How to secure your Spring apps with Keycloak by Thomas Darimont @ Spring I/O 2019
HTML-код
- Опубликовано: 29 ноя 2024
- Spring I/O 2019 - Barcelona, 16-17 May
Keycloak provides Single Sign-On based on widely used protocols such as OpenID Connect 1.0, OAuth 2.0 and SAML2, that are easy to integrate with own applications. Keycloak comes with many batteries included, e.g. user management, user registration, 2-factor authentication, support for external identity providers such as Google, Facebook, Twitter, custom look-and-feel and integration with directory services like LDAP, Kerberos or Active Directory. Additionally, Keycloak offers a comprehensive extension model that makes it easy to adapt it to your own needs.
After a short overview of Keycloak features, we will introduce some core concepts with a guided tour through Keycloaks Admin UI. We then take an in-depth look at an OAuth / OpenID Connect based authentication flow. After those foundations are set we will demonstrate possibilities for integrating Keycloak in selected authentication scenarios. We conclude the talk with a brief demo of an centralized identity management infrastructure, built around Keycloak.
Impressive, excellent presentation, just what I was needing to clarify my doubts. Thank you very much.
Where can I find git of the sample? Thank you!
Hi Thomas!
At 51:54, you said that you not recommend use keycloak docker images. Is it true nowaday?
Wich problems with the docker images of keycloak?
Hello, I have implemented role based authentication for my micro services . The rest end points works very well from postman and similar apps. But it fails when invoked from vue spa application.
Error is CORS, no authorization headers present. I tried to * / + in key cloak config but still it fails.
When my team used proxy to send request , it works but as proxy dont work in prod build of vue apps we are getting CORS error .
Could you please suggest how to solve this
Use cors filters, browsers send preflight requests to the server before sending actual request.. So your server need to accept OPTIONS method, search for cors filters in spring boot, you will find solutions