[keycloak-user] keycloak adapter for elytron

Zahradnik, Milan milan.zahradnik at itbh.at
Mon Jan 28 16:00:51 EST 2019


Hi Marek,

Thanks for your quick response.
Yes you are right. It is working correctly with
adapter-install-offline.cli. With elytron-install-offline.cli not.
We try to create JIRA then.

Thanks for help,
Milan Zahradnik.

Am Mo., 28. Jan. 2019 um 21:18 Uhr schrieb Marek Posolda <
mposolda at redhat.com>:

> Hi,
>
> could you try to install the "legacy" (non-elytron) adapter and check if
> it works? I think that it is the file adapter-install-offline.cli instead
> of adapter-elytron-install-offline.cli (not 100% sure).
>
> If that helps, then feel free to create JIRA with your use-case.
>
> Marek
>
> On 28/01/2019 21:07, Zahradnik, Milan wrote:
>
> Hi,
>
> I am new on this forum so please forgive me any mistakes I make.
> We have a strange issue with keycloak and wildfly Elytron. We use wildfly
> 15.0.0. After installing keycloak (4.8.3) adapter for wildfly 10 and more
> (adapter-elytron-install-offline.cli) we always get exception  "Not allowed
> exception" when we send request to our endpoint (stateless EJB bean). In
> our access token we have all necessary roles which are then applied on
> endpoint in @RolesAllowed("rest"). Also not working when we use
> @SecurityDomain("keycloak") with EJB.
>
> The strange is when we install keycloak adapter for older wildfly versions
> (adapter-install-offline.cli) everything works as expected.
>
> The same issue is herehttp://lists.jboss.org/pipermail/keycloak-user/2018-August/015297.html
> Does anybody of you any idea what could be an issue here?
>
> Thanks for any help
> Milan Zahradnik
> _______________________________________________
> keycloak-user mailing listkeycloak-user at lists.jboss.orghttps://lists.jboss.org/mailman/listinfo/keycloak-user
>
>
>


More information about the keycloak-user mailing list