From jsightle at redhat.com Tue Sep 13 10:48:59 2016 From: jsightle at redhat.com (Jess Sightler) Date: Tue, 13 Sep 2016 10:48:59 -0400 Subject: [windup-dev] [keycloak-user] IP Address based default user In-Reply-To: <CAJgngAdunm3pf3dBkDX1=WLnoH+hSOUqf2Yt9XJqVhTGTDCa+w@mail.gmail.com> References: <97da3065-998b-b7d6-79f7-e6747f9ed7d1@redhat.com> <CAJgngAdunm3pf3dBkDX1=WLnoH+hSOUqf2Yt9XJqVhTGTDCa+w@mail.gmail.com> Message-ID: <d81ac29d-398e-ba69-b014-33ff24995885@redhat.com> Well, this be insecurity by design. :) Basically we would like to turn off security completely in some cases for local installations, but this brings a lot of deployment related considerations (multiple descriptors, conditional logic around the logged in user, etc). An authenticator that is essentially just a bypass would accomplish the same thing without the additional complexity. It would be similar to a default "unauthenticatedIdentity", except with a default role as well. On 09/13/2016 05:01 AM, Stian Thorgersen wrote: > No there isn't anything like that. Sounds like a potential hackers > heaven as well. > > Assuming you've got the idea from WildFly. WildFly can do that by > writing to a local file to make sure the user is indeed on the local > machine. That doens't work in a web based flow unless you can find a > way to "share" a file between the Keycloak server and the browser. > > On 12 September 2016 at 17:17, Jess Sightler <jsightle at redhat.com > <mailto:jsightle at redhat.com>> wrote: > > Is there a builtin authenticator that can provide a default user > account > based upon some criteria? For example, could we provide a default user > if the client is connecting to localhost? > > _______________________________________________ > keycloak-user mailing list > keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org> > https://lists.jboss.org/mailman/listinfo/keycloak-user > <https://lists.jboss.org/mailman/listinfo/keycloak-user> > > -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.jboss.org/pipermail/windup-dev/attachments/20160913/aa4f762e/attachment.html From ozizka at redhat.com Mon Sep 19 09:31:34 2016 From: ozizka at redhat.com (Ondrej Zizka) Date: Mon, 19 Sep 2016 15:31:34 +0200 Subject: [windup-dev] Automatic deps detection - WildFly swarm Message-ID: <688e5e2a-c062-86be-0cd0-d1839537bafa@redhat.com> Hi devs, I took a look at what Ladislav Thon is going to work on. It looks like WildFly Swarm can detect the deps needed from the application. That kind of ability might be quite useful for migration (we already have some research done there), WDYT? http://wildfly-swarm.io/ Ondra From mnovotny at redhat.com Mon Sep 19 09:51:47 2016 From: mnovotny at redhat.com (Marek Novotny) Date: Mon, 19 Sep 2016 15:51:47 +0200 Subject: [windup-dev] Automatic deps detection - WildFly swarm In-Reply-To: <688e5e2a-c062-86be-0cd0-d1839537bafa@redhat.com> References: <688e5e2a-c062-86be-0cd0-d1839537bafa@redhat.com> Message-ID: <33dabfca-625e-1d1e-2fd5-6f37ff58b1e0@redhat.com> On 19.9.2016 15:31, Ondrej Zizka wrote: > Hi devs, > > > I took a look at what Ladislav Thon is going to work on. > > > It looks like WildFly Swarm can detect the deps needed from the > application. That kind of ability might be quite useful for migration > (we already have some research done there), WDYT? > > http://wildfly-swarm.io/ > > > Ondra > > _______________________________________________ > windup-dev mailing list > windup-dev at lists.jboss.org > https://lists.jboss.org/mailman/listinfo/windup-dev > What do you reference by detecting deps from application? I guess that is bound to wildfly deps only or do you have a pointer to documented somewhere more? -- Marek Novotny -- Windup team member Red Hat Czech s.r.o. Purkynova 99 612 45 Brno From ozizka at redhat.com Mon Sep 19 10:25:00 2016 From: ozizka at redhat.com (Ondrej Zizka) Date: Mon, 19 Sep 2016 16:25:00 +0200 Subject: [windup-dev] Automatic deps detection - WildFly swarm In-Reply-To: <33dabfca-625e-1d1e-2fd5-6f37ff58b1e0@redhat.com> References: <688e5e2a-c062-86be-0cd0-d1839537bafa@redhat.com> <33dabfca-625e-1d1e-2fd5-6f37ff58b1e0@redhat.com> Message-ID: <b8e541d8-c993-7788-3086-1410683f798c@redhat.com> I thought that Swarm can auto-detect the server deps from the APIs used in the app. Which I deduced from "Declare the fractions you need (or not, we?ll do our best to auto-detect them for you)". Probably incorrectly :) Ondra On 09/19/2016 03:51 PM, Marek Novotny wrote: > On 19.9.2016 15:31, Ondrej Zizka wrote: >> Hi devs, >> >> >> I took a look at what Ladislav Thon is going to work on. >> >> >> It looks like WildFly Swarm can detect the deps needed from the >> application. That kind of ability might be quite useful for migration >> (we already have some research done there), WDYT? >> >> http://wildfly-swarm.io/ >> >> >> Ondra >> >> _______________________________________________ >> windup-dev mailing list >> windup-dev at lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/windup-dev >> > What do you reference by detecting deps from application? > > I guess that is bound to wildfly deps only or do you have a pointer to > documented somewhere more? > From jsightle at redhat.com Mon Sep 19 12:11:43 2016 From: jsightle at redhat.com (Jess Sightler) Date: Mon, 19 Sep 2016 12:11:43 -0400 Subject: [windup-dev] Automatic deps detection - WildFly swarm In-Reply-To: <b8e541d8-c993-7788-3086-1410683f798c@redhat.com> References: <688e5e2a-c062-86be-0cd0-d1839537bafa@redhat.com> <33dabfca-625e-1d1e-2fd5-6f37ff58b1e0@redhat.com> <b8e541d8-c993-7788-3086-1410683f798c@redhat.com> Message-ID: <7485f1d0-16e5-d70c-9e04-9e5bdd905189@redhat.com> Perhaps this works the same way that auto-adding module dependencies works in Wildfly? On 09/19/2016 10:25 AM, Ondrej Zizka wrote: > I thought that Swarm can auto-detect the server deps from the APIs used > in the app. Which I deduced from "Declare the fractions you need (or > not, we?ll do our best to auto-detect them for you)". Probably > incorrectly :) > > > Ondra > > > On 09/19/2016 03:51 PM, Marek Novotny wrote: >> On 19.9.2016 15:31, Ondrej Zizka wrote: >>> Hi devs, >>> >>> >>> I took a look at what Ladislav Thon is going to work on. >>> >>> >>> It looks like WildFly Swarm can detect the deps needed from the >>> application. That kind of ability might be quite useful for migration >>> (we already have some research done there), WDYT? >>> >>> http://wildfly-swarm.io/ >>> >>> >>> Ondra >>> >>> _______________________________________________ >>> windup-dev mailing list >>> windup-dev at lists.jboss.org >>> https://lists.jboss.org/mailman/listinfo/windup-dev >>> >> What do you reference by detecting deps from application? >> >> I guess that is bound to wildfly deps only or do you have a pointer to >> documented somewhere more? >> > _______________________________________________ > windup-dev mailing list > windup-dev at lists.jboss.org > https://lists.jboss.org/mailman/listinfo/windup-dev From mnovotny at redhat.com Tue Sep 20 06:23:41 2016 From: mnovotny at redhat.com (Marek Novotny) Date: Tue, 20 Sep 2016 12:23:41 +0200 Subject: [windup-dev] Automatic deps detection - WildFly swarm In-Reply-To: <7485f1d0-16e5-d70c-9e04-9e5bdd905189@redhat.com> References: <688e5e2a-c062-86be-0cd0-d1839537bafa@redhat.com> <33dabfca-625e-1d1e-2fd5-6f37ff58b1e0@redhat.com> <b8e541d8-c993-7788-3086-1410683f798c@redhat.com> <7485f1d0-16e5-d70c-9e04-9e5bdd905189@redhat.com> Message-ID: <b34e6959-d2c5-2eb9-2e5e-b21260a35a4d@redhat.com> Very probably, they call it Fraction detection from https://wildfly-swarm.gitbooks.io/wildfly-swarm-users-guide/content/v/2016.9/getting-started/tooling/maven-plugin.html <blockquote> If the plugin doesn?t detect any WildFly Swarm dependencies in your pom.xml, it will attempt to auto-detect needed fractions by scanning the application. This is mostly useful for WAR-based applications that you are migrating to WildFly Swarm - you only need to add the plugin to your configuration, and not any other WildFly Swarm dependencies. You can control fraction detection by setting <fractionDetectMode>. See the configuration options below for more details. </blockquote> But I think this is only scanning what fraction(s) they provide under groupId org.wildfly.swarm. On 19.9.2016 18:11, Jess Sightler wrote: > Perhaps this works the same way that auto-adding module dependencies > works in Wildfly? > > > On 09/19/2016 10:25 AM, Ondrej Zizka wrote: >> I thought that Swarm can auto-detect the server deps from the APIs used >> in the app. Which I deduced from "Declare the fractions you need (or >> not, we?ll do our best to auto-detect them for you)". Probably >> incorrectly :) >> >> >> Ondra >> >> >> On 09/19/2016 03:51 PM, Marek Novotny wrote: >>> On 19.9.2016 15:31, Ondrej Zizka wrote: >>>> Hi devs, >>>> >>>> >>>> I took a look at what Ladislav Thon is going to work on. >>>> >>>> >>>> It looks like WildFly Swarm can detect the deps needed from the >>>> application. That kind of ability might be quite useful for migration >>>> (we already have some research done there), WDYT? >>>> >>>> http://wildfly-swarm.io/ >>>> >>>> >>>> Ondra >>>> >>>> _______________________________________________ >>>> windup-dev mailing list >>>> windup-dev at lists.jboss.org >>>> https://lists.jboss.org/mailman/listinfo/windup-dev >>>> >>> What do you reference by detecting deps from application? >>> >>> I guess that is bound to wildfly deps only or do you have a pointer to >>> documented somewhere more? >>> >> _______________________________________________ >> windup-dev mailing list >> windup-dev at lists.jboss.org >> https://lists.jboss.org/mailman/listinfo/windup-dev > > _______________________________________________ > windup-dev mailing list > windup-dev at lists.jboss.org > https://lists.jboss.org/mailman/listinfo/windup-dev > -- Marek Novotny -- Windup team member Red Hat Czech s.r.o. Purkynova 99 612 45 Brno