Questions tagged [keycloak-gatekeeper]

Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. Gatekeeper is an application for use with OpenID Connect (OIDC) that supports both access tokens in a browser cookie or bearer tokens. Please use this tag for asking question regarding Keycloak Gatekeeper here. For more details please see documentation https://www.keycloak.org/docs/latest/securing_apps/index.html#_keycloak_generic_adapter

Links:

94 questions
1
vote
0 answers

Keyclock-gatekeeper/louketo-proxy events not propagating to all clients immediately

I am using Keycloak as an IAM and have clients "alertmanager" and "Nginx" which are running along with Keycloak-gatekeeper/louketo-proxy as a sidecar in my K8s cluster. Users are able to login perfectly but getting some issues with logout. When I…
1
vote
1 answer

traefik ingress with keycloak authentication on AWS EKS

We are developing our enterprise microservice architecture based product on AWS EKS. We have several applications which are deployed as separate containers on EKS. We have deployed traefik ingress controller (with LB service as ELB) and ingress…
1
vote
0 answers

How to run the keycloak server in tomcat server

I have a java application which is running in tomcat recently I have integrated keycloak security to the application. Question: How do we run the keycloak server inside the tomcat where I am running my application. So both are running in the same…
Harsha
  • 343
  • 1
  • 3
  • 6
1
vote
2 answers

Keycloak and reverse proxy issues

I am running Keycloak on an OpenShift project, and I have 4 pods running: keycloak (v8.0.1 configured to listen on 8443 with TLS), keycloakdb (PostgreSQL DB), proxy (Apache 2.4 reverse proxy), and portal (our app that we developed to handle…
1
vote
1 answer

Running Strapi CMS behind a Keycloak Gatekeeper

I'm trying to get Strapi running behind a Keycloak Gatekeeper. My problem now is that the Admin UI is broken, because it uses the Authorization header to include a custom JWT. Keycloak Gatekeeper also uses the Authorization header with its own JWT.…
phXql
  • 197
  • 1
  • 11
1
vote
1 answer

Keycloak gatekeeper logout via /oauth/logout does not work

I'm using keycloak gatekeeper to protect a simple front-end web application and it works well; users need to log in before they get to the actual site. The problem is logging OUT. When I use the /oauth/logout URL, it seems to destroy the local…
Gerard
  • 107
  • 1
  • 7
1
vote
2 answers

Use Keycloak Gatekeeper in front of backend API

On a single page app (SPA) that runs on DOMAIN calls to DOMAIN/graphql are rerouted to the backend. Both the frontend and backend are secured via a Keycloak Gatekeeper instance. The idea is that the frontend and backend share the kc-access…
user2609980
  • 10,264
  • 15
  • 74
  • 143
1
vote
1 answer

How to secure Kibana dashboard using keycloak-gatekeeper?

Current flow: incoming request (/sso-kibana) --> Envoy proxy --> /sso-kibana Expected flow: incoming request (/sso-kibana) --> Envoy proxy --> keycloak-gatekeeper --> keycloak --> If not logged in --> keycloak loging page -->…
Aftab
  • 2,863
  • 32
  • 41
1
vote
0 answers

Does Keycloak support some form of middleman authentication?

I'm using keycloak to let my users authenticate with my application. And i am trying to migrate some functionality to a few plugins, e.g. a wordpress plugin. For these plugins i want to use a generic solution so I found the following authentication…
1
vote
1 answer

Keycloak Gatekeeper (forwarding proxy) does nothing

I have a docker-compose setup with service 1 (grafana) sending requests to service 2 (prometheus). I've put a Keycloak Gatekeeper in front of service 2, asking for authentication. That works perfectly fine. Now my idea was to also place a second…
Bob Sheknowdas
  • 347
  • 3
  • 15
1
vote
0 answers

Azure Active Directory OIDC returning wrong iss claim value

I am trying to connect a Keycloak Gatekeeper instance to AAD via Open ID Connect. To do so, I am using the v2 endpoint https://login.microsoftonline.com//v2.0. Unfortunately even before I login there is an error in the logs: unable to…
1
vote
0 answers

How to protect Spring boot application with keycloak Gatekeeper?

I have a spring boot application and I need to protect it with the keycloak gatekeeper. Should I configure the properties file or just add the gatekeeper config file in the application? Or should I have the gatekeeper config file separately? Are…
Siva Thangaraj
  • 214
  • 2
  • 16
0
votes
0 answers

keycloak helm chart to use external database (LDAP)

I am trying to install a keycloak helm chart but would like to use an external data store like LDAP instead of the default Postgres db. Pls, is there a possibility and is how can I go about it ? When I set the default Postgresql.enabled to false, I…
0
votes
0 answers

Is there a way to get the authentication from KeyCloak without password and without webAuthN

I am currently working on a face recognition based login for an application and I want to provide authentication and authorisation for the user if his face is verified. Now Here's how the flow goes, The user scans their face and the facial data is…
0
votes
0 answers

Keycloak Server not sending the custom email verification URL

I am trying to integrate custom email verification flow using keycloak server version 21.1.1. I am using following REST API…