Keycloak authenticating to client and keeping a session open
I have been struggling to get a POC working to use keycloak for SSO.
At its simplest, we have a web based react front end on nginx that talks to a resteasy based backend on wildfly and are looking to use keycloak to provide SSO authentication to the backend after using it to log in to the web frontend, with other backend services to be added later.
The "cors" example in the keycloak github repo seems the closest example to what we want to achieve, and has been the basis for my experiments so far. So a single realm with 2 clients set up for the front and backends on different IP addresses. The problem I am having is that each time the ajax request hits the backend it is starting a new session even though a JSESSIONID cookie is present in each request, but we need to keep a session alive and re-use it.
I have been struggling for a couple of days to try and work out what I am missing, and largely working on the assumption there is something I need to add to the ajax request but I have been unable to work out what so far.
Any ideas what I might be missing, how to convert the cors example to work with a session based backend, or any other examples that more closely match the requirements.
keycloak
asked Nov 21 '18 at 10:30
Joc
1066
add a comment |
I have been struggling to get a POC working to use keycloak for SSO.
At its simplest, we have a web based react front end on nginx that talks to a resteasy based backend on wildfly and are looking to use keycloak to provide SSO authentication to the backend after using it to log in to the web frontend, with other backend services to be added later.
The "cors" example in the keycloak github repo seems the closest example to what we want to achieve, and has been the basis for my experiments so far. So a single realm with 2 clients set up for the front and backends on different IP addresses. The problem I am having is that each time the ajax request hits the backend it is starting a new session even though a JSESSIONID cookie is present in each request, but we need to keep a session alive and re-use it.
I have been struggling for a couple of days to try and work out what I am missing, and largely working on the assumption there is something I need to add to the ajax request but I have been unable to work out what so far.
Any ideas what I might be missing, how to convert the cors example to work with a session based backend, or any other examples that more closely match the requirements.
keycloak
asked Nov 21 '18 at 10:30
Joc
1066
add a comment |
I have been struggling to get a POC working to use keycloak for SSO.
At its simplest, we have a web based react front end on nginx that talks to a resteasy based backend on wildfly and are looking to use keycloak to provide SSO authentication to the backend after using it to log in to the web frontend, with other backend services to be added later.
The "cors" example in the keycloak github repo seems the closest example to what we want to achieve, and has been the basis for my experiments so far. So a single realm with 2 clients set up for the front and backends on different IP addresses. The problem I am having is that each time the ajax request hits the backend it is starting a new session even though a JSESSIONID cookie is present in each request, but we need to keep a session alive and re-use it.
I have been struggling for a couple of days to try and work out what I am missing, and largely working on the assumption there is something I need to add to the ajax request but I have been unable to work out what so far.
Any ideas what I might be missing, how to convert the cors example to work with a session based backend, or any other examples that more closely match the requirements.
keycloak
asked Nov 21 '18 at 10:30
Joc
1066
I have been struggling to get a POC working to use keycloak for SSO.
At its simplest, we have a web based react front end on nginx that talks to a resteasy based backend on wildfly and are looking to use keycloak to provide SSO authentication to the backend after using it to log in to the web frontend, with other backend services to be added later.
The "cors" example in the keycloak github repo seems the closest example to what we want to achieve, and has been the basis for my experiments so far. So a single realm with 2 clients set up for the front and backends on different IP addresses. The problem I am having is that each time the ajax request hits the backend it is starting a new session even though a JSESSIONID cookie is present in each request, but we need to keep a session alive and re-use it.
I have been struggling for a couple of days to try and work out what I am missing, and largely working on the assumption there is something I need to add to the ajax request but I have been unable to work out what so far.
Any ideas what I might be missing, how to convert the cors example to work with a session based backend, or any other examples that more closely match the requirements.
keycloak
keycloak
asked Nov 21 '18 at 10:30
Joc
1066
asked Nov 21 '18 at 10:30
Joc
1066
asked Nov 21 '18 at 10:30
Joc
1066
asked Nov 21 '18 at 10:30
Joc
1066
asked Nov 21 '18 at 10:30
Joc
1066
1066
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.
module.config(function($httpProvider) {
$httpProvider.defaults.withCredentials = true;
$httpProvider.responseInterceptors.push('errorInterceptor');
$httpProvider.interceptors.push('authInterceptor');
});
Have i mentioned how much I hate browsers . . .
answered Nov 21 '18 at 15:05
Joc
1066
add a comment |
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53410090%2fkeycloak-authenticating-to-client-and-keeping-a-session-open%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.
module.config(function($httpProvider) {
$httpProvider.defaults.withCredentials = true;
$httpProvider.responseInterceptors.push('errorInterceptor');
$httpProvider.interceptors.push('authInterceptor');
});
Have i mentioned how much I hate browsers . . .
answered Nov 21 '18 at 15:05
Joc
1066
add a comment |
I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.
module.config(function($httpProvider) {
$httpProvider.defaults.withCredentials = true;
$httpProvider.responseInterceptors.push('errorInterceptor');
$httpProvider.interceptors.push('authInterceptor');
});
Have i mentioned how much I hate browsers . . .
answered Nov 21 '18 at 15:05
Joc
1066
add a comment |
I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.
module.config(function($httpProvider) {
$httpProvider.defaults.withCredentials = true;
$httpProvider.responseInterceptors.push('errorInterceptor');
$httpProvider.interceptors.push('authInterceptor');
});
Have i mentioned how much I hate browsers . . .
answered Nov 21 '18 at 15:05
Joc
1066
I got it working I think. I added httpProvider.defaults.withCredentials = true; and it seems to be working now.
module.config(function($httpProvider) {
$httpProvider.defaults.withCredentials = true;
$httpProvider.responseInterceptors.push('errorInterceptor');
$httpProvider.interceptors.push('authInterceptor');
});
Have i mentioned how much I hate browsers . . .
answered Nov 21 '18 at 15:05
Joc
1066
answered Nov 21 '18 at 15:05
Joc
1066
answered Nov 21 '18 at 15:05
Joc
1066
answered Nov 21 '18 at 15:05
Joc
1066
1066
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53410090%2fkeycloak-authenticating-to-client-and-keeping-a-session-open%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
