diff --git a/SUMMARY.adoc b/SUMMARY.adoc index e633436c38..dbb52ca613 100755 --- a/SUMMARY.adoc +++ b/SUMMARY.adoc @@ -99,3 +99,5 @@ ... link:topics/enforcer/authorization-context.adoc[Obtaining the Authorization Context] ... link:topics/enforcer/js-adapter.adoc[JavaScript Integration] + + ... link:topics/enforcer/https.adoc[Setting up TLS/HTTPS] \ No newline at end of file diff --git a/topics/enforcer/https.adoc b/topics/enforcer/https.adoc new file mode 100644 index 0000000000..facf939846 --- /dev/null +++ b/topics/enforcer/https.adoc @@ -0,0 +1,19 @@ +[[_enforcer_filter_using_https]] +== Setting Up TLS/HTTPS + +When the server is using HTTPS, make sure your adapter is configured as follows: + +.keycloak.json +```json +{ + "truststore": "path_to_your_trust_store", + "truststore-password": "trust_store_password" +} +``` + +The configuration above enables TLS/HTTPS to the Authorization Client, making possible to access a +{{book.project.name}} Server remotely using the HTTPS scheme. + +[NOTE] +Is strongly recommended that you enable TLS/HTTPS when accessing the {{book.project.name}} Server endpoints. +