From 2030ab159df137b5dc7eec1fa3387a142faa2047 Mon Sep 17 00:00:00 2001
From: Stian Thorgersen <stianst@gmail.com>
Date: Wed, 17 Dec 2014 12:15:22 +0100
Subject: [PATCH] KEYCLOAK-895 Document polyfillers for IE9 compatibility in
 keycloak.js

---
 .../en/en-US/modules/javascript-adapter.xml   | 25 ++++++++++++++-----
 1 file changed, 19 insertions(+), 6 deletions(-)

diff --git a/docbook/reference/en/en-US/modules/javascript-adapter.xml b/docbook/reference/en/en-US/modules/javascript-adapter.xml
index b8ceafeaa4..c20856210c 100755
--- a/docbook/reference/en/en-US/modules/javascript-adapter.xml
+++ b/docbook/reference/en/en-US/modules/javascript-adapter.xml
@@ -1,17 +1,15 @@
 <section id="javascript-adapter">
-    <title>Pure Client Javascript Adapter</title>
+    <title>Javascript Adapter</title>
     <para>
-        The Keycloak Server comes with a Javascript library you can use to secure pure HTML/Javascript applications.  This
+        The Keycloak Server comes with a Javascript library you can use to secure HTML/Javascript applications.  This
         library is referencable directly from the keycloak server.  You can also download the adapter from Keycloak's download
         site if you want a static copy of this library.  It
         works in the same way as other application adapters except that your browser is driving the OAuth redirect protocol
         rather than the server.
     </para>
     <para>
-        The
-        disadvantage of using this approach is that you end up having a non-confidential, public client.  This can be mitigated
-        by registering valid redirect URLs.  You are still vulnerable if somebody hijacks the IP/DNS name of your pure
-        HTML/Javascript application though.
+        The disadvantage of using this approach is that you have a non-confidential, public client. This makes it more
+        important that you register valid redirect URLs and make sure your domain name is secured.
     </para>
     <para>
         To use this adapter, you must first configure an application (or client) through the <literal>Keycloak Admin Console</literal>.
@@ -138,6 +136,21 @@ keycloak.updateToken(30).success(function() {
         </para>
     </section>
 
+    <section>
+        <title>Older browsers</title>
+
+        <para>
+            The JavaScript adapter depends on Base64 (window.btoa and window.atob) and HTML5 History API. If you need to
+            support browsers that don't provide those (for example IE9) you'll need to add polyfillers. Example polyfill
+            libraries:
+
+            <itemizedlist>
+                <listitem>Base64 - <ulink url="https://github.com/davidchambers/Base64.js">https://github.com/davidchambers/Base64.js</ulink></listitem>
+                <listitem>HTML5 History - <ulink url="https://github.com/devote/HTML5-History-API">https://github.com/devote/HTML5-History-API</ulink></listitem>
+            </itemizedlist>
+        </para>
+    </section>
+
     <section>
         <title>JavaScript Adapter reference</title>