This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
сервис_keycloak [2025/07/15 15:33] val [REST API] |
сервис_keycloak [2025/08/18 16:46] (current) val [docker-compose] |
||
---|---|---|---|
Line 19: | Line 19: | ||
==== docker-compose ==== | ==== docker-compose ==== | ||
+ | |||
+ | * Установка [[Технология Docker#docker-compose]] | ||
* [[https://swjm.blog/deploying-keycloak-with-ssl-in-just-10-minutes-46073e5cf699|Deploying Keycloak with SSL in just 10 minutes!]] | * [[https://swjm.blog/deploying-keycloak-with-ssl-in-just-10-minutes-46073e5cf699|Deploying Keycloak with SSL in just 10 minutes!]] | ||
Line 53: | Line 55: | ||
keycloak: | keycloak: | ||
image: quay.io/keycloak/keycloak:22.0.5 | image: quay.io/keycloak/keycloak:22.0.5 | ||
+ | # image: quay.io/keycloak/keycloak:26.1.3 | ||
container_name: keycloak | container_name: keycloak | ||
restart: always | restart: always | ||
Line 68: | Line 71: | ||
- KEYCLOAK_ADMIN=admin | - KEYCLOAK_ADMIN=admin | ||
- KEYCLOAK_ADMIN_PASSWORD=strongpassword | - KEYCLOAK_ADMIN_PASSWORD=strongpassword | ||
+ | # - KC_BOOTSTRAP_ADMIN_USERNAME=admin | ||
+ | # - KC_BOOTSTRAP_ADMIN_PASSWORD=strongpassword | ||
- KC_HTTPS_CERTIFICATE_FILE=/wild.crt | - KC_HTTPS_CERTIFICATE_FILE=/wild.crt | ||
- KC_HTTPS_CERTIFICATE_KEY_FILE=/wild.key | - KC_HTTPS_CERTIFICATE_KEY_FILE=/wild.key | ||
+ | # - KC_PROXY_HEADERS=xforwarded | ||
# - KC_DB=postgres | # - KC_DB=postgres | ||
# - KC_DB_URL=jdbc:postgresql://postgres:5432/keycloak | # - KC_DB_URL=jdbc:postgresql://postgres:5432/keycloak | ||
Line 368: | Line 374: | ||
* [[https://www.keycloak.org/docs-api/latest/rest-api/index.html]] | * [[https://www.keycloak.org/docs-api/latest/rest-api/index.html]] | ||
+ | * [[https://jwt.io/|JWT.IO allows you to decode, verify and generate JWT]] | ||
+ | * [[https://steve-mu.medium.com/create-new-user-in-keycloak-with-admin-restful-api-e6e868b836b4]] | ||
+ | |||
+ | * [[Утилита jq]] | ||
<code> | <code> | ||
Line 375: | Line 385: | ||
KEYCLOAK_REALM=master | KEYCLOAK_REALM=master | ||
KEYCLOAK_USERNAME=admin | KEYCLOAK_USERNAME=admin | ||
- | KEYCLOAK_PASSWORD=strongpassword | + | KEYCLOAK_PASSWORD=strongpassword |
KEYCLOAK_CLIENT_ID=admin-cli | KEYCLOAK_CLIENT_ID=admin-cli | ||
Line 388: | Line 398: | ||
#exit 0 | #exit 0 | ||
- | #USER_ID=0066e764-c9d3-45b3-ada8-3252fb07cde5 | + | #USER_ID=6c43d042-2674-4bee-82a5-b31713a15093 |
#curl -SskX GET "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/" \ | #curl -SskX GET "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/" \ | ||
+ | # -H "Authorization: Bearer ${ACCESS_TOKEN}" | jq | ||
#curl -SskX GET "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/${USER_ID}" \ | #curl -SskX GET "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/${USER_ID}" \ | ||
#curl -SskX GET "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/?q=username:admin" \ | #curl -SskX GET "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/?q=username:admin" \ | ||
- | # -H "Authorization: Bearer ${ACCESS_TOKEN}" | jq | ||
#curl -SskX POST "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/" \ | #curl -SskX POST "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/" \ | ||
# -H "Content-Type: application/json" \ | # -H "Content-Type: application/json" \ | ||
# -H "Authorization: Bearer ${ACCESS_TOKEN}" \ | # -H "Authorization: Bearer ${ACCESS_TOKEN}" \ | ||
+ | # --data-binary "@user1.json" | ||
# -d '{"username": "user1"}' | # -d '{"username": "user1"}' | ||
Line 403: | Line 414: | ||
# -H "Content-Type: application/json" \ | # -H "Content-Type: application/json" \ | ||
# -H "Authorization: Bearer ${ACCESS_TOKEN}" \ | # -H "Authorization: Bearer ${ACCESS_TOKEN}" \ | ||
+ | # --data-binary "@user1.json" | ||
# -d '{"firstName": "Ivan"}' | # -d '{"firstName": "Ivan"}' | ||
+ | |||
+ | #curl -kX PUT "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/${USER_ID}/reset-password" \ | ||
+ | # -H "Authorization: Bearer ${ACCESS_TOKEN}" \ | ||
+ | # -H "Content-Type: application/json" \ | ||
+ | # -d '{ "type": "password", "temporary": false, "value": "kcpassword1" }' | ||
#curl -SskX DELETE "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/${UPD_USER_ID}" \ | #curl -SskX DELETE "${KEYCLOAK_URL}/admin/realms/${KEYCLOAK_REALM}/users/${UPD_USER_ID}" \ | ||
# -H "Authorization: Bearer ${ACCESS_TOKEN}" | # -H "Authorization: Bearer ${ACCESS_TOKEN}" | ||
+ | </code><code> | ||
+ | # cat user1.json | ||
+ | </code><code> | ||
+ | { | ||
+ | "username": "user1", | ||
+ | "email": "user1@corp.un", | ||
+ | "firstName": "Иван", | ||
+ | "lastName": "Иванов", | ||
+ | "enabled": true, | ||
+ | "emailVerified": true | ||
+ | } | ||
</code> | </code> | ||