Orbeon Tomcat (container) authentication with Keycloak and user attributes

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

Orbeon Tomcat (container) authentication with Keycloak and user attributes

Timo Nisula
User authentication (container based) with Keycloak working fine. Now thinking is it possible to pass Keycloak user attributes to orbeon? I would like to get customer number from Keycloak to orbeon, customer numbers are saved to to user attributes.

Does anyone knows is it doable?

 

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/b820713c-ccfb-40a8-9a64-c03b40a7687cn%40googlegroups.com.
Reply | Threaded
Open this post in threaded view
|

Re: Orbeon Tomcat (container) authentication with Keycloak and user attributes

Alessandro  Vernet
Administrator
Hi Timo,

Would you be able to have Keycloak set an HTTP header with that customer
number? If so, you can then retrieve it on the Orbeon Forms side using the
`xxf:get-request-header()` function.

https://doc.orbeon.com/xforms/xpath/extension-functions/extension-http#xxf-get-request-header

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1600125530515-0.post%40n4.nabble.com.
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
Reply | Threaded
Open this post in threaded view
|

Re: Orbeon Tomcat (container) authentication with Keycloak and user attributes

Timo Nisula
Hi alex,

Thanks, need check can I use this one.

-Timo

On Tue, Sep 15, 2020 at 2:18 AM Alessandro Vernet <[hidden email]> wrote:
Hi Timo,

Would you be able to have Keycloak set an HTTP header with that customer
number? If so, you can then retrieve it on the Orbeon Forms side using the
`xxf:get-request-header()` function.

https://doc.orbeon.com/xforms/xpath/extension-functions/extension-http#xxf-get-request-header

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1600125530515-0.post%40n4.nabble.com.

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/CAKt4_v10rDicY_9eoi9EuuMP73MRpwR4h%3DgKhVmSdqs--M57kg%40mail.gmail.com.
Reply | Threaded
Open this post in threaded view
|

Re: Orbeon Tomcat (container) authentication with Keycloak and user attributes

Alessandro  Vernet
Administrator
Hi Timo,

Got it, and you will let me know if Keycloak is able to pass additional
information through header, or if we need to find some other way to handle
this use case.

‑Alex

-----
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet
--
Sent from: http://discuss.orbeon.com/

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To view this discussion on the web visit https://groups.google.com/d/msgid/orbeon/1600300239597-0.post%40n4.nabble.com.
--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet