ID-Management with Keycloak and Node.js

Prerequistes

0. Linux OS with 4 GB RAM preferred - may work with Windows, too, but is not tested
1. Install docker and docker-compose
2. openssl for generation of certificates
3. Install Node.js for Testing

SAML with Keycloak

1. Start containers:

docker-compose up -d

2. Open Admin-Console

http://localhost:8080/auth/

Problems with HTTPS?

see: https://stackoverflow.com/questions/30622599/https-required-while-logging-in-to-keycloak-as-admin

docker exec -it {containerID} bash
cd /opt/jboss/keycloak/bin
./kcadm.sh config credentials --server http://localhost:8080/auth --realm master --user admin
./kcadm.sh update realms/master -s sslRequired=NONE

User: admin, Password: admin (same as in docker-compose.yml, should be changed)

3. Configure Keycloak

• Create a realm - hse

• Create a client - node (Client Protocol: saml)

• Configure client node settings:

  • Valid Redirect URIs: http://localhost:8100/*
  • Master SAML Processing URL: http://localhost:8100/login/callback
  • Save settings

• Get/Save XML-File from http://localhost:8080/auth/realms/hse/protocol/saml/descriptor

  • Save Content of <ds:X509Certificate> to <projectdir>/certs/idp_cert.pem

4. Generate Key and Cert with makecerts.sh

The password should be changed in file <projectdir>/P12phrase These keys/certs are stored in <projectdir>/certs

Upload the cert <projectdir>/certs/client.p12 to Keycloak: Keycloak - clients - keys - import PKCS12 - keyAlias samlKey - password: from <projectdir>/P12phrase

5. Add users (see Manage Users)

6. Login to Keycloak as User

• User Login: http://localhost:8080/auth/realms/hse/account/

• Save user name, password

• Sign out

7. Open WebApp

• Install Node.js with npm (https://nodejs.org/en/)

• In project directory:

# install node dependancies
npm i

# start node web server
node app.js

• Open in browser http://localhost:8100/

• Click Login - Keycloak Login-Page should open

• Login as User - Redirect to http://localhost:8100/saml

SUCCESS!

Useful Commands:

# Stop docker containers
docker-compose down

# list all containers
docker ps –a

# remove container
docker rm <container-id>


# list images
docker image ls

# remove image
docker rmi image-id

To Reset:

• Remove containers
• Remove DB in directory ./.mysql-data

Credits/Sources:

Node/Express-App from https://codeburst.io/keycloak-and-express-7c71693d507a

Links

https://www.keycloak.org/docs/latest/getting_started/index.html