search

PyKhaled / keycloak-nafath

MIT License
1 stars 1 forks source link

details for the extension #3

Open khalifa005 opened 9 months ago

khalifa005 commented 9 months ago

Hello

I really appreciate your work here and I would like to know some information about it

here I added the Nafath extension in Keycloak image

and based on this flow image

I would like to know how exactly the extension will understand this flow

thanks in advance and will be glad to hear from you : )

khalifa005 commented 9 months ago

to be more specific where should i set api key and the rest of configuration can i do it in admin ui - or it should be in the java code

PyKhaled commented 9 months ago

Hello @khalifa005,

unfortunately the package is not ready for production, I stoped working on it as I had limited time back then, I recommend to implement it within your application without keycloak, if your interested to work with me on it, please let me know

khalifa005 commented 9 months ago

@PyKhaled

I already developed this template to be open source https://github.com/khalifa005/e-proc

and right now I added the keycloak to handle the authentication and to make it more interesting I'm planning to add Nafath to it

so fore sure i will be glad to work with to to make it available to the community then i will use it inside the template

right now i'm reading the keycloak doc to extend the server so i can have better understanding and if there is a chance that u guide me and i will do my best to complete it

last thing why did u mention this I recommend to implement it within your application

is there any blocking issue related to make it happen !!

PyKhaled commented 9 months ago

Just keep in mind that Nafath has changed the api to be a MFA rather than authentication method, so we need to change the lib to to be like otp, when u navigate the documentation focus on otp and authentication flows, not authentication provider as before

khalifa005 commented 9 months ago

@PyKhaled

I did read and developed custom auth

image

image

the key is in token exchange to have the ability to get a token for a user without having his password

would like to know ur opinion about this

https://www.linkedin.com/posts/mahmoud-khalifa-643936138_randon-activity-7145163581922217984-fPMC?utm_source=share&utm_medium=member_desktop