[keycloak-user] Passwords for keycloak

[Matt Evans]

Doing a bit of further googling about jboss/wildfly, should I be looking at implementing the CredentialStoreSpi as detailed in section 4.1.8 of this article?

https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.1/html/how_to_configure_server_security/securely_storing_credentials

Could I then use that credential store to configure the data source?

Thanks

Matt

-----Original Message-----
From: Matt Evans 
Sent: Thursday, 19 July 2018 2:42 PM
To: keycloak-user at lists.jboss.org
Subject: [keycloak-user] Passwords for keycloak

Is it possible to extend keycloak to read its settings, specifically passwords, from a secure configuration store? For example, how would I go about having keycloak read the password for the database connection from a secure store, so it's not stored in the config files on the machine, or passed as command line parameters?

 

Thanks

 

Matt
_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://urldefense.proofpoint.com/v2/url?u=https-3A__lists.jboss.org_mailman_listinfo_keycloak-2Duser&d=DwICAg&c=RoP1YumCXCgaWHvlZYR8PZh8Bv7qIrMUB65eapI_JnE&r=8v1OAq8sCvoGRIPd-IGvCVHI6L8Cwvp2ANtoqmsCBYY&m=gHuodr78XcGcZlTriPKgtawh7WUFIrGFf3RLC2eQaBs&s=me9vViYHTZl_8XeCzceLxIAAY8M7Jq0VIjmPU4NEEuc&e=