Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Handling rotating keys in Keycloak #19

Open
ceciliarb opened this issue Sep 23, 2019 · 0 comments
Open

Handling rotating keys in Keycloak #19

ceciliarb opened this issue Sep 23, 2019 · 0 comments

Comments

@ceciliarb
Copy link

Hi guys!
I'm not sure this is the right channel to place this question, since it isn't really an issue, and I apologize if that's not the case.
But, anyway, reading the docs of Keycloak Java Adapter, I was worried with this part:

realm-public-key
PEM format of the realm public key. You can obtain this from the administration console.
This is OPTIONAL and it’s not recommended to set it. If not set, the adapter will download
this from Keycloak and it will always re-download it when needed (eg. Keycloak rotate it’s keys).
However if realm-public-key is set, then adapter will never download new keys from Keycloak, so when Keycloak rotate it’s keys, adapter will break.

https://www.keycloak.org/docs/latest/securing_apps/index.html#_java_adapter_config

I'm working with PHP and using your package (thank you very much 🥇 ), so I was wondering if you guys are handling the rotating keys as the Java Adapter (download it from Keycloak and re-download it when needed).
If not, it would be a nice feature to add.

Thank you, and keep up the good work!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant