burke" <bburke at redhat.com>, keycloak-user at lists.jboss.org
> Sent: Thursday, February 26, 2015 2:55:43 PM
> Subject: Re: [keycloak-user] Endpoint URL's
> 
> Yeah, I know that.. the thing is that we couldn't get our java client (and
> we tried several) to work against the openid-connect, we got stuck in the
> discovery part.. so we thought about just use the oauth part
> 
> 
> 
> 
> -----Original Message-----
> From: keycloak-user-bounces at lists.jboss.org
> [mailto:keycloak-user-bounces at lists.jboss.org] On Behalf Of Bill Burke
> Sent: Thursday, February 26, 2015 2:56 PM
> To: keycloak-user at lists.jboss.org
> Subject: Re: [keycloak-user] Endpoint URL's
> 
> Openid Connect is an OAuth extension.  OAuth is just a framework and not a
> complete protocol.  It is also just an authorization framework.
> OpenID Connect adds authentication as well as all the other details a real
> protocol needs.
> 
> On 2/26/2015 5:43 AM, yonim at odoro.co.il wrote:
> > Sorry for the late response..
> >
> > Yeah. The endpoints actually worked;)
> >
> > But the fact that we haven't found a client that supports the
> > openid-connect makes us think to switch to oauth..
> >
> > *From:*Christopher Wallace [mailto:cjwallac at gmail.com]
> > *Sent:* Tuesday, February 24, 2015 7:20 PM
> > *To:* Stian Thorgersen
> > *Cc:* yonim at odoro.co.il; keycloak-user at lists.jboss.org
> > *Subject:* Re: [keycloak-user] Endpoint URL's
> >
> > Yoni,
> >
> > Where you able to get this to work? I am attempting to get user
> > information also using
> > http://localhost:8082/auth/realms/<realm>/protocol/openid-connect/user
> > info and it doesn't bring back any data. Any trics?
> >
> > Chris W.
> >
> > On Mon, Feb 23, 2015 at 8:16 AM, Stian Thorgersen <stian at redhat.com
> > <mailto:stian at redhat.com>> wrote:
> >
> >
> >
> >     ----- Original Message -----
> >      > From: yonim at odoro.co.il <mailto:yonim at odoro.co.il>
> >      > To: "Stian Thorgersen" <stian at redhat.com <mailto:stian at redhat.com>>
> >      > Cc: keycloak-user at lists.jboss.org
> >     <mailto:keycloak-user at lists.jboss.org>
> >      > Sent: Monday, February 23, 2015 10:39:14 AM
> >      > Subject: RE: [keycloak-user] Endpoint URL's
> >      >
> >      > Ok.. a bit frustrating.
> >      >
> >      > Any change the 1.2.0 Beta solves some of the issues? I can build
> >     it if
> >      > needed...
> >
> >     Afraid not. We are planning to add the discovery endpoint, but it
> >     may be a month or so before we get time.
> >
> >      >
> >      > I've tried openid4java (on top of spring security ) and another
> >     client
> >      > (mitred one, their client not the server) and both looked for the
> >     discovery
> >      > endpoint.
> >      >
> >      > Assuming I switch from opened-connect to OAuth - how can I get
> >     the userinfo
> >      > after that? any special endpoint to oauth userinfo after I got
> >     the token?
> >
> >     You can invoke /auth/realms/{name}/protocol/openid-connect/userinfo
> >     with the token.
> >
> >
> >      >
> >      > Cheers,
> >      > Yoni
> >      >
> >      >
> >      >
> >      >
> >      >
> >      >
> >      > -----Original Message-----
> >      > From: Stian Thorgersen [mailto:stian at redhat.com
> >     <mailto:stian at redhat.com>]
> >      > Sent: Monday, February 23, 2015 10:52 AM
> >      > To: Yoni Moses
> >      > Cc: keycloak-user at lists.jboss.org
> >     <mailto:keycloak-user at lists.jboss.org>
> >      > Subject: Re: [keycloak-user] Endpoint URL's
> >      >
> >      > Hi,
> >      >
> >      > We haven't added the discovery part of OpenID Connect yet and
> >     there are some
> >      > issues with the docs as the protocol related endpoints are
> >     missing. The
> >      > endpoints of interest to you are:
> >      >
> >      > * /auth/realms/{name}/protocol/openid-connect/login
> >      > * /auth/realms/{name}/protocol/openid-connect/access/codes
> >      > * /auth/realms/{name}/protocol/openid-connect/refresh
> >      > * /auth/realms/{name}/protocol/openid-connect/userinfo
> >      >
> >      > We are actively working on better integration with other openid
> >     connect
> >      > client libraries, so let us know what works and what doesn't.
> >      >
> >      > ----- Original Message -----
> >      > > From: "Yoni Moses" <yonim at odoro.co.il <mailto:yonim at odoro.co.il>>
> >      > > To: keycloak-user at lists.jboss.org
> >     <mailto:keycloak-user at lists.jboss.org>
> >      > > Sent: Sunday, February 22, 2015 1:07:36 PM
> >      > > Subject: [keycloak-user] Endpoint URL's
> >      > >
> >      > > Hi,
> >      > >
> >      > > I've been trying keycloak , very impressive!
> >      > > I don't intended to use it as the sample in jee but rather
> >     through openid
> >      > > provider in my case its openid4java with spring security.
> >      > > I've been struggling with configuration of the endpoint
> >     especially with
> >      > > discovery end point..
> >      > > is there somewhere in the doc the list of endpoints keycloak has?
> >      > > so far I've been trying with /auth/realms/{name}
> >      > >
> >      > >
> >      > > Thanks,
> >      > > Yoni
> >      > >
> >      > >
> >      > > _______________________________________________
> >      > > keycloak-user mailing list
> >      > > keycloak-user at lists.jboss.org
> >     <mailto:keycloak-user at lists.jboss.org>
> >      > > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >      >
> >      >
> >     _______________________________________________
> >     keycloak-user mailing list
> >     keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
> >     https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
> >
> >
> >
> > --
> >
> > Chris Wallace
> > cjwallac at gmail.com <mailto:cjwallac at gmail.com>
> > c: 570.582.9955
> >
> >
> >
> > _______________________________________________
> > keycloak-user mailing list
> > keycloak-user at lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-user
> >
> 
> --
> Bill Burke
> JBoss, a division of Red Hat
> http://bill.burkecentral.com
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
> 


More information about the keycloak-user mailing list