Registration / Authentication system for Forms

classic Classic list List threaded Threaded
15 messages Options
Reply | Threaded
Open this post in threaded view
|

Registration / Authentication system for Forms

Eusebio Echevarria
Hi, 

I've been playing with Orbeon PE and from a forms point of view it does everything we need it to do and more. The form wizard layout and the putting of data into a PDF template once complete is excellent, I haven't found any other form product that comes close, especially with repeating rows and complex validations. 

Now I need to link it to a front end which will handle user registrations, standard authentication and authorization etc. 

I have explored using Liferay portal, there are issues with Liferay 7 and latest Orbeon which there is a bug ticket for, either way though, it seems a bit clunky for just user management. 

Does anyone have any examples of front ends they have used, or anything which can act as a gui to handle the tomcat user system?

I saw one topic related to this from 2010 but there were no answers or suggestions given. 

Thanks, 

Eusebio

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

Erik Bruchez
Administrator
Eusebio,

> I've been playing with Orbeon PE and from a forms point of view it does everything we need it to do and more. The form wizard layout and the putting of data into a PDF template once complete is excellent, I haven't found any other form product that comes close, especially with repeating rows and complex validations.

Thanks for the positive feedback!

> I have explored using Liferay portal, there are issues with Liferay 7 and latest Orbeon which there is a bug ticket for, either way though, it seems a bit clunky for just user management.

I am not sure if it is clunky, although it can certainly look a bit heavy! But I have a feeling (which is not very scientific) that a number of Liferay users are primarily using it for user management! So still, that might be an option.

I recently found KeyCloak, by RedHat:

    http://www.keycloak.org/

It seems to have a number of very interesting features, but we don't have experience with it yet.

-Erik
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

Eusebio Echevarria
Hi Eric,

Thanks for the response. Heavy is a better description!

I'll check out Keycloak and report back.

Cheers

Eusebio

On 21 Sep 2016, at 05:56, Erik Bruchez <[hidden email]> wrote:

Eusebio,

I've been playing with Orbeon PE and from a forms point of view it does
everything we need it to do and more. The form wizard layout and the
putting of data into a PDF template once complete is excellent, I haven't
found any other form product that comes close, especially with repeating
rows and complex validations.

Thanks for the positive feedback!

I have explored using Liferay portal, there are issues with Liferay 7 and
latest Orbeon which there is a bug ticket for, either way though, it seems
a bit clunky for just user management.

I am not sure if it is clunky, although it can certainly look a bit heavy!
But I have a feeling (which is not very scientific) that a number of Liferay
users are primarily using it for user management! So still, that might be an
option.

I recently found KeyCloak, by RedHat:

   http://www.keycloak.org/

It seems to have a number of very interesting features, but we don't have
experience with it yet.

-Erik

--
View this message in context: http://discuss.orbeon.com/Registration-Authentication-system-for-Forms-tp4661779p4661788.html
Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com.

--
You received this message because you are subscribed to a topic in the Google Groups "Orbeon Forms" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/orbeon/yU8gh9ElgSU/unsubscribe.
To unsubscribe from this group and all its topics, send an email to [hidden email].
To post to this group, send email to [hidden email].

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

Eusebio Echevarria
In reply to this post by Erik Bruchez
So...I am getting there. 

I have Keycloak installed on the same server and running on a different port. I've gone through a similar setup for a test Tomcat app using Keycloak as auth provider but it isn't kicking into action for some reason. Not sure if anyone else has had a play around with this yet. 

In terms of user registration and management, I've tested it all and that works perfectly, a new theme would be required but that looks straight forward. 

Steps taken so far:-

- Install fresh Tomcat - set roles for manager-gui and admin-gui
- Install fresh Orbeon - tested unauthenticated access
- Install fresh Keycloak (changed ports to not conflict)

- Copied the Tomcat dist jar dependencies into the /lib folder for Keycloak
- Created a context.xml in the /orbeon/META-INF folder and added 

<Context>
        <Valve className="org.keycloak.adapters.tomcat.KeycloakAuthenticatorValve" />
</Context>

- Uncommented the security settings in web.xml and set the auth provider to be KEYCLOAK
- Set a new realm, client and user in Keycloak app for testing
- Setup a new role called 'orbeon-user' in Keycloak and added the test user to this role
- Edited the local.properties.xml to include the new role information and to set the container to be in charge of the auth. 

I think there is something I am missing to push orbeon to send auth requests to Keycloak but currently I just get a 403 forbidden back from Tomcat. 

If anyone is interested in trying out I can send more detailed steps or where I am up to so far. 

