Keycloak and mod_auth_openidc

This page contains information, code snippets and other information regarding using Keycloak with mod_auth_openidc.

Getting Keycloak up and running

Keycloak is available from keycloak.org.  It is an application embedded in a JBoss WildFly JEE container.  The easiest way to get it working is to use an existing docker container.  This container is set up to use with a MySQL datastore.  To run Keycloak with a dockerized version of MySQL, try this:

$ docker run --name mysql -e MYSQL_DATABASE=keycloak -e MYSQL_USER=keycloak -e MYSQL_PASSWORD=keycloak -e MYSQL_ROOT_PASSWORD=password -d mysql

$ docker run -it --link mysql:mysql -e MYSQL_DATABASE=keycloak -e MYSQL_USER=keycloak -e MYSQL_PASSWORD=keycloak -e KEYCLOAK_USER=admin -e KEYCLOAK_PASSWORD=admin -p 8080:8080 -p 9990:9990 jboss/keycloak-mysql

A docker-compose.yml file for the latter command is:

keycloak:

    image: jboss/keycloak-mysql

    environment:

        MYSQL_DATABASE: keycloak

        MYSQL_USER: keycloak

        MYSQL_PASSWORD: keycloak

        KEYCLOAK_USER: admin

        KEYCLOAK_PASSWORD: admin

    ports:

        - "8080:8080"

        - "9990:9990"

    external_links:

        - mysql:mysql

asdf

Installing mod_auth_openidc