keycloak connect backend systems with oauth2










0















I would like to secure our web services and would like to know if I have understand the concept and how to implement this in keycloak. We have 2 backend systems A and B and keycloak as oauth2 provider. System A consumes services on system B.



  1. I would like to let system A requests an access token from keycloack with client credentials flow, because this is an backend request only.

  2. System A sends the request to system B along with this access token

  3. System B checks the access token against keycloak

  4. System B sends actual service response if token check has passed or an appropriate failure message.

Is that a good approach and how can we implemnt this in keycloak?










share|improve this question




























    0















    I would like to secure our web services and would like to know if I have understand the concept and how to implement this in keycloak. We have 2 backend systems A and B and keycloak as oauth2 provider. System A consumes services on system B.



    1. I would like to let system A requests an access token from keycloack with client credentials flow, because this is an backend request only.

    2. System A sends the request to system B along with this access token

    3. System B checks the access token against keycloak

    4. System B sends actual service response if token check has passed or an appropriate failure message.

    Is that a good approach and how can we implemnt this in keycloak?










    share|improve this question


























      0












      0








      0








      I would like to secure our web services and would like to know if I have understand the concept and how to implement this in keycloak. We have 2 backend systems A and B and keycloak as oauth2 provider. System A consumes services on system B.



      1. I would like to let system A requests an access token from keycloack with client credentials flow, because this is an backend request only.

      2. System A sends the request to system B along with this access token

      3. System B checks the access token against keycloak

      4. System B sends actual service response if token check has passed or an appropriate failure message.

      Is that a good approach and how can we implemnt this in keycloak?










      share|improve this question
















      I would like to secure our web services and would like to know if I have understand the concept and how to implement this in keycloak. We have 2 backend systems A and B and keycloak as oauth2 provider. System A consumes services on system B.



      1. I would like to let system A requests an access token from keycloack with client credentials flow, because this is an backend request only.

      2. System A sends the request to system B along with this access token

      3. System B checks the access token against keycloak

      4. System B sends actual service response if token check has passed or an appropriate failure message.

      Is that a good approach and how can we implemnt this in keycloak?







      oauth-2.0 keycloak






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Nov 15 '18 at 19:19







      user3756702

















      asked Nov 15 '18 at 18:19









      user3756702user3756702

      105112




      105112






















          1 Answer
          1






          active

          oldest

          votes


















          0














          You have three types of access types with keycloak



          1. public

          2. confidential

          3. bearer-only

          More information can be found here



          https://www.keycloak.org/docs/latest/server_admin/index.html



          If Your System A is accessed by other client facing UI then implement System A and System B as bearer-only clients.






          share|improve this answer






















            Your Answer






            StackExchange.ifUsing("editor", function ()
            StackExchange.using("externalEditor", function ()
            StackExchange.using("snippets", function ()
            StackExchange.snippets.init();
            );
            );
            , "code-snippets");

            StackExchange.ready(function()
            var channelOptions =
            tags: "".split(" "),
            id: "1"
            ;
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function()
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled)
            StackExchange.using("snippets", function()
            createEditor();
            );

            else
            createEditor();

            );

            function createEditor()
            StackExchange.prepareEditor(
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader:
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            ,
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            );



            );













            draft saved

            draft discarded


















            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53325646%2fkeycloak-connect-backend-systems-with-oauth2%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            0














            You have three types of access types with keycloak



            1. public

            2. confidential

            3. bearer-only

            More information can be found here



            https://www.keycloak.org/docs/latest/server_admin/index.html



            If Your System A is accessed by other client facing UI then implement System A and System B as bearer-only clients.






            share|improve this answer



























              0














              You have three types of access types with keycloak



              1. public

              2. confidential

              3. bearer-only

              More information can be found here



              https://www.keycloak.org/docs/latest/server_admin/index.html



              If Your System A is accessed by other client facing UI then implement System A and System B as bearer-only clients.






              share|improve this answer

























                0












                0








                0







                You have three types of access types with keycloak



                1. public

                2. confidential

                3. bearer-only

                More information can be found here



                https://www.keycloak.org/docs/latest/server_admin/index.html



                If Your System A is accessed by other client facing UI then implement System A and System B as bearer-only clients.






                share|improve this answer













                You have three types of access types with keycloak



                1. public

                2. confidential

                3. bearer-only

                More information can be found here



                https://www.keycloak.org/docs/latest/server_admin/index.html



                If Your System A is accessed by other client facing UI then implement System A and System B as bearer-only clients.







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Nov 18 '18 at 13:54









                ravthiruravthiru

                3,74512135




                3,74512135





























                    draft saved

                    draft discarded
















































                    Thanks for contributing an answer to Stack Overflow!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid


                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.

                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function ()
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53325646%2fkeycloak-connect-backend-systems-with-oauth2%23new-answer', 'question_page');

                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Top Tejano songwriter Luis Silva dead of heart attack at 64

                    政党

                    天津地下鉄3号線