SSO 集成解决方案，Keycloak 1.6.0.Final 发布

jopen 9年前

Keycloak 是一个为浏览器和 RESTful Web 服务提供 SSO 的集成。基于 OAuth 2.0 和 JSON Web Token(JWT) 规范。最开始是面向 JBoss 和 Wildfly 通讯，但已经计划为其他诸如 Tomcat、Jetty、Node.js、Rails、Grails 等环境提供解决方案。

主要功能：

  • SSO and Single Log Out for browser applications

  • Social Broker.  Enable Google, 非死book, Yahoo, 推ter social login with no code required.

  • Optional User Registration

  • Password and TOTP support (via Google Authenticator).  Client cert auth coming soon.

  • Customizable themes for user facing pages

  • OAuth Bearer token auth for REST Services

  • Integrated Browser App to REST Service token propagation

  • OAuth 2.0 Grant requests

  • CORS Support

  • CORS Web Origin management and validation

  • Completely centrally managed user and role mapping metadata.  Minimal configuration at the application side

  • Admin Console for managing users, roles, role mappings, applications, user sessions, allowed CORS web origins, and OAuth clients.

  • Deployable as a WAR, appliance, or an Openshift  cloud service (SaaS).

  • Supports JBoss AS7, EAP 6.x, and Wildfly applications.   Plans to support Node.js, RAILS, GRAILS, and other non-Java applications.

  • Javascript/HTML 5 adapter for pure Javascript apps

  • Session management from admin console

  • Revocation policies

  • Password policies

  • OpenID Connect Support

Keycloak 1.6.0.Final 发布，主要更新如下：

  • SAML SP - in the past we only had client libraries for OpenID Connect, now we also have client libraries for SAML

  • Offline Tokens - if your applications need long term access outside of the users session you should take a look at the new offline tokens support we've added

  • Client Registration - we introduced a new rest api that can be used to automate the registration of clients, this includes a java client library. This feature will be further polished in a future release, including documentation and examples

  • Import Clients in Admin Console - it's now possible to import clients through the admin console using the Keycloak JSON client representation or OpenID Connect descriptions

  • Added Root URL to Clients - we've added a root url to clients. For clients that have a root url defined you can use relative urls for redirect uris and other urls

  • Internationalization support in Admin Console - we've added support for internationalization of the Admin Console. Around half the pages now support translation and the rest will be added in the next release

更多内容请看：发行说明。

下载地址：Keycloak homepage。