[keycloak-user] Keycloak + JACC

Luca Stancapiano luca.stancapiano at vige.it
Sat Nov 17 07:18:12 EST 2018


The startguide sample I'm using is https://github.com/keycloak/keycloak-quickstarts/tree/latest/app-authz-jee-vanilla

> Il 17 novembre 2018 alle 12.35 Luca Stancapiano <luca.stancapiano at vige.it> ha scritto:
> 
> 
> I'm trying out the quickstart example at https://github.com/keycloak/keycloak-quickstarts. 
> 
> I use a keycloak 4.5.0.Final server distribution and a Wildfly 14.0.1 that opts the keycloak adapter and the web application. 
> 
> Once the client is installed on the server distribution and added the correct keycloak.json as required in the README on https://github.com/keycloak/keycloak-quickstarts/blob/latest/app-authz-jee-vanilla/README.md , the application works well. 
> 
> I would like to understand though if JACC can be used as a standard in web applications. For example, if I try to use the PolicyContext class inside a controller class method:
> 
>     public boolean isLoggedIn (HttpServletRequest req) throws PolicyContextException {
>              System.out.println ("subject:" + PolicyContext.getContext ("javax.security.auth.Subject.container"));
>              return getSession (req)! = null;
>     }
> 
> I get null. Also trying to configure a JACC policy like:
> /Subsystem=elytron/policy=JACC:add(JACC-policy={})
> /Subsystem=undertow/application-security-domain=other:write-attribute(name=enable-JACC,value=true)
> 
>  I always get null. Is it possible to use JACC inside keycloak?
> 
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user


More information about the keycloak-user mailing list