Thanks, 

Eusebio




On 21 September 2016 at 05:56, Erik Bruchez <[hidden email]> wrote:
Eusebio,

> I've been playing with Orbeon PE and from a forms point of view it does
> everything we need it to do and more. The form wizard layout and the
> putting of data into a PDF template once complete is excellent, I haven't
> found any other form product that comes close, especially with repeating
> rows and complex validations.

Thanks for the positive feedback!

> I have explored using Liferay portal, there are issues with Liferay 7 and
> latest Orbeon which there is a bug ticket for, either way though, it seems
> a bit clunky for just user management.

I am not sure if it is clunky, although it can certainly look a bit heavy!
But I have a feeling (which is not very scientific) that a number of Liferay
users are primarily using it for user management! So still, that might be an
option.

I recently found KeyCloak, by RedHat:

    http://www.keycloak.org/

It seems to have a number of very interesting features, but we don't have
experience with it yet.

-Erik

--
View this message in context: http://discuss.orbeon.com/Registration-Authentication-system-for-Forms-tp4661779p4661788.html
Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com.

--
You received this message because you are subscribed to a topic in the Google Groups "Orbeon Forms" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/orbeon/yU8gh9ElgSU/unsubscribe.
To unsubscribe from this group and all its topics, send an email to [hidden email].
To post to this group, send email to [hidden email].

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

Erik Bruchez
Administrator
Eusebio,

Cool, thanks for sharing. Hopefully it's just a small thing missing!

-Erik
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

sk85
In reply to this post by Eusebio Echevarria
Hi Eusebio,

Were you able to resolve this issue. I am facing the issue while trying to
integrate with Keycloak.

Thanks
SK

--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1580756285943-0.post%40n4.nabble.com.
SK
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

SK
In reply to this post by Eusebio Echevarria
Hi Eusebio,

Were you able to resolve this issue? I am getting the error while trying to integrate with keyCloak.

Thanks
SK

On Wednesday, 21 September 2016 09:24:11 UTC-7, Eusebio Echevarria wrote:
So...I am getting there. 

I have Keycloak installed on the same server and running on a different port. I've gone through a similar setup for a test Tomcat app using Keycloak as auth provider but it isn't kicking into action for some reason. Not sure if anyone else has had a play around with this yet. 

In terms of user registration and management, I've tested it all and that works perfectly, a new theme would be required but that looks straight forward. 

Steps taken so far:-

- Install fresh Tomcat - set roles for manager-gui and admin-gui
- Install fresh Orbeon - tested unauthenticated access
- Install fresh Keycloak (changed ports to not conflict)

- Copied the Tomcat dist jar dependencies into the /lib folder for Keycloak
- Created a context.xml in the /orbeon/META-INF folder and added 

<Context>
        <Valve className="org.keycloak.adapters.tomcat.KeycloakAuthenticatorValve" />
</Context>

- Uncommented the security settings in web.xml and set the auth provider to be KEYCLOAK
- Set a new realm, client and user in Keycloak app for testing
- Setup a new role called 'orbeon-user' in Keycloak and added the test user to this role
- Edited the local.properties.xml to include the new role information and to set the container to be in charge of the auth. 

I think there is something I am missing to push orbeon to send auth requests to Keycloak but currently I just get a 403 forbidden back from Tomcat. 

If anyone is interested in trying out I can send more detailed steps or where I am up to so far. 

Thanks, 

Eusebio




On 21 September 2016 at 05:56, Erik Bruchez <<a href="javascript:" target="_blank" gdf-obfuscated-mailto="-4M3DeD-BwAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">ebru...@...> wrote:
Eusebio,

> I've been playing with Orbeon PE and from a forms point of view it does
> everything we need it to do and more. The form wizard layout and the
> putting of data into a PDF template once complete is excellent, I haven't
> found any other form product that comes close, especially with repeating
> rows and complex validations.

Thanks for the positive feedback!

> I have explored using Liferay portal, there are issues with Liferay 7 and
> latest Orbeon which there is a bug ticket for, either way though, it seems
> a bit clunky for just user management.

I am not sure if it is clunky, although it can certainly look a bit heavy!
But I have a feeling (which is not very scientific) that a number of Liferay
users are primarily using it for user management! So still, that might be an
option.

I recently found KeyCloak, by RedHat:

    <a href="http://www.keycloak.org/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fwww.keycloak.org%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEgRImKGoEDvKWoBoFL4IuzTUKkzQ&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fwww.keycloak.org%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEgRImKGoEDvKWoBoFL4IuzTUKkzQ&#39;;return true;">http://www.keycloak.org/

It seems to have a number of very interesting features, but we don't have
experience with it yet.

