libre.sh/keycloak-scim
4
0
Fork 0
Code Issues 15 Pull requests Releases 1 Activity Actions

Merge pull request #834 from ssilvert/KEYCLOAK-812-remove-confidential-transport

Browse source 
KEYCLOAK-812: Remove confidential transport from auth server web.xml and
This commit is contained in:
Stian Thorgersen 2014-11-03 15:55:20 +01:00
commit fd08a884ad
2 changed files with 0 additions and 35 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
docbook/reference/en/en-US/modules/server-installation.xml
View file

@ -702,27 +702,6 @@ keycloak-war-dist-all-&project.version;/
</section> </section>
<section>
<title>Enforce HTTPS For Server Connections</title>
<para>
Servlet containers can force browsers and other HTTP clients to use HTTPS. You have to configure this in
<literal>.../standalone/deployments/auth-server.war/WEB-INF/web.xml</literal>. All you have to do is
uncomment out the security constraint.
</para>
<para>
<programlisting><![CDATA[<web-app>
...
<security-constraint>
<web-resource-collection>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
</web-app>]]></programlisting>
</para>
</section>
</section> </section>
</section> </section>

14
server/src/main/webapp/WEB-INF/web.xml
View file

@ -49,18 +49,4 @@
<servlet-name>Keycloak REST Interface</servlet-name> <servlet-name>Keycloak REST Interface</servlet-name>
<url-pattern>/*</url-pattern> <url-pattern>/*</url-pattern>
</servlet-mapping> </servlet-mapping>
<!--
<security-constraint>
<web-resource-collection>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<user-data-constraint>
<transport-guarantee>CONFIDENTIAL</transport-guarantee>
</user-data-constraint>
</security-constraint>
-->
</web-app> </web-app>