Questions tagged [keycloak-gatekeeper]

Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. Gatekeeper is an application for use with OpenID Connect (OIDC) that supports both access tokens in a browser cookie or bearer tokens. Please use this tag for asking question regarding Keycloak Gatekeeper here. For more details please see documentation https://www.keycloak.org/docs/latest/securing_apps/index.html#_keycloak_generic_adapter

Links:

94 questions
0
votes
0 answers

Why can't create keycloak 21.1.2 first admin?

Why can't create keycloak 21.1.2 first admin? Showing error with status 403 when creating first admin. ERROR: An internal server error has occurred create first admin page error this is error How to create keycloak 21.1.2 first admin? or How to…
0
votes
0 answers

In Keycloak Bearer Token, how to insert custom scopes, using SPI

I have my RBAC where, I have defined user v/s its roles/ scopes, now wanted to insert those to BeareToken scope field. What would be the approach? Will it be possible through Keycloak SPI?
0
votes
1 answer

Upgrading from key-cloak 15 to 20.0.5 "after deployment React App giving 404 on main js and css

[React App giving 404 on static js and css ] I built a react app using "react-scripts". The application runs perfectly on my local development server but when I deploy to my actual server the applications seems to not find the main JS and CSS files…
0
votes
0 answers

Keycloak - Connection Null issue when spun up on AWS ECS

I have checked that all relevant parameters are being parsed correctly and i am able to see them in my AWS ECS service. When the service is spun up i get the below error WARN  [org.jboss.jca.core.connectionmanager.pool.strategy.OnePool]…
0
votes
0 answers

How to backup and migrate Gatekeeper settings into a new cluster

I want to move all settings/policies/configurations of an instance ofGatekeepr into new cluster. is there an straight forward approach?
hani
  • 45
  • 5
0
votes
0 answers

KEYCLOAK - Failed to execute 'postMessage' on 'DOMWindow': The target origin provided does not match the recipient window's origin

I deployed Keycloak on an EC2 server on AWS, generated and configured the SSL certificate through the AWS console on a Load Balancer that redirects to port 80 of the instance where the keycloak is located, which has a docker container communicating…
0
votes
0 answers

Can it be done record-base authorization with keycloak?

I am using keycloak in my application for authentication. But currently I need to implement an access list rule mapping so that I can determine whether a user has access to content or not. Here is what I am trying to accomplish: Does user have…
mehmet
  • 55
  • 1
  • 10
0
votes
0 answers

Keycloak Cached clientScope not found

Getting repeatedly this error in Keycloak logs. Attached below are the logs for reference: The said client scope is not found if I try to search the same under Keycloak admin console too. 2022-09-22 04:04:12,718 ERROR…
0
votes
1 answer

keycloak-js - not authenticated after reloading page

I'm testing a basic React app with Authorization Code / PKCE, and ran into a strange issue. The app looks as follows: index.js: const root = ReactDOM.createRoot(document.getElementById('root')); initKeycloak(); root.render( …
0
votes
0 answers

How to include Realm ID in the jwt token - keycloak

I'm using keycloak as my user management and trying to generated jwt to be used in other microservices, and as i understand to add new filed or info to the jwt, i need to create new client scope then link it to predefine mapper to be included in the…
Fadi
  • 2,320
  • 8
  • 38
  • 77
0
votes
0 answers

Can we add new users and permissions to keycloak without using the admin console?

So I have multiple services running in the cluster. Is there a way to send new users or new permissions coming from new/updated services in the cluster without interacting with the admin console? I know Keycloak has rest APIs but will I need to have…
0
votes
2 answers

Applying ServiceAccount specific OPA policies through Gatekeeper in kubernetes

We are trying to replace our existing PSPs in kubernetes with OPA policies using Gatekeeper. I'm using the default templates provided by Gatekeeper https://github.com/open-policy-agent/gatekeeper-library/tree/master/library/pod-security-policy and…
0
votes
1 answer

Keycloak custom login provider

I'm trying to create a custom Keycloak provider that will add something to login logic. I've read how providers (or plugins) are being created for Keycloak and there's already one in the project I'm working with, but I don't know much about them. I…
Arzybek
  • 547
  • 2
  • 6
  • 27
0
votes
1 answer

Getting error while triggering a basic http call from ‘Keycloak’ to ‘Azure ADB2C’ for token response

While making a basic http calls from “Keycloak” to “Azure ADB2C” to retrieve a token as a response from AD B2C. The current flow looks like this. For a Java web application which is integrated with the ‘Keycloak’ as an identity broker, and from the…
0
votes
0 answers

ReactJS with Keycloak login SSO: I want to login via Keycloak Login screen. without change in the browser URL

I am building a reactJs UI application. I am able to successfully login via keycloak redirection by using keycloak.json from keycloak client installation section. this redirection is working fine. no issues with that. However, this approach does…