-Erik

--
View this message in context: <a href="http://discuss.orbeon.com/Registration-Authentication-system-for-Forms-tp4661779p4661788.html" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2FRegistration-Authentication-system-for-Forms-tp4661779p4661788.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGjVH2dFnt0s5WvZkXD-D-JE4jb_g&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2FRegistration-Authentication-system-for-Forms-tp4661779p4661788.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNGjVH2dFnt0s5WvZkXD-D-JE4jb_g&#39;;return true;">http://discuss.orbeon.com/Registration-Authentication-system-for-Forms-tp4661779p4661788.html
Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com.

--
You received this message because you are subscribed to a topic in the Google Groups "Orbeon Forms" group.
To unsubscribe from this topic, visit <a href="https://groups.google.com/d/topic/orbeon/yU8gh9ElgSU/unsubscribe" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://groups.google.com/d/topic/orbeon/yU8gh9ElgSU/unsubscribe&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/topic/orbeon/yU8gh9ElgSU/unsubscribe&#39;;return true;">https://groups.google.com/d/topic/orbeon/yU8gh9ElgSU/unsubscribe.
To unsubscribe from this group and all its topics, send an email to <a href="javascript:" target="_blank" gdf-obfuscated-mailto="-4M3DeD-BwAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">orb...@googlegroups.com.
To post to this group, send email to <a href="javascript:" target="_blank" gdf-obfuscated-mailto="-4M3DeD-BwAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">orb...@....

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/59bbc731-b51b-4b73-83db-7c3bf39c6848%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

timo-2
In reply to this post by sk85
Hi,

I'm also interested setup keycloak and orbeon.

Have you created keycloak.json file to WEB-INF folder as mentioned in https://www.keycloak.org/docs/latest/securing_apps/#_tomcat_adapter ?

-Timo

ti 4. helmik. 2020 klo 19.58 sk85 <[hidden email]> kirjoitti:
Hi Eusebio,

Were you able to resolve this issue. I am facing the issue while trying to
integrate with Keycloak.

Thanks
SK

--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1580756285943-0.post%40n4.nabble.com.

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/CAKt4_v2Dkw57SgDYeJJVCi8zTn2yXUXXh6qB0TBk0miQh--mAw%40mail.gmail.com.
SK
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

SK
Yes, created the keycloak json and added a context.xml in META-INF folder of orbeon war to include Keycloak Auth Valve. 
Then made changes to properties-local.xml to include container auth details. 
Now, whenever I try to access the orbeon form, it shows me KeyCloak login page, and after succesful athentication it shows me 403. I have checked the role names in keycloak with what's in web.xml security constraint, and all looks correct. I should be missing some small configuration.

On Tuesday, 4 February 2020 10:53:50 UTC-8, Timo Nisula wrote:
Hi,

I'm also interested setup keycloak and orbeon.

Have you created keycloak.json file to WEB-INF folder as mentioned in <a href="https://www.keycloak.org/docs/latest/securing_apps/#_tomcat_adapter" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.keycloak.org%2Fdocs%2Flatest%2Fsecuring_apps%2F%23_tomcat_adapter\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNG8EWu9Q5uMgTGzFt1byJZ1Z-VddA&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fwww.keycloak.org%2Fdocs%2Flatest%2Fsecuring_apps%2F%23_tomcat_adapter\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNG8EWu9Q5uMgTGzFt1byJZ1Z-VddA&#39;;return true;">https://www.keycloak.org/docs/latest/securing_apps/#_tomcat_adapter ?

-Timo

ti 4. helmik. 2020 klo 19.58 sk85 <<a href="javascript:" target="_blank" gdf-obfuscated-mailto="3Sfhqx3VCAAJ" rel="nofollow" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">sume...@aot-technologies.com> kirjoitti:
Hi Eusebio,

Were you able to resolve this issue. I am facing the issue while trying to
integrate with Keycloak.

Thanks
SK

--
Sent from: <a href="http://discuss.orbeon.com/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5V5zfD-87RVoalaG4cqO_RzdDcA&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5V5zfD-87RVoalaG4cqO_RzdDcA&#39;;return true;">http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to <a href="javascript:" rel="nofollow" target="_blank" gdf-obfuscated-mailto="3Sfhqx3VCAAJ" onmousedown="this.href=&#39;javascript:&#39;;return true;" onclick="this.href=&#39;javascript:&#39;;return true;">orb...@googlegroups.com.
To view this discussion on the web visit <a href="https://groups.google.com/d/msgid/orbeon/1580756285943-0.post%40n4.nabble.com" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://groups.google.com/d/msgid/orbeon/1580756285943-0.post%40n4.nabble.com&#39;;return true;" onclick="this.href=&#39;https://groups.google.com/d/msgid/orbeon/1580756285943-0.post%40n4.nabble.com&#39;;return true;">https://groups.google.com/d/msgid/orbeon/1580756285943-0.post%40n4.nabble.com.

