keycloak

Bulk update of users in KeyCloak

陌路散爱 提交于 2020-05-15 03:35:32
问题 I have a task to change the status of users in the IDM. The solution I chose is naive: looping each one and calling KeyCloak's service using REST. However, I've noticed that this consumes a lot of time. I thought that something like bulk update (equivalent to SQL) might solve the issue, but I didn't find it in KeyCloak's API. Does anyone know how to fix it? Thanks for help! 回答1: Do you have access to Keycloak's database? If that's the case, you may update users' data with SQL sentences. The

Keycloak REST API 403 forbidden

折月煮酒 提交于 2020-05-12 02:33:25
问题 I am trying to delete user session using keycloak REST API, But getting the 403 forbidden Http status code. I am passing the token and cookie in to the header, please let me know if I missing something. static void logOut(String userId,KeycloakSecurityContext session){ userId = "a12c13b7-fa2e-412f-ac8e-376fdca16a83"; String url = "http://localhost:8081/auth/admin/realms/TestRealm/users/a12c13b7-fa2e-412f-ac8e-376fdca16a83/logout"; HttpClient httpclient = HttpClients.createDefault(); HttpPost

Keycloak REST API 403 forbidden

心已入冬 提交于 2020-05-12 02:26:14
问题 I am trying to delete user session using keycloak REST API, But getting the 403 forbidden Http status code. I am passing the token and cookie in to the header, please let me know if I missing something. static void logOut(String userId,KeycloakSecurityContext session){ userId = "a12c13b7-fa2e-412f-ac8e-376fdca16a83"; String url = "http://localhost:8081/auth/admin/realms/TestRealm/users/a12c13b7-fa2e-412f-ac8e-376fdca16a83/logout"; HttpClient httpclient = HttpClients.createDefault(); HttpPost

Docker (Spring Boot or Thorntail) and Keycloak

无人久伴 提交于 2020-05-10 20:06:19
问题 i have a Problem Running Spring Boot and Keycloak both in docker containers. I started with Keycloak with mysql as db running in docker. services: mysql: image: mysql:5.7 container_name: mysql volumes: - mysql_data:/var/lib/mysql environment: MYSQL_ROOT_PASSWORD: root MYSQL_DATABASE: keycloak MYSQL_USER: keycloak MYSQL_PASSWORD: password networks: - testNetwork keycloak: image: jboss/keycloak container_name: keycloak restart: on-failure volumes: - ./config:/config/ environment: DB_VENDOR:

Docker (Spring Boot or Thorntail) and Keycloak

倾然丶 夕夏残阳落幕 提交于 2020-05-10 20:05:33
问题 i have a Problem Running Spring Boot and Keycloak both in docker containers. I started with Keycloak with mysql as db running in docker. services: mysql: image: mysql:5.7 container_name: mysql volumes: - mysql_data:/var/lib/mysql environment: MYSQL_ROOT_PASSWORD: root MYSQL_DATABASE: keycloak MYSQL_USER: keycloak MYSQL_PASSWORD: password networks: - testNetwork keycloak: image: jboss/keycloak container_name: keycloak restart: on-failure volumes: - ./config:/config/ environment: DB_VENDOR:

Do Keycloak Clients have a Client Secret?

 ̄綄美尐妖づ 提交于 2020-05-10 06:56:27
问题 Does keycloak client id has a client secret? I tried to create a client in keycloak admin but I was not able to spot client secret. Is it auto generated? Where can I get the secret? 回答1: Your client need to have the access-type set to confidential , then you will have a new tab credentials where you will see the client secret. https://keycloak.gitbooks.io/documentation/content/server_admin/topics/clients/oidc/confidential.html 回答2: Client need to have the access-type set to confidential and

Keycloak with Node.js API fails through Docker

一曲冷凌霜 提交于 2020-05-10 06:51:04
问题 I've got a Node.js Rest API that's integrated with Keycloak. When I run the API locally with no docker everything works fine. But whenever I run the API through my docker image I get an error 403 (forbidden). I've already made sure that my container can connect (ping/telnet) my Keycloak server. Any ideas what might be causing the problem? I'm using the following lib to integrate with Keycloak: https://github.com/keycloak/keycloak-nodejs-connect Keycloak middleware: const session = require(

Keycloak with Node.js API fails through Docker

若如初见. 提交于 2020-05-10 06:50:09
问题 I've got a Node.js Rest API that's integrated with Keycloak. When I run the API locally with no docker everything works fine. But whenever I run the API through my docker image I get an error 403 (forbidden). I've already made sure that my container can connect (ping/telnet) my Keycloak server. Any ideas what might be causing the problem? I'm using the following lib to integrate with Keycloak: https://github.com/keycloak/keycloak-nodejs-connect Keycloak middleware: const session = require(

Using KeyCloak(OpenID Connect) with Apache SuperSet

被刻印的时光 ゝ 提交于 2020-05-08 15:40:43
问题 I started with Using OpenID/Keycloak with Superset and did everything as explained. However, it is an old post, and not everything worked. I'm also trying to implement a custom security manager by installing it as a FAB add-on, so as to implement it in my application without having to edit the existing superset code. I'm running KeyCloak 4.8.1.Final and Apache SuperSet v 0.28.1 As explained in the post, SuperSet does not play nicely with KeyCloak out of the box because it uses OpenID 2.0 and

keycloak集成cas客户端

♀尐吖头ヾ 提交于 2020-04-26 19:07:51
keycloak作为cas客户端背景 1.keycloak本身不支持Cas协议,考虑到市场上使用Cas-Server做认证的企业较多,将keycloak与Cas-server进行集成,相当于keycloak作为cas的客户端。 2.采用三方支持的方式,让keycloak支持cas客户端 3.keycloak集成cas客户端后,cas-server回调keycloak 4.keycloak初始化session缓存等信息。 5.其他应用利用已经登录的用户信息通过鉴权。 keycloak集成Cas-client,提供间接访问Cas-server的支持,实现与第三方鉴权服务的集成。步骤如下: 1.提供keycloak集成Cas客户端的SPI 2.打包并部署到keycloak中 3.安装并启动Cas-Server 4.提供keycloak配置Cas服务端参数配置的html页面 5.keycloak中配置cas服务端的相关参数 6.测试客户端通过keycloak间接访问Cas-server,实现同一个realm下的SSO. 若有开发需要,可留言于我,或者加入 QQ:794868111 ,相互交流。 PS:keycloak与cas-client的集成稍微我会上传到github中,请后续关注。 来源: oschina 链接: https://my.oschina.net/u/4340671