keycloak

Display application name on keycloak login page

由 五迷三道 提交于 2019-12-10 19:13:18
问题 I have two applications App1 and App2 which interacts with keycloak for authentication of users. I want to display application name on keycloak login page. Eg.: if the user is logging into App1 , the keycloak login page should display "Log in to App1". Same should happen for App2 also. How can this be achieved.? 回答1: If you want to keep both in the same realm, just add the javascript code to a custom theme login page. The client_id is passed as a request parameter to the login page. For

Keycloak : Client not found exception?

由 允我心安 提交于 2019-12-10 17:26:59
问题 I setup Keycloak server and everything run fine in server machine,But when i tried to integrate Keycloak with local machine(localhost) i am getting We're sorry ... Client not found. Even i check my local machine ip address and added in Keycloak->Clients->Settings->Valid Redirect URIs even then i am getting same exception. 回答1: The error message indicates that the client ID and the realm of your client application don't match the configured clients on the Keycloak server. Please check the

Is keycloak behind api gateway a good practice?

由 空扰寡人 提交于 2019-12-10 14:53:06
问题 What are good arguments in favor to use or not to use Keycloak behind Api gateway (Kong)? 回答1: There is a tradeoff to putting it behind the proxy: you will not be able to easily protect all of your services by applying the OIDC plugin on the global level. Instead, you will need to individually configure every service with its own OIDC plugin. This is because you will need at least one service that is not protected by the OIDC plugin so that user-agents can authenticate through that service.

Spring Boot - KeyCloak directed to 403 forbidden

由 陌路散爱 提交于 2019-12-10 13:55:25
问题 I am new to Keycloak, I am using the official tutorial project on https://github.com/sebastienblanc/spring-boot-keycloak-tutorial for integrating with Springboot application, I have setup the KeyCloak server successfully and the spring boot application also directing to the client application I have created on the Realm I have created on KeyCloak, after providing the correct credentials it directs to the forbidden page. @Controller class ProductController { @GetMapping(path = "/products")

Keycloak 4.0.0 Beta 2 with Spring Boot 2

由 与世无争的帅哥 提交于 2019-12-10 04:24:52
问题 When I try to use keycloak-spring-boot-starter(+keycloak-adapter-bom). I get an error. Am I missing something? I have keycloack running properly. If I try to remove the keycloak dependencies from my pom file, the Spring Boot application also works fine. Java.lang.IllegalStateException: Failed to introspect Class [org.keycloak.adapters.springboot.KeycloakAutoConfiguration] from ClassLoader java.lang.IllegalStateException: Error processing condition on org.springframework.boot.autoconfigure.jmx

Cant access keycloak rest API methods *404*

由 一个人想着一个人 提交于 2019-12-10 04:03:18
问题 I am using the latest keycloak image in docker and can access the standard admin console at http://localhost:9080. However, I cant seem to access any of the paths specified in the documentation for Admin REST api. For instance, the base path /auth and Resource Get clients belonging to the realm Returns a list of clients belonging to the realm: /{realm}/clients I am getting a 404. So is for any other method in the documentation. The only path returning a valid 200 json response is http:/

Keycloak - Infinispan Redis cache store

由 怎甘沉沦 提交于 2019-12-10 03:56:03
问题 Currently setting up a keycloak cluster in standalone-ha mode, to be able to run on docker swarm. In keycloak, the user sessions are cached in an embedded infinispan store and infinispan can be configured to be a distributed cache across the cluster. I have also set the owner to be 2, but the problem is that.. during scale-down, there is a possibility for the user-sessions to be lost, If both the owners containing the cache are killed during scale-down. I have also read about Infinispan Redis

Keycloak is causing IE to have an infinite loop

由 一笑奈何 提交于 2019-12-10 03:54:30
问题 we are using a keycloak 1.3.1 authentication library, and I've noticed that once I initialize the keycloak with { onLoad: 'login-required' } , IE (11) gets infinite loop... Other browsers work fine. I'm basically doing this: keycloak.init({ onLoad: 'login-required' }).success(function(authenticated) { console.info(authenticated ? 'authenticated' : 'not authenticated'); some other stuff... }).error(function() { console.warn('failed to initialize'); }); Any idea what's causing it, and to solve

Demo of keycloak & mysql in docker

由 梦想与她 提交于 2019-12-10 03:33:39
安装 & 启动Docker环境 下载keycloak镜像 docker pull jboss/keycloak 下载Mysql镜像 注意这里如果直接用 latest 会下载到 mysql8 镜像，mysql8和最新版的keycloak集成会报一个“MySQLSyntaxErrorException: Row size too large”的错误，详情请见 这里 。因此指定 mysql 5.7 版本： docker pull mysql:5.7 创建网络环境 docker network create key-cloak 启动Mysql实例 docker run --name mysql -d --net keycloak-network -e MYSQL_DATABASE=keycloak -e MYSQL_USER=keycloak -e MYSQL_PASSWORD=password -e MYSQL_ROOT_PASSWORD=root_password mysql:5.7 启动Keycloak docker run --name keycloak -d -p 443:443 -p 8080:8080 -p 9990:9990 --net keycloak-network jboss/keycloak 配置Keycloak 允许局域网IP访问 docker exec -it

keycloak error : Unrecognized field “access_token”

由 僤鯓⒐⒋嵵緔 提交于 2019-12-10 00:51:47
问题 I'm using keycloak to secure my rest API, I followed this tutorial to PROGRAMMATICALLY ADDING USERS, but I get that error message: ERROR [io.undertow.request] (default task-9) UT005023: Exception handling request to /service/secured: org.jboss.resteasy.spi.UnhandledException: javax.ws.rs.client.ResponseProcessingException: javax.ws.rs.ProcessingException: com.fasterxml.jackson.databind.exc.UnrecognizedPropertyException: Unrecognized field "access_token" (class org.keycloak.representations
订阅 keycloak