keycloak

Restrict client access in a single realm with keycloak

折月煮酒 提交于 2021-01-22 06:44:19
问题 This bounty has ended . Answers to this question are eligible for a +500 reputation bounty. Bounty grace period ends in 13 hours . Ralph wants to draw more attention to this question. I have a single realm with 3 single-page applications and a shared backend. I want to restrict the access to one of the SPAs so that users without a specific role can't log in. But once you create a user in the realm, he can log in to every SPA client. I can restrict the endpoints of the backend but I don't want

Restrict client access in a single realm with keycloak

寵の児 提交于 2021-01-22 06:40:16
问题 This bounty has ended . Answers to this question are eligible for a +500 reputation bounty. Bounty grace period ends in 13 hours . Ralph wants to draw more attention to this question. I have a single realm with 3 single-page applications and a shared backend. I want to restrict the access to one of the SPAs so that users without a specific role can't log in. But once you create a user in the realm, he can log in to every SPA client. I can restrict the endpoints of the backend but I don't want

Restrict client access in a single realm with keycloak

ⅰ亾dé卋堺 提交于 2021-01-22 06:39:21
问题 This bounty has ended . Answers to this question are eligible for a +500 reputation bounty. Bounty grace period ends in 13 hours . Ralph wants to draw more attention to this question. I have a single realm with 3 single-page applications and a shared backend. I want to restrict the access to one of the SPAs so that users without a specific role can't log in. But once you create a user in the realm, he can log in to every SPA client. I can restrict the endpoints of the backend but I don't want

Create a User on Keycloack including password from curl command

青春壹個敷衍的年華 提交于 2021-01-21 07:29:12
问题 I have tried to create a user(without giving any password while creating) on keycloak using CURL command, it's success, but not able to know the password to login. So, how to give password to a user while creating. and also how to set default password for new users in keycloak I have used this link to create a user using curl: Create user on Keycloack from curl command 回答1: You need to set credentials for the user, so that you can login. something like this curl -v http://localhost:8080/auth

Keycloak - Create Admin User in a Realm

不羁岁月 提交于 2021-01-20 16:52:06
问题 How do I create an admin user in a realm in Keycloak? I tried /bin/add-user.sh -r myrealm -u admin -p <pwd> It gave me the error: * Error * WFLYDM0065: The user supplied realm name 'myrealm' does not match the realm name discovered from the property file(s) 'ManagementRealm'. Exception in thread "main" org.jboss.as.domain.management.security.adduser.AddUserFailedException: WFLYDM0065: The user supplied realm name 'myrealm' does not match the realm name discovered from the property file(s)

Keycloak - Create Admin User in a Realm

假装没事ソ 提交于 2021-01-20 16:48:37
问题 How do I create an admin user in a realm in Keycloak? I tried /bin/add-user.sh -r myrealm -u admin -p <pwd> It gave me the error: * Error * WFLYDM0065: The user supplied realm name 'myrealm' does not match the realm name discovered from the property file(s) 'ManagementRealm'. Exception in thread "main" org.jboss.as.domain.management.security.adduser.AddUserFailedException: WFLYDM0065: The user supplied realm name 'myrealm' does not match the realm name discovered from the property file(s)

Keycloak - Create Admin User in a Realm

回眸只為那壹抹淺笑 提交于 2021-01-20 16:46:45
问题 How do I create an admin user in a realm in Keycloak? I tried /bin/add-user.sh -r myrealm -u admin -p <pwd> It gave me the error: * Error * WFLYDM0065: The user supplied realm name 'myrealm' does not match the realm name discovered from the property file(s) 'ManagementRealm'. Exception in thread "main" org.jboss.as.domain.management.security.adduser.AddUserFailedException: WFLYDM0065: The user supplied realm name 'myrealm' does not match the realm name discovered from the property file(s)

keycloak集群化的思考

浪子不回头ぞ 提交于 2021-01-13 17:49:57
简介 单体服务如果想要突破到高并发服务就需要升级为集群服务。同时集群化也为高可用打下了坚实的基础。纵观现在比较流行的服务或者中间件,不管是RabbitMQ还是redis都提供了集群的功能。 作为硬核工业代表的wildfly也不例外,最近研究了一下keycloak的集群,发现它的底层服务器用的也是wildfly,本文将会和大家探讨一下keycloak的集群的架构思路。 keycloak中的集群 我们知道,keycloak中有两种模式,一种叫做Standalone,一种叫做domain。 这两种模式的区别只是在于部署文件是否被集中管理,如果部署文件需要一个一个的手动拷贝,那么就是standalone模式。如果是一键化的自动安装,那么就是domain模式。 standalone模式下有一个配置文件叫做 /standalone/configuration/standalone-ha.xml,这个就是在standalone模式下配置集群的xml文件了。 而domain模式下,配置文件都是在domain controller这个机子上进行配置的,具体的文件是 domain/configuration/domain.xml 。 我们看下ha具体是用的集群相关的组件: <profile name="full-ha"> ... <subsystem xmlns="urn:jboss:domain

How do I configure Keycloak and get a JWT with all steps done through the REST API?

对着背影说爱祢 提交于 2021-01-07 01:59:35
问题 I need to configure Keycloak running in Docker with a realm, a user with credentials, and a client and then get a JWT as in this blog post. If I use the UI as shown it works, but I need to automate all steps through the Keycloak REST API. When I do that all steps seem to work but getting a JWT fails. I run Keycloak in Docker like this docker network create keycloak-network docker run --name mysql -d \ --net keycloak-network \ -e MYSQL_DATABASE=keycloak \ -e MYSQL_USER=keycloak \ -e MYSQL