You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@karaf.apache.org by Christian Lutz <Ch...@kreeloo.de> on 2020/04/07 21:06:06 UTC
Using jetty instead of undertow with keycloak possible
Hello,
I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
but instead of using cxf with undertow using this approach with jetty.
If so, did the description work out of box or are any changes necessary?
For some reason the keycloak-pax-http-jetty feature is commented out.
https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
Any idea why?
Sincerely
Christian
Re: Using jetty instead of undertow with keycloak possible
Posted by Alex Soto <al...@envieta.com>.
Hi JB,
Can you share your workaround? Thanks!
Best regards,
Alex soto
> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>
> Hi,
>
> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>
> Regards
> JB
>
>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>
>> Hello,
>>
>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>
>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>> <!--
>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>> <feature>keycloak-adapter-core</feature>
>> <feature version="[7.1,9)">pax-web-core</feature>
>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>> </feature>
>> -->
>>
>>
>>
>> Best regards,
>> Alex soto
>>
>>
>>
>>
>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>
>>> I am looking for the same, did you find any solution?
>>>
>>>
>>> Best regards,
>>> Alex soto
>>>
>>>
>>>
>>>
>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>
>>>> Hello,
>>>>
>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>
>>>> If so, did the description work out of box or are any changes necessary?
>>>>
>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>> Any idea why?
>>>>
>>>> Sincerely
>>>> Christian
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Hi Christian,
Thanks for the update.
As said in another mail, issues should be fixed/improved at keycloak.
Waiting fixes in keycloak directly, maybe it’s interesting to evaluate some alternatives (maybe a mix of Syncope or Shiro for instance).
Regards
JB
> Le 2 juin 2020 à 05:55, Christian Lutz <Ch...@kreeloo.de> a écrit :
>
> Hello Alex, JB
>
> I asked the same question some time ago here[1].
> And it took me some time to figure out how the get it up and running.
>
> First of all there is a bug in keycloak that prevents it from using it with jetty. I have created a PR[2] to fix it.
> But it hasn’t been merged yet.
> Also the configuration wasn’t as easy as I hoped. As you can read in my previous mail I wasn’t able to
> to get it up running with the new shiny approach only with the old one documented here[3].
>
> [1]: http://karaf.922171.n3.nabble.com/Using-jetty-instead-of-undertow-with-keycloak-possible-td4057988.html <http://karaf.922171.n3.nabble.com/Using-jetty-instead-of-undertow-with-keycloak-possible-td4057988.html>
> [2]: https://github.com/keycloak/keycloak/pull/6978 <https://github.com/keycloak/keycloak/pull/6978>
> [3]: https://github.com/jboss-fuse/karaf-quickstarts/blob/7.x.redhat-7-x/security/keycloak/fuse-keycloak.adoc#securing-embedded-cxf-server---previous-solution <https://github.com/jboss-fuse/karaf-quickstarts/blob/7.x.redhat-7-x/security/keycloak/fuse-keycloak.adoc#securing-embedded-cxf-server---previous-solution>
>
> best regards
> Christian
>
>
>> Am 01.06.2020 um 22:49 schrieb Alex Soto <alex.soto@envieta.com <ma...@envieta.com>>:
>>
>> Thanks, JB,
>>
>> Unfortunately, my app depends heavily on Camel. I would be interested in a way to make Keycloak work with default Jetty, this will probably be easier than replacing Jetty with Undertow at this point. Any help will be appreciated.
>>
>> Best regards,
>> Alex soto
>>
>>
>>
>>
>>> On Jun 1, 2020, at 3:32 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>
>>> Add etc/org.apache.karaf.features.xml containing:
>>>
>>> <featuresProcessing>
>>>
>>> <blacklistedFeatures>
>>> <feature>pax-http-jetty</feature>
>>> </blacklistedFeatures>
>>>
>>> </featuresProcessing>
>>>
>>> The purpose is to avoid to install this feature.
>>>
>>> However, be careful, some third party projects (like camel or cxf) directly use jetty feature. I identify some issue about that and I will update these features to use http provider instead.
>>>
>>> Regards
>>> JB
>>>
>>>> Le 1 juin 2020 à 21:25, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>
>>>> Blacklist? How?
