libre.sh/keycloak-scim
4
0
Fork 0
Code Issues 15 Pull requests Releases 1 Activity Actions

Merge pull request #386 from patriot1burke/master

Browse source 
check ssl required in adapter
This commit is contained in:
Bill Burke 2014-05-14 15:24:22 -04:00
commit 07a31d3f35
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
integration/adapter-core/src/main/java/org/keycloak/adapters/RequestAuthenticator.java
View file

@ -32,6 +32,10 @@ public abstract class RequestAuthenticator {
public AuthOutcome authenticate() { public AuthOutcome authenticate() {
log.info("--> authenticate()"); log.info("--> authenticate()");
if (!facade.getRequest().isSecure() && deployment.isSslRequired()) {
log.warn("SSL is required to authenticate");
return AuthOutcome.FAILED;
}
BearerTokenRequestAuthenticator bearer = createBearerTokenAuthenticator(); BearerTokenRequestAuthenticator bearer = createBearerTokenAuthenticator();
log.info("try bearer"); log.info("try bearer");
AuthOutcome outcome = bearer.authenticate(facade); AuthOutcome outcome = bearer.authenticate(facade);
@ -65,6 +69,7 @@ public abstract class RequestAuthenticator {
return AuthOutcome.NOT_ATTEMPTED; return AuthOutcome.NOT_ATTEMPTED;
} }
completeAuthentication(oauth); completeAuthentication(oauth);
// redirect to strip out access code and state query parameters // redirect to strip out access code and state query parameters

1
testsuite/integration/src/test/resources/adapter-test/customer-db-keycloak.json
View file

@ -2,6 +2,7 @@
"realm" : "demo", "realm" : "demo",
"resource" : "customer-db", "resource" : "customer-db",
"realm-public-key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrVrCuTtArbgaZzL1hvh0xtL5mc7o0NqPVnYXkLvgcwiC3BjLGw1tGEGoJaXDuSaRllobm53JBhjx33UNv+5z/UMG4kytBWxheNVKnL6GgqlNabMaFfPLPCF8kAgKnsi79NMo+n6KnSY8YeUmec/p2vjO2NjsSAVcWEQMVhJ31LwIDAQAB", "realm-public-key" : "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrVrCuTtArbgaZzL1hvh0xtL5mc7o0NqPVnYXkLvgcwiC3BjLGw1tGEGoJaXDuSaRllobm53JBhjx33UNv+5z/UMG4kytBWxheNVKnL6GgqlNabMaFfPLPCF8kAgKnsi79NMo+n6KnSY8YeUmec/p2vjO2NjsSAVcWEQMVhJ31LwIDAQAB",
"ssl-not-required" : true,
"bearer-only" : true, "bearer-only" : true,
"enable-cors" : true "enable-cors" : true