libre.sh/keycloak-scim
3
0
Fork 0
Code Issues 15 Pull requests Releases 1 Packages Activity Actions

Merge pull request #43 from mposolda/backport

Browse source 
KEYCLOAK-3564 migration note about realm-public-key
This commit is contained in:
Marek Posolda 2016-10-21 09:54:24 +02:00 committed by GitHub
commit 116c01b44c
1 changed files with 13 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
topics/MigrationFromOlderVersions.adoc
View file

@ -164,6 +164,19 @@ The version specific section below will mention if any changes are required to a
=== Version specific migration
==== Migrating to 2.3.0
===== `realm-public-key` adapter property not recommended
In 2.3.0 release we added support for Public Key Rotation. When admin rotates the realm keys in Keycloak admin console, the Client
Adapter will be able to recognize it and automatically download new public key from Keycloak. However this automatic download of new
keys is done just if you don't have `realm-public-key` option in your adapter with the hardcoded public key. For this reason, we don't recommend
to use `realm-public-key` option in adapter configuration anymore.
Note this option is still supported, but it may be useful just if you really want to have hardcoded public key in your adapter configuration
and never download the public key from Keycloak. In theory, one reason for this can be to avoid man-in-the-middle attack if you have untrusted network between adapter and Keycloak,
however in that case, it is much better option to use HTTPS, which will secure all the requests between adapter and Keycloak.
==== Migrating to 2.2.0
===== `databaseSchema` property deprecated