Size: 1236
Comment:
|
Size: 690
Comment:
|
Deletions are marked like this. | Additions are marked like this. |
Line 4: | Line 4: |
== OIDC == * https://www.scottbrady91.com/OpenID-Connect/OpenID-Connect-Overview OpenID Connect (OIDC) provides a simple identity layer on top of the OAuth 2.0 protocol, enabling Single Sign-On (SSO) and API access in one round trip. It brings the missing user authentication story and identity layer to OAuth. |
|
Line 14: | Line 18: |
# admin admin admin create # http://localhost:8080/auth/admin/master/console/#/realms/master # Master, add realm, MyRealm , create # Users, add user, myuser # select user, credentials, mypwd mypwd, temporary off # Add role USER to MyRealm # Make user myuser have role USER # signout # http://localhost:8080/auth/realms/MyRealm/account/ # realm: MyRealm # user pwd: myuser mypwd # client id: curl_confidential # protocol: openid-connect # Curl_confidential settings: access-type confidential # valid redirect url http://localhost:8080 # tab credentials: regenerate secret 6dfe5f84-d115-4d3e-8a56-a0fcf5b2f13e curl -d 'client_id=curl_confidential' -d 'client_secret=6dfe5f84-d115-4d3e-8a56-a0fcf5b2f13e' -d 'username=myuser' -d 'password=mypwd' -d 'grant_type=password' 'http://localhost:8080/auth/realms/MyRealm/protocol/openid-connect/token' |
keycloak
Open Source Identity and Access Management.
OIDC
OpenID Connect (OIDC) provides a simple identity layer on top of the OAuth 2.0 protocol, enabling Single Sign-On (SSO) and API access in one round trip. It brings the missing user authentication story and identity layer to OAuth.