How to secure your Spring Apps with Keycloak by Thomas Darimont @ Spring I/O 2018

[@richardseldon5205]

Excellent presentation and keycloak resources. Thanks.

[@retroradar_de]

very helpful presentation. we want to use keycloak at our office and need good structured informations like that!

[@rbelatamas]

thanks for this great presentation!

[@vanattran5456]

Thanks sir, How to you can share images setup KeyCloak Client in this Project ??? Thanks you very much!

[@jayaram668]

Hello thomas really very helpful presentation ,thank you so much

[@gabrielferrer3205]

Is it possible to have a table join of Keycloak Users with Transaction tables in another database?

[@gokufujison]

Very good explanation of SSO!

[@tsimbaland2905]

Could we manage access to REST resources in java app using keycloak client authorization only?

[@vanikesani3832]

awesome tutorial on keycloak

[@jyotijaiswal125]

Hello Thomas , Thanks a lot for this video. I followed the steps as per your video but I am getting "status": 401, "error": "Unauthorized", error on postman. IN eclipse, I can see it is not hitting the code. Would you please help me out. Best Regards.

[@vigneshkannam1655]

Good explanation 🔥

[@nrajeshwar]

how to secure connection with https

[@paulfrischknecht3999]

How is LDAP/user federation different from the other identity providers? Why is it not listed there?

[@erickbellucitedeschi1445]

Hi, i will try to explain in few chars. Identity providers, is part of OpenID Connect/SAML specifications, so it works as specified in the protocols (redirect the authentication/authorization to another Identity Provider (like a social login also)). Federation in this case works as User credentials repository (and in some cases group mapping), so the keycloak import users/groups from there and make a local copy.

[@jietan8548]

good presentation.

[@9453055518]

Hello, Can you tell me, how to do infinispan setup, in detail. Thanks in advance.

[@paulfrischknecht3999]

Why is the keyid (kid) not just the public key itself? Seems like an extra roundtrip to figure that out...

[@GuoqiangXuX]

to save some bytes

[@snowy0110]

A public key doesn't change often, so it makes sense to cache it, instead of exchanging it all the time. For chatty applications where a payload is not that big compared to public key size, it would hurt network bandwidth since the same information would be transferred over and over again

[@JuliusUnscripted]

I think it has to do with revoking jwts. If the kid is not valid anymore the jwt is not accepted. And the kid will not be cached for long times I think

[@kartiksubramanian182]

Are realms equivalent to tenants?

[@TheArpitkoberoi]

As per my understanding, yes

[@koffiyannicknzi5455]

Hello Thomas i'm working on a project with keycloak starting by your "spring-boot-keycloak-server-example" project. I have a question about that. I would like to kwnow where is the keycloak themes directory so that if i want to customize a theme i can put my files there.

[@guoweiyin5727]

how to notify youtube that this audio should be tarnslated into English, not German?

[@gabrielpatricioo]

35:00 27:00

[@mukut5ul]

Awesome..