diff --git a/docbook/auth-server-docs/reference/en/en-US/modules/MigrationFromOlderVersions.xml b/docbook/auth-server-docs/reference/en/en-US/modules/MigrationFromOlderVersions.xml index dc0b6a15fc..5ab29ecbc6 100755 --- a/docbook/auth-server-docs/reference/en/en-US/modules/MigrationFromOlderVersions.xml +++ b/docbook/auth-server-docs/reference/en/en-US/modules/MigrationFromOlderVersions.xml @@ -120,6 +120,16 @@ the various HTTP error codes. See documentation for more details if you want to catch and handle adapter error conditions. + + IdentityProviderMapper changes + + There is no change in the interface itself or method signatures. However there is some change in behaviour. We added First Broker Login flow + in this release and the method IdentityProviderMapper.importNewUser is now called after First Broker Login flow is finished. + So if you want to have any attribute available in Review Profile page, you would need to use + the method preprocessFederatedIdentity instead of importNewUser . You can set any attribute by + invoke BrokeredIdentityContext.setUserAttribute and that will be available on Review profile page. + +
Migrating to 1.6.0.Final diff --git a/docbook/auth-server-docs/reference/en/en-US/modules/javascript-adapter.xml b/docbook/auth-server-docs/reference/en/en-US/modules/javascript-adapter.xml index e0d78f3e88..ab7896d7c4 100755 --- a/docbook/auth-server-docs/reference/en/en-US/modules/javascript-adapter.xml +++ b/docbook/auth-server-docs/reference/en/en-US/modules/javascript-adapter.xml @@ -164,9 +164,12 @@ keycloak.init({ flow: 'implicit' }) Keycloak also have support for OpenID Connect Hybrid flow. This requires that client in admin console has both flags Standard Flow Enabled and Implicit Flow Enabled enabled in admin console. The Keycloak will send both the code and tokens to your application. Access token can be immediately used and in the meantime, code can be exchanged for access token and refresh token. - Hybrid flow is good for performance similarly like implicit flow, because access token is available. But similarly like implicit flow, the token is sent in URL fragment, so security may not be so good. - In addition to implicit flow, you have also refresh token available in your application. For hybrid flow, you need to pass the parameter - flow with value hybrid to init method. + Hybrid flow is good for performance similarly like implicit flow, because access token is available immediatelly to your application. But similarly like implicit flow, the token is + sent in URL fragment, so security may not be so good. + One advantage over implicit flow is, that you have also refresh token available in your application (after code-to-token request is finished in background). + + + For hybrid flow, you need to pass the parameter flow with value hybrid to init method.