Keycloak In Existing Spring Boot Project Integration

jokerr_r · March 12, 2023, 8:24am

Hello Keycloak Community,

I am trying to integrate keycloak with existing spring boot microservice which have already many endpoints running with lot of interceptors like JWTTOkenInterceptor etc.
But I want to integrate keycloak security with new APIs only but Filters of Keycloak running for exisiting APIs also ever after below configurations.
SPring Boot Version - 2.4
Dependecies

org.keycloak
keycloak-spring-boot-starter
21.0.0

org.springframework.boot
spring-boot-starter-security

org.keycloak.bom
keycloak-adapter-bom
20.0.2
pom
import

Code:-

I have ignore all other endpoints but still keycloak spring web security filters are running and blocking exisiting APIs as well

Error
13:40:50.821 DEBUG 34363 — [nio-9998-exec-5] o.k.adapters.PreAuthActionsHandler : adminRequest {url}/api/v1/login/otp/request
2023-03-12 13:40:50.822 DEBUG 34363 — [nio-9998-exec-5] o.k.adapters.PreAuthActionsHandler : checkCorsPreflight {url}/api/v1/login/otp/request
2023-03-12 13:41:55.510 DEBUG 34363 — [nio-9998-exec-5] o.k.a.BearerTokenRequestAuthenticator : Authorization header not present
2023-03-12 13:41:55.511 DEBUG 34363 — [nio-9998-exec-5] .QueryParameterTokenRequestAuthenticator : Token is not present in query
2023-03-12 13:41:55.511 DEBUG 34363 — [nio-9998-exec-5] o.k.adapters.RequestAuthenticator : NOT_ATTEMPTED: bearer only

Please help here

adropofliquid · March 13, 2023, 6:58pm

You can use multiple adapter configuration in your spring security config class. This would allow you to specify different mechanisms for different endpoints

here are a few resources to help

github.com

adropofliquid/spring-security-multi-adapter-config-with-keycloak/blob/main/MultiSecurityConfig.java


import app.wagix.wagixcreditservice.tokens.TokenService;
import org.keycloak.adapters.springboot.KeycloakSpringBootConfigResolver;
import org.keycloak.adapters.springsecurity.KeycloakSecurityComponents;
import org.keycloak.adapters.springsecurity.authentication.KeycloakAuthenticationProvider;
import org.keycloak.adapters.springsecurity.config.KeycloakWebSecurityConfigurerAdapter;
import org.keycloak.adapters.springsecurity.filter.KeycloakAuthenticationProcessingFilter;
import org.keycloak.adapters.springsecurity.filter.KeycloakPreAuthActionsFilter;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.boot.web.servlet.FilterRegistrationBean;
import org.springframework.context.annotation.Bean;
import org.springframework.context.annotation.ComponentScan;
import org.springframework.context.annotation.Configuration;
import org.springframework.context.annotation.Import;
import org.springframework.core.annotation.Order;
import org.springframework.security.config.annotation.authentication.builders.AuthenticationManagerBuilder;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.EnableWebSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;
import org.springframework.security.core.authority.mapping.SimpleAuthorityMapper;

This file has been truncated. show original

Topic		Replies	Views
Spring boot + Spring Security + Keycloak - can't understand how it all should work Getting advice	3	5553	September 8, 2020
How to integrate keycloak on a simple spring boot example	4	558	September 5, 2020
Use keycloak for only authentication and use custom filter for authorization (Spring boot) Getting advice adapter-java	0	2168	July 9, 2021
Spring Boot with Keylocak for Authorization REST API Securing applications	3	673	October 24, 2022
Spring Boot 3 support for Basic Auth Securing applications authentication	1	1765	April 10, 2023

Keycloak In Existing Spring Boot Project Integration

Related Topics