วีดีโอ

Hello, As per me you can try these options 1. Using custom Authentication SPI, where after login you search all the user sessions and remove it. 2. If you are using a keyclock admin to generate an access token, so here also we have options to search user sessions and remove it.

Thanks for correction

Right now, I don't have it. I will try to make one.

Well, adding users can be done multiple ways. For example, using keycloak admin clients, we can add users or use some external microservices. we can add users to the database

Thank you for the words. Please do like share and subscribe

We are using keycloak-model-jpa library for connection. You can try to configure and test it, I feel it will work, but honestly, I have not tried.

@@kstechnoworld please attach dockerfile as would be very helpful

Technically, as long as the token is valid, it can be used for login, but if we want to use the token once then we can try to remove the token during login by using authentication SPI interface, I have not done this but it should be possible.

Thanks and please like share and subscribe

Thanks and please do like, share and subscribe

Sure, next time, I will take care of it

Well I don't know the requirement, but at a very high level I can say that you can create groups and sub group and map roles to the sub group and finally map the user to the sub group

It should work with maven also, but I have not tried maven

Some changes in keyclock, you need to go to realms setting, user profile tab. Create an attribute and then check user details tab you will be able to see the newly created attribute.

@@kstechnoworld I have tried this method but i am not getting one attribute value in header of UI.

Mapper we have two options, either use mapper, which I have explained in video, or may be you can try using and SPI using AbstractOIDCprotocal mapper

​@@kstechnoworld i fix with clients scopes thank you

Yes ideally it should work, but I have not tried mistal as of now

I am sorry but not sure I understand this fully, can you explain this in detail, then might be I can help.

@@kstechnoworld means we are not creating user and role in keycloak instead we will use user and role in our database and then authenticate them with keycloak

Hello, you can do this with Customer Storage SPI

Well, in your case, you have couple of options 1. create a microservice and expose and rest api to create user use keycloak admin client mvnrepository.com/artifact/org.keycloak/keycloak-admin-client 2. If you are using keycloak registration page, then you need to use an SPI (Authentication) and from the SPI cal the rest endpoint, which you have created in point no 1

@@kstechnoworld btw im using keycloak with JHipster so I think that makes the difference and yea im using the keycloak registration to create a new user

@@kstechnoworld Hi. do you have a tutorial for the keycloak admin client. because In the keycloak 24.0.1, we have to manually attach the attributes and manually display it with the user. Also using the admin keycloak client how we can attach the roles with the token. If you have any link for that please do share.

Thank you

No, I have not tried these, but surely I may come up with one session

@@kstechnoworld It would be nice 🙂Thank you in advance :-)

@kstechnoworld Do you have any video regarding a custom provider connecting to jdbc?

I have emailed you, please send your phone number there!

You can check keycloak admin rest api, you will be able to fetch the user details

Not sure to understand the question properly, but keycloak main job is to issue token which has some roles and permissions, and token is validated in apps like spring boot.

Map the roles to the client then it will be part of token or use custom mappers

yeah its possible

Maybe you can try to implement a custom spi org.keycloak.authentication.forms.RegistrationUserCreation and handle it, this way you write custom logic like which client you want to allow for registration.

It's mandatory setting

@@kstechnoworld why

@@anos997 It's simple enough. If the user requiring authentication hasn't completed any of the required checklist within the checkbox if checked, the access token will not be granted. For example if the user hasn't verified his email or hasn't completed his profile it will not be possible to grant the access token because the user is not yet a verified user on the platform. All these steps has to be gone through before that can be done.

i found the solution in your next video : th-cam.com/video/nU_uTpHDXEI/w-d-xo.html Thank you !!!

i found the solution in your next video : th-cam.com/video/nU_uTpHDXEI/w-d-xo.html THANK YOU !!!

Ok, great that you find the solution

May be you need to map it to service account

@@kstechnoworld I have created the user attributes for it and I am able to add the resources while creating a user using the POST API of the keycloak. But I don't want to add the resources from there, I already created the resources with permission, somehow i want to add all those resources in the user payload according to their role and for that I tried the custom script mapper also but it is not working.

Is it possible to explain with example?

Send me mail

Please bro

You can send me mail

Please refer the code base here github.com/kuldeepsingh99/api-rate-limiting