>>>>
>>>> Best regards,
>>>> Alex soto
>>>>
>>>>
>>>>
>>>>
>>>>> On Jun 1, 2020, at 3:11 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>>>
>>>>> Just installing the pax web undertow feature will add the HTTP undertow provider capability. You just have to blacklist jetty feature and it should be fine.
>>>>>
>>>>> Regards
>>>>> JB
>>>>>
>>>>>> Le 1 juin 2020 à 21:09, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>>>
>>>>>> If I have to use Undertow, I’d be willing to try it, but there is little or no info on how to switch Pax-Web to use Undertow.
>>>>>> I don’t have any particular need to use Jetty, just trying to be isolated from this by Pax-Web.
>>>>>>
>>>>>> Best regards,
>>>>>> Alex soto
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>>>>>
>>>>>>> Hi,
>>>>>>>
>>>>>>> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>>>>>>>
>>>>>>> Regards
>>>>>>> JB
>>>>>>>
>>>>>>>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>>>>>
>>>>>>>> Hello,
>>>>>>>>
>>>>>>>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>>>>>>>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>>>>>>>
>>>>>>>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>>>>>>>> <!--
>>>>>>>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>>>>>>>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>>>>>>>> <feature>keycloak-adapter-core</feature>
>>>>>>>> <feature version="[7.1,9)">pax-web-core</feature>
>>>>>>>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>>>>>>>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>>>>>>>> </feature>
>>>>>>>> -->
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> Best regards,
>>>>>>>> Alex soto
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>>>>>>>
>>>>>>>>> I am looking for the same, did you find any solution?
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> Best regards,
>>>>>>>>> Alex soto
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>>>>>>>
>>>>>>>>>> Hello,
>>>>>>>>>>
>>>>>>>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>>>>>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>>>>>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>>>>>>>
>>>>>>>>>> If so, did the description work out of box or are any changes necessary?
>>>>>>>>>>
>>>>>>>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>>>>>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>>>>>>>> Any idea why?
>>>>>>>>>>
>>>>>>>>>> Sincerely
>>>>>>>>>> Christian
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Christian Lutz <Ch...@kreeloo.de>.
Hello Alex, JB
I asked the same question some time ago here[1].
And it took me some time to figure out how the get it up and running.
First of all there is a bug in keycloak that prevents it from using it with jetty. I have created a PR[2] to fix it.
But it hasn’t been merged yet.
Also the configuration wasn’t as easy as I hoped. As you can read in my previous mail I wasn’t able to
to get it up running with the new shiny approach only with the old one documented here[3].
[1]: http://karaf.922171.n3.nabble.com/Using-jetty-instead-of-undertow-with-keycloak-possible-td4057988.html <http://karaf.922171.n3.nabble.com/Using-jetty-instead-of-undertow-with-keycloak-possible-td4057988.html>
[2]: https://github.com/keycloak/keycloak/pull/6978 <https://github.com/keycloak/keycloak/pull/6978>
[3]: https://github.com/jboss-fuse/karaf-quickstarts/blob/7.x.redhat-7-x/security/keycloak/fuse-keycloak.adoc#securing-embedded-cxf-server---previous-solution <https://github.com/jboss-fuse/karaf-quickstarts/blob/7.x.redhat-7-x/security/keycloak/fuse-keycloak.adoc#securing-embedded-cxf-server---previous-solution>
best regards
Christian
> Am 01.06.2020 um 22:49 schrieb Alex Soto <al...@envieta.com>:
>
> Thanks, JB,
>
> Unfortunately, my app depends heavily on Camel. I would be interested in a way to make Keycloak work with default Jetty, this will probably be easier than replacing Jetty with Undertow at this point. Any help will be appreciated.
>
> Best regards,
> Alex soto
>
>
>
>
>> On Jun 1, 2020, at 3:32 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>
>> Add etc/org.apache.karaf.features.xml containing:
>>
>> <featuresProcessing>
>>
>> <blacklistedFeatures>
>> <feature>pax-http-jetty</feature>
>> </blacklistedFeatures>
>>
>> </featuresProcessing>
>>
>> The purpose is to avoid to install this feature.
>>
>> However, be careful, some third party projects (like camel or cxf) directly use jetty feature. I identify some issue about that and I will update these features to use http provider instead.
>>
>> Regards
>> JB
>>
>>> Le 1 juin 2020 à 21:25, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>
>>> Blacklist? How?
>>>
>>> Best regards,
>>> Alex soto
>>>
>>>
>>>
>>>
>>>> On Jun 1, 2020, at 3:11 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>>
>>>> Just installing the pax web undertow feature will add the HTTP undertow provider capability. You just have to blacklist jetty feature and it should be fine.
>>>>
>>>> Regards
>>>> JB
>>>>
>>>>> Le 1 juin 2020 à 21:09, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>>
>>>>> If I have to use Undertow, I’d be willing to try it, but there is little or no info on how to switch Pax-Web to use Undertow.
>>>>> I don’t have any particular need to use Jetty, just trying to be isolated from this by Pax-Web.
>>>>>
>>>>> Best regards,
>>>>> Alex soto
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>>>>
>>>>>> Hi,
>>>>>>
>>>>>> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>>>>>>
>>>>>> Regards
>>>>>> JB
>>>>>>
>>>>>>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>>>>
>>>>>>> Hello,
>>>>>>>
>>>>>>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>>>>>>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>>>>>>
>>>>>>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>>>>>>> <!--
>>>>>>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>>>>>>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>>>>>>> <feature>keycloak-adapter-core</feature>
>>>>>>> <feature version="[7.1,9)">pax-web-core</feature>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>>>>>>> </feature>
>>>>>>> -->
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Best regards,
>>>>>>> Alex soto
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>>>>>>
>>>>>>>> I am looking for the same, did you find any solution?
>>>>>>>>
>>>>>>>>
>>>>>>>> Best regards,
>>>>>>>> Alex soto
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>>>>>>
>>>>>>>>> Hello,
>>>>>>>>>
>>>>>>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>>>>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>>>>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>>>>>>
>>>>>>>>> If so, did the description work out of box or are any changes necessary?
>>>>>>>>>
>>>>>>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>>>>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>>>>>>> Any idea why?
>>>>>>>>>
>>>>>>>>> Sincerely
>>>>>>>>> Christian
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Hi,
OK, I understand. Actually, the issue is more on keycloak IMHO. It should leverage the http provider as well (so supporting jetty) and the features is "so so".
Unfortunately, I don’t have any "entry point" at keycloak so we have to trust the keycloak guys to accept PR or fix themselves.
Regards
JB
> Le 1 juin 2020 à 22:49, Alex Soto <al...@envieta.com> a écrit :
>
> Thanks, JB,
>
> Unfortunately, my app depends heavily on Camel. I would be interested in a way to make Keycloak work with default Jetty, this will probably be easier than replacing Jetty with Undertow at this point. Any help will be appreciated.
>
> Best regards,
> Alex soto
>
>
>
>
>> On Jun 1, 2020, at 3:32 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>
>> Add etc/org.apache.karaf.features.xml containing:
>>
>> <featuresProcessing>
>>
>> <blacklistedFeatures>
>> <feature>pax-http-jetty</feature>
>> </blacklistedFeatures>
>>
>> </featuresProcessing>
>>
>> The purpose is to avoid to install this feature.
>>
>> However, be careful, some third party projects (like camel or cxf) directly use jetty feature. I identify some issue about that and I will update these features to use http provider instead.
>>
>> Regards
>> JB
>>
>>> Le 1 juin 2020 à 21:25, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>
>>> Blacklist? How?
>>>
>>> Best regards,
>>> Alex soto
>>>
>>>
>>>
>>>
>>>> On Jun 1, 2020, at 3:11 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>>
>>>> Just installing the pax web undertow feature will add the HTTP undertow provider capability. You just have to blacklist jetty feature and it should be fine.
>>>>
>>>> Regards
>>>> JB
>>>>
>>>>> Le 1 juin 2020 à 21:09, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>>
>>>>> If I have to use Undertow, I’d be willing to try it, but there is little or no info on how to switch Pax-Web to use Undertow.
>>>>> I don’t have any particular need to use Jetty, just trying to be isolated from this by Pax-Web.
>>>>>
>>>>> Best regards,
>>>>> Alex soto
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>>>>
>>>>>> Hi,
>>>>>>
>>>>>> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>>>>>>
>>>>>> Regards
>>>>>> JB
>>>>>>
>>>>>>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>>>>
>>>>>>> Hello,
>>>>>>>
>>>>>>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>>>>>>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>>>>>>
>>>>>>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>>>>>>> <!--
>>>>>>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>>>>>>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>>>>>>> <feature>keycloak-adapter-core</feature>
>>>>>>> <feature version="[7.1,9)">pax-web-core</feature>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>>>>>>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>>>>>>> </feature>
>>>>>>> -->
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Best regards,
>>>>>>> Alex soto
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>>>>>>
>>>>>>>> I am looking for the same, did you find any solution?
>>>>>>>>
>>>>>>>>
>>>>>>>> Best regards,
>>>>>>>> Alex soto
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>>>>>>
>>>>>>>>> Hello,
>>>>>>>>>
>>>>>>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>>>>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>>>>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>>>>>>
>>>>>>>>> If so, did the description work out of box or are any changes necessary?
>>>>>>>>>
>>>>>>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>>>>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>>>>>>> Any idea why?
>>>>>>>>>
>>>>>>>>> Sincerely
>>>>>>>>> Christian
>>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Alex Soto <al...@envieta.com>.
Thanks, JB,
Unfortunately, my app depends heavily on Camel. I would be interested in a way to make Keycloak work with default Jetty, this will probably be easier than replacing Jetty with Undertow at this point. Any help will be appreciated.
Best regards,
Alex soto
> On Jun 1, 2020, at 3:32 PM, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>
> Add etc/org.apache.karaf.features.xml containing:
>
> <featuresProcessing>
>
> <blacklistedFeatures>
> <feature>pax-http-jetty</feature>
> </blacklistedFeatures>
>
> </featuresProcessing>
>
> The purpose is to avoid to install this feature.
>
> However, be careful, some third party projects (like camel or cxf) directly use jetty feature. I identify some issue about that and I will update these features to use http provider instead.
>
> Regards
> JB
>
>> Le 1 juin 2020 à 21:25, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>
>> Blacklist? How?
>>
>> Best regards,
>> Alex soto
>>
>>
>>
>>
>>> On Jun 1, 2020, at 3:11 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>
>>> Just installing the pax web undertow feature will add the HTTP undertow provider capability. You just have to blacklist jetty feature and it should be fine.
>>>
>>> Regards
>>> JB
>>>
>>>> Le 1 juin 2020 à 21:09, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>
>>>> If I have to use Undertow, I’d be willing to try it, but there is little or no info on how to switch Pax-Web to use Undertow.
>>>> I don’t have any particular need to use Jetty, just trying to be isolated from this by Pax-Web.
>>>>
>>>> Best regards,
>>>> Alex soto
>>>>
>>>>
>>>>
>>>>
>>>>> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>>>
>>>>> Hi,
>>>>>
>>>>> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>>>>>
>>>>> Regards
>>>>> JB
>>>>>
>>>>>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>>>
>>>>>> Hello,
>>>>>>
>>>>>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>>>>>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>>>>>
>>>>>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>>>>>> <!--
>>>>>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>>>>>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>>>>>> <feature>keycloak-adapter-core</feature>
>>>>>> <feature version="[7.1,9)">pax-web-core</feature>
>>>>>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>>>>>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>>>>>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>>>>>> </feature>
>>>>>> -->
>>>>>>
>>>>>>
>>>>>>
>>>>>> Best regards,
>>>>>> Alex soto
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>>>>>
>>>>>>> I am looking for the same, did you find any solution?
>>>>>>>
>>>>>>>
>>>>>>> Best regards,
>>>>>>> Alex soto
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>>>>>
>>>>>>>> Hello,
>>>>>>>>
>>>>>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>>>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>>>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>>>>>
>>>>>>>> If so, did the description work out of box or are any changes necessary?
>>>>>>>>
>>>>>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>>>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>>>>>> Any idea why?
>>>>>>>>
>>>>>>>> Sincerely
>>>>>>>> Christian
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Add etc/org.apache.karaf.features.xml containing:
<featuresProcessing>
<blacklistedFeatures>
<feature>pax-http-jetty</feature>
</blacklistedFeatures>
</featuresProcessing>
The purpose is to avoid to install this feature.
However, be careful, some third party projects (like camel or cxf) directly use jetty feature. I identify some issue about that and I will update these features to use http provider instead.
Regards
JB
> Le 1 juin 2020 à 21:25, Alex Soto <al...@envieta.com> a écrit :
>
> Blacklist? How?
>
> Best regards,
> Alex soto
>
>
>
>
>> On Jun 1, 2020, at 3:11 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>
>> Just installing the pax web undertow feature will add the HTTP undertow provider capability. You just have to blacklist jetty feature and it should be fine.
>>
>> Regards
>> JB
>>
>>> Le 1 juin 2020 à 21:09, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>
>>> If I have to use Undertow, I’d be willing to try it, but there is little or no info on how to switch Pax-Web to use Undertow.
>>> I don’t have any particular need to use Jetty, just trying to be isolated from this by Pax-Web.
>>>
>>> Best regards,
>>> Alex soto
>>>
>>>
>>>
>>>
>>>> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>>
>>>> Hi,
>>>>
>>>> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>>>>
>>>> Regards
>>>> JB
>>>>
>>>>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>>
>>>>> Hello,
>>>>>
>>>>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>>>>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>>>>
>>>>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>>>>> <!--
>>>>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>>>>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>>>>> <feature>keycloak-adapter-core</feature>
>>>>> <feature version="[7.1,9)">pax-web-core</feature>
>>>>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>>>>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>>>>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>>>>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>>>>> </feature>
>>>>> -->
>>>>>
>>>>>
>>>>>
>>>>> Best regards,
>>>>> Alex soto
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>>>>
>>>>>> I am looking for the same, did you find any solution?
>>>>>>
>>>>>>
>>>>>> Best regards,
>>>>>> Alex soto
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>>>>
>>>>>>> Hello,
>>>>>>>
>>>>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>>>>
>>>>>>> If so, did the description work out of box or are any changes necessary?
>>>>>>>
>>>>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>>>>> Any idea why?
>>>>>>>
>>>>>>> Sincerely
>>>>>>> Christian
>>>>>>
>>>>>
>>>>
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Alex Soto <al...@envieta.com>.
Blacklist? How?
Best regards,
Alex soto
> On Jun 1, 2020, at 3:11 PM, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>
> Just installing the pax web undertow feature will add the HTTP undertow provider capability. You just have to blacklist jetty feature and it should be fine.
>
> Regards
> JB
>
>> Le 1 juin 2020 à 21:09, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>
>> If I have to use Undertow, I’d be willing to try it, but there is little or no info on how to switch Pax-Web to use Undertow.
>> I don’t have any particular need to use Jetty, just trying to be isolated from this by Pax-Web.
>>
>> Best regards,
>> Alex soto
>>
>>
>>
>>
>>> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>>
>>> Hi,
>>>
>>> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>>>
>>> Regards
>>> JB
>>>
>>>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>>
>>>> Hello,
>>>>
>>>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>>>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>>>
>>>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>>>> <!--
>>>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>>>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>>>> <feature>keycloak-adapter-core</feature>
>>>> <feature version="[7.1,9)">pax-web-core</feature>
>>>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>>>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>>>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>>>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>>>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>>>> </feature>
>>>> -->
>>>>
>>>>
>>>>
>>>> Best regards,
>>>> Alex soto
>>>>
>>>>
>>>>
>>>>
>>>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>>>
>>>>> I am looking for the same, did you find any solution?
>>>>>
>>>>>
>>>>> Best regards,
>>>>> Alex soto
>>>>>
>>>>>
>>>>>
>>>>>
>>>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>>>
>>>>>> Hello,
>>>>>>
>>>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>>>
>>>>>> If so, did the description work out of box or are any changes necessary?
>>>>>>
>>>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>>>> Any idea why?
>>>>>>
>>>>>> Sincerely
>>>>>> Christian
>>>>>
>>>>
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Just installing the pax web undertow feature will add the HTTP undertow provider capability. You just have to blacklist jetty feature and it should be fine.
Regards
JB
> Le 1 juin 2020 à 21:09, Alex Soto <al...@envieta.com> a écrit :
>
> If I have to use Undertow, I’d be willing to try it, but there is little or no info on how to switch Pax-Web to use Undertow.
> I don’t have any particular need to use Jetty, just trying to be isolated from this by Pax-Web.
>
> Best regards,
> Alex soto
>
>
>
>
>> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb@nanthrax.net <ma...@nanthrax.net>> wrote:
>>
>> Hi,
>>
>> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>>
>> Regards
>> JB
>>
>>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>>
>>> Hello,
>>>
>>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>>
>>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>>> <!--
>>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>>> <feature>keycloak-adapter-core</feature>
>>> <feature version="[7.1,9)">pax-web-core</feature>
>>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>>> </feature>
>>> -->
>>>
>>>
>>>
>>> Best regards,
>>> Alex soto
>>>
>>>
>>>
>>>
>>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>>
>>>> I am looking for the same, did you find any solution?
>>>>
>>>>
>>>> Best regards,
>>>> Alex soto
>>>>
>>>>
>>>>
>>>>
>>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>>
>>>>> Hello,
>>>>>
>>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>>
>>>>> If so, did the description work out of box or are any changes necessary?
>>>>>
>>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>>> Any idea why?
>>>>>
>>>>> Sincerely
>>>>> Christian
>>>>
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Alex Soto <al...@envieta.com>.
If I have to use Undertow, I’d be willing to try it, but there is little or no info on how to switch Pax-Web to use Undertow.
I don’t have any particular need to use Jetty, just trying to be isolated from this by Pax-Web.
Best regards,
Alex soto
> On Jun 1, 2020, at 12:45 PM, Jean-Baptiste Onofre <jb...@nanthrax.net> wrote:
>
> Hi,
>
> Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
>
> Regards
> JB
>
>> Le 1 juin 2020 à 16:30, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> a écrit :
>>
>> Hello,
>>
>> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
>> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>>
>> <!-- Keycloak adapter for PaxWeb jetty provider -->
>> <!--
>> <feature name="keycloak-pax-http-jetty" version="10.0.1">
>> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
>> <feature>keycloak-adapter-core</feature>
>> <feature version="[7.1,9)">pax-web-core</feature>
>> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
>> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
>> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
>> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
>> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
>> </feature>
>> -->
>>
>>
>>
>> Best regards,
>> Alex soto
>>
>>
>>
>>
>>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>>
>>> I am looking for the same, did you find any solution?
>>>
>>>
>>> Best regards,
>>> Alex soto
>>>
>>>
>>>
>>>
>>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>>
>>>> Hello,
>>>>
>>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>>> but instead of using cxf with undertow using this approach with jetty.
>>>>
>>>> If so, did the description work out of box or are any changes necessary?
>>>>
>>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>>> Any idea why?
>>>>
>>>> Sincerely
>>>> Christian
>>>
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Jean-Baptiste Onofre <jb...@nanthrax.net>.
Hi,
Yes, I have something (not with the latest keycloak) but I had to "fix" the keycloak feature.
Regards
JB
> Le 1 juin 2020 à 16:30, Alex Soto <al...@envieta.com> a écrit :
>
> Hello,
>
> Anybody has a working example of Pax-Web with Jetty, and Keycloak?
> The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
>
> <!-- Keycloak adapter for PaxWeb jetty provider -->
> <!--
> <feature name="keycloak-pax-http-jetty" version="10.0.1">
> <details>Keycloak Pax-Web adapter for Jetty 9.4</details>
> <feature>keycloak-adapter-core</feature>
> <feature version="[7.1,9)">pax-web-core</feature>
> <bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
> <bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
> <bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
> <bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
> <bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
> </feature>
> -->
>
>
>
> Best regards,
> Alex soto
>
>
>
>
>> On May 29, 2020, at 4:19 PM, Alex Soto <alex.soto@envieta.com <ma...@envieta.com>> wrote:
>>
>> I am looking for the same, did you find any solution?
>>
>>
>> Best regards,
>> Alex soto
>>
>>
>>
>>
>>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>>
>>> Hello,
>>>
>>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>>> but instead of using cxf with undertow using this approach with jetty.
>>>
>>> If so, did the description work out of box or are any changes necessary?
>>>
>>> For some reason the keycloak-pax-http-jetty feature is commented out.
>>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>>> Any idea why?
>>>
>>> Sincerely
>>> Christian
>>
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Alex Soto <al...@envieta.com>.
Hello,
Anybody has a working example of Pax-Web with Jetty, and Keycloak?
The Jetty features are commented out in the Keycloak keycloak-osgi-features-10.0.1 /features.xml file:
<!-- Keycloak adapter for PaxWeb jetty provider -->
<!--
<feature name="keycloak-pax-http-jetty" version="10.0.1">
<details>Keycloak Pax-Web adapter for Jetty 9.4</details>
<feature>keycloak-adapter-core</feature>
<feature version="[7.1,9)">pax-web-core</feature>
<bundle>mvn:org.keycloak/keycloak-osgi-adapter/10.0.1</bundle>
<bundle>mvn:org.keycloak/keycloak-jetty-adapter-spi/10.0.1</bundle>
<bundle>mvn:org.keycloak/keycloak-jetty-core/10.0.1</bundle>
<bundle>mvn:org.keycloak/keycloak-jetty94-adapter/10.0.1</bundle>
<bundle>mvn:org.keycloak/keycloak-pax-web-jetty94/10.0.1</bundle>
</feature>
-->
Best regards,
Alex soto
> On May 29, 2020, at 4:19 PM, Alex Soto <al...@envieta.com> wrote:
>
> I am looking for the same, did you find any solution?
>
>
> Best regards,
> Alex soto
>
>
>
>
>> On Apr 7, 2020, at 5:06 PM, Christian Lutz <ChristianLutz@kreeloo.de <ma...@kreeloo.de>> wrote:
>>
>> Hello,
>>
>> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
>> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
>> but instead of using cxf with undertow using this approach with jetty.
>>
>> If so, did the description work out of box or are any changes necessary?
>>
>> For some reason the keycloak-pax-http-jetty feature is commented out.
>> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
>> Any idea why?
>>
>> Sincerely
>> Christian
>
Re: Using jetty instead of undertow with keycloak possible
Posted by Alex Soto <al...@envieta.com>.
I am looking for the same, did you find any solution?
Best regards,
Alex soto
> On Apr 7, 2020, at 5:06 PM, Christian Lutz <Ch...@kreeloo.de> wrote:
>
> Hello,
>
> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
> but instead of using cxf with undertow using this approach with jetty.
>
> If so, did the description work out of box or are any changes necessary?
>
> For some reason the keycloak-pax-http-jetty feature is commented out.
> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
> Any idea why?
>
> Sincerely
> Christian
Re: Using jetty instead of undertow with keycloak possible
Posted by Christian Lutz <Ch...@kreeloo.de>.
Hello,
I tried to get the keycloak integration up and running with karat (4.2.8) cxf (3.3.5) jetty (9.4.x) and keycloak (9.0.3).
* https://github.com/jboss-fuse/karaf-quickstarts/blob/7.x.redhat-7-x/security/keycloak/fuse-keycloak.adoc#securing-embedded-cxf-server---previous-solution <https://github.com/jboss-fuse/karaf-quickstarts/blob/7.x.redhat-7-x/security/keycloak/fuse-keycloak.adoc#securing-embedded-cxf-server---previous-solution>
* https://github.com/jboss-fuse/karaf-quickstarts/blob/7.x.redhat-7-x/security/keycloak/fuse-keycloak.adoc#securing-embedded-cxf-server---new-solution <https://github.com/jboss-fuse/karaf-quickstarts/blob/7.x.redhat-7-x/security/keycloak/fuse-keycloak.adoc#securing-embedded-cxf-server---new-solution>
At first both solutions didn’t work. I found a bug within the jetty adapter. I created PR for this[1]
With this fix the previous solutions works, now.
However I wasn’t able to get the new solution working.
The questions is, is it a bug within one of the components pax-web, keycloak adapter or just a configuration error.
Does anyone have a running instance with the new solution.
kind regards
Christian
[1]: https://github.com/keycloak/keycloak/pull/6978 <https://github.com/keycloak/keycloak/pull/6978>
> Am 07.04.2020 um 23:06 schrieb Christian Lutz <Ch...@kreeloo.de>:
>
> Hello,
>
> I just wanted to ask if someone has a running karaf 4.2.8 instance with REST services protected by keycloak.
> Based on this https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine <https://github.com/jboss-fuse/karaf-quickstarts/tree/7.x.redhat-7-x/security/keycloak/keycloak-cxf#testing-embedded-undertow-servlet-engine> approach,
> but instead of using cxf with undertow using this approach with jetty.
>
> If so, did the description work out of box or are any changes necessary?
>
> For some reason the keycloak-pax-http-jetty feature is commented out.
> https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml <https://github.com/keycloak/keycloak/blob/master/distribution/adapters/osgi/features/src/main/resources/features.xml>
> Any idea why?
>
> Sincerely
> Christian