Friday 10 April 2015

Securing Fuse applications and Hawtio with Keycloak

From version 1.1.0.Final Keycloak supports securing your web applications running inside JBoss Fuse or Apache Karaf . It leverages Keycloak Jetty adapter as both JBoss Fuse 6.1 and Apache Karaf 3 are bundled with Jetty 8.1 server under the covers and Jetty is used for running various kinds of web applications.

What is supported for Fuse/Karaf is:

Where to start?

The best place is to look at Fuse demo bundled as part of Keycloak examples. It's in keycloak sources and it's also bundled in directory examples/fuse of Keycloak appliance distribution, which can be downloaded from Sourceforge .It's recommended to download latest 1.2.0.Beta1 .

For SSH and JMX admin access, you can take a look at this README .

For securing Hawtio, keycloak integration is available from version 1.4.47 and is described here . There is also effort to secure Hawtio 2.x with Keycloak, which is here .