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/96632310-b828-4cd9-ba65-e9ac97d43f7e%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

Alessandro  Vernet
Administrator
Hi SK,

I've also seen your question on Stack Overflow, and am glad you managed to
do that setup. Since you're getting the Keycloak login page when accessing
Orbeon Forms, it looks to me like you're 95% there :).

Could you set your logging as described in the Development configuration
section of the XForms Logging page (see link below), stop your server,
remove the `orbeon.log`, restart the server, reproduce the issue and attach
the `orbeon.log` you get, along with a screenshot of the webpage with the
403?

https://doc.orbeon.com/configuration/advanced/xforms-logging.html

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1580844043115-0.post%40n4.nabble.com.
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
SK
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

SK
Yes, I made some progress, thanks for your help!!

I have those logging changes in place and was trying to see if I can get some details. I can see below item in log;

2020-02-04 11:31:22,115 DEBUG auth  - using `Container` method
2020-02-04 11:31:22,115 DEBUG auth  - usernameOpt: `None`, roles: `Some(staff)`
 
Please find attached the log and screenshot.




SK


On Tuesday, 4 February 2020 11:20:38 UTC-8, Alessandro Vernet wrote:
Hi SK,

I've also seen your question on Stack Overflow, and am glad you managed to
do that setup. Since you're getting the Keycloak login page when accessing
Orbeon Forms, it looks to me like you're 95% there :).

Could you set your logging as described in the Development configuration
section of the XForms Logging page (see link below), stop your server,
remove the `orbeon.log`, restart the server, reproduce the issue and attach
the `orbeon.log` you get, along with a screenshot of the webpage with the
403?

<a href="https://doc.orbeon.com/configuration/advanced/xforms-logging.html" target="_blank" rel="nofollow" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fdoc.orbeon.com%2Fconfiguration%2Fadvanced%2Fxforms-logging.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEK0Z2SHcCE_8wt7zB5OqJ3fET_PQ&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fdoc.orbeon.com%2Fconfiguration%2Fadvanced%2Fxforms-logging.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEK0Z2SHcCE_8wt7zB5OqJ3fET_PQ&#39;;return true;">https://doc.orbeon.com/configuration/advanced/xforms-logging.html

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: <a href="http://discuss.orbeon.com/" target="_blank" rel="nofollow" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5V5zfD-87RVoalaG4cqO_RzdDcA&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5V5zfD-87RVoalaG4cqO_RzdDcA&#39;;return true;">http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/570bdac4-d89d-4cc7-aa54-36e38dfc87e7%40googlegroups.com.

Screen Shot 2020-02-04 at 11.31.41 AM.png (128K) Download Attachment
orbeon.log (571K) Download Attachment
SK
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

SK
Hi Alex,

If it helps, here is the access log.

0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:20 -0800] "GET /orbeon HTTP/1.1" 302 -
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:21 -0800] "GET /orbeon/ HTTP/1.1" 302 -
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/ HTTP/1.1" 200 4718
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/config/theme/examples.css HTTP/1.1" 200 136
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/fr/style/form-runner-bootstrap-override.css HTTP/1.1" 200 20737
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/fr/style/bootstrap/css/bootstrap.css HTTP/1.1" 200 133974
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/home.css HTTP/1.1" 200 1477
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/ops/jquery/jquery-3.3.1.min.js HTTP/1.1" 200 87020
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/apps/fr/style/orbeon-navbar-logo.png HTTP/1.1" 200 2278
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/images/fr-home-small.jpg HTTP/1.1" 200 25548
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/images/form-builder-small.jpg HTTP/1.1" 200 57060
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/images/form-dmv14-small.jpg HTTP/1.1" 200 23120
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/images/form-w9-small.jpg HTTP/1.1" 200 24143
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/images/form-bookshelf-small.jpg HTTP/1.1" 200 30046
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/images/form-contact-small.jpg HTTP/1.1" 200 22838
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:22 -0800] "GET /orbeon/home/images/form-controls-small.jpg HTTP/1.1" 200 57003
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:24 -0800] "GET /orbeon/fr/orbeon/builder/new HTTP/1.1" 302 -
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:36 -0800] "GET /orbeon/fr/orbeon/builder/new?state=d23dd397-0321-4677-a77e-446e85a588bc&session_state=66cfb1d0-08b3-4b4d-b429-ee46154b1a19&code=aa9fada0-3967-4783-a24a-09036d8b64ba.66cfb1d0-08b3-4b4d-b429-ee46154b1a19.6cef742c-be89-481d-a41f-9b182a1c2b25 HTTP/1.1" 302 -
0:0:0:0:0:0:0:1 - d4c50be0-ac68-4022-910d-3167484ad9e4 [04/Feb/2020:11:31:36 -0800] "GET /orbeon/fr/orbeon/builder/new HTTP/1.1" 403 688
0:0:0:0:0:0:0:1 - - [04/Feb/2020:11:31:36 -0800] "GET /favicon.ico HTTP/1.1" 200 21630


