Questions tagged [keycloak-gatekeeper]

Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. Gatekeeper is an application for use with OpenID Connect (OIDC) that supports both access tokens in a browser cookie or bearer tokens. Please use this tag for asking question regarding Keycloak Gatekeeper here. For more details please see documentation https://www.keycloak.org/docs/latest/securing_apps/index.html#_keycloak_generic_adapter

Links:

94 questions
0
votes
1 answer

Keycloak client baseurl is not accepting url without http

I am developing react app. And keeping keycloak for signup. After completing signup keycloak is triggering an email for email verification. When the user verify I want to redirect that verified user to this url e.g. com.abcd.xyzApp/(My app). But I…
0
votes
1 answer

Multi Tenancy with Spring Security OAuth2 Client

I am using Spring Security Oauth2 Client and Keycloak as Identity provider. My application will be deployed with multiple domain and we want to use single instance of Keycloak. I have set up 2 realms in a single instance of Keycloak treating them as…
0
votes
1 answer

authenticate session not found in Keycloak-Gatekeeper configuration

I am trying to use keycloak as my identity provider for accessing the k8s dashboard. I use keycloak-gatekeeper to authenticate. My keycloak config file is as follows on my pod pod1 apiVersion: apps/v1 kind: Deployment metadata: name: db …
0
votes
1 answer

Not able to load keycloak authentication page from application, calling protected resource with ajax request

I have configured keycloak for IAM with gatekeeper as a proxy. When I call protected resource from my angular application through ajax request, it's not redirecting me to login page of keycloak, although in browser request call its showing me…
0
votes
1 answer

Not able to call web service protected by gatekeeper- keycloak via ajax request

I have webservice protected by gatekeeper(louketo-proxy). When I call protected service via ajax request it won't redirect me to login page. It's showing me message "Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote…
sandeep
  • 41
  • 7
0
votes
1 answer

Not able to communicate between keycloak and gatekeeper

I am totally a newbie in key-cloak and keycloak-gatekeeper I am running keycloak on my machine with address localhost:8080 where as my gatekeeper is running on minikube environment Below are the my configuration and deployment file apiVersion:…
0
votes
1 answer

Keycloak: How to add cc or bcc while sending email?

Requirement: How do we add cc or bcc when an email is sent through keycloak? Problem: When a user is invited to sign-up using keycloak invitation mail is sent. But in some cases, the invitation is not sent, so I plan to add cc or bcc to the…
0
votes
1 answer

Find Formatted address by IP address using Keycloak

Description I'm using Keycloak and I need to send E-Mail to users whenever their login fails, about the failure. Per default, these email does contain an IP Address. Problematic I need to include the formatted address comming from this IP address,…
Selast Lambou
  • 708
  • 12
  • 27
0
votes
0 answers

Preserve headers in Angular application

I'm developing an architecture where my Angular front end connected to a Spring Boot back end and the front end is accessible via NGINX. Before accessing to my application, the user must be authenticated. I use Keycloak as Identity manager and…
0
votes
1 answer

Docker command runs successfully from Docker run, but not when using CMD in Dockerfile

I am wrapping the Bitnami/Keycloak-Gatekeeper Docker image in a Dockerfile, and trying to run: FROM bitnami/keycloak-gatekeeper:latest COPY config.yml /opt/bitnami/keycloak-gatekeeper/config.yml CMD ["/keycloak-gatekeeper --config…
fuzzi
  • 1,967
  • 9
  • 46
  • 90
0
votes
1 answer

Keycloak authentication at load balancer level

I am working on keycloak authentication and authorization. I want to authenticate user on load balancer level. Is it possible to filter out user before checking for an actual application authentication.
0
votes
1 answer

KeyCloak bulk update through PSQL db

I've updated all my users to email_verified = true. The PSQL database gets updated, but the admin console continues to have the users as not having their emails verified. I'm doing the changes through the CLI on Rancher. The command I am using is:…
0
votes
1 answer

Keycloak Gatekeeper does not set X-Auth header correctly

I try to use a shell script to login to a web application secured by Keycloak Gatekeeper. The login is working and the token handle shows the correct data. But when I do the "real" request the X-Auth-* headers are not existing, so the upstream…
user3775041
  • 192
  • 1
  • 3
  • 11
0
votes
2 answers

Keycloak Gatekeeper always fail to validate 'iss' claim value

Adding the match-claims to the configuration file doesn't seem to do anything. Actually, Gatekeeper is always throwing me the same error when opening a resource (with or without the property). My Keycloak server is inside a docker container,…
NemesisMate
  • 1
  • 1
  • 2
0
votes
2 answers

Keycloak Applications vs Client authentication

Hi i am a bit confused as to how to secure applications through keycloak, the website shows how to secure clients. The application which i need to secure in my setup is a desktop application which uses keycloak + keycloak-gatekeeper protected…
Benjamin Hon
  • 143
  • 1
  • 11