Keycloak authenticating to client and keeping a session open












0














I have been struggling to get a POC working to use keycloak for SSO.



At its simplest, we have a web based react front end on nginx that talks to a resteasy based backend on wildfly and are looking to use keycloak to provide SSO authentication to the backend after using it to log in to the web frontend, with other backend services to be added later.



The "cors" example in the keycloak github repo seems the closest example to what we want to achieve, and has been the basis for my experiments so far. So a single realm with 2 clients set up for the front and backends on different IP addresses. The problem I am having is that each time the ajax request hits the backend it is starting a new session even though a JSESSIONID cookie is present in each request, but we need to keep a session alive and re-use it.



I have been struggling for a couple of days to try and work out what I am missing, and largely working on the assumption there is something I need to add to the ajax request but I have been unable to work out what so far.



Any ideas what I might be missing, how to convert the cors example to work with a session based backend, or any other examples that more closely match the requirements.










share|improve this question



























    0














    I have been struggling to get a POC working to use keycloak for SSO.



    At its simplest, we have a web based react front end on nginx that talks to a resteasy based backend on wildfly and are looking to use keycloak to provide SSO authentication to the backend after using it to log in to the web frontend, with other backend services to be added later.



    The "cors" example in the keycloak github repo seems the closest example to what we want to achieve, and has been the basis for my experiments so far. So a single realm with 2 clients set up for the front and backends on different IP addresses. The problem I am having is that each time the ajax request hits the backend it is starting a new session even though a JSESSIONID cookie is present in each request, but we need to keep a session alive and re-use it.



    I have been struggling for a couple of days to try and work out what I am missing, and largely working on the assumption there is something I need to add to the ajax request but I have been unable to work out what so far.



    Any ideas what I might be missing, how to convert the cors example to work with a session based backend, or any other examples that more closely match the requirements.










    share|improve this question

























      0












      0








      0







      I have been struggling to get a POC working to use keycloak for SSO.



      At its simplest, we have a web based react front end on nginx that talks to a resteasy based backend on wildfly and are looking to use keycloak to provide SSO authentication to the backend after using it to log in to the web frontend, with other backend services to be added later.



      The "cors" example in the keycloak github repo seems the closest example to what we want to achieve, and has been the basis for my experiments so far. So a single realm with 2 clients set up for the front and backends on different IP addresses. The problem I am having is that each time the ajax request hits the backend it is starting a new session even though a JSESSIONID cookie is present in each request, but we need to keep a session alive and re-use it.



      I have been struggling for a couple of days to try and work out what I am missing, and largely working on the assumption there is something I need to add to the ajax request but I have been unable to work out what so far.



      Any ideas what I might be missing, how to convert the cors example to work with a session based backend, or any other examples that more closely match the requirements.










      share|improve this question













      I have been struggling to get a POC working to use keycloak for SSO.



      At its simplest, we have a web based react front end on nginx that talks to a resteasy based backend on wildfly and are looking to use keycloak to provide SSO authentication to the backend after using it to log in to the web frontend, with other backend services to be added later.



      The "cors" example in the keycloak github repo seems the closest example to what we want to achieve, and has been the basis for my experiments so far. So a single realm with 2 clients set up for the front and backends on different IP addresses. The problem I am having is that each time the ajax request hits the backend it is starting a new session even though a JSESSIONID cookie is present in each request, but we need to keep a session alive and re-use it.



      I have been struggling for a couple of days to try and work out what I am missing, and largely working on the assumption there is something I need to add to the ajax request but I have been unable to work out what so far.



      Any ideas what I might be missing, how to convert the cors example to work with a session based backend, or any other examples that more closely match the requirements.







      keycloak






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 21 '18 at 10:30









      Joc

      1066




      1066
























          1 Answer
          1






          active

          oldest

          votes


















          0














          I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.



          module.config(function($httpProvider) {
          $httpProvider.defaults.withCredentials = true;
          $httpProvider.responseInterceptors.push('errorInterceptor');
          $httpProvider.interceptors.push('authInterceptor');
          });


          Have i mentioned how much I hate browsers . . .






          share|improve this answer





















            Your Answer






            StackExchange.ifUsing("editor", function () {
            StackExchange.using("externalEditor", function () {
            StackExchange.using("snippets", function () {
            StackExchange.snippets.init();
            });
            });
            }, "code-snippets");

            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "1"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53410090%2fkeycloak-authenticating-to-client-and-keeping-a-session-open%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            0














            I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.



            module.config(function($httpProvider) {
            $httpProvider.defaults.withCredentials = true;
            $httpProvider.responseInterceptors.push('errorInterceptor');
            $httpProvider.interceptors.push('authInterceptor');
            });


            Have i mentioned how much I hate browsers . . .






            share|improve this answer


























              0














              I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.



              module.config(function($httpProvider) {
              $httpProvider.defaults.withCredentials = true;
              $httpProvider.responseInterceptors.push('errorInterceptor');
              $httpProvider.interceptors.push('authInterceptor');
              });


              Have i mentioned how much I hate browsers . . .






              share|improve this answer
























                0












                0








                0






                I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.



                module.config(function($httpProvider) {
                $httpProvider.defaults.withCredentials = true;
                $httpProvider.responseInterceptors.push('errorInterceptor');
                $httpProvider.interceptors.push('authInterceptor');
                });


                Have i mentioned how much I hate browsers . . .






                share|improve this answer












                I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.



                module.config(function($httpProvider) {
                $httpProvider.defaults.withCredentials = true;
                $httpProvider.responseInterceptors.push('errorInterceptor');
                $httpProvider.interceptors.push('authInterceptor');
                });


                Have i mentioned how much I hate browsers . . .







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Nov 21 '18 at 15:05









                Joc

                1066




                1066






























                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Stack Overflow!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.





                    Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


                    Please pay close attention to the following guidance:


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53410090%2fkeycloak-authenticating-to-client-and-keeping-a-session-open%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Wiesbaden

                    Marschland

                    Dieringhausen