Thanks
SK


On Tuesday, 4 February 2020 11:35:42 UTC-8, SK wrote:
Yes, I made some progress, thanks for your help!!

I have those logging changes in place and was trying to see if I can get some details. I can see below item in log;

2020-02-04 11:31:22,115 DEBUG auth  - using `Container` method
2020-02-04 11:31:22,115 DEBUG auth  - usernameOpt: `None`, roles: `Some(staff)`
 
Please find attached the log and screenshot.




SK


On Tuesday, 4 February 2020 11:20:38 UTC-8, Alessandro Vernet wrote:
Hi SK,

I've also seen your question on Stack Overflow, and am glad you managed to
do that setup. Since you're getting the Keycloak login page when accessing
Orbeon Forms, it looks to me like you're 95% there :).

Could you set your logging as described in the Development configuration
section of the XForms Logging page (see link below), stop your server,
remove the `orbeon.log`, restart the server, reproduce the issue and attach
the `orbeon.log` you get, along with a screenshot of the webpage with the
403?

<a href="https://doc.orbeon.com/configuration/advanced/xforms-logging.html" rel="nofollow" target="_blank" onmousedown="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fdoc.orbeon.com%2Fconfiguration%2Fadvanced%2Fxforms-logging.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEK0Z2SHcCE_8wt7zB5OqJ3fET_PQ&#39;;return true;" onclick="this.href=&#39;https://www.google.com/url?q\x3dhttps%3A%2F%2Fdoc.orbeon.com%2Fconfiguration%2Fadvanced%2Fxforms-logging.html\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNEK0Z2SHcCE_8wt7zB5OqJ3fET_PQ&#39;;return true;">https://doc.orbeon.com/configuration/advanced/xforms-logging.html

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: <a href="http://discuss.orbeon.com/" rel="nofollow" target="_blank" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5V5zfD-87RVoalaG4cqO_RzdDcA&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5V5zfD-87RVoalaG4cqO_RzdDcA&#39;;return true;">http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/18aeea15-27e5-44d2-8d6f-df118b26b9fc%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

Alessandro  Vernet
Administrator
Hi SK,

It seems that a role, `staff`, was passed, but no username, and Orbeon Forms
needs a username. Can you think of reason why, given your Keycloak config,
not username would be passed?

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1580866905323-0.post%40n4.nabble.com.
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
SK
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

SK
Thanks Alex.
I was using our organization's hosted version of keycloak from local orbeon. I tried with a fresh localhost installation of keycloak and it works with orbeon. :)
It should be some network or certificate related issues. I will update it here, if I find anything. 
Really appreciate your help!
 
SK

On Tuesday, 4 February 2020 17:41:46 UTC-8, Alessandro Vernet wrote:
Hi SK,

It seems that a role, `staff`, was passed, but no username, and Orbeon Forms
needs a username. Can you think of reason why, given your Keycloak config,
not username would be passed?

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: <a href="http://discuss.orbeon.com/" target="_blank" rel="nofollow" onmousedown="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5V5zfD-87RVoalaG4cqO_RzdDcA&#39;;return true;" onclick="this.href=&#39;http://www.google.com/url?q\x3dhttp%3A%2F%2Fdiscuss.orbeon.com%2F\x26sa\x3dD\x26sntz\x3d1\x26usg\x3dAFQjCNF5V5zfD-87RVoalaG4cqO_RzdDcA&#39;;return true;">http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/a531211c-3931-4c2a-b1a0-a1c84c5be84b%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: Registration / Authentication system for Forms

Alessandro  Vernet
Administrator
Excellent SK! I'm glad that authentication through Keycloak is now working
fine for you, and thank you for the update.

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1580948347005-0.post%40n4.nabble.